last executing test programs:

5m20.461369332s ago: executing program 1 (id=150):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgid(0xffffffffffffffff)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0))
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0xb185}]})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00')
fchdir(r1)
r2 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0)
write(r2, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0xb)
syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000380)={[{@grpquota}, {@nouuid}, {@gqnoenforce}]}, 0x1, 0xb89e, &(0x7f000000b880)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r3, 0x0, 0x0, 0x10fff9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="070000000000fedbdf2505000000000007000500000018000300000004000100"], 0x44}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000c00004e07006c001a8054"], 0x94}}, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x13, 0x8, &(0x7f0000000640)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000180000001809000003000000000000000000000702000000010000000000000c01000000002e00ccf5ccf34e337267412a4adc875b0c8526c3bf7a438c6fbafd3aac0bf88432a9475fc320c5a2216399f2eaf56b463359dac1341a0b799676e7aedcd9c31fb8f47a36de62e93b9f38ba02ba13ad7892290fb4ea7a4b3d2e82f87350a318ba6691b0530535beebcb44fea84f9866749cdfdedda5e4d3af17f15ec6af"], &(0x7f0000000480)=""/166, 0x33, 0xa6, 0x1, 0x0, 0x0, @void, @value}, 0x20)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='wchan\x00')
lseek(r9, 0x9, 0xf5ff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r8}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20)

5m16.820373363s ago: executing program 1 (id=158):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x80e, &(0x7f00000000c0)={[{@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}]}, 0x3, 0x45c, &(0x7f00000009c0)="$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")
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r2, 0x20, 0x0, 0x8000)
setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f00000001c0)=0x23454a1a, 0x4)

5m15.5232401s ago: executing program 1 (id=160):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0))

5m14.936876145s ago: executing program 1 (id=162):
r0 = syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000000f80)={[{@shortad}, {@gid}, {@uid_forget}, {@uid_forget}, {@volume={'volume', 0x3d, 0x3fc}}, {@rootdir={'rootdir', 0x3d, 0x7746}}, {@adinicb}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@unhide}, {@noadinicb}, {@adinicb}]}, 0x1, 0xc3b, &(0x7f0000000340)="$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")
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaea, &(0x7f0000001540)="$eJzs3V2IXFcdAPAzszub3SQ1k5rYNY1tYrWtH900u2v8CJqUBMHQFPGlEFQIaVqDMYIV1FIwyZNvtpQIPvmBT32wVBHsi4Q++VKwgSL0qfrggyFiwAeNJiO7e87szMlM7szs7nxkfj84e+bec+/9n3v3zp37fQIwtsrLfxcXZ0shXHrjlaN/f/hvM0t9DtWHqC7/nWzoqoQQSrF7MpveexMr+c3rL55qlZfC/PLf1B2eulYfd0sI4XzYEy6Hath16crLb80/efzCsYt733714NWNmXsAABgvX758cHHnX/50//Ybrz1wOGxKvZc+LO+fV2OPrXG//3Dc8U/7/+XQ3F1qSI2msuEmYyrPNA830WK4xjiVbLjJNvGnsviVNsNtCneOP9HQr9V8wyhL63E1lMpzTd3l8tzcyjF5WD6unyrNnTtz9tnnB1RRYN3968EQwp6GdORic3ev6Wtxy7Ee02pMhzZgmmtMlQ7ns9b1tCc2ZhmOWjrcv1g3aisGPs99SrVtg9z6AKzKrxfe5nx+ZmFt6lOb7Cz+tSfKrceHddDv9b+r+FMDjh/E/9UFWxzWz926NqX5St+jrbE7v46Q37/U/vuXX+lo7ptfj6h0WM921xFG5fpCu3ouLY+vb+1zZXrQrv75enG3+nzM03L4Qlbe+P2ZyMrybmC0/Ds//y9J0nCn0NRdWcu0agPe/gDDK79vrpauj0b5fX15+aaC8umC8pmC8s0F5VsKymGc/fa7Pw4vlVaP8/Nj+m7Ph6dTPvfE/H1d1ic/H9lt/Py+326tNX5+PzEMs9+ffPr0Z545cWXl/v9Sff2/Fdf3dLhRjd+ty3GAdL4wP69ev/e/2hyn3Ga4e7P63NNi+OXPO5qHK+1YnU5o2M7cVo/Z5vG2tRtud/Nw1Wy4mZims/rm+yebs/HS/kfarqblNZnNbyWbj6msHmm7sj3meT2gF2l9bHf/f1o/Z0Ol9OyZs6cfj91pPf3jRGXTUv/9fa43sHadPv8zG5qf/9la718pN24Xtq32L61sF16P02vuP1+P09x/IXan37lvTMws95879e2zz6z/7MNYe/4HL3zz5Nmzp78z8A8LMyEMQTV6+PDF4ahGNx/SYcuw1KfnD0szMgTVGNkP6Xj19qIBbpSAvtj3w5WdgMfOfOvkc6efO31u4cCBhfn5A59dWNy3vF+/r3HvvtH5AdQWWE+rP/qDrgkAAAAAAAAAAADQqe8dO3rlnTc//e7K8/+rz/+l5//Tnb/p+f8fZc//58/Jp+fg03OA21uULw+TvWB1KhuuEtP7s/ruyOLszMb7QMzr7fjF5//r4bIXvqb63JfFqbTpzF4ncNv7Uqayd5Dk7QV+OOYXY/7LAANUmmndO+ZF77dO63p6P0XDeylq3g88OtL/La0N6bmw9Px3y/c6Nfyzt/ehjqy/fjxpOOh5BFr7x1i9//ufqzM+8LpI7dNkf+P9dHzXiVrbvfROW7ABWB+Dbv8znfdM+bk/fGl6KaXