last executing test programs:

5m41.406118244s ago: executing program 32 (id=3365):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0x6)

5m28.39669739s ago: executing program 4 (id=3422):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001800c0001"], 0xe0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)

5m27.010227402s ago: executing program 4 (id=3427):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

5m26.252404874s ago: executing program 33 (id=3426):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c0480c4}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
iopl(0x3)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0)
msgctl$IPC_RMID(0x0, 0x0)

5m26.243296563s ago: executing program 4 (id=3430):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000500)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESOCT, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030367337bef12c626172726965722c6e6f626172726965722c736d61636b66737472616e736d7574653d55dac73dddd1aa0ff491f57216572f1e671a989f42c64dc0b65d67d4250567573bb5e8d8c2d916d55de0fad0693e50202f126e0e71e930d123c47bc4a1d2ab46e52a07fd8ca501f330abb8b07d3a5364154ec1faf99b6a9700abe26dce8f5a29ff00442c", @ANYRES32, @ANYBLOB="101500000000", @ANYRES32, @ANYRESDEC, @ANYRES64], 0x1, 0x701, &(0x7f0000002480)="$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")
ioperm(0x0, 0x2, 0x2)
syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e07090514"], 0xa)

5m25.727578972s ago: executing program 4 (id=3431):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000008c0)={0x2c, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0xf, 0x44, {0x5, 0xf, 0x44, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x1, 0xff, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x3e, 0x4, 0x7, 0x0, 0x6, [0xc0, 0xff0000, 0xcf, 0xffc030]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0xa, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x7, 0x1, 0xfff4, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x9, 0x9}]}}, 0x0, 0x0}, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x4c, 0x1, 0x3, 0x9, 0x1, 0x2, 0x6, 0x2, 0x258, 0x38, 0x2b0, 0xe749, 0x8, 0x20, 0x1, 0x3, 0x5, 0x6}, [{0x6474e551, 0x4, 0x3, 0x3ff, 0x3, 0x77, 0xfffd, 0x8}]}, 0x58)

5m23.878395171s ago: executing program 4 (id=3436):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000001e80))

5m23.227355971s ago: executing program 4 (id=3439):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

5m22.511834843s ago: executing program 34 (id=3439):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

5m16.078184845s ago: executing program 1 (id=3456):
syz_emit_ethernet(0x36, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r3, 0x0, 0x110)
clock_adjtime(0x0, &(0x7f0000000000)={0x200000008, 0x0, 0x0, 0x69, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x40100, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x48, 0x0, 0x1040, 0x7, 0x7f, 0x3, 0x3, 0x3, 0xfffffffffffffffe, 0x4})
mkdir(&(0x7f0000000300)='./bus\x00', 0x26)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
utimes(0x0, &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]})
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)

5m13.991071298s ago: executing program 1 (id=3459):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000004180)={{0x3, 0x0, 0x80, {0x100000, 0x5000, 0x2}}, "e0a1177079f00140f49e913931c46680d2d20e4eafc2a7cdeca15d8dca39667c7c731f1b6ce7df5576e8b42ff8aa1cf87f72425bb7af7413c73b64f542a68bffa2977f6604de330e6daab7e2a6845ea157ada2d251ec44bd0530bb9a02154530672b15f57d2429ccca08aeee195158110c317f834d95a154284a05bf0cfb30108a73b063719f3d9a8402e9caf05d712b9395a45ecca52abac0900a3f5e668eaf27a25b4756268c297b9f3fcb361eb4ae6c4919ff801a8c363a76270e8e48573ae5cf787bff496c9fd6a551ba57ecc6a95475180415fe632d09160d521de67f07c25b1bd08ec0bcf94d8300a0616204b2075bd3fc111c66aaa7f96c1e58a0824e97c8a4e55527df9a7a8c8a6213de464da7328332a9a3a12cd0e5b5ebaf8352d6d10ca63af041dd36d9453d7d428246138a9f4ae6450f05c78cf943a9e92a0c44ba2f8f009124536c11858a9781813bfb2e9cba2564718395f34b3573206491c6840c99c4994d43f539718852cfb4be9359a4adc3a9c2e3d58103a922c52a993da2bb3202d8a85b7a65fec1006f0992578753b1f2e690c1f2207cb53bf33e0283ac43c7ee2b9716e833d24dd6f84282e6e9282a8e276c54fdd5a68807dfab7b0252649261604a15ad873e74ab350945d98c4ca15192298fcc36c6ccf8c517362654f809ce7252c070f23befda77d3eb61b62380d9a9dc45d7590c7e0c46ffff85d27f39f7e652731f3dc181a977ae0821897bfce48b3278f0f80ebf6161af8b37c4c4a5f4636458af3d83e23b4d75716b97680bb493a4e7d06dbfefe9daa6b87f2ed2c6e4213ca34091eb22284f928e4cea47739e85084b033bd5d3c3d912f41c9c460c331565b178338484673886e46499935a4886401a309696ff528c35303a0779c019ab89185abe3632a2cde22219afe417e9b14cbc22b6caf304a7fa0935ef07bab6d1199f2e9cd75f5bbf52df5a304e1519da6f541c19ef6d50eb3e72e911ff1da7b250381e058494a25837bc8734d1e7dff7029f3df78dfd80a6661acf4d3cb012f0d0c313cf1f90bd553642c9bbf856d5749d0c8000fc7b4d4006831304126ad7ff3506c17698d7b52afaae6ccfec7fb9127289ae9665cf10f2cee9edf101f6fc2df7d24f954ac8174e2858e0acdcc9baf2c79161c54bd5ff21cc7d34c7b2389974509d34536e5f504bde59c0da02ced70188e74b3afd097ac8d2e125158f2cc9c565a2c690c537e6a220609b4f1f78b6d7b792825de97034ea8b5cb57040cd4b896477f476d41342d4d249bada515f0629b050a45302df1bccd926dd493fe5a80e05b8cda840617585e3f538d1a92c1e2754ae927ad24b7fbf51186466c913ae661e658d8ea1423c04a9d2cc8dbfc3c76a9626ba21afa75accf2745f4367d3c088527d043bb98d6d8a39bda223fe2e96a3b1c2e390855a84fb57b9ee0c83e6816d8b8640534ed3748fc3ed6d3b2ea092435433db68ffa0b661a6fd00d0614ddf03272010ec0a10051a38a8753a93528925bdc4081561438d2e844eacd8b6ab3c0cb237849db4254dd20d2e3458488ce275ba27f641d27aa6504b642c3f13fab52a75a7240dbba78029d1f36aa01273b8fb3e559bd54f2798962d572460f413dc1a2f66d0053f24bdaa5cf7f41d7bf461ef7035e4b365beeee88d52788da0368042cdf1e28f752a2ead5b251125bcdd6ab05908f4a27b043b887aff917edddd4284d8cce217ff398406a3b5b2f7c1129aef804ffc248ef3ce7235e4d9454ed86e5082f0e5f05451743cef0c24435a50850c447433cf2fbe3567936eada9ddb400b043e05fbbefe01ad6dbb2ea3d219cc1f1c2a89f2fc09ebeb202acff6d58d653e37c723960fda1f9ee1e2e32d2b84144e1a265189de98bb76b3507f5b1eaa64359e9d19428a61e98c4704e0aa52e8c1fd9193337811802665356203246c21f8b187b7b9e8f1887a5a1feb73318becd0c28b3233d8adccc9a4f12bee56c970ea1b0ce8deae69d6775c0ef0d04012aae06a3ac902c1bda3e468a2790bea7561468b18da5885213b60acc424d2c7a5c78380829182bdf98f0f3008e803aa05286a3d0532098bada62a65be8154eb1f694b4fa165b2acc87342310635926f2c50d9cff6675c5d138d0c8a0bbf0bf2ba554021fa12643e7cf6f1d4d63cc556328025f8bc5121c7430a444185dcb3f56d6fcdc545ed55a31076fa06cef3f18b450d002e05650364171fca26885ce3abe302040e9093694e807586eeb627d7199a679ca965fa7a1d12b5615f029d72bf4e0804af41ccd6219832a1af07d5f5a8e8baffaaa5f598786548c912941c45c61e75463e04c57e49d2fcfe84b9ffe8895659ed03448c30f489be2e6d2f788f879bf21345f74d6a34c292b95fa0f9be6bbad66bbb9db312ee141281154b85be80733398a23d984e65bccb90656316e8d407511a2adb04e25e787191ac4f4f9214c140a82e126eff5e8e173f8d4b30d7643c5d3aee360e66069f045de80075776a2e627fc0d344b292b8f26b955f2347d60622597cf1183b5b911fd1d787374f1124093b3b993b9b598786c2dbe17ef491d331980b52141ed5a6b8c764422a137dac6ebc0832f5374c5343f6ed84d5f1488969f71c3d9ee27e8397c945df887c0cbea2b850f0b9276d09061bea95ed68109a8e0308dd57b8952f99d00f5a2679c7c2a4da1bc52ff894724123f94d64031b5383a37df5285b7e13f29be0679d1d141d7aa8073996061f9d4524d1bdaec3ae31f027b1d3008fe496bc2ef06481a401447cc40d5ed13b246e3a87c6875eba2ab26bf51069f7713ffe2715a050d65864c0d813a55d1eed902b421682d83da66b95bb6bb506e10d6934f5734e7e2b80fa0f1cb775b748d023aa737cf0510c6ffccb74fd989b2bd9e3ce19af3fba31fafdad89a2ec0e73c634eaa05feacf9ae154498e36307d92c738ffa1fc815d366a040b1e81397104b0d748e8e9cd99d4894fce763ea26f9f524ad95fde02ac80c8ab9dd98be12e91dd6f65857caf82a4deae9ce49b64b212807a775d4791c749d2d570585358f6330ac90c19a09f035bb1bed4d2d2df80c8940fa44c77bc46311fe62d579244116e76dbf39ad152184eb6a77baa141df1b3a328d50e94277f305e01b6469f797eb9222817485b26d65a3a8ccc44177a02e749906d375d2bd2cd14d89008a9f9e5d831543cfcbbdf90496faeceadeb58319e03774e59af35fb57c5325da8f152f27115dffbfe5514483c873bc07ad85538ca26e4363b98c8861f9cd32054172b20e98186bf6e8f0246a316024ec7b48df0f0d24ea67c4c9f2a61bfb294e1bc589f7cf155503f3f47b2249a9661460cb747e70b4feba6c0fa43113eb7b24e3701e722220b4d44f53d25f466ceddf7468cf969fd6e8f476d03d6c1c5f2a7d82024a04d6c08013a292910bbebb6170863a56d1508a171c37de2b916c95e2d80db15d4b814e753ab39fc82377999501473cfd303dd0a73cce0b0da845b754a240b04d72920bc3ee0e92a14d740e89fc94f7cc1274e41c1f757a55d40220d31a65feca9fb8bcbd191209a8fd5d8685c3386af2231565546d8dd237cbd5d7d1976b524fe37bda0bc632b6cd4cf05f722855ad4538255bc8c1afec9a5ec4ddba89478272663ee952ebdf21017303a4f4f25747122a2197fadc50edfe89f07d6ea626d119cee810d90ccff14dcd0cd557e0096b349acd6364ad37dad73332ea9b328bbb3f0180ab5c3689721f6a30e0a2cafd6d22db105e024ec74af6f10e2045870e344f0cf9ee81edf222caec8260f80ee18adb777866bba0dcb866f8acff6c49831d4aa1dfc519a6b9117b7425697c45c234aa526f2fe4721add68d5ad30762ebf59261b063429ff06c7355a922e869e598bd2757a398197682a073f7bcc140e31245afcbf05a6b62865af10f0f06d01475d0b54dfb2008594d66db9fbbf5cffe77980d991d59f0282ae5622364c9273d84b6d8a16092af509aaaad22d0bc3dc1fed99d85ba7cf4d741c523d0791a1fc01e8b1e7ff45bcc7bd9c4dd2c18da57e91f5a5953f6566c69a4af19584dd684c5ca9ebfa055df573ff2fa7c92031b0e6f5399246f8cc224aff7b5ea0a6eef149b7de47e270c40e15c212d4193863e6e43daf7bbbf47b54eb3fecb42851330cc0d0ed445d31e35645b7e5c8e6e7abaf14d46a81ab8cce69ae9457dbb0a11213cc15f89cba56de7f85b55d428f5fa08d60b6e1a6cd73230333c5ed3cae429b10eb968fefc6f2ef289fd0443452babdab08a0a48fa836fa4d232afa36c6fadd3c9a4888f6ab87d722de9454f61ca5d3c97ab2a4a88ca354edb3245df9e55391c0a33be5aabeaa38116d0e8f569bd98befd22426bdff95d9f73888abf81ee1b60758d3ecff0dbd77c644c8c9f1555ddaab07fbcc8769a3bd5eced16699ab594650dde88319bbfa94d3f498d116c66d5674d39fab8d66d41124282acd7b9728925906943b72b8a1c08ed13799da237d617739cc2a4586cbc2b0ed37c385d8be2c553e2c4fda9d52ef58a5d93e76a5a5bfd93392eabb2d6e0aef253704b2d4bb3e8cb98008054e0ef17ba0896b8b0d9b3d449f8854f91d66b21409f8d5c87370026b8bcdd9bdb62c7672ca7ebcde4bce87221e20e69be9b473dc1bc29a30b6b2b3cc8d927b1b080ef19a29db91f2e3c66726c0b89329d570a07edbf010c91c8622198cae5df718bb87c608918c32a715cabf80fd6200b1f3d338183543eae8c96029495ef69b3839167160638fea73eaf5c5397d2ee8bf13642defaa78dae245cbdbf2650620661ca442f3a53f20956ab6463856695daa90999755a2eef44c13ffc94d1f0d36a46ffe062dd2d49fa8a2eb6f79f32e13cd5f710d03ed89d7e1b41f5e79217d1145cb888a6e8a8496476563abe733d1e51a03b9b5f2f0cad3fa830e0c35dc7de4c18a637eef55decdd3066b2581f3134efd1b303b7a1ce80b32fb8c86fc7ecf376ae174c8d71bcdee00d756e6a93a4994b1318162b2b733e4307edb48f30b6443cccd0ab894018b80186262c7a0f81427a7d677a02f81b64193f5da333bb8544e7fb4f026343933a028bd1482cf6d542b6b3cbfbb8cf5cd3b744225b5550fed29f3a01b73085c6996a5a67568c9eded9ed232873a9b5a9a56e550278f0ec173d970963542c243a0947fb50f458e970e92c4bb0a5767509f2473272b5a821e012807e3a207a5e4f989ced702d2ee73dd0dcc7e67378ed9caf3815faa444365f33cd04425b6d5cddede35bc5f275945a8e7b5022a575cd5232ff08eb640946a4d8de0aed6ad4dc407914051f8e1ace16ae3b8d2ae8ba8bcd175f5656071babc66cbf0bea9027313f70b899373c65226c456032d9262ff9ba1a5ad2d2c9412f915e6e7a189263bf02dd98af0570edaddc791b1d7bd30f098b4603b57ee1b48a8fd6235985118299b0cc4dcd13a79bb90b271b432c8f91f0a01a6102b289f4fa82b0b57e1ae893948d41909fc6544d53cabd6de667d3735a28d1f49597203fb4509f6adc4ccb0162d4c7d1c4c77e748a1eb484a10151133d20dbd1ba1cf9bf4eb8f274e4c8212e9f483473a3de6ab57e41fb21bdb1bbb3ce9cfe1532e004b30e50f1547e2efc79b1ec33edd7725e3c1714eb24f357214604ea7c1240098528c5f660f0459451dfc9bf5b99aa7d4ee97fdc8f71e79462b503cb853a53f1b4501b9170e53b7d9dc5e7d5c7918e1d4d964e8cf332b61ccadf0fcebd9bfa8f2ece8d03709228bb701ec8432e80a10d913c8e4de2feaa0567c1706c3285c98fd", "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"})

5m13.564822624s ago: executing program 1 (id=3460):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, 0x0)

5m13.081448282s ago: executing program 1 (id=3463):
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r2 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)

5m10.408561314s ago: executing program 1 (id=3468):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0xb57, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'})

5m9.471144899s ago: executing program 1 (id=3472):
r0 = socket$inet(0x2, 0x3, 0x9)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x449b}, 0x0)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000001c0)={@map, 0x3, 0x1f, 0x0, 0x0, 0xfffffffffffffd93, 0x0, 0x0, 0x0, 0x0}, 0x40)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x20000ffd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0)
ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
ppoll(&(0x7f0000000100)=[{r1, 0x3080}], 0x1, &(0x7f0000000200), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0))

5m8.922984658s ago: executing program 35 (id=3472):
r0 = socket$inet(0x2, 0x3, 0x9)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x449b}, 0x0)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000001c0)={@map, 0x3, 0x1f, 0x0, 0x0, 0xfffffffffffffd93, 0x0, 0x0, 0x0, 0x0}, 0x40)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x20000ffd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0)
ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
ppoll(&(0x7f0000000100)=[{r1, 0x3080}], 0x1, &(0x7f0000000200), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0))

5m4.40568967s ago: executing program 2 (id=3484):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_disconnect(0xffffffffffffffff)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)

5m3.408394415s ago: executing program 2 (id=3486):
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x1802320, &(0x7f0000000280), 0x2, 0x44a, &(0x7f0000000880)="$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")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
futex(0x0, 0x80, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
io_setup(0x6, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffff998, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder1\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000040), 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x835, 0x0)

5m1.597678334s ago: executing program 2 (id=3489):
syz_emit_ethernet(0x36, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r3, 0x0, 0x110)
clock_adjtime(0x0, &(0x7f0000000000)={0x200000008, 0x0, 0x0, 0x69, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x40100, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x48, 0x0, 0x1040, 0x7, 0x7f, 0x3, 0x3, 0x3, 0xfffffffffffffffe, 0x4})
mkdir(&(0x7f0000000300)='./bus\x00', 0x26)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
utimes(0x0, &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]})
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)

4m59.613815975s ago: executing program 2 (id=3492):
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r2 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)

4m58.490785253s ago: executing program 2 (id=3494):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffe}, {0x101, 0xa8, 0x7, 0xffff}]})
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000240)=0x4)

4m57.844675963s ago: executing program 2 (id=3496):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x225c17d03, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
r2 = gettid()
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001240))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, 0x0)

4m56.881757519s ago: executing program 36 (id=3496):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x225c17d03, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
r2 = gettid()
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001240))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, 0x0)

4m27.049156031s ago: executing program 7 (id=3563):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)

4m26.664599156s ago: executing program 7 (id=3565):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000020000002e"], 0x0)

4m26.45033666s ago: executing program 7 (id=3567):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4m25.917282509s ago: executing program 7 (id=3569):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[], 0xfb, 0x6b2, &(0x7f0000002480)="$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")
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x20, &(0x7f0000001d40)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0, @ANYRES16=r0, @ANYRESOCT, @ANYRES8=r1, @ANYRES16, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f00000025c0)=""/158, &(0x7f0000000000)=0x9e)

4m24.832589346s ago: executing program 7 (id=3573):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x10)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80000c, &(0x7f0000000000)=ANY=[], 0x1, 0x6f7, &(0x7f0000000640)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
pipe2(0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0xa, 0x8, 0xffffffffffffffff, 0x0)
fcntl$addseals(r0, 0x409, 0x0)
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0x0, 0x7ffc1ffb}]})
sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24044040}, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6(0x10, 0x2, 0x0)
connect$inet6(r1, 0x0, 0x0)
fspick(r0, &(0x7f0000000000)='.\x00', 0x0)

4m19.067208867s ago: executing program 7 (id=3584):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ef1c36f86769c478ca481bde8159dc7e9c618aafbb68e5d306a8ce66888b5466ef56f33f55a6db6bc6a678aba8c7ac788b5011d2e78866e91ef97d681de7437f6b31887792c5dbc0bdc14c7d064061f265133cbd74acc722a87abe794def9967c361462d1037734d51860aed4a0c67b785b935f604ff7ba7f964adfa8a769907f94135c2df62cc60e481"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00', r3}, 0x10)
r4 = fanotify_init(0x0, 0x400)
fanotify_mark(r4, 0x80, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x48, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000004000226,adinicb,gid=forget,nostrict,unhide,nostrict,dmode=00000000000017777777777,uid=ignore,shortad,volume=00000000000000000006,\x00'], 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG")
io_setup(0x40, &(0x7f00000001c0)=<r5=>0x0)
io_submit(r5, 0x0, &(0x7f0000000540))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189)
write$binfmt_format(r6, &(0x7f0000000000)='1\x00', 0x2400)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10)
write$FUSE_IOCTL(r6, &(0x7f0000000100)={0x20, 0xfffffffffffffffe, 0x0, {0x9, 0x0, 0x4, 0x44a}}, 0x20)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r8)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x0)

4m18.733914152s ago: executing program 37 (id=3584):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ef1c36f86769c478ca481bde8159dc7e9c618aafbb68e5d306a8ce66888b5466ef56f33f55a6db6bc6a678aba8c7ac788b5011d2e78866e91ef97d681de7437f6b31887792c5dbc0bdc14c7d064061f265133cbd74acc722a87abe794def9967c361462d1037734d51860aed4a0c67b785b935f604ff7ba7f964adfa8a769907f94135c2df62cc60e481"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00', r3}, 0x10)
r4 = fanotify_init(0x0, 0x400)
fanotify_mark(r4, 0x80, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x48, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000004000226,adinicb,gid=forget,nostrict,unhide,nostrict,dmode=00000000000017777777777,uid=ignore,shortad,volume=00000000000000000006,\x00'], 0x4, 0xc24, &(0x7f0000000d00)="$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")
io_setup(0x40, &(0x7f00000001c0)=<r5=>0x0)
io_submit(r5, 0x0, &(0x7f0000000540))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189)
write$binfmt_format(r6, &(0x7f0000000000)='1\x00', 0x2400)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10)
write$FUSE_IOCTL(r6, &(0x7f0000000100)={0x20, 0xfffffffffffffffe, 0x0, {0x9, 0x0, 0x4, 0x44a}}, 0x20)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r8)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x0)

2m51.380082115s ago: executing program 6 (id=3818):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000001010102000000000000000002000000100002800c000280050401003a00000008001a40004000060c0019800800020008000000080003"], 0x40}}, 0x0)

2m51.248679317s ago: executing program 6 (id=3819):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioperm(0x7fff, 0x2, 0x9d)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x480081, 0x10d)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000140))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={0x0}, 0x1, 0xfffff000}, 0x8004)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
semget(0x0, 0x4, 0x440)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = io_uring_setup(0x2c4e, &(0x7f00000000c0)={0x0, 0x2, 0x4000, 0x2, 0x128})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x18, &(0x7f0000000000), 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0)

2m49.527910394s ago: executing program 6 (id=3827):
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810484, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYBLOB="0c67ad5302d79e0387ae2184cb9eab8866ee888f25e1f7f69325821748830f9254d0e210803af54ab70bcbf6ac50360fad1b2192cee8ca32b2d9f0df4387956cc58fd85a2878d487b401b6c08ad074806e14880d0cc3e697739a5c4fc0688f75d64ff50f57d9d19eee36d5e08ba0e6cf80007b5be1ba5124", @ANYRES64, @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=0x0], 0x1, 0x675, &(0x7f0000001280)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1404400, &(0x7f0000000200)={[{@user_xattr}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
setxattr$security_ima(0x0, 0x0, &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
timer_create(0x2, &(0x7f0000000000)={0x0, 0x2b, 0x2, @thr={0x0, 0x0}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
epoll_create1(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1)
r2 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002)
r4 = syz_io_uring_setup(0x230c, &(0x7f0000000340)={0x0, 0x79ed, 0x1, 0x3, 0x2dd}, &(0x7f00000000c0), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f00000003c0)={0xfffffff9, 0x7, 0x9}, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})

2m47.294207599s ago: executing program 6 (id=3839):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10)
syz_read_part_table(0x637, &(0x7f0000000000)="$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")
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m45.39404154s ago: executing program 6 (id=3847):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
write$binfmt_script(r2, &(0x7f0000000200), 0xfea7)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001600)={0x8, {"8046913d78b0664695d0d93fb899a719390e7fd0dfe4c8c3accd32d93d640336f127f6ff92c35b542920b1b61580561f434087e4baa40c57a8abdaff12c53eb14b46baf39b940ffb2ad7192011ab916f06c94380603f85a795eea925be5942ff01edc20b52a56f3dadcb17d62763f2d9e18b1db634deba6e5cd22ca1eecfeb2eb16b553cd1d4083cebb868db58780e1c8659436e15b6f904deea089331c278b6de1d0ea1e744dd0f0cbb215b540153429d82d492cfaccee3cac7b285361595c7015141caae6c8f672525d4720f68ec512459f2596dcf1ec772ae0463c8defa573955a4fd6f2a41dd02fcc163121d24e04b5b8da9de774cd6ecfa2efc07ff29aa99c6810ee4f48cc0ed5338d992fe1d049a184669e53bb37e2a4ca5ca316afb56144952c8213483a9ca4acbc200fa2b6df9c3a95b569deb5eef474e542dd7133fc8177bc834050f68971e68ba81d93b44d8ac035efd413e3aa409fdd85e3a45558c6fdad5c00493bd9408026ca5f04b0910f2b894182b3984367d397aa6a1ce5d2f0f8376245bea551c4a5a1902b0c7e4448912eeda3a2f842fe450c3c54e5b986a18a12285e25e19b6dc973d52a18a2c3e5e372f235e5ce4c7e066bcccc86ec2a3a0a12de79e58b81bd9723d62d6c3d5873ba71f133350f1647f62e2eed81c4f585fad096d18024f2470adaba3eedc8bea79a53de01143f376868f0b146ce192a871bda660d7987a1c12ab58470c9e38f35957d3ad926cd50b622c75cfb137e1b9fbf94e402c4b1689bbb25075ddb8d270da39e15419e414e2b8940cbc6fa9b0e5161600d29ec4dab3b5c458c5bb52f4df3cc2396cdad4fe273446cfc6997bbb8a6ae97c0f6488d40a7e49b67106537e630b3fb9b988c73f8ac6e140d1a8273c3107f14a58747f63a4e7334efbfcc1129db6f43d1a31b39201f7496cde4161122afe7dad83ea35595b4804626e56bd6161ad9801620b8af4076001559795a18c1a006a89d5929b0ab0deb78e20bfa1504dc156d50ca20cb48b487a600d4d047441dc7879f41b6f3ca9cd5abb5bfcf5a2a99ccdc2c0671de03a2d03df6d1ca4bba9f81a8d82bd2150ae97e1e30d68ae7e157c048c532eba6342cf98e16edcd4a0893523053f3cf991fadfd53bdebc025b3bab54671d5ff4bdc48e1e7b2e6f34f12815d8a90c95f7e711a41ca729e04ff50c72bff4771e74b1d4e1b1cc58ee66ecba604ba62df99bc1515f0dd8cee49d16d3d1d3cfb7c2e2b320af487a206d5c68c8b6d361ed3d3292895689e23afd162100da6348e743d26eaaf33c60260e3b8a2a197f28432a994bb069b1ca4619863abf2e5c7aefc224da635920629db4ac4ad13b825905f5c81efc0acda746e39eb27fd29583b40f16d288ea595d30ef1cd160d1377b31f6f828fee5617d11d43149fe53cb52b3239f9e20fa91200ab6945fba4abf53a51e80d3bcd26a5681f849e21ae0273decdfa1e8301554aeab7c2a521eb6aaeb2aace7d63cb40cfab731b25cdc30543739902d5e115dc2c314fb0b5bbbe8b5c17f20ae192d7239c2690bfa1f6bcd53b8ba50896d6da0b031130a73f866c9191fcc0f9991c3803af8d9f62659451133f9399acfa6247dd5dd8906c55711cd1f13fc03d96c6ed3ffbe58d93fcc420197287ad252154a1e624552e4aefc3817da35e6ab1e86246f4c011c78021ac6ec52eb021828c07ff6397764c1d510a4a8aa6bdf77962e58ac0f9168f033105611f53ce1cd3453e5de4a9e506e20cfb9711cedf73472bbbabb38545af101ba88540f52ace588fa1f485140bf72e75c477b014e3ce97cfbe7245d0076c718f50d534b215e2f138834be2802eb228563e38569fdd088ea52c7e8a4746d4dcc7813758cb68e3760721eb7151a47bca6f43854aa4852a8ccd72b6c181dbf099db5f889ab75289c00e9463151a7de0ec7a317855bd575dba038044f83bd99c28988746b566c4e8672db615b62a8d5ae97af8f69177335332bc986fab9b3998c62000265343d72f1c19efa8d4e2e2d8ccb67e11baaa4be71b963b966c58c26a1daba6ef70c51545b5df367d63ba4f08264bd7b11927fe59eda7a208dcf085b02d8a9e27778622ec12bb7dea12730fec459fbc62a72e379135fbeaa6ec0859b668f20aa1cb90331caa31daef61c5e63957b2bd3077c537c46303964d113975a45aca78aa4f6f11161c3df540887fab42312ea318fac5116274e0f9201666fe58ad4043579081e0ce65a723c2145d5638a1e2d4a4bf1beac87605f57803426ee7905a54703a75d6cf247edd2bd8c22d4546958ffb7dc5094a870bdbcb187d29f27f1e2833fc347b517c4d14d59fe2f3ac414a73f1e578118355cae8f6e5619da880a73e0e3a1500463913d2748bdcdaea5e71de9b827b45d210aee103350b83a28ab363534d365f448df27036a97d9969a9a40848817d861eded2173a1cf149a16dcaaceaf0acc19b444fef7f56a580e2159e976028a7465082d998bde5f7f093e919bfd5e52edb5cb29a9dd0cb4126a4963c7388551a0af4f50c78cfaf838d765b0421825f37f6ba507b0309d4877592f56504f3410d569a78f1b8c6499efebe73468fb27cc8d1f4b7a33eddc9fb6dd055a8d75516700527ea1142e75759fc66544a7815a9e9ea3358180a8a9c0f498d6d54d204952e446e8ed2f112fbd03eaed4a76ab4bd93b80a730a47ce4b472f5258ad567ed3c93cf9f698bb9f2cd6c7d073c281dcbd4e5b979a77b66a4889ed6807c43c78a2cf3f9d03bbda93f667dd74c5ae0a6952e50505e0b512061da2ec701cbc3bb900a48419480e4778728309b1f220eabdbf4655fd3c94e7dd54aa5c232c56b14e62340ff457ecaf8b1a904e570225c4faa40fd6526a62827da0c8d0cd4a673b6a702105f6f2fe210a399dbb44404d1bf44d6a6fc0c42b89ec79ee8ba3b232c54aba5d81d451f273effa5a47a31d838c7c8973f96945f6dbcb39598b444e2fa926e0a46a17e0924a2ad613b1d6d2604a92f5498cbf59c500b4ad4d935429117aefdad1be4d46fe551bb401b39457d60f2163a634509c8423798297126fcd77c06579cef62cfb7c3a6e25499fcc929bf4e700b48792912a6acfec731f69c3487740f8a816d19d9fefb9bcb7617dc25c4466ee898e541be0d7a36623bd241a4599783e5c3f8c11bc703a7347a56b8e34f027fd8c0600565ce3d75b662f4b0c7622c025c0d9bbc8258bcd3ef242dcca5a64fb53727a49082a513b67f58a9cd8d0b14765e9d1e7015b65c779247b5b70adba88a0df7593e97324da77c30754e85885ad71d3893e92db5596ddb39fe97e6f1db5f77bf8c6244171da958b4c6d31b4f3a523cfc47c42eea4b1b329ed746e0e059e55cbf11ca28e63156bfcb8580355f89fbd004e81bbd284b0382ab3ee684a93da17d19c0eb859f839a339a4a8f95cd9403eca40bd42555a7d18814595b65d2a3d2e5bc3bdd02a49f4599329f56579f11b5705dc71b3e401b229e8e973b43b5e112ad2eb7ee9981a7bc8f634ded29460d99532f81d370cf3d37394c281cb74fa471bf666b296698acb71a299fe08d4b3c3e12a760ca911fc00ae2336931d8e52e01e815874238e8fd4471c5a5a90f6d307ba930f8df4e2ce47a3457a403ad34a042c6affc2ac2351837a65948817bc66cb2d34e8bd9220fb975d81850975c30644f3d7d0c5d38ab8ba4129e6cc402fbd8fe9f76040b2c3dc8c6ad3d24e8306af97b50a223eeec56c458a83e737db997875bf6bb2f40ad388aca3173108952f4a360a1cd102ad35cf0e9eb3de76112d855e27a9a5edf12c39e293fadcc23c85d952b4282386a42e1083c6a3d583c55f741ad18863a4502a5520181b69fc65b01cf654e3b53636b498aeffbd4d02952f1b38f2d910226d4eb3de8d7c9a9ca4d1c5d48fc98384915a76866a960490098bea74160223522ec0c7a015117f3c9a0dcbb47878cd172703e1e883cd9cf9eb84cf4b882552f61413384c8bb89a1ca6d56dc19148e71b6edc86347b50698495d45b88606bf7017f2c5dd4cb1fd122cd07d4544723353f1a8608570d8cdc817fa8933c05cd8398fb5f57e7ac8406b116a51b00f25440787b040f3471e560ab2f444e158186f1339a448ce579f5df67e59612195534ffac773fae006faa6c29512accbc19935b73ee02dc9cc23ead4cd53ee37cca107fca3f62f6df6dd0581e77203b0d2288a4766558efc3bdb4183391cafdc9d6d2a51632c33fb12cd0637d425e5fc9f6a3657118bb64d0d9b3abb55d3909330a8ed7c87c55886708322593f98e21f49ec086d5e9fbc79f07b02bbafd23b918cfd9cff38c78c511333f06e4a68b1922ca54ea810b38c60bc16d41412539a5ea1e63a44c9e2e9f0132c0977cb117bef2f489562e1852a009d93dd22509902b677ed71e9d7af9e7cf77650de9f780dbc58ecd2fde410696a67a342fea0fd288a1cd6e41a7178b33aef3f6dea7a7e9bcd5a401d2355b495ba279ec35ab8e79587a7081499d56fbd8074b1e8df7145c614f4e3de281dd62d70b91f4a3e1ec576fb093ea592efe96bd2dc6a8fafd7c92cecd743a61229e0bef61a3402eeb1516c7e00744c7834bd1ae6a57a4ebf3cd0a30bd2589c6bfe9cb6fe2d86dd9089c9c9469e6d7a612b6d7ba0394b829cce2e28730dcb07cd8f4b6481c51d4f45219d2d0e62cc2573af3fa7f8e32dd43e11a713e9aa1338e101dd1a8ed3cad2b6c94b3717e068f8b213593e7c5c91e7fd670407298c33e86018b520d2c7dcd5d4c4e76ec4ecc781df7789ee91a9feddddbb0e404417992393d6e32aa0cd0e691a7e7b335543e5bd456e232ef1a74073e0b7edf1e00d7206455ca5fc7cf579e13857d15ab4e1e9b1d4111e17dc6f2d370cb7fd9f1b8e67792c8b9a4c093172c314afef8a0b862736d0d07d5b9d4886e76238a7f93758e1783448e468e59a1cd5a11a29793c111c4a2ec26ad40615713fb5e2f632c5976f87851d7d8b72850370cd189df1385e225263dff97cbcf9d34872a236948adfd424b941593748c4232050f0bc65f41514c7aac3bfb85b5fca9e36b8254d0037ed138bc83e3ce2d425b00d5ac183b056d4649b0d35d92c5cda01a7dcaf48d78117c00a3dcaa74b17974d3cd1f79737d27aaf7026713b9055e935156ca706b8b0f535df7e3403de0cacb98db0f7a0cd42b3995b5b63353ed3be7db382300d60fa928dcef8fa84eb087b548634524b93c647b6cf2845950fa9fff0ac4ad3c189fc764b93593b1fb4704d5087a6bab31709ff5050dc2a1743808250638cbdace3f759251be03ae8c3418a85885f6032160e3cfceaacfc1f572508075020b5f6d47c2f3fa0e25724fba5d8cbf79c777edacdac095df4dafd00236ee2e212dfb2e51c3d4a703a0c6936dc4412673819329ec9846713a3ad2b13b254d3f7191ca83d38bb26f18a82b5d38f62b94f8825a44e7483654748e324e15c23e4edddfecc5609f2406337c33306b33a6a8b70a5f5e644fc78eb77b96be09799331b6af96aa402d9473fbc8af300ada42f57b29ab56984d568e51e252de60ce1eacb34c4e04ae07a949a3975f10809a57546feba48eec8f344a1273677e07def79bc8b3b7cd8c6afa7cf8448185dec7fd3b594b897ae517d55c21d48ccc9b34d2b0b96e6fecab12c93273306cae552e99ccfdec012efc8b59e933f0f2b8f03b46a3c7551413f881482588fa97915d007405f227a6ad7bd2e0351bffa339429dce583f43c930c4247d894f841e42e72e68392d19dea380d530d1bed95a9b1bcc3a64a0f3250", 0x1000}}, 0x1006)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]})
copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000)

2m41.801868396s ago: executing program 6 (id=3858):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x3c, r1, 0x801, 0x70bd30, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f2b1c640f8c18922dfb5b2a2a6"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c4d1}, 0x20000000)

2m26.085690125s ago: executing program 38 (id=3858):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x3c, r1, 0x801, 0x70bd30, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f2b1c640f8c18922dfb5b2a2a6"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c4d1}, 0x20000000)

59.923179764s ago: executing program 0 (id=4109):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
rt_sigaction(0x8, 0x0, 0x0, 0x8, &(0x7f0000000300))
r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896)
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x59}], 0x1}, 0x200048c1)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002)

58.634063213s ago: executing program 0 (id=4112):
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r0 = fanotify_init(0xf00, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f00000006c0)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee00}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4f2, &(0x7f0000000a40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lstat(0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x1, 0xd000001})
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/174, 0xae}], 0x1)
fanotify_mark(r0, 0x105, 0x40009975, 0xffffffffffffffff, 0x0)
lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xee00)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
execveat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)={[&(0x7f0000000180)='\'\x00', &(0x7f0000000300)='bsdgroups', &(0x7f0000000380)='&\x00', &(0x7f00000003c0)='\\.)]-\x00', &(0x7f0000000440)='bsdgroups', &(0x7f0000000480)=':\x00']}, &(0x7f0000000540)={[&(0x7f0000000500)='ext4\x00']}, 0x1000)

53.064678978s ago: executing program 0 (id=4120):
rt_sigqueueinfo(0x0, 0x21, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x1000000, 0x0})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x28)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000006b00), 0x0, 0xc04c8c0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)

52.063898744s ago: executing program 0 (id=4125):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000001000"/20, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xb4, 0x3a, '\x9a\x8an\xa3\xfb\xa1\x05V\a\aS9\xac\x14\x8a\xf9V\xe8\x87\xa0\x04\xfc', 0x3a, 'dioread_nolock', 0x3a, './file1', 0x3a, [0x46]}, 0x4c)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="1f6c00c2231bc4cb50017d878864", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
pipe2$9p(&(0x7f0000000540), 0x84080)
fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

50.226868852s ago: executing program 0 (id=4131):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
io_setup(0x2278, &(0x7f0000000180))
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2, 0x9}, 0x1c)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x35, 0x62, 0x34, 0x54, 0x62, 0x36, 0x32, 0x31, 0x61, 0x37, 0x32, 0x37, 0x66, 0x30, 0x39]}, &(0x7f0000000080)={0x0, "67badff74c3daf1fb2fe025f16ea7c61ef59dd98a76b4ab8173e5c1103e9348f1e65d9a471f63d548de13cc4d4b4d69cd3b9dc2ac3e872dbd2b0755be7e2bbae", 0x3b}, 0x48, 0xfffffffffffffffe)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

47.976698726s ago: executing program 0 (id=4138):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

47.251140737s ago: executing program 39 (id=4138):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

15.175823458s ago: executing program 3 (id=4194):
userfaultfd(0x801)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00')
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/30, 0x1e}], 0x1, 0x10000000, 0x8)

14.530362398s ago: executing program 3 (id=4198):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000009000000010001000700000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/98}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
lseek(r5, 0x289e0cb5, 0x0)

11.696912091s ago: executing program 5 (id=4199):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000104000000040000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100697069700000000014000280050009"], 0x44}}, 0x0)

11.696581081s ago: executing program 3 (id=4200):
syz_emit_ethernet(0x36, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0x3)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x200000008, 0x0, 0x0, 0x69, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x40100, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x48, 0x0, 0x1040, 0x7, 0x7f, 0x3, 0x3, 0x3, 0xfffffffffffffffe, 0x4})

9.407362016s ago: executing program 5 (id=4204):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@lazytime}]}, 0xfe, 0x264, &(0x7f0000000700)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

8.324489102s ago: executing program 9 (id=4208):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
io_setup(0x2278, &(0x7f0000000180))
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file2\x00', 0x1000, 0x0, 0xff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2, 0x9}, 0x1c)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x35, 0x62, 0x34, 0x54, 0x62, 0x36, 0x32, 0x31, 0x61, 0x37, 0x32, 0x37, 0x66, 0x30, 0x39]}, 0x0, 0x0, 0xfffffffffffffffe)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

8.222732374s ago: executing program 5 (id=4209):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

7.289556138s ago: executing program 8 (id=4210):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x82, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0961d3", 0x44, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @remote, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x100}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0)

6.036671258s ago: executing program 5 (id=4211):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file2\x00', 0x1000b, &(0x7f00000000c0)=ANY=[], 0x21, 0x1c5, &(0x7f00000002c0)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r1, 0x0, 0x0)

5.234392579s ago: executing program 9 (id=4212):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454d4, 0x207)
accept4(r1, 0x0, 0x0, 0x80800)

5.007166673s ago: executing program 5 (id=4213):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prctl$PR_SET_PTRACER(0x59616d61, r0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(0x0, 0x2)
keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/72, 0x48)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, 0x0)
memfd_create(&(0x7f0000000180)='\x00', 0x5)
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000440)=0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000a00)={[{@resuid}, {@abort}, {}, {@block_validity}, {@bsdgroups}, {@grpid}, {@abort}, {}, {@journal_dev={'journal_dev', 0x3d, 0x8}}]}, 0xfc, 0x57b, &(0x7f0000000480)="$eJzs3V1rHFUYAOB3NpukX9oUSlEvpNALK7WbJvGjgmC9FC0W9L4uyTaUbrolu5EmFmwv7I03UgQRC+IP8N7L4h/wVxS0UKQEvRAhMpvZdNvsR5Juu9vs88C05+zM9My7M+/pOTu7TABD62j6Ry7i5Yj4Nok42LQuH9nKo+vbrT64NpsuSaytffpXEkn2WmP7JPt7f1Z5KSJ++zriRG5zu9XllUvFcrm0mNUnawtXJqvLKycvLhTnS/Oly9MzM6ffmpl+9523exbr6+f++eGTOx+e/ubY6ve/3Dt0K4kzcSBb1xzHE7jeXDla/C8rjcaZxzac6kFjgyTp9wGwIyNZno9G2gccjJEs64Hd76uIWAOGVCL/YUg1xgGNuX2P5sHPjfsfrE+A6rGPNcefX/9sJPbU50b7VpNHZkbpfHeiB+2nbfz65+1b6RKdP4fY26UOsC3Xb0TEqXx+c/+fZP3fzp2qf3jc2eNtDNv/P9BPd9Lxzxutxn+5jfFPtBj/7G+RuzvRPf9z93rQTFvp+O+9luPfja5rYiSrvVAf840mFy6WS6ci4sWIOB6j42m90/2c06t319qtax7/pUvafmMsmB3Hvfz4o/vMFWvFiBh7krgb7t+IeCXfKv5k4/wnLc5/+n6c22IbR0q3X223rnv8T9fazxGvtTz/D+9oJZ3vT07Wr4fJxlWx2d83j/zerv1+x5+e/32d459Imu/XVrffxk97/i21W7fT638s+axebiTB1WKttjgVMZZ8vPn16Yf7NuqN7dP4jx/r3P+1uv7TydfnW4z/5uGbbTcdhPM/t63zv/3C3Y++/LFd+1s7/2/WS8ezV7L+r7XsWtnqAT7p+wcAAAAAAACDJBcRByLJFTbKuVyhsP79jsOxL1euVGsnLlSWLs9F/beyEzGaa9zpPtj0fYip7Puwjfr0Y/WZiDgUEd+N7K3XC7OV8ly/gwcAAAAAAAAAAAAAAAAAAIABsb/N7/9Tf4y03c2zp2C3qD/YYLzfRwH0Q9dH/vfiSU/AQOqa/8CuJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz6bK2+uDabFqfy0dE5YuTc6XqpcLC0mxhtrJ4pTBfqcyXS4XZykK3f69cqVyZmo6lq5O1UrU2WV1eOb9QWbpcO39xoThfOl8afSZRAQAAAAAAAAAAAAAAAAAAwPOlurxyqVgulxYV2hbej4E4jKcZ4Lod7Z4flCieaWE8e8sG5Xg6FW5kx7q9vfrUIQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAC/8HAAD///F/LTw=")
fallocate(0xffffffffffffffff, 0x10, 0x2000, 0x7fff)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1c0)
write$P9_RUNLINKAT(r7, &(0x7f00000000c0)={0x48, 0x4d, 0x2}, 0xfff2)

4.55213491s ago: executing program 9 (id=4214):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1)

3.766551492s ago: executing program 8 (id=4215):
chdir(&(0x7f0000000480)='./cgroup\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0)

3.647947844s ago: executing program 5 (id=4216):
userfaultfd(0x801)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00')
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/30, 0x1e}], 0x1, 0x10000000, 0x8)

3.386082798s ago: executing program 3 (id=4217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.044579753s ago: executing program 9 (id=4218):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}})

2.260245465s ago: executing program 8 (id=4219):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
rt_sigaction(0x8, 0x0, 0x0, 0x8, &(0x7f0000000300))
r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x59}], 0x1}, 0x200048c1)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002)

1.313048s ago: executing program 8 (id=4220):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000200)={0x18, 0x1f, 0x0, {0x1400000000000}}, 0x18)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0)
getresuid(&(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000380))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

1.168276902s ago: executing program 9 (id=4221):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ef1c36f86769c478ca481bde8159dc7e9c618aafbb68e5d306a8ce66888b5466ef56f33f55a6db6bc6a678aba8c7ac788b5011d2e78866e91ef97d681de7437f6b31887792c5dbc0bdc14c7d064061f265133cbd74acc722a87abe794def9967c361462d1037734d51860aed4a0c67b785b935f604ff7ba7f964adfa8a769907f94135c2df62cc60e481"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = fanotify_init(0x0, 0x400)
fanotify_mark(r3, 0x80, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x48, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000004000226,adinicb,gid=forget,nostrict,unhide,nostrict,dmode=00000000000017777777777,uid=ignore,shortad,volume=00000000000000000006,\x00'], 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG")
io_setup(0x40, &(0x7f00000001c0))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189)
write$binfmt_format(r4, &(0x7f0000000000)='1\x00', 0x2400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)

915.819906ms ago: executing program 8 (id=4222):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file2\x00', 0x1000b, &(0x7f00000000c0)=ANY=[], 0x21, 0x1c5, &(0x7f00000002c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

765.665358ms ago: executing program 3 (id=4223):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454d4, 0x207)
accept4(r1, 0x0, 0x0, 0x80800)

484.540862ms ago: executing program 8 (id=4224):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
mkdir(0x0, 0x1d1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2004090, &(0x7f0000000540), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00')
readlinkat(r4, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010)

263.317616ms ago: executing program 3 (id=4225):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x82, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0961d3", 0x44, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @remote, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x100}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0)

0s ago: executing program 9 (id=4226):
syz_emit_ethernet(0x36, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0x3)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x200000008, 0x0, 0x0, 0x69, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x40100, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x48, 0x0, 0x1040, 0x7, 0x7f, 0x3, 0x3, 0x3, 0xfffffffffffffffe, 0x4})

kernel console output (not intermixed with test programs):

: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1104.062986][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1104.098707][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1104.147098][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1104.179725][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1104.235431][ T4535] usb 7-1: USB disconnect, device number 5
[ 1104.289285][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1104.705945][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1104.920013][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1104.986561][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1104.997643][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1105.142642][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1105.194730][T17371] loop6: detected capacity change from 0 to 16
[ 1105.203363][T17371] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1105.803731][T16971] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1105.943626][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1105.958229][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1105.977711][T16971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1106.006633][T16971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1106.122314][T16971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1106.151961][T16971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1106.209138][T17379] loop9: detected capacity change from 0 to 1024
[ 1106.280078][T17379] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1106.322700][T17379] EXT4-fs error (device loop9): ext4_lookup:1858: comm syz.9.3674: inode #12: comm syz.9.3674: iget: illegal inode #
[ 1106.349847][T17389] loop5: detected capacity change from 0 to 1024
[ 1106.451263][T17389] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[ 1106.489136][T17389] hfsplus: xattr searching failed
[ 1106.527441][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1106.579104][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1106.608822][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1106.640491][ T4323] hfsplus: b-tree write err: -5, ino 4
[ 1107.060704][T17404] syz.6.3672: attempt to access beyond end of device
[ 1107.060704][T17404] loop6: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1107.078356][T17404] syz.6.3672: attempt to access beyond end of device
[ 1107.078356][T17404] loop6: rw=0, sector=296, nr_sectors = 16 limit=16
[ 1107.092339][T17404] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 36
[ 1107.230219][T17407] loop5: detected capacity change from 0 to 2048
[ 1107.833466][T17407] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1108.339214][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1108.562341][ T4261] Bluetooth: hci3: command 0x0406 tx timeout
[ 1108.726007][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1108.746016][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1108.833067][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1110.361357][T17437] loop9: detected capacity change from 0 to 512
[ 1110.394372][T17437] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1110.450816][T17437] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 not in group (block 4294443269)!
[ 1110.487095][T17437] EXT4-fs (loop9): group descriptors corrupted!
[ 1112.387231][T17446] loop8: detected capacity change from 0 to 2048
[ 1112.757195][T17458] loop5: detected capacity change from 0 to 2048
[ 1112.871317][T17458] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1112.956020][T17458] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1112.976402][T17458] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[ 1112.979851][ T4528] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1112.988906][T17458] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1112.988906][T17458] 
[ 1112.988947][T17458] EXT4-fs (loop5): Total free blocks count 0
[ 1112.988964][T17458] EXT4-fs (loop5): Free/Dirty block details
[ 1112.988979][T17458] EXT4-fs (loop5): free_blocks=2415919104
[ 1112.989006][T17458] EXT4-fs (loop5): dirty_blocks=64
[ 1112.989020][T17458] EXT4-fs (loop5): Block reservation details
[ 1112.989033][T17458] EXT4-fs (loop5): i_reserved_data_blocks=4
[ 1113.227267][T17471] loop0: detected capacity change from 0 to 256
[ 1113.245142][ T4409] device hsr_slave_0 left promiscuous mode
[ 1113.261463][T17474] loop9: detected capacity change from 0 to 512
[ 1113.309450][ T4409] device hsr_slave_1 left promiscuous mode
[ 1113.330266][T17474] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[ 1113.348092][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1113.367163][T17474] EXT4-fs (loop9): orphan cleanup on readonly fs
[ 1113.373910][T17474] EXT4-fs error (device loop9): ext4_ext_check_inode:520: inode #4: comm syz.9.3695: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 65535, max 32767(4), depth 0(0)
[ 1113.411097][T17474] EXT4-fs error (device loop9): ext4_quota_enable:6989: comm syz.9.3695: Bad quota inode: 4, type: 1
[ 1113.418193][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1113.443008][ T4906] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1113.513539][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1113.521298][T17474] EXT4-fs warning (device loop9): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1113.542814][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1113.560270][T17474] EXT4-fs (loop9): Cannot turn on quotas: error -117
[ 1113.570985][ T4409] device bridge_slave_1 left promiscuous mode
[ 1113.587378][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1113.602717][T17474] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1113.644771][ T4906] usb 7-1: Using ep0 maxpacket: 8
[ 1113.658641][ T4409] device bridge_slave_0 left promiscuous mode
[ 1113.667260][ T4906] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1113.687534][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1113.705627][ T4906] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1113.723471][ T4906] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1113.752285][ T4906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.768533][ T4906] hub 7-1:1.0: bad descriptor, ignoring hub
[ 1113.796034][ T4906] hub: probe of 7-1:1.0 failed with error -5
[ 1113.942921][ T4409] device veth1_macvtap left promiscuous mode
[ 1113.972261][ T4409] device veth0_macvtap left promiscuous mode
[ 1113.978416][ T4409] device veth1_vlan left promiscuous mode
[ 1114.011645][ T4409] device veth0_vlan left promiscuous mode
[ 1114.075545][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1114.508613][ T4996] usb 7-1: reset high-speed USB device number 6 using dummy_hcd
[ 1115.138800][T17510] loop8: detected capacity change from 0 to 2048
[ 1115.171615][T17512] loop0: detected capacity change from 0 to 256
[ 1115.191009][T17512] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[ 1115.217122][T17510] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1115.246036][ T4996] usb 7-1: USB disconnect, device number 6
[ 1115.272693][T17512] syz.0.3705: attempt to access beyond end of device
[ 1115.272693][T17512] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256
[ 1115.319129][T17512] syz.0.3705: attempt to access beyond end of device
[ 1115.319129][T17512] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256
[ 1115.350201][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1115.356951][T17512] syz.0.3705: attempt to access beyond end of device
[ 1115.356951][T17512] loop0: rw=0, sector=280, nr_sectors = 8 limit=256
[ 1115.374963][   T27] audit: type=1800 audit(1743152998.908:77): pid=17512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3705" name="file1" dev="loop0" ino=1048679 res=0 errno=0
[ 1115.569694][T17518] loop8: detected capacity change from 0 to 1024
[ 1115.596930][T17521] loop0: detected capacity change from 0 to 8
[ 1115.630771][   T27] audit: type=1800 audit(1743152999.158:78): pid=17518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3706" name="file2" dev="loop8" ino=21 res=0 errno=0
[ 1115.693341][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.699673][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.732346][   T27] audit: type=1800 audit(1743152999.208:79): pid=17518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3706" name="file2" dev="loop8" ino=21 res=0 errno=0
[ 1115.852995][T17524] loop0: detected capacity change from 0 to 128
[ 1115.859864][T17518] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[ 1115.888022][T17524] FAT-fs (loop0): Unrecognized mount option "utfcharseB5�פl`�"(" or missing value
[ 1115.919233][T17518] File: /46/file0/file2 PID: 17518 Comm: syz.8.3706
[ 1115.942627][T17518] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[ 1115.963395][T17518] File: /46/file0/file2 PID: 17518 Comm: syz.8.3706
[ 1116.017239][T17524] loop0: detected capacity change from 0 to 512
[ 1116.026987][T17524] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[ 1116.082303][T17524] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 1116.082331][T17524] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 1116.086528][T17524] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 1116.086550][T17524] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000]
[ 1116.087635][T17524] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1116.096606][T17524] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3708: bg 0: block 34: padding at end of block bitmap is not set
[ 1116.098164][T17524] Quota error (device loop0): write_blk: dquota write failed
[ 1116.098275][T17524] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[ 1116.098306][T17524] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.3708: Failed to acquire dquot type 1
[ 1116.099474][T17524] EXT4-fs (loop0): 1 truncate cleaned up
[ 1116.120416][T17524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1117.277582][T17528] tty tty32: ldisc open failed (-12), clearing slot 31
[ 1117.346675][ T4409] team0 (unregistering): Port device team_slave_1 removed
[ 1117.360396][T16971] EXT4-fs (loop0): unmounting filesystem.
[ 1117.455081][ T4409] team0 (unregistering): Port device team_slave_0 removed
[ 1117.520643][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1117.582923][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1118.598697][T17553] loop0: detected capacity change from 0 to 512
[ 1118.752311][T17553] loop0: detected capacity change from 0 to 256
[ 1119.250217][T17555] loop8: detected capacity change from 0 to 512
[ 1119.395434][T17555] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1119.408391][T17560] usb usb1: usbfs: process 17560 (syz.0.3717) did not claim interface 0 before use
[ 1119.417987][T17555] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1119.658110][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1119.902797][ T4409] bond0 (unregistering): Released all slaves
[ 1120.448461][T17575] xt_hashlimit: max too large, truncated to 1048576
[ 1120.458303][T17575] xt_limit: Overflow, try lower: 0/0
[ 1122.236386][T17588] tty tty21: ldisc open failed (-12), clearing slot 20
[ 1122.759545][T17603] loop6: detected capacity change from 0 to 512
[ 1122.823459][T17605] loop5: detected capacity change from 0 to 128
[ 1122.838857][T17603] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1122.877342][T17605] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1122.964733][T17603] EXT4-fs (loop6): 1 truncate cleaned up
[ 1122.970521][T17603] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1123.017206][T17611] loop9: detected capacity change from 0 to 512
[ 1123.066643][T17611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1123.285375][T17611] EXT4-fs (loop9): orphan cleanup on readonly fs
[ 1123.319690][T17611] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3732: bg 0: block 248: padding at end of block bitmap is not set
[ 1123.410601][T17625] loop8: detected capacity change from 0 to 8
[ 1123.597187][T17625] SQUASHFS error: Unable to read directory block [629:26]
[ 1123.605139][T17626] SQUASHFS error: Unable to read directory block [629:26]
[ 1123.826866][T17611] Quota error (device loop9): write_blk: dquota write failed
[ 1123.941706][T17611] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[ 1123.997985][T17611] EXT4-fs error (device loop9): ext4_acquire_dquot:6795: comm syz.9.3732: Failed to acquire dquot type 1
[ 1124.128050][T17611] EXT4-fs (loop9): 1 truncate cleaned up
[ 1124.233687][T17611] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1124.235467][T16209] EXT4-fs (loop6): unmounting filesystem.
[ 1124.301012][T17628] loop5: detected capacity change from 0 to 8192
[ 1124.770310][T17641] loop8: detected capacity change from 0 to 2048
[ 1124.786508][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1124.825907][T17641] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1124.833810][T17641] UDF-fs: Scanning with blocksize 512 failed
[ 1124.859147][T17641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1124.942368][   T27] audit: type=1800 audit(1743153008.448:80): pid=17641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3736" name="file2" dev="loop8" ino=839 res=0 errno=0
[ 1125.558679][T17644] loop0: detected capacity change from 0 to 512
[ 1126.268511][T17644] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1126.310753][T17644] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1126.351880][  T126] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1126.572501][  T126] usb 10-1: Using ep0 maxpacket: 16
[ 1126.580035][T16971] EXT4-fs (loop0): unmounting filesystem.
[ 1126.593739][T17664] loop6: detected capacity change from 0 to 512
[ 1126.599596][  T126] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1126.924835][ T4535] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1127.069403][T17664] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1127.239249][ T4535] usb 9-1: Using ep0 maxpacket: 16
[ 1127.255478][ T4535] usb 9-1: config 0 has an invalid interface number: 29 but max is 0
[ 1127.280814][T17664] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1127.299504][ T4535] usb 9-1: config 0 has no interface number 0
[ 1127.318057][T17664] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1127.331429][ T4535] usb 9-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0
[ 1127.392275][ T4535] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1127.400322][ T4535] usb 9-1: Product: syz
[ 1127.409621][  T126] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1127.416442][  T126] usb 10-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00
[ 1127.425636][  T126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.435615][  T126] usb 10-1: config 0 descriptor??
[ 1127.488710][ T4535] usb 9-1: Manufacturer: syz
[ 1127.519065][ T4535] usb 9-1: SerialNumber: syz
[ 1127.556312][ T4535] usb 9-1: config 0 descriptor??
[ 1127.587648][T16209] EXT4-fs (loop6): unmounting filesystem.
[ 1127.980229][  T126] logitech-djreceiver 0003:046D:C52B.001A: item fetching failed at offset 4/5
[ 1127.993265][  T126] logitech-djreceiver 0003:046D:C52B.001A: logi_dj_probe: parse failed
[ 1128.012051][  T126] logitech-djreceiver: probe of 0003:046D:C52B.001A failed with error -22
[ 1128.072509][ T4535] usb 10-1: USB disconnect, device number 3
[ 1129.398765][T17710] loop6: detected capacity change from 0 to 2048
[ 1129.429028][T17710] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[ 1129.436800][T17710] UDF-fs: Scanning with blocksize 512 failed
[ 1129.482674][T17710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1129.552621][   T27] audit: type=1800 audit(1743153013.058:81): pid=17710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3754" name="file2" dev="loop6" ino=839 res=0 errno=0
[ 1129.960420][ T4535] usb 9-1: USB disconnect, device number 4
[ 1131.183171][T17732] loop8: detected capacity change from 0 to 1024
[ 1131.322901][T17737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3760'.
[ 1131.596551][T17736] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.3762' sets config #1
[ 1132.165118][T17740] loop9: detected capacity change from 0 to 512
[ 1132.239604][T17745] loop6: detected capacity change from 0 to 512
[ 1132.293493][T17740] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1132.373207][T17740] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1132.382582][T17750] loop8: detected capacity change from 0 to 16
[ 1132.400181][T17750] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1132.405434][T17745] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1132.440713][T17745] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1133.080111][T17745] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz.6.3765: invalid size
[ 1133.281108][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1133.286993][   T27] audit: type=1326 audit(1743153016.808:82): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.0.3769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f565918d169 code=0x0
[ 1133.370731][T16209] EXT4-fs (loop6): unmounting filesystem.
[ 1136.523959][T17798] loop8: detected capacity change from 0 to 2048
[ 1136.579454][T17798] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1136.587368][T17798] UDF-fs: Scanning with blocksize 512 failed
[ 1136.596950][T17798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1136.643030][   T27] audit: type=1800 audit(1743153020.178:83): pid=17764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3768" name="file2" dev="loop8" ino=839 res=0 errno=0
[ 1137.246990][T17807] loop0: detected capacity change from 0 to 2048
[ 1137.267167][T17809] loop9: detected capacity change from 0 to 2048
[ 1137.393753][T17807]  loop0: p1 < > p3
[ 1137.415122][T17809] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1137.422756][T17807] loop0: p3 size 134217728 extends beyond EOD, truncated
[ 1137.627076][T17809] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1137.715078][T17821] loop5: detected capacity change from 0 to 8
[ 1138.376229][T17815] SQUASHFS error: Unable to read directory block [629:26]
[ 1138.497079][T16762] udevd[16762]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[ 1138.576073][ T5322] udevd[5322]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[ 1139.197509][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1139.621256][T17833] loop6: detected capacity change from 0 to 512
[ 1139.654201][T17836] loop8: detected capacity change from 0 to 8
[ 1141.195717][T17849] loop5: detected capacity change from 0 to 2048
[ 1141.321627][T17849] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[ 1141.329489][T17849] UDF-fs: Scanning with blocksize 512 failed
[ 1141.354040][T17849] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1141.693013][   T27] audit: type=1800 audit(1743153024.978:84): pid=17849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3786" name="file2" dev="loop5" ino=839 res=0 errno=0
[ 1141.737665][T17836] SQUASHFS error: Failed to read block 0x4de: -5
[ 1141.764295][T17836] SQUASHFS error: Failed to read block 0x4de: -5
[ 1141.923025][   T27] audit: type=1800 audit(1743153025.298:85): pid=17836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3787" name="file1" dev="loop8" ino=5 res=0 errno=0
[ 1142.020141][T17858] loop9: detected capacity change from 0 to 256
[ 1142.142264][ T4535] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1142.283466][ T5322] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1142.331855][T17858] loop9: detected capacity change from 0 to 256
[ 1142.436724][T17833] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1142.444992][T17858] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d)
[ 1142.454862][T17833] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1142.502539][ T4535] usb 1-1: Using ep0 maxpacket: 8
[ 1142.524061][ T4535] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1142.536874][T17833] EXT4-fs: failed to create workqueue
[ 1142.557111][T17833] EXT4-fs (loop6): mount failed
[ 1142.573471][ T4535] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1142.575019][T15164] kernel write not supported for file bpf-prog (pid: 15164 comm: kworker/0:16)
[ 1142.608478][ T4535] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1142.626055][ T4535] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1142.636639][ T4535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1142.698987][ T4535] hub 1-1:1.0: bad descriptor, ignoring hub
[ 1142.711434][ T4535] hub: probe of 1-1:1.0 failed with error -5
[ 1142.726340][ T4535] cdc_wdm 1-1:1.0: skipping garbage
[ 1142.735009][ T4535] cdc_wdm 1-1:1.0: skipping garbage
[ 1142.740370][ T4535] cdc_wdm: probe of 1-1:1.0 failed with error -22
[ 1143.056209][T17882] binder: 17881:17882 ioctl c018620c 200000000140 returned -1
[ 1143.192824][ T4535] usb 1-1: reset high-speed USB device number 28 using dummy_hcd
[ 1143.277364][T17891] loop8: detected capacity change from 0 to 512
[ 1143.343468][T17891] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1143.409115][T17891] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.3797: bad orphan inode 17
[ 1143.457960][T17891] EXT4-fs (loop8): Remounting filesystem read-only
[ 1143.467245][T17896] binder: BINDER_SET_CONTEXT_MGR already set
[ 1143.474487][T17891] ext4_test_bit(bit=16, block=4) = 1
[ 1143.479846][T17891] is_bad_inode(inode)=0
[ 1143.495725][T17898] loop5: detected capacity change from 0 to 128
[ 1143.500911][T17896] binder: 17895:17896 ioctl 4018620d 200000000040 returned -16
[ 1143.509525][T17898] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1143.517078][T17891] NEXT_ORPHAN(inode)=2147418128
[ 1143.521965][T17891] max_ino=32
[ 1143.534190][T17891] i_nlink=0
[ 1143.540429][T17898] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1143.556212][T17891] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1143.568065][T17898] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1143.712932][ T4535] usb 1-1: USB disconnect, device number 28
[ 1145.325761][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1147.528259][T15935] EXT4-fs (loop5): unmounting filesystem.
[ 1147.736578][T17927] loop5: detected capacity change from 0 to 256
[ 1147.779369][T17931] loop0: detected capacity change from 0 to 1024
[ 1149.309419][T17950] loop5: detected capacity change from 0 to 2048
[ 1149.401103][T17950] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1150.142414][T17967] loop9: detected capacity change from 0 to 1024
[ 1150.150508][T17967] EXT4-fs: Ignoring removed nobh option
[ 1150.156379][T17967] EXT4-fs: Ignoring removed bh option
[ 1150.181235][T17967] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1150.968750][T17967] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1151.663287][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3818'.
[ 1152.068777][T17987] loop0: detected capacity change from 0 to 2048
[ 1152.140680][T17987] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[ 1152.148444][T17987] UDF-fs: Scanning with blocksize 512 failed
[ 1152.171028][T17987] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1152.260508][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1152.545711][   T27] audit: type=1800 audit(1743153035.738:86): pid=17987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3817" name="file2" dev="loop0" ino=839 res=0 errno=0
[ 1153.192824][ T4297] kernel write not supported for file /locks (pid: 4297 comm: kworker/1:5)
[ 1153.532311][T15171] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1153.590387][T18012] loop9: detected capacity change from 0 to 512
[ 1153.597942][T18008] loop6: detected capacity change from 0 to 1024
[ 1153.671947][T18012] EXT4-fs: Ignoring removed oldalloc option
[ 1153.710537][T18012] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1153.742429][T15171] usb 1-1: Using ep0 maxpacket: 8
[ 1153.753132][T15171] usb 1-1: config 0 has no interfaces?
[ 1153.782092][T15171] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1153.816659][T15171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1153.884174][T15171] usb 1-1: config 0 descriptor??
[ 1153.884267][T18012] EXT4-fs (loop9): 1 truncate cleaned up
[ 1153.884295][T18012] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1153.925375][T18019] loop8: detected capacity change from 0 to 1024
[ 1153.983138][T18022] loop5: detected capacity change from 0 to 2048
[ 1153.994444][T18019] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1154.054693][T18022] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1154.088695][T15171] usb 1-1: USB disconnect, device number 29
[ 1154.207110][T18027] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[ 1154.272702][T18027] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 400 with max blocks 3 with error 28
[ 1154.315615][T18019] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 400 with error 28
[ 1154.359700][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1154.393737][T18019] EXT4-fs (loop8): This should not happen!! Data will be lost
[ 1154.393737][T18019] 
[ 1154.402371][T18027] EXT4-fs (loop8): This should not happen!! Data will be lost
[ 1154.402371][T18027] 
[ 1154.453552][T18019] EXT4-fs (loop8): Total free blocks count 0
[ 1154.511033][T18027] EXT4-fs (loop8): Total free blocks count 0
[ 1154.547941][T18019] EXT4-fs (loop8): Free/Dirty block details
[ 1154.579195][T18019] EXT4-fs (loop8): free_blocks=68451041280
[ 1154.581018][T15935] EXT4-fs (loop5): unmounting filesystem.
[ 1154.608634][T18027] EXT4-fs (loop8): Free/Dirty block details
[ 1156.003921][T18052] loop8: detected capacity change from 0 to 1024
[ 1156.067569][T18053] loop6: detected capacity change from 0 to 2048
[ 1156.123403][T18052] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1156.132638][T18052] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1156.262732][T18053]  loop6: p1 < > p3
[ 1156.302731][T18053] loop6: p3 size 134217728 extends beyond EOD, truncated
[ 1156.352271][T18017] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set
[ 1156.500758][T15171] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1157.208660][T18069] loop9: detected capacity change from 0 to 512
[ 1157.371379][T18069] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.3843: inode #1: comm syz.9.3843: iget: illegal inode #
[ 1157.453277][T15171] usb 9-1: Using ep0 maxpacket: 32
[ 1157.465621][T15171] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 1157.546691][T15171] usb 9-1: config 0 has no interface number 0
[ 1157.552320][T18069] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.3843: error while reading EA inode 1 err=-117
[ 1157.565317][T15171] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1157.565361][T15171] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1157.565404][T15171] usb 9-1: Product: syz
[ 1157.565420][T15171] usb 9-1: Manufacturer: syz
[ 1157.565435][T15171] usb 9-1: SerialNumber: syz
[ 1157.586703][T15171] usb 9-1: config 0 descriptor??
[ 1157.638804][T15171] smsc95xx v2.0.0
[ 1157.652314][T15171] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1157.684990][T15171] smsc95xx: probe of 9-1:0.67 failed with error -22
[ 1157.776227][T18069] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.3843: inode #1: comm syz.9.3843: iget: illegal inode #
[ 1157.970169][T18084] loop6: detected capacity change from 0 to 1024
[ 1157.982497][T18069] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.3843: error while reading EA inode 1 err=-117
[ 1158.049188][T18084] EXT4-fs: Ignoring removed nobh option
[ 1158.076035][T18084] EXT4-fs: Ignoring removed bh option
[ 1158.121153][T18069] EXT4-fs (loop9): 1 orphan inode deleted
[ 1158.127569][T18084] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1158.168964][T18069] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1158.271333][   T27] audit: type=1326 audit(1743153041.798:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.9.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b6d8d169 code=0x7ffc0000
[ 1158.443573][T18084] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1158.452287][   T27] audit: type=1326 audit(1743153041.828:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.9.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b6d8d169 code=0x7ffc0000
[ 1159.508963][   T27] audit: type=1326 audit(1743153041.978:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.9.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f08b6d8d169 code=0x7ffc0000
[ 1159.552575][   T27] audit: type=1326 audit(1743153041.978:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.9.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b6d8d169 code=0x7ffc0000
[ 1159.600262][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1159.697899][T15163] usb 9-1: USB disconnect, device number 5
[ 1159.716241][   T27] audit: type=1326 audit(1743153041.978:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.9.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b6d8d169 code=0x7ffc0000
[ 1159.740735][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1159.812765][T18084] loop6: detected capacity change from 1024 to 64
[ 1159.858165][   T27] audit: type=1326 audit(1743153041.988:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.9.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f08b6d8d169 code=0x7ffc0000
[ 1159.932932][T18104] syz.6.3847: attempt to access beyond end of device
[ 1159.932932][T18104] loop6: rw=2049, sector=392, nr_sectors = 24 limit=64
[ 1159.975068][   T27] audit: type=1326 audit(1743153041.988:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.9.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b6d8d169 code=0x7ffc0000
[ 1160.021781][T18104] EXT4-fs warning (device loop6): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 196)
[ 1160.051741][   T27] audit: type=1326 audit(1743153041.988:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.9.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b6d8d169 code=0x7ffc0000
[ 1160.395531][T18104] Buffer I/O error on device loop6, logical block 196
[ 1160.402978][T18104] Buffer I/O error on device loop6, logical block 197
[ 1160.409771][T18104] Buffer I/O error on device loop6, logical block 198
[ 1160.416580][T18104] Buffer I/O error on device loop6, logical block 199
[ 1160.435064][T18104] Buffer I/O error on device loop6, logical block 200
[ 1160.441872][T18104] Buffer I/O error on device loop6, logical block 201
[ 1160.448619][T18104] Buffer I/O error on device loop6, logical block 202
[ 1160.455395][T18104] Buffer I/O error on device loop6, logical block 203
[ 1160.532281][T18104] Buffer I/O error on device loop6, logical block 204
[ 1160.539119][T18104] Buffer I/O error on device loop6, logical block 205
[ 1160.556635][   T27] audit: type=1326 audit(1743153041.988:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.9.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08b6d8d169 code=0x7ffc0000
[ 1161.130161][   T27] audit: type=1326 audit(1743153041.988:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.9.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b6d8d169 code=0x7ffc0000
[ 1161.205175][T16209] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /72/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0
[ 1162.518691][T18132] loop0: detected capacity change from 0 to 16
[ 1162.681712][T18132] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1162.705195][T18132] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1162.734061][T18132] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[ 1162.745508][T18132] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[ 1162.768049][T18132] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1162.778000][T18132] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[ 1162.789353][T18132] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[ 1162.811796][T18132] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1162.821274][T18132] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[ 1162.832241][T18132] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[ 1162.845936][T18132] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1162.855410][T18132] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[ 1162.866378][T18132] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[ 1163.217995][T18134] loop9: detected capacity change from 0 to 1764
[ 1163.282267][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1163.282267][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1163.326145][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1163.386582][T18093] EXT4-fs error (device loop6): kmmpd:186: comm kmmpd-loop6: Error writing to MMP block
[ 1163.754783][T18145] loop0: detected capacity change from 0 to 256
[ 1163.899408][T18145] FAT-fs (loop0): Directory bread(block 64) failed
[ 1163.937305][T18145] FAT-fs (loop0): Directory bread(block 65) failed
[ 1163.988031][T18145] FAT-fs (loop0): Directory bread(block 66) failed
[ 1164.051272][T18145] FAT-fs (loop0): Directory bread(block 67) failed
[ 1164.104403][T18145] FAT-fs (loop0): Directory bread(block 68) failed
[ 1164.149236][T18145] FAT-fs (loop0): Directory bread(block 69) failed
[ 1164.209046][T18145] FAT-fs (loop0): Directory bread(block 70) failed
[ 1164.302626][T18145] FAT-fs (loop0): Directory bread(block 71) failed
[ 1164.302901][T18145] FAT-fs (loop0): Directory bread(block 72) failed
[ 1164.302937][T18145] FAT-fs (loop0): Directory bread(block 73) failed
[ 1165.537280][T18162] loop0: detected capacity change from 0 to 2048
[ 1165.738049][T18162] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1167.746685][T16971] EXT4-fs (loop0): unmounting filesystem.
[ 1167.784185][T18188] loop9: detected capacity change from 0 to 1024
[ 1167.891183][   T27] kauditd_printk_skb: 14 callbacks suppressed
[ 1167.891202][   T27] audit: type=1800 audit(1743153051.418:111): pid=18188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3875" name="file2" dev="loop9" ino=21 res=0 errno=0
[ 1167.937516][T18188] syz.9.3875: attempt to access beyond end of device
[ 1167.937516][T18188] loop9: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[ 1168.032410][T18188] Buffer I/O error on dev loop9, logical block 100663296, async page read
[ 1168.043530][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3876'.
[ 1168.135309][T18188] hfsplus: unable to mark blocks free: error -5
[ 1168.144379][T18188] hfsplus: can't free extent
[ 1168.182095][T18194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3876'.
[ 1168.257346][T18200] loop8: detected capacity change from 0 to 1024
[ 1168.322876][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1168.322876][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1168.582534][T18200] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1168.892120][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1169.215134][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1169.732504][T18213] loop0: detected capacity change from 0 to 8
[ 1170.131476][T18213] SQUASHFS error: Unable to read directory block [629:26]
[ 1170.354869][T18220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3882'.
[ 1170.612855][T18224] loop9: detected capacity change from 0 to 1024
[ 1171.857548][T18243] loop0: detected capacity change from 0 to 164
[ 1172.029974][T18246] loop9: detected capacity change from 0 to 512
[ 1172.104639][T18246] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[ 1172.138452][T18246] EXT4-fs (loop9): invalid journal inode
[ 1172.151502][T18246] EXT4-fs (loop9): can't get journal size
[ 1172.183929][T18246] EXT4-fs (loop9): 1 truncate cleaned up
[ 1172.189626][T18246] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1172.224584][   T27] audit: type=1326 audit(1743153055.758:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565918d169 code=0x7ffc0000
[ 1172.282038][   T27] audit: type=1326 audit(1743153055.758:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565918d169 code=0x7ffc0000
[ 1172.308604][   T27] audit: type=1326 audit(1743153055.758:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565918d169 code=0x7ffc0000
[ 1172.332424][   T27] audit: type=1326 audit(1743153055.758:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1172.357590][   T27] audit: type=1326 audit(1743153055.758:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565918d169 code=0x7ffc0000
[ 1172.549683][   T27] audit: type=1326 audit(1743153055.758:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1172.550713][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1172.662237][   T27] audit: type=1326 audit(1743153055.758:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1172.813682][   T27] audit: type=1326 audit(1743153055.758:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565918d169 code=0x7ffc0000
[ 1172.877768][   T27] audit: type=1326 audit(1743153055.758:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1172.976999][   T27] audit: type=1326 audit(1743153055.758:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1173.049431][   T27] audit: type=1326 audit(1743153055.758:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1173.082233][   T27] audit: type=1326 audit(1743153055.758:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1173.192322][   T27] audit: type=1326 audit(1743153055.758:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1173.232064][   T27] audit: type=1326 audit(1743153055.758:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1173.372277][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1173.372277][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1173.382631][   T27] audit: type=1326 audit(1743153055.758:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1173.432226][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1173.552401][   T27] audit: type=1326 audit(1743153055.758:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1173.640647][   T27] audit: type=1326 audit(1743153055.758:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1173.640694][   T27] audit: type=1326 audit(1743153055.758:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1173.640732][   T27] audit: type=1326 audit(1743153055.758:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.0.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659129359 code=0x7ffc0000
[ 1175.811051][T18310] loop8: detected capacity change from 0 to 8
[ 1176.201970][T18310] SQUASHFS error: Unable to read directory block [629:26]
[ 1176.599648][T18312] loop5: detected capacity change from 0 to 1024
[ 1177.018198][T18322] loop8: detected capacity change from 0 to 128
[ 1177.053200][T18322] FAT-fs (loop8): Unrecognized mount option "utfcharseB5�פl`�"(" or missing value
[ 1177.273764][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.432569][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.209895][T18322] loop8: detected capacity change from 0 to 512
[ 1178.320574][T18322] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[ 1178.402217][T18322] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 1178.430274][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1178.430274][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1178.697418][T18322] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 1178.719264][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1178.805522][T18322] EXT4-fs (loop8): revision level too high, forcing read-only mode
[ 1178.895011][T18322] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000]
[ 1178.939290][T18322] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1178.948997][T18322] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3907: bg 0: block 34: padding at end of block bitmap is not set
[ 1178.994268][T18322] __quota_error: 618 callbacks suppressed
[ 1178.994288][T18322] Quota error (device loop8): write_blk: dquota write failed
[ 1179.041195][T18322] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[ 1179.051637][T18322] EXT4-fs error (device loop8): ext4_acquire_dquot:6795: comm syz.8.3907: Failed to acquire dquot type 1
[ 1179.094518][T18322] EXT4-fs (loop8): 1 truncate cleaned up
[ 1179.209370][T18322] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1179.471422][T18346] loop5: detected capacity change from 0 to 2048
[ 1180.196091][T18346] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[ 1180.203927][T18346] UDF-fs: Scanning with blocksize 512 failed
[ 1180.212672][ T4261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1180.219826][T18346] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1180.237259][   T27] audit: type=1800 audit(1743153063.768:749): pid=18341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3910" name="file2" dev="loop5" ino=839 res=0 errno=0
[ 1180.261775][ T9031] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1180.273283][ T9031] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1180.281791][ T9031] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1180.289955][ T9031] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1180.299095][ T9031] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1180.312938][T16260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1180.320170][T16260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1180.327799][T16260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1180.335728][T16260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1180.353538][T16260] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1180.360852][T16260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1180.429870][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1180.889387][T18352] loop9: detected capacity change from 0 to 2048
[ 1182.235892][T18352] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[ 1182.246269][T18352] UDF-fs: Scanning with blocksize 512 failed
[ 1182.492931][T18352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1182.542055][   T27] audit: type=1800 audit(1743153066.068:750): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3911" name="file2" dev="loop9" ino=839 res=0 errno=0
[ 1182.550586][ T9031] Bluetooth: hci5: command 0x0409 tx timeout
[ 1182.730127][T18359] loop5: detected capacity change from 0 to 16
[ 1182.752621][T18359] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1182.790269][T18359] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1182.821011][T18359] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[ 1182.832027][T18359] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[ 1182.858123][T18359] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1182.867666][T18359] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[ 1182.878618][T18359] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[ 1182.904739][T18359] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1182.914181][T18359] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[ 1182.925183][T18359] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[ 1182.947742][T18359] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1182.957243][T18359] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[ 1182.968228][T18359] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[ 1183.381346][T18358] loop0: detected capacity change from 0 to 1764
[ 1183.442481][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1183.442481][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1183.569265][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1183.670970][T18362] loop8: detected capacity change from 0 to 2048
[ 1183.783704][T18362]  loop8: p1 < > p3
[ 1183.788846][T18362] loop8: p3 size 134217728 extends beyond EOD, truncated
[ 1184.437569][T18342] chnl_net:caif_netlink_parms(): no params data found
[ 1184.672479][T16260] Bluetooth: hci5: command 0x041b tx timeout
[ 1184.905941][T18388] loop0: detected capacity change from 0 to 8
[ 1186.571008][T18385] SQUASHFS error: Unable to read directory block [629:26]
[ 1186.579575][T18385] SQUASHFS error: Unable to read directory block [629:26]
[ 1186.659896][T18393] loop9: detected capacity change from 0 to 2048
[ 1186.735540][T18393] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1186.965809][T16260] Bluetooth: hci5: command 0x040f tx timeout
[ 1187.340920][T18391] loop5: detected capacity change from 0 to 512
[ 1187.440949][T18391] EXT4-fs: quotafile must be on filesystem root
[ 1187.553460][T18342] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1187.635824][T18342] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1187.644199][T18342] device bridge_slave_0 entered promiscuous mode
[ 1187.657205][T18342] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1187.720135][T18342] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1187.761226][T18342] device bridge_slave_1 entered promiscuous mode
[ 1187.778641][T18401] loop0: detected capacity change from 0 to 1024
[ 1187.860943][   T27] audit: type=1800 audit(1743153071.388:751): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3921" name="file2" dev="loop0" ino=21 res=0 errno=0
[ 1187.898231][T18342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1187.933814][T18342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1187.955163][   T27] audit: type=1800 audit(1743153071.418:752): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3921" name="file2" dev="loop0" ino=21 res=0 errno=0
[ 1188.066968][T18342] team0: Port device team_slave_0 added
[ 1188.094656][T18342] team0: Port device team_slave_1 added
[ 1188.241476][T18342] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1188.272219][T18342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1188.307509][T18407] loop8: detected capacity change from 0 to 2048
[ 1188.555482][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1188.555482][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1188.572688][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1188.884400][T18418] loop9: detected capacity change from 0 to 8
[ 1189.197844][T18342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1189.211360][T18342] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1189.218391][T18342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1189.296386][T16260] Bluetooth: hci5: command 0x0419 tx timeout
[ 1190.078690][T18407]  loop8: p3 p4 < >
[ 1190.091905][T18414] SQUASHFS error: Unable to read directory block [629:26]
[ 1190.150486][T18342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1190.463137][T18428] loop0: detected capacity change from 0 to 2048
[ 1190.488436][T18428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1191.159872][T18342] device hsr_slave_0 entered promiscuous mode
[ 1191.366962][T18342] device hsr_slave_1 entered promiscuous mode
[ 1191.398348][T18342] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1191.472417][T18342] Cannot create hsr debugfs directory
[ 1191.533208][T18442] loop5: detected capacity change from 0 to 16
[ 1191.610798][T18442] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1191.646805][T18442] syz.5.3929: attempt to access beyond end of device
[ 1191.646805][T18442] loop5: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1191.846081][T18442] syz.5.3929: attempt to access beyond end of device
[ 1191.846081][T18442] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16
[ 1191.880083][T18442] syz.5.3929: attempt to access beyond end of device
[ 1191.880083][T18442] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16
[ 1192.294069][T18450] loop8: detected capacity change from 0 to 2048
[ 1192.355921][T18450] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1192.363919][T18450] UDF-fs: Scanning with blocksize 512 failed
[ 1193.116570][T18450] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1193.163984][   T27] audit: type=1800 audit(1743153076.698:753): pid=18448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3930" name="file2" dev="loop8" ino=839 res=0 errno=0
[ 1193.230367][T18454] loop5: detected capacity change from 0 to 128
[ 1193.334523][T18455] loop9: detected capacity change from 0 to 512
[ 1193.363547][T18454] FAT-fs (loop5): Unrecognized mount option "utfcharseB5�פl`�"(" or missing value
[ 1193.423483][T18455] EXT4-fs: quotafile must be on filesystem root
[ 1193.576458][T16762] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1193.602326][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1193.602326][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1193.659877][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1193.702709][T18454] loop5: detected capacity change from 0 to 512
[ 1193.729763][T18454] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[ 1193.772929][T18454] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 1193.832917][T18454] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 1193.906074][T18454] EXT4-fs (loop5): revision level too high, forcing read-only mode
[ 1193.932747][T18454] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000]
[ 1193.976626][T18454] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1194.048029][T18454] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3933: bg 0: block 34: padding at end of block bitmap is not set
[ 1194.147303][T18454] Quota error (device loop5): write_blk: dquota write failed
[ 1194.172607][T18454] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[ 1194.205677][T18454] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.3933: Failed to acquire dquot type 1
[ 1194.243889][T18454] EXT4-fs (loop5): 1 truncate cleaned up
[ 1194.462710][T18454] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1195.278257][T18471] loop0: detected capacity change from 0 to 1024
[ 1195.468134][T18471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1195.977341][T16971] EXT4-fs (loop0): unmounting filesystem.
[ 1198.663410][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1198.663410][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1198.830545][T18496] loop8: detected capacity change from 0 to 2048
[ 1198.853492][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1198.938254][T18496] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1198.946082][T18496] UDF-fs: Scanning with blocksize 512 failed
[ 1198.980570][T18496] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1199.026336][   T27] audit: type=1800 audit(1743153082.548:754): pid=18496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3938" name="file2" dev="loop8" ino=839 res=0 errno=0
[ 1199.433320][T15935] EXT4-fs (loop5): unmounting filesystem.
[ 1199.737119][T18504] loop8: detected capacity change from 0 to 1024
[ 1199.862889][T18507] loop0: detected capacity change from 0 to 8
[ 1199.888130][T18507] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1199.896416][T18507] SQUASHFS error: Failed to read block 0x9b: -5
[ 1199.902778][T18507] SQUASHFS error: Unable to read metadata cache entry [99]
[ 1199.910034][T18507] SQUASHFS error: Unable to read inode 0x127
[ 1200.072568][T15171] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1200.280101][T15171] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1200.328029][T15171] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1200.417341][T15171] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1200.503004][T18504] hfsplus: request for non-existent node 3 in B*Tree
[ 1200.512436][T15171] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1200.521633][T15171] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1200.530419][T18504] hfsplus: request for non-existent node 3 in B*Tree
[ 1200.595003][T15171] usb 6-1: config 0 descriptor??
[ 1201.357915][T15171] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[ 1201.417515][T15171] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving
[ 1201.746224][T15171] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1202.019475][T18521] loop8: detected capacity change from 0 to 2048
[ 1202.159725][T18521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1202.945917][T15171] usb 6-1: USB disconnect, device number 4
[ 1203.707907][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1203.707907][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1203.760552][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1204.094730][T18342] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1204.145033][T18342] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1204.207471][T18342] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1204.259106][T18342] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1204.313062][T18544] loop5: detected capacity change from 0 to 128
[ 1204.411344][   T27] audit: type=1800 audit(1743153087.938:755): pid=18543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3952" name="file1" dev="loop5" ino=1048694 res=0 errno=0
[ 1204.497634][T18548] loop9: detected capacity change from 0 to 8
[ 1205.039716][T18543] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8)
[ 1205.131121][T18543] FAT-fs (loop5): Filesystem has been set read-only
[ 1205.155207][T18553] loop8: detected capacity change from 0 to 16
[ 1205.192844][T18543] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522)
[ 1205.211586][T18553] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1205.406508][T18342] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1205.420680][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1205.468997][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1205.793183][T18561] syz.8.3953: attempt to access beyond end of device
[ 1205.793183][T18561] loop8: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1205.887319][T18342] 8021q: adding VLAN 0 to HW filter on device team0
[ 1205.985615][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1206.071085][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1206.105411][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1206.112618][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1206.161836][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1206.336299][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1206.345907][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1206.372593][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1206.379754][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1206.568378][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1206.577514][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1206.596686][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1206.619034][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1206.651076][T18570] loop0: detected capacity change from 0 to 256
[ 1206.678912][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1206.703196][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1206.742770][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1206.750879][T18570] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[ 1206.771485][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1206.797174][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1206.862471][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1206.911742][ T4535] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1207.402769][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1207.436619][T18342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1207.564847][ T4535] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1207.596251][ T4535] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1207.679061][ T4535] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1207.716957][ T4535] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1207.762318][ T4535] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1207.807550][ T4535] usb 10-1: config 0 descriptor??
[ 1207.897857][T18588] loop8: detected capacity change from 0 to 1024
[ 1208.251505][ T4535] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0
[ 1208.270140][ T4535] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving
[ 1208.324213][T17160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1208.331704][T17160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1208.353979][ T4535] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1208.383144][T18342] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1208.486771][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1208.535520][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1208.713483][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1208.724828][T18611] loop0: detected capacity change from 0 to 1024
[ 1208.733114][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1208.733114][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1208.777009][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1208.817244][ T4535] usb 10-1: USB disconnect, device number 4
[ 1208.836273][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1208.865697][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1208.899592][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1208.924194][T18342] device veth0_vlan entered promiscuous mode
[ 1209.293361][T18342] device veth1_vlan entered promiscuous mode
[ 1209.544639][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1209.593047][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1209.769329][T18342] device veth0_macvtap entered promiscuous mode
[ 1209.812053][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1210.020960][T18342] device veth1_macvtap entered promiscuous mode
[ 1210.112891][T18621] loop8: detected capacity change from 0 to 2048
[ 1210.123252][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1210.158093][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1210.172200][T18621] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1210.205640][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1210.223656][T18621] UDF-fs: Scanning with blocksize 512 failed
[ 1210.240464][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1210.275479][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1210.288625][T18621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1210.324700][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1210.355885][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1210.389521][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1210.436966][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1210.721546][   T27] audit: type=1800 audit(1743153094.248:756): pid=18621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3972" name="bus" dev="loop8" ino=851 res=0 errno=0
[ 1210.785199][T18627] loop0: detected capacity change from 0 to 512
[ 1210.792295][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1210.847005][T18627] EXT4-fs: Ignoring removed bh option
[ 1210.903708][T18342] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1210.918502][T18627] EXT4-fs: Mount option(s) incompatible with ext3
[ 1210.925499][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1210.952743][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1210.978563][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1211.012273][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1211.032261][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1211.062183][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1211.076388][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1211.111763][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1211.141936][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1211.163994][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1211.185060][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1211.206942][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1211.233319][ T5322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1211.244040][T18342] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1211.265345][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3975'.
[ 1211.312771][T18631] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1211.336378][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1211.360351][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1211.401488][T18342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1211.411145][T15165] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1211.422863][T18639] loop8: detected capacity change from 0 to 1024
[ 1211.443202][T18342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1211.473185][T18639] EXT4-fs: quotafile must be on filesystem root
[ 1211.517803][T18342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1211.549806][T18342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1211.560824][T18642] loop9: detected capacity change from 0 to 128
[ 1211.614408][T15165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1211.657441][T15165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1211.700437][T15165] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1211.760481][T15165] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1211.821408][T15165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1211.894989][T15165] usb 6-1: config 0 descriptor??
[ 1211.923839][ T5322] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1212.312807][T17937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1212.321102][T17937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1212.372838][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1212.381175][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1212.382546][T17937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1212.411537][T15165] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[ 1212.420274][T15165] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving
[ 1212.447396][T15165] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1212.520193][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1212.729120][T18661] loop8: detected capacity change from 0 to 512
[ 1212.800055][ T5322] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1212.828348][T18661] loop8: detected capacity change from 0 to 8
[ 1212.838137][ T5322] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1212.864497][T18661] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1212.877681][ T5322] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1212.913508][T18661] SQUASHFS error: Failed to read block 0x9b: -5
[ 1212.954714][T18661] SQUASHFS error: Unable to read metadata cache entry [99]
[ 1213.032435][T18661] SQUASHFS error: Unable to read inode 0x127
[ 1213.297570][T18669] loop3: detected capacity change from 0 to 2048
[ 1213.402424][T18669] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1213.428735][T18669] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1213.508166][T18669] fs-verity: sha512 using implementation "sha512-avx2"
[ 1213.762503][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1213.762503][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1213.873127][ T4996] usb 6-1: reset high-speed USB device number 5 using dummy_hcd
[ 1213.890471][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1213.940538][T18342] EXT4-fs (loop3): unmounting filesystem.
[ 1214.627664][T18687] loop0: detected capacity change from 0 to 2048
[ 1214.652370][ T4535] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1214.731916][T18687] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[ 1214.759705][T18687] UDF-fs: Scanning with blocksize 512 failed
[ 1214.825797][T18687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1214.842463][ T4535] usb 4-1: Using ep0 maxpacket: 16
[ 1214.850414][ T4535] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1214.912894][   T27] audit: type=1800 audit(1743153098.448:757): pid=18687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3988" name="bus" dev="loop0" ino=851 res=0 errno=0
[ 1214.918233][ T4535] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1214.939461][T18697] loop8: detected capacity change from 0 to 1024
[ 1214.969140][T18700] loop5: detected capacity change from 0 to 164
[ 1215.013407][ T4535] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1215.027540][T18700] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[ 1215.091090][ T4535] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1215.101280][T18700] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[ 1215.115188][T18700] rock: directory entry would overflow storage
[ 1215.121911][T18700] rock: sig=0x4f50, size=4, remaining=3
[ 1215.124550][   T22] usb 6-1: USB disconnect, device number 5
[ 1215.127721][T18700] iso9660: Corrupted directory entry in block 4 of inode 1792
[ 1215.155225][T18697] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1215.254997][ T4535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1215.313838][ T4535] usb 4-1: config 0 descriptor??
[ 1215.477065][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1215.498532][T18708] loop0: detected capacity change from 0 to 1024
[ 1215.800272][ T4535] microsoft 0003:045E:07DA.001E: unknown main item tag 0x4
[ 1215.847911][ T4535] microsoft 0003:045E:07DA.001E: unbalanced collection at end of report description
[ 1215.872249][   T22] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1215.927492][ T4535] microsoft 0003:045E:07DA.001E: parse failed
[ 1215.950156][ T4535] microsoft: probe of 0003:045E:07DA.001E failed with error -22
[ 1216.113060][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1216.120662][T18683] loop3: detected capacity change from 0 to 1024
[ 1216.124366][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1216.147397][   T22] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1216.169226][   T22] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1216.186756][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1216.240989][   T22] usb 6-1: config 0 descriptor??
[ 1216.473070][T18683] ext4: Bad value for 'journal_ioprio'
[ 1216.570005][T18683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1216.631970][T18683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1216.673949][T10444] usb 4-1: USB disconnect, device number 27
[ 1216.702004][   T22] plantronics 0003:047F:FFFF.001F: item fetching failed at offset 12/15
[ 1216.735133][   T22] plantronics 0003:047F:FFFF.001F: parse failed
[ 1216.741457][   T22] plantronics: probe of 0003:047F:FFFF.001F failed with error -22
[ 1216.768157][T18719] loop9: detected capacity change from 0 to 1024
[ 1216.907015][   T22] usb 6-1: USB disconnect, device number 6
[ 1217.019214][   T11] hfsplus: b-tree write err: -5, ino 8
[ 1217.206012][T18728] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3999'.
[ 1217.278096][T18729] loop9: detected capacity change from 0 to 2048
[ 1217.406286][T18729] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1217.539042][   T27] audit: type=1800 audit(1743153101.068:758): pid=18729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3998" name="file2" dev="loop9" ino=16 res=0 errno=0
[ 1217.564478][T18729] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1217.703971][   T27] audit: type=1800 audit(1743153101.238:759): pid=18740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3998" name="file2" dev="loop9" ino=16 res=0 errno=0
[ 1217.739221][T18740] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 1 with error 28
[ 1217.843411][T18740] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1217.843411][T18740] 
[ 1217.881501][T18747] ecryptfs_parse_options: eCryptfs: unrecognized option [/dev/loop]
[ 1217.923639][T18747] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[ 1217.942849][T18740] EXT4-fs (loop9): Total free blocks count 0
[ 1217.948876][T18740] EXT4-fs (loop9): Free/Dirty block details
[ 1218.069798][T18754] loop5: detected capacity change from 0 to 8
[ 1218.087505][T18747] Error parsing options; rc = [-22]
[ 1218.138294][T18754] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1218.146507][T18754] SQUASHFS error: Failed to read block 0x1b2: -5
[ 1218.152999][T18754] SQUASHFS error: Unable to read metadata cache entry [1b0]
[ 1218.160359][T18754] SQUASHFS error: Unable to read inode 0x11f
[ 1218.525248][T18740] EXT4-fs (loop9): free_blocks=2415919120
[ 1218.581018][T18740] EXT4-fs (loop9): dirty_blocks=16
[ 1218.649919][T18740] EXT4-fs (loop9): Block reservation details
[ 1218.674563][T18740] EXT4-fs (loop9): i_reserved_data_blocks=1
[ 1218.802417][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1218.802417][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1218.886931][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1219.217472][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1219.450109][T18766] loop8: detected capacity change from 0 to 2048
[ 1219.494914][T18766] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1219.502754][T18766] UDF-fs: Scanning with blocksize 512 failed
[ 1219.533143][T18766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1219.572521][   T27] audit: type=1800 audit(1743153103.098:760): pid=18766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4007" name="file2" dev="loop8" ino=839 res=0 errno=0
[ 1219.874363][ T5322] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1219.887236][T18763] loop0: detected capacity change from 0 to 1024
[ 1220.174432][T18763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1220.557348][T18774] binder: 18773:18774 ioctl c0306201 0 returned -14
[ 1220.603818][T16971] EXT4-fs (loop0): unmounting filesystem.
[ 1220.927923][   T27] audit: type=1326 audit(1743153104.458:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18782 comm="syz.3.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7518d169 code=0x7ffc0000
[ 1221.029263][   T27] audit: type=1326 audit(1743153104.468:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18782 comm="syz.3.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7518d169 code=0x7ffc0000
[ 1221.079884][T18787] loop8: detected capacity change from 0 to 1024
[ 1221.446802][T18792] loop0: detected capacity change from 0 to 512
[ 1221.717909][T18792] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4016: bg 0: block 393: padding at end of block bitmap is not set
[ 1221.747015][T18792] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem
[ 1221.765253][T18792] EXT4-fs (loop0): 2 truncates cleaned up
[ 1221.771800][T18792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1221.942687][   T27] audit: type=1326 audit(1743153104.488:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18782 comm="syz.3.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f2e7518d169 code=0x7ffc0000
[ 1222.194663][T16971] EXT4-fs (loop0): unmounting filesystem.
[ 1222.206170][   T27] audit: type=1326 audit(1743153104.488:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18782 comm="syz.3.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7518d169 code=0x7ffc0000
[ 1222.206213][   T27] audit: type=1326 audit(1743153104.498:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18782 comm="syz.3.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7518d169 code=0x7ffc0000
[ 1222.236088][T18796] loop3: detected capacity change from 0 to 256
[ 1222.332329][T18796] FAT-fs (loop3): Directory bread(block 64) failed
[ 1222.332386][T18796] FAT-fs (loop3): Directory bread(block 65) failed
[ 1222.332461][T18796] FAT-fs (loop3): Directory bread(block 66) failed
[ 1222.332492][T18796] FAT-fs (loop3): Directory bread(block 67) failed
[ 1222.332569][T18796] FAT-fs (loop3): Directory bread(block 68) failed
[ 1222.332601][T18796] FAT-fs (loop3): Directory bread(block 69) failed
[ 1222.332677][T18796] FAT-fs (loop3): Directory bread(block 70) failed
[ 1222.332709][T18796] FAT-fs (loop3): Directory bread(block 71) failed
[ 1222.332786][T18796] FAT-fs (loop3): Directory bread(block 72) failed
[ 1222.332818][T18796] FAT-fs (loop3): Directory bread(block 73) failed
[ 1222.884119][T18803] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1222.884422][T18803] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1223.842777][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1223.842777][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1223.842855][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1224.094020][T18815] loop0: detected capacity change from 0 to 2048
[ 1224.134103][T18815] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[ 1224.134173][T18815] UDF-fs: Scanning with blocksize 512 failed
[ 1224.155113][T18815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1224.216896][   T27] audit: type=1800 audit(1743153107.738:766): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4021" name="file2" dev="loop0" ino=839 res=0 errno=0
[ 1224.858782][T18820] loop5: detected capacity change from 0 to 164
[ 1225.070345][T18820] Unable to read rock-ridge attributes
[ 1225.339253][T18825] loop3: detected capacity change from 0 to 2048
[ 1225.405295][T18825] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[ 1225.413125][T18825] UDF-fs: Scanning with blocksize 512 failed
[ 1225.437151][T18825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1225.492577][   T27] audit: type=1800 audit(1743153109.008:767): pid=18825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4022" name="file2" dev="loop3" ino=839 res=0 errno=0
[ 1225.678631][T18820] Unable to read rock-ridge attributes
[ 1227.771524][T18849] loop9: detected capacity change from 0 to 1024
[ 1227.813281][T18849] hfsplus: unable to parse mount options
[ 1229.379947][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1229.379947][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1229.428052][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1229.559045][T18865] loop8: detected capacity change from 0 to 164
[ 1229.652976][T18865] Unable to read rock-ridge attributes
[ 1229.703111][T18865] Unable to read rock-ridge attributes
[ 1230.768630][T18882] loop0: detected capacity change from 0 to 2048
[ 1230.871632][T18882] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[ 1230.879862][T18882] UDF-fs: Scanning with blocksize 512 failed
[ 1230.936207][T18882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1231.092297][   T27] audit: type=1800 audit(1743153114.598:768): pid=18882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4036" name="file2" dev="loop0" ino=839 res=0 errno=0
[ 1232.375626][T18887] loop8: detected capacity change from 0 to 1024
[ 1233.231285][T18874] loop5: detected capacity change from 0 to 256
[ 1233.373897][T18874] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[ 1233.386249][T18874] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[ 1233.498545][T18887] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1233.775862][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1233.956149][T18897] loop0: detected capacity change from 0 to 1024
[ 1234.340121][T18902] loop9: detected capacity change from 0 to 512
[ 1234.403427][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1234.403427][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1234.561863][T18902] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.4041: bg 0: block 393: padding at end of block bitmap is not set
[ 1234.600232][T18902] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6170: Corrupt filesystem
[ 1234.623696][T18902] EXT4-fs (loop9): 2 truncates cleaned up
[ 1234.629663][T18902] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1235.006012][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1235.030067][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1235.226718][T18911] loop5: detected capacity change from 0 to 512
[ 1235.295311][T18911] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1235.345514][T18911] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1235.369111][T18911] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6).
[ 1235.401619][T18911] EXT4-fs warning (device loop5): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1235.418360][T18911] EXT4-fs (loop5): Cannot turn on quotas: error -117
[ 1235.442220][T18911] EXT4-fs (loop5): 1 truncate cleaned up
[ 1235.448239][T18911] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1235.463769][T18911] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters
[ 1235.473127][T18916] xt_cgroup: invalid path, errno=-2
[ 1235.485537][T18911] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[ 1235.525851][T18911] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6).
[ 1235.704819][T18911] EXT4-fs warning (device loop5): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1236.851019][T18939] loop9: detected capacity change from 0 to 16
[ 1236.956973][T18930] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #15: comm syz.5.4038: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[ 1237.000232][T18939] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1237.977137][T15935] EXT4-fs (loop5): unmounting filesystem.
[ 1238.285252][T18948] loop3: detected capacity change from 0 to 2048
[ 1238.307410][T18949] loop8: detected capacity change from 0 to 1024
[ 1239.223602][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.229946][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.432542][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1240.432542][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1240.508944][T18948] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[ 1240.516855][T18948] UDF-fs: Scanning with blocksize 512 failed
[ 1240.548500][T18948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1240.571352][   T27] audit: type=1800 audit(1743153124.098:769): pid=18945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4050" name="file2" dev="loop3" ino=839 res=0 errno=0
[ 1240.646214][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1240.666296][T18949] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1240.980270][T18963] loop9: detected capacity change from 0 to 164
[ 1241.014258][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1241.154860][T18967] loop5: detected capacity change from 0 to 512
[ 1241.833534][T18966] ecryptfs_parse_options: eCryptfs: unrecognized option [/dev/loop]
[ 1241.843722][T18963] Unable to read rock-ridge attributes
[ 1241.852412][T18966] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[ 1241.872711][T18966] Error parsing options; rc = [-22]
[ 1241.883440][T18963] Unable to read rock-ridge attributes
[ 1241.907260][T18967] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4053: bg 0: block 393: padding at end of block bitmap is not set
[ 1241.924938][T18967] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem
[ 1241.937838][T18967] EXT4-fs (loop5): 2 truncates cleaned up
[ 1241.944237][T18967] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1242.298212][T15935] EXT4-fs (loop5): unmounting filesystem.
[ 1244.043379][T19004] KVM: debugfs: duplicate directory 19004-4
[ 1245.420956][T19027] loop9: detected capacity change from 0 to 1024
[ 1245.470099][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1245.470099][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1245.678410][T19027] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1246.105827][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1246.647128][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1251.107565][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1251.107565][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1251.262371][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1251.726059][T19090] loop9: detected capacity change from 0 to 1024
[ 1252.333629][T19090] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1252.663044][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1254.403031][T19125] loop8: detected capacity change from 0 to 256
[ 1254.412898][T19125] exfat: Deprecated parameter 'utf8'
[ 1254.418252][T19125] exfat: Unknown parameter 'e]'
[ 1255.532395][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1255.532395][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1255.805316][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1257.964171][T19149] binder: 19147:19149 ioctl c0306201 0 returned -14
[ 1258.041740][T19153] loop8: detected capacity change from 0 to 512
[ 1258.228810][T19153] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1258.283613][T19153] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1258.315644][T19153] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6).
[ 1258.372615][T19153] EXT4-fs warning (device loop8): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1258.422408][T19153] EXT4-fs (loop8): Cannot turn on quotas: error -117
[ 1258.845398][T19153] EXT4-fs (loop8): 1 truncate cleaned up
[ 1258.941898][T19165] loop9: detected capacity change from 0 to 256
[ 1258.962411][T19153] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1259.017687][T19167] loop0: detected capacity change from 0 to 128
[ 1259.103582][T19153] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters
[ 1259.169980][   T27] audit: type=1800 audit(1743153142.698:770): pid=19167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4096" name="file1" dev="loop0" ino=1048698 res=0 errno=0
[ 1259.224539][T19153] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[ 1259.278446][T19167] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8)
[ 1259.370088][T19167] FAT-fs (loop0): Filesystem has been set read-only
[ 1259.383905][T19173] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #15: comm syz.8.4091: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[ 1259.472598][T19153] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6).
[ 1259.482806][T19167] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522)
[ 1259.554546][T19153] EXT4-fs warning (device loop8): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1259.612625][T19177] hub 9-0:1.0: USB hub found
[ 1259.618799][T19177] hub 9-0:1.0: 1 port detected
[ 1260.520485][T19182] loop9: detected capacity change from 0 to 256
[ 1260.562650][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1260.562650][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1260.600730][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1260.616483][T19182] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1260.630325][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1262.679079][T19204] binder: 19203:19204 ioctl c0306201 0 returned -14
[ 1262.905236][T19207] fuse: Unknown parameter '0xffffffffffffffff'
[ 1265.300832][T19229] loop0: detected capacity change from 0 to 512
[ 1265.372881][T19229] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1265.516347][T19229] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1265.654484][T19240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4114'.
[ 1266.732235][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1266.732235][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1266.746054][T19229] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[ 1267.242379][T19229] EXT4-fs warning (device loop0): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1267.667781][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1267.678037][T19229] EXT4-fs (loop0): Cannot turn on quotas: error -117
[ 1267.786812][T19229] EXT4-fs (loop0): 1 truncate cleaned up
[ 1267.822293][T19229] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1268.083443][T19250] loop8: detected capacity change from 0 to 128
[ 1268.113097][T19229] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters
[ 1268.144106][T19250] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1268.193674][T19250] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1268.204949][T19229] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[ 1268.214658][T19250] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1268.242892][T19229] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[ 1268.263654][T19229] EXT4-fs warning (device loop0): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1268.417734][T19256] loop3: detected capacity change from 0 to 1024
[ 1268.446927][T19229] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz.0.4112: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[ 1269.300131][T19263] fscrypt (loop8): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[ 1269.746610][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1269.768019][T16971] EXT4-fs (loop0): unmounting filesystem.
[ 1270.097195][T19280] loop9: detected capacity change from 0 to 256
[ 1270.128933][T19284] loop8: detected capacity change from 0 to 256
[ 1270.168212][T19285] binder: 19281:19285 ioctl c0306201 0 returned -14
[ 1270.185959][T19280] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[ 1270.985655][T19293] loop5: detected capacity change from 0 to 1024
[ 1271.048917][T19293] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1271.104792][T19297] loop0: detected capacity change from 0 to 512
[ 1271.118586][T19293] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1271.163362][T19304] loop3: detected capacity change from 0 to 256
[ 1271.313890][T19304] FAT-fs (loop3): Directory bread(block 64) failed
[ 1271.332293][T19304] FAT-fs (loop3): Directory bread(block 65) failed
[ 1271.345509][T19297] EXT4-fs (loop0): 1 orphan inode deleted
[ 1271.363118][T19304] FAT-fs (loop3): Directory bread(block 66) failed
[ 1271.363134][T19297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1271.369658][T19304] FAT-fs (loop3): Directory bread(block 67) failed
[ 1271.385645][   T51] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1271.400144][T19304] FAT-fs (loop3): Directory bread(block 68) failed
[ 1271.466448][   T51] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:3: Failed to release dquot type 1
[ 1271.478644][T19304] FAT-fs (loop3): Directory bread(block 69) failed
[ 1271.523040][T19297] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1271.524388][T19304] FAT-fs (loop3): Directory bread(block 70) failed
[ 1271.592253][T19304] FAT-fs (loop3): Directory bread(block 71) failed
[ 1271.645305][T19304] FAT-fs (loop3): Directory bread(block 72) failed
[ 1271.724429][T19304] FAT-fs (loop3): Directory bread(block 73) failed
[ 1271.762302][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1271.762302][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1271.816077][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1271.871068][T19297] EXT4-fs error (device loop0): ext4_lookup:1858: inode #14: comm syz.0.4125: iget: bogus i_mode (0)
[ 1271.925121][T19293] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 1272.771876][T16971] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /106/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[ 1272.831674][T16971] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[ 1272.949403][T16971] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[ 1273.012093][T16971] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /106/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[ 1273.086767][T16971] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[ 1273.167460][T16971] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[ 1273.228295][T16971] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /106/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[ 1273.307361][T19339] loop8: detected capacity change from 0 to 1024
[ 1273.322770][T16971] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[ 1273.401321][T16971] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[ 1273.461224][T16971] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /106/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[ 1273.590977][T16971] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[ 1273.694896][T16971] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[ 1273.749168][T16971] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[ 1273.792007][T16971] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[ 1273.842949][T16971] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[ 1273.904344][T16971] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[ 1273.950811][T16971] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[ 1273.999365][T16971] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[ 1274.149306][T19350] loop8: detected capacity change from 0 to 128
[ 1274.751938][T19357] binder: 19356:19357 ioctl c0306201 0 returned -14
[ 1275.186190][T17787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1275.405599][T17787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1275.546545][T17787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1275.795928][T15935] EXT4-fs (loop5): unmounting filesystem.
[ 1275.899974][T17787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1276.243186][T19376] loop3: detected capacity change from 0 to 256
[ 1277.197761][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1277.197761][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1278.238971][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1279.073950][T19376] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1279.757328][T19391] loop3: detected capacity change from 0 to 128
[ 1279.765026][T19382] device syzkaller0 entered promiscuous mode
[ 1280.908322][T19404] overlayfs: workdir and upperdir must be separate subtrees
[ 1281.356071][T19407] loop8: detected capacity change from 0 to 512
[ 1281.588288][ T9031] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1281.618836][ T9031] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1281.630933][ T9031] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1281.648802][ T9031] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1281.658495][ T9031] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1281.669708][ T9031] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1281.969914][T19407] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1281.980203][T19407] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1282.455964][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1282.455964][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1282.610545][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1283.550240][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1283.774488][ T9031] Bluetooth: hci0: command 0x0409 tx timeout
[ 1284.398200][T19430] loop3: detected capacity change from 0 to 1024
[ 1284.885136][T19400] chnl_net:caif_netlink_parms(): no params data found
[ 1285.646374][T19454] Illegal XDP return value 4294967294 on prog  (id 634) dev N/A, expect packet loss!
[ 1285.852775][T16260] Bluetooth: hci0: command 0x041b tx timeout
[ 1285.892415][   T27] audit: type=1326 audit(1743153169.418:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.3.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7518d169 code=0x7fc00000
[ 1286.501830][T19460] loop8: detected capacity change from 0 to 128
[ 1286.578432][T19400] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1286.715944][T19400] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1286.753468][T19400] device bridge_slave_0 entered promiscuous mode
[ 1286.966352][T19400] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1287.031242][T19400] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1287.123578][T19400] device bridge_slave_1 entered promiscuous mode
[ 1287.522261][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1287.522261][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1287.586739][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1287.703940][T19400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1287.922269][T16260] Bluetooth: hci0: command 0x040f tx timeout
[ 1288.245945][T19482] loop8: detected capacity change from 0 to 512
[ 1288.281863][T19482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1288.364934][T19482] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1288.399835][T19482] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.4162: bg 0: block 248: padding at end of block bitmap is not set
[ 1288.442890][T19482] Quota error (device loop8): write_blk: dquota write failed
[ 1288.450780][T19482] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[ 1288.460980][T19482] EXT4-fs error (device loop8): ext4_acquire_dquot:6795: comm syz.8.4162: Failed to acquire dquot type 1
[ 1288.489863][T19482] EXT4-fs (loop8): 1 truncate cleaned up
[ 1288.855955][T19482] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1289.318061][T19489] loop5: detected capacity change from 0 to 256
[ 1290.003621][T16260] Bluetooth: hci0: command 0x0419 tx timeout
[ 1290.025687][T19400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1290.175525][T19489] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[ 1290.264509][T19400] team0: Port device team_slave_0 added
[ 1290.295011][T17787] device hsr_slave_0 left promiscuous mode
[ 1290.312345][T17787] device hsr_slave_1 left promiscuous mode
[ 1290.313918][T19492] loop3: detected capacity change from 0 to 1024
[ 1290.352622][T17787] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1290.360104][T17787] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1290.402518][T17787] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1290.419436][T17787] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1290.493625][T17787] device bridge_slave_1 left promiscuous mode
[ 1290.501503][T17787] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1290.569926][T17787] device bridge_slave_0 left promiscuous mode
[ 1290.581483][T17787] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1290.691172][T19496] loop5: detected capacity change from 0 to 512
[ 1290.717664][T16412] EXT4-fs (loop8): unmounting filesystem.
[ 1290.724598][T17787] device veth1_macvtap left promiscuous mode
[ 1290.730672][T17787] device veth0_macvtap left promiscuous mode
[ 1290.782414][T19496] EXT4-fs: Ignoring removed oldalloc option
[ 1290.908198][T17787] device veth1_vlan left promiscuous mode
[ 1290.972572][T17787] device veth0_vlan left promiscuous mode
[ 1291.024174][T19496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1291.076579][T19496] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1291.129025][T19496] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5
[ 1291.262383][T19496] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[ 1291.318657][T19496] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.4166: Failed to acquire dquot type 1
[ 1291.413007][T19496] EXT4-fs (loop5): 1 truncate cleaned up
[ 1291.460699][T19496] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1291.564938][T19496] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.4166: deleted inode referenced: 12
[ 1292.579762][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1292.579762][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1292.612273][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1293.826260][T17787] team0 (unregistering): Port device team_slave_1 removed
[ 1294.047761][T19516] loop9: detected capacity change from 0 to 128
[ 1294.059872][T17787] team0 (unregistering): Port device team_slave_0 removed
[ 1294.506710][T17787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1295.090155][T17787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1296.225133][T19520] loop9: detected capacity change from 0 to 40427
[ 1296.297676][T19520] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 1296.332467][T19520] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1296.443290][T19520] F2FS-fs (loop9): invalid crc value
[ 1296.487911][T19520] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1296.782364][T19520] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1296.789822][T19520] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1297.158101][T16552] syz-executor: attempt to access beyond end of device
[ 1297.158101][T16552] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[ 1297.504123][T17787] bond0 (unregistering): Released all slaves
[ 1297.602255][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1297.602255][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1297.642801][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1297.764316][T19400] team0: Port device team_slave_1 added
[ 1297.941508][T19400] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1297.974641][T19400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1298.109838][T19400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1298.207851][T19400] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1298.292478][T19400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1298.366432][T19532] loop9: detected capacity change from 0 to 512
[ 1298.478088][T19532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1298.582537][T19532] EXT4-fs (loop9): orphan cleanup on readonly fs
[ 1298.601190][T19532] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.4175: bg 0: block 248: padding at end of block bitmap is not set
[ 1299.016728][T19400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1299.027472][T19532] Quota error (device loop9): write_blk: dquota write failed
[ 1299.035044][T19532] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[ 1299.045069][T19532] EXT4-fs error (device loop9): ext4_acquire_dquot:6795: comm syz.9.4175: Failed to acquire dquot type 1
[ 1299.058865][T19532] EXT4-fs (loop9): 1 truncate cleaned up
[ 1299.065297][T19532] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1299.293963][T19538] loop3: detected capacity change from 0 to 1024
[ 1299.387916][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1299.500676][T15935] EXT4-fs (loop5): unmounting filesystem.
[ 1299.749822][T19400] device hsr_slave_0 entered promiscuous mode
[ 1299.963104][T19550] loop5: detected capacity change from 0 to 512
[ 1300.403757][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.475688][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.032708][T19400] device hsr_slave_1 entered promiscuous mode
[ 1301.105949][T19400] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1301.152834][T19400] Cannot create hsr debugfs directory
[ 1301.640044][T19550] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1301.649120][T19550] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1302.649212][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1302.649212][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1302.665141][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1302.675451][T15935] EXT4-fs (loop5): unmounting filesystem.
[ 1303.049299][T19566] loop9: detected capacity change from 0 to 128
[ 1305.447205][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'.
[ 1305.546679][T19587] fuse: Bad value for 'fd'
[ 1305.842346][ T4996] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1306.325996][T19611] loop8: detected capacity change from 0 to 1024
[ 1306.557112][ T4996] usb 10-1: Using ep0 maxpacket: 32
[ 1306.566941][ T4996] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1306.581950][ T4996] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1306.588745][ T4996] usb 10-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[ 1306.598774][ T4996] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1306.609105][ T4996] usb 10-1: config 0 descriptor??
[ 1307.144433][ T4996] uclogic 0003:5543:0522.0020: item fetching failed at offset 5/7
[ 1307.392088][ T4996] uclogic 0003:5543:0522.0020: parse failed
[ 1307.392538][ T9031] Bluetooth: hci5: command 0x0406 tx timeout
[ 1307.420466][ T4996] uclogic: probe of 0003:5543:0522.0020 failed with error -22
[ 1307.685628][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1307.685628][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1307.712306][T19400] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1307.719539][ T4996] usb 10-1: USB disconnect, device number 5
[ 1307.745205][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1307.795898][T19400] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1307.825565][T19400] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1307.883757][T19400] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1307.923786][ T4535] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1308.387119][ T4535] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[ 1308.406666][ T4535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1308.440298][ T4535] usb 6-1: Product: syz
[ 1308.452181][ T4535] usb 6-1: Manufacturer: syz
[ 1308.456900][ T4535] usb 6-1: SerialNumber: syz
[ 1308.483479][ T4535] usb 6-1: config 0 descriptor??
[ 1308.522386][  T126] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1308.573416][T19400] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1308.616726][T19400] 8021q: adding VLAN 0 to HW filter on device team0
[ 1308.705231][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1308.728438][  T126] usb 9-1: config 0 has an invalid interface number: 239 but max is 0
[ 1308.747946][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1308.757298][  T126] usb 9-1: config 0 has no interface number 0
[ 1308.834768][  T126] usb 9-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[ 1308.850400][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1308.873985][  T126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1310.175126][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1310.286766][T19645] loop9: detected capacity change from 0 to 256
[ 1310.449901][T19645] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1311.025925][  T126] usb 9-1: Product: syz
[ 1311.030162][  T126] usb 9-1: Manufacturer: syz
[ 1311.034849][  T126] usb 9-1: SerialNumber: syz
[ 1311.050664][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1311.057914][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1311.279342][ T4535] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[ 1311.320177][ T4535] peak_usb 6-1:0.0: unable to read PCAN-USB FD firmware info (err -71)
[ 1311.669231][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1311.739387][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1311.808917][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1311.816158][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1311.836448][T19651] loop8: detected capacity change from 0 to 8
[ 1311.931593][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1311.998557][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1312.024519][  T126] usb 9-1: config 0 descriptor??
[ 1312.030108][  T126] usb 9-1: can't set config #0, error -71
[ 1312.037061][  T126] usb 9-1: USB disconnect, device number 6
[ 1312.050647][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1312.150716][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1312.230955][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1312.298346][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1312.344704][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1312.354214][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1312.362884][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1312.371482][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1312.383303][T19400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1312.623326][T19656] loop8: detected capacity change from 0 to 1024
[ 1312.629950][T19648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4199'.
[ 1312.661940][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1312.683018][ T4535] peak_usb: probe of 6-1:0.0 failed with error -71
[ 1312.683136][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1312.729322][ T4535] usb 6-1: USB disconnect, device number 7
[ 1313.442417][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1313.442417][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1313.543314][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1313.561820][T19659] device vlan2 entered promiscuous mode
[ 1313.567504][T19659] device veth1_to_batadv entered promiscuous mode
[ 1313.587122][T19659] device veth1_to_batadv left promiscuous mode
[ 1313.835726][T19665] loop5: detected capacity change from 0 to 128
[ 1313.933467][T19665] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1314.004039][T19665] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1314.407640][ T9031] Bluetooth: hci6: sending frame failed (-49)
[ 1314.415760][T16260] Bluetooth: hci6: Opcode 0x1003 failed: -49
[ 1314.487073][T19665] overlayfs: upper fs needs to support d_type.
[ 1314.522969][T19665] overlayfs: upper fs does not support tmpfile.
[ 1314.806483][T15935] EXT4-fs (loop5): unmounting filesystem.
[ 1314.869666][T19681] loop9: detected capacity change from 0 to 128
[ 1314.877405][T19681] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1315.719157][T19681] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1315.728101][T19681] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1316.700192][T19694] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[ 1316.710215][T19694] overlayfs: upper fs does not support tmpfile.
[ 1316.719218][T19694] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[ 1317.092751][T10737] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1317.297149][T10737] usb 9-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[ 1317.523336][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1317.530203][T10737] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1317.530899][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1317.552202][T10737] usb 9-1: Product: syz
[ 1317.556972][T10737] usb 9-1: Manufacturer: syz
[ 1317.561601][T10737] usb 9-1: SerialNumber: syz
[ 1317.643004][T10737] usb 9-1: config 0 descriptor??
[ 1317.739615][T19708] loop5: detected capacity change from 0 to 8
[ 1317.828650][T16552] EXT4-fs (loop9): unmounting filesystem.
[ 1317.848868][T19400] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1318.483564][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1318.483564][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1318.645009][T19720] loop5: detected capacity change from 0 to 1024
[ 1318.859155][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1318.901175][T19720] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1319.215527][T10737] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[ 1319.230760][T10737] peak_usb 9-1:0.0: unable to read PCAN-USB FD firmware info (err -71)
[ 1319.317315][T19725] syz.9.4214[19725] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1319.317422][T19725] syz.9.4214[19725] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1319.683935][T15935] EXT4-fs (loop5): unmounting filesystem.
[ 1319.812636][T19734] device vlan2 entered promiscuous mode
[ 1319.818274][T19734] device veth1_to_batadv entered promiscuous mode
[ 1320.473981][T19734] device veth1_to_batadv left promiscuous mode
[ 1320.488361][T10737] peak_usb: probe of 9-1:0.0 failed with error -71
[ 1320.506517][T10737] usb 9-1: USB disconnect, device number 7
[ 1322.260672][T19761] loop9: detected capacity change from 0 to 2048
[ 1322.273702][T19760] loop8: detected capacity change from 0 to 8
[ 1322.321070][T19761] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[ 1322.329352][T19761] UDF-fs: Scanning with blocksize 512 failed
[ 1322.340977][T19761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1322.360681][   T27] audit: type=1800 audit(1743153205.888:772): pid=19761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4221" name="file2" dev="loop9" ino=839 res=0 errno=0
[ 1322.394888][T17787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1322.431335][T17787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1322.622363][T19400] device veth0_vlan entered promiscuous mode
[ 1322.634138][T17096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1322.692023][T17096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1322.738698][T17096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1322.750401][T17096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1322.807196][T19400] device veth1_vlan entered promiscuous mode
[ 1323.051951][   T28] INFO: task syz-executor:16209 blocked for more than 145 seconds.
[ 1323.665991][T19772] loop8: detected capacity change from 0 to 2048
[ 1325.026034][T18093] kmmpd-loop6: attempt to access beyond end of device
[ 1325.026034][T18093] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1325.051263][   T28]       Not tainted 6.1.131-syzkaller #0
[ 1326.042214][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1326.051030][   T28] task:syz-executor    state:D stack:20440 pid:16209 ppid:1      flags:0x00004002
[ 1326.062256][T19772] EXT4-fs warning (device loop8): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop8.
[ 1326.219703][   T28] Call Trace:
[ 1326.253783][T10737] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1326.294810][   T28]  <TASK>
[ 1326.353507][   T28]  __schedule+0x143f/0x4570
[ 1326.456931][   T28]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 1326.502011][T10737] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[ 1326.518008][   T28]  ? release_firmware_map_entry+0x18b/0x18b
[ 1326.528019][T10737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1326.565229][   T28]  ? prepare_to_wait_event+0x3b5/0x3f0
[ 1326.591341][T18093] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[ 1326.614084][T10737] usb 4-1: Product: syz
[ 1326.631147][   T28]  schedule+0xbf/0x180
[ 1326.635367][   T28]  wb_wait_for_completion+0x162/0x290
[ 1326.640827][   T28]  ? __bpf_trace_writeback_inode_template+0x20/0x20
[ 1326.646063][T10737] usb 4-1: Manufacturer: syz
[ 1326.662184][   T28]  ? wake_bit_function+0x210/0x210
[ 1326.672327][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1326.679051][T10737] usb 4-1: SerialNumber: syz
[ 1326.687790][   T28]  sync_inodes_sb+0x28f/0xb10
[ 1326.712227][   T28]  ? filemap_fdatawrite_wbc+0x12b/0x180
[ 1326.717835][   T28]  ? filemap_flush+0x11a/0x170
[ 1326.725551][T10737] usb 4-1: config 0 descriptor??
[ 1326.754371][   T28]  ? try_to_writeback_inodes_sb+0xb0/0xb0
[ 1326.760245][   T28]  ? get_nr_dirty_inodes+0x2ab/0x2e0
[ 1326.772222][   T28]  sync_filesystem+0x16b/0x220
[ 1326.787241][   T28]  generic_shutdown_super+0x6b/0x340
[ 1326.799769][   T28]  kill_block_super+0x7a/0xe0
[ 1326.817399][   T28]  deactivate_locked_super+0xa0/0x110
[ 1326.843191][   T28]  cleanup_mnt+0x490/0x520
[ 1326.857882][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[ 1326.878145][   T28]  task_work_run+0x246/0x300
[ 1326.908557][   T28]  ? kasan_quarantine_put+0xd4/0x220
[ 1326.922190][   T28]  ? task_work_cancel+0x2e0/0x2e0
[ 1326.927275][   T28]  ? kmem_cache_free+0x292/0x510
[ 1326.962824][   T28]  ? do_exit+0xa69/0x26a0
[ 1326.983263][   T28]  do_exit+0xa6e/0x26a0
[ 1327.004357][   T28]  ? preempt_schedule_common+0xa6/0xd0
[ 1327.030206][   T28]  ? preempt_schedule+0xd9/0xe0
[ 1327.050436][   T28]  ? put_task_struct+0x80/0x80
[ 1327.082542][   T28]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1327.088325][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[ 1327.112136][   T28]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1327.122457][   T28]  ? preempt_schedule_thunk+0x16/0x18
[ 1327.127897][   T28]  do_group_exit+0x202/0x2b0
[ 1327.162229][   T28]  __x64_sys_exit_group+0x3b/0x40
[ 1327.172466][   T28]  do_syscall_64+0x3b/0xb0
[ 1327.178899][   T28]  ? clear_bhb_loop+0x45/0xa0
[ 1327.198477][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1327.218699][   T28] RIP: 0033:0x7f419dd8d169
[ 1327.228811][   T28] RSP: 002b:00007fff1d104258 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 1327.257987][   T28] RAX: ffffffffffffffda RBX: 00007f419de0e0fe RCX: 00007f419dd8d169
[ 1327.278631][   T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 1327.302191][   T28] RBP: 0000000000000010 R08: 00007fff1d101ff6 R09: 00007fff1d105510
[ 1327.320959][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1d105510
[ 1327.340711][   T28] R13: 00007f419de0e08c R14: 000055558349c4a8 R15: 00007fff1d1065e0
[ 1327.362952][   T28]  </TASK>
[ 1327.383592][   T28] 
[ 1327.383592][   T28] Showing all locks held in the system:
[ 1327.391479][   T28] 1 lock held by rcu_tasks_kthre/12:
[ 1327.401423][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1327.412317][T16762] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1327.428232][   T28]  #0: ffffffff8d32e890 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[ 1327.450015][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1327.489528][   T28] 1 lock held by rcu_tasks_trace/13:
[ 1327.525358][   T28]  #0: ffffffff8d32f090 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[ 1327.577115][T17787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1327.585507][   T28] 1 lock held by khungtaskd/28:
[ 1327.593193][T17787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1327.631553][   T28]  #0: ffffffff8d32e6c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[ 1327.646538][T19400] device veth0_macvtap entered promiscuous mode
[ 1327.661965][   T28] 2 locks held by getty/4006:
[ 1327.672055][   T28]  #0: ffff88803087f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[ 1327.681035][T19400] device veth1_macvtap entered promiscuous mode
[ 1327.706104][   T28]  #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x54a/0x1620
[ 1327.738063][   T28] 4 locks held by kworker/u4:15/4528:
[ 1327.755318][   T28]  #0: ffff888017e16938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x806/0x1260
[ 1327.763001][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1327.806559][   T28]  #1: ffffc90004fffd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x806/0x1260
[ 1327.813499][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1327.836982][   T28]  #2: ffffffff8e543a50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x166/0xd20
[ 1327.854120][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1327.877452][   T28]  #3: ffffffff8d333bc0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0
[ 1327.879239][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1327.928484][   T28] 4 locks held by kworker/u4:18/4622:
[ 1327.935604][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1327.938429][   T28] 4 locks held by udevd/5322:
[ 1327.976623][   T28]  #0: ffff88801db760a0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10
[ 1327.977850][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1327.996996][   T28]  #1: ffff888057584888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4f/0x3a0
[ 1328.030893][   T28]  #2: ffff888059ce7da0 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x6e/0x3a0
[ 1328.064979][   T28]  #3: ffff88806231f190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x176/0x330
[ 1328.088066][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1328.106908][   T28] 5 locks held by kworker/1:4/10737:
[ 1328.122561][T10737] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[ 1328.130870][T10737] peak_usb 4-1:0.0: unable to read PCAN-USB FD firmware info (err -71)
[ 1328.155681][   T28]  #0: ffff8881442fdd38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x806/0x1260
[ 1328.165735][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1328.184980][   T28]  #1: ffffc9001ae7fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260
[ 1328.199741][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1328.217573][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1328.230433][   T28]  #2: ffff888146714190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730
[ 1328.248860][   T28]  #3: ffff88806231f190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[ 1328.260140][T19400] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1328.275016][   T28]  #4: ffff888062319118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[ 1328.288807][   T28] 3 locks held by kworker/0:16/15164:
[ 1328.297591][   T28]  #0: ffff88814cc31938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x806/0x1260
[ 1328.311888][   T28]  #1: ffffc900039b7d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260
[ 1328.331497][   T28]  #2: ffffffff8e5505a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16e0
[ 1328.352783][   T28] 2 locks held by syz-executor/16209:
[ 1328.358193][   T28]  #0: ffff888066ec40e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa9/0xe0
[ 1328.381004][   T28]  #1: ffff8881447727d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x270/0xb10
[ 1328.391403][   T28] 3 locks held by kworker/u4:17/17787:
[ 1328.403601][   T28]  #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x806/0x1260
[ 1328.427204][   T28]  #1: ffffc9000ceefd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x806/0x1260
[ 1328.447970][   T28]  #2: ffffffff8e5505a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[ 1328.463794][   T28] 1 lock held by syz-executor/19400:
[ 1328.470622][   T28]  #0: ffffffff8e5505a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7cb/0x1000
[ 1328.489302][   T28] 1 lock held by syz.9.4226/19786:
[ 1328.496011][   T28] 
[ 1328.504767][   T28] =============================================
[ 1328.504767][   T28] 
[ 1328.520537][T17787] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1328.540205][   T28] NMI backtrace for cpu 1
[ 1328.544592][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.131-syzkaller #0
[ 1328.552513][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1328.562681][   T28] Call Trace:
[ 1328.566005][   T28]  <TASK>
[ 1328.568989][   T28]  dump_stack_lvl+0x1e3/0x2cb
[ 1328.573798][   T28]  ? nf_tcp_handle_invalid+0x647/0x647
[ 1328.579284][   T28]  ? panic+0x764/0x764
[ 1328.583473][   T28]  ? vprintk_emit+0x622/0x740
[ 1328.588193][   T28]  ? printk_sprint+0x490/0x490
[ 1328.593002][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[ 1328.598141][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[ 1328.603115][   T28]  ? nmi_trigger_cpumask_backtrace+0x430/0x430
[ 1328.609291][   T28]  ? _printk+0xd1/0x111
[ 1328.613469][   T28]  ? panic+0x764/0x764
[ 1328.617563][   T28]  ? __wake_up_klogd+0xcc/0x100
[ 1328.622440][   T28]  ? panic+0x764/0x764
[ 1328.626536][   T28]  ? nmi_trigger_cpumask_backtrace+0xfc/0x430
[ 1328.632638][   T28]  nmi_trigger_cpumask_backtrace+0x1ca/0x430
[ 1328.638644][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1328.644739][   T28]  watchdog+0xf88/0xfd0
[ 1328.648941][   T28]  ? watchdog+0x1f8/0xfd0
[ 1328.653308][   T28]  kthread+0x28d/0x320
[ 1328.657405][   T28]  ? hungtask_pm_notify+0x50/0x50
[ 1328.662463][   T28]  ? kthread_blkcg+0xd0/0xd0
[ 1328.667080][   T28]  ret_from_fork+0x1f/0x30
[ 1328.671544][   T28]  </TASK>
[ 1328.675460][   T28] Sending NMI from CPU 1 to CPUs 0:
[ 1328.679466][T17787] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1328.680695][    C0] NMI backtrace for cpu 0
[ 1328.680706][    C0] CPU: 0 PID: 17787 Comm: kworker/u4:17 Not tainted 6.1.131-syzkaller #0
[ 1328.680723][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1328.680734][    C0] Workqueue: events_unbound linkwatch_event
[ 1328.680768][    C0] RIP: 0010:lock_release+0x33d/0xa20
[ 1328.680799][    C0] Code: 4c 89 e7 48 89 d3 e8 22 2e 77 00 48 89 da 4d 8b 34 24 48 8b 5c 24 10 48 81 c3 d0 0a 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 14 48 89 df 4d 89 fc 49 89 d7 e8 73 2e 77 00 4c 89 fa 4d 89 e7
[ 1328.680813][    C0] RSP: 0018:ffffc90000007ce0 EFLAGS: 00000046
[ 1328.680825][    C0] RAX: 1ffff11005e03c82 RBX: ffff88802f01e410 RCX: ffffc90000007d03
[ 1328.680838][    C0] RDX: 0000000000000003 RSI: ffff88802f01e418 RDI: ffff88802f01e498
[ 1328.680849][    C0] RBP: ffffc90000007e10 R08: dffffc0000000000 R09: fffffbfff1d4168e
[ 1328.680861][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802f01e498
[ 1328.680872][    C0] R13: 0000000000000003 R14: 334e8f6a35a98926 R15: dffffc0000000000
[ 1328.680883][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1328.680897][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1328.680908][    C0] CR2: 0000556e7595b950 CR3: 0000000026483000 CR4: 00000000003506f0
[ 1328.680922][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1328.680931][    C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1328.680941][    C0] Call Trace:
[ 1328.680946][    C0]  <NMI>
[ 1328.680952][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[ 1328.680986][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1328.681012][    C0]  ? nmi_trigger_cpumask_backtrace+0x430/0x430
[ 1328.681037][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[ 1328.681053][    C0]  ? nmi_handle+0x12e/0x440
[ 1328.681078][    C0]  ? nmi_handle+0x25/0x440
[ 1328.681103][    C0]  ? lock_release+0x33d/0xa20
[ 1328.681126][    C0]  ? default_do_nmi+0x62/0x150
[ 1328.681145][    C0]  ? exc_nmi+0xa8/0x100
[ 1328.681161][    C0]  ? end_repeat_nmi+0x16/0x31
[ 1328.681187][    C0]  ? lock_release+0x33d/0xa20
[ 1328.681210][    C0]  ? lock_release+0x33d/0xa20
[ 1328.681235][    C0]  ? lock_release+0x33d/0xa20
[ 1328.681258][    C0]  </NMI>
[ 1328.681263][    C0]  <IRQ>
[ 1328.681271][    C0]  ? hrtimer_interrupt+0x53c/0x980
[ 1328.681292][    C0]  ? __lock_acquire+0x1f80/0x1f80
[ 1328.681316][    C0]  ? __hrtimer_run_queues+0xdf2/0xe50
[ 1328.681343][    C0]  _raw_spin_unlock_irqrestore+0x75/0x130
[ 1328.681362][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1328.681378][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[ 1328.681402][    C0]  ? __hrtimer_next_event_base+0x264/0x280
[ 1328.681426][    C0]  hrtimer_interrupt+0x53c/0x980
[ 1328.681455][    C0]  __sysvec_apic_timer_interrupt+0x158/0x5b0
[ 1328.681481][    C0]  sysvec_apic_timer_interrupt+0x9b/0xc0
[ 1328.681501][    C0]  </IRQ>
[ 1328.681506][    C0]  <TASK>
[ 1328.681511][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1328.681532][    C0] RIP: 0010:vprintk_emit+0x4fa/0x740
[ 1328.681549][    C0] Code: 21 e3 0f 85 ad 01 00 00 e8 93 60 1c 00 44 8b 24 24 4d 85 ff 75 07 e8 85 60 1c 00 eb 06 e8 7e 60 1c 00 fb 48 c7 c7 e0 a5 20 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 41 56 e8 fd
[ 1328.681563][    C0] RSP: 0018:ffffc9000ceef800 EFLAGS: 00000293
[ 1328.681576][    C0] RAX: ffffffff816e4942 RBX: 0000000000000000 RCX: ffff88802f01d940
[ 1328.681588][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d20a5e0
[ 1328.681599][    C0] RBP: ffffc9000ceef8f0 R08: ffffffff816e491f R09: fffffbfff225724e
[ 1328.681611][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000003a
[ 1328.681622][    C0] R13: dffffc0000000000 R14: ffffffff816e4790 R15: 0000000000000200
[ 1328.681635][    C0]  ? vprintk_emit+0x340/0x740
[ 1328.681651][    C0]  ? vprintk_emit+0x4cf/0x740
[ 1328.681665][    C0]  ? vprintk_emit+0x4f2/0x740
[ 1328.681684][    C0]  ? printk_sprint+0x490/0x490
[ 1328.681700][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1328.681727][    C0]  ? print_irqtrace_events+0x210/0x210
[ 1328.681753][    C0]  _printk+0xd1/0x111
[ 1328.681771][    C0]  ? __local_bh_enable_ip+0x164/0x1f0
[ 1328.681802][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[ 1328.681823][    C0]  ? addrconf_notify+0x5d6/0xf70
[ 1328.681846][    C0]  ? addrconf_link_ready+0x49/0x1b0
[ 1328.681869][    C0]  ? panic+0x764/0x764
[ 1328.681886][    C0]  ? clusterip_netdev_event+0x42a/0x440
[ 1328.681911][    C0]  ? addrconf_link_ready+0xdd/0x1b0
[ 1328.681935][    C0]  addrconf_notify+0xaf7/0xf70
[ 1328.681972][    C0]  raw_notifier_call_chain+0xd0/0x170
[ 1328.681994][    C0]  netdev_state_change+0x11b/0x190
[ 1328.682011][    C0]  ? netdev_features_change+0xf0/0xf0
[ 1328.682033][    C0]  linkwatch_do_dev+0x10c/0x160
[ 1328.682051][    C0]  __linkwatch_run_queue+0x448/0x6b0
[ 1328.682071][    C0]  ? linkwatch_run_queue+0x10/0x10
[ 1328.682092][    C0]  ? process_one_work+0x806/0x1260
[ 1328.682113][    C0]  linkwatch_event+0x48/0x50
[ 1328.682132][    C0]  process_one_work+0x917/0x1260
[ 1328.682157][    C0]  ? worker_detach_from_pool+0x260/0x260
[ 1328.682180][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 1328.682198][    C0]  ? kthread_data+0x4e/0xc0
[ 1328.682224][    C0]  ? wq_worker_running+0x97/0x190
[ 1328.682239][    C0]  worker_thread+0xa47/0x1200
[ 1328.682261][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1328.682282][    C0]  kthread+0x28d/0x320
[ 1328.682295][    C0]  ? worker_clr_flags+0x190/0x190
[ 1328.682313][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1328.682327][    C0]  ret_from_fork+0x1f/0x30
[ 1328.682353][    C0]  </TASK>
[ 1328.702544][T10737] peak_usb: probe of 4-1:0.0 failed with error -71
[ 1328.721566][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 1328.721584][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.131-syzkaller #0
[ 1328.721630][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1328.721644][   T28] Call Trace:
[ 1328.721653][   T28]  <TASK>
[ 1328.721661][   T28]  dump_stack_lvl+0x1e3/0x2cb
[ 1328.721692][   T28]  ? nf_tcp_handle_invalid+0x647/0x647
[ 1328.721737][   T28]  ? panic+0x764/0x764
[ 1328.721771][   T28]  ? llist_add_batch+0x160/0x1d0
[ 1328.721811][   T28]  ? vscnprintf+0x59/0x80
[ 1328.721843][   T28]  panic+0x318/0x764
[ 1328.721873][   T28]  ? nmi_trigger_cpumask_backtrace+0x2db/0x430
[ 1328.721901][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[ 1328.721930][   T28]  ? preempt_schedule_thunk+0x16/0x18
[ 1328.721972][   T28]  ? nmi_trigger_cpumask_backtrace+0x2db/0x430
[ 1328.721996][   T28]  ? nmi_trigger_cpumask_backtrace+0x358/0x430
[ 1328.722025][   T28]  ? nmi_trigger_cpumask_backtrace+0x35d/0x430
[ 1328.722049][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1328.722080][   T28]  watchdog+0xfc7/0xfd0
[ 1328.722119][   T28]  ? watchdog+0x1f8/0xfd0
[ 1328.722156][   T28]  kthread+0x28d/0x320
[ 1328.722178][   T28]  ? hungtask_pm_notify+0x50/0x50
[ 1328.722209][   T28]  ? kthread_blkcg+0xd0/0xd0
[ 1328.722246][   T28]  ret_from_fork+0x1f/0x30
[ 1328.722289][   T28]  </TASK>
[ 1328.724350][   T28] Kernel Offset: disabled
[ 1329.352175][   T28] Rebooting in 86400 seconds..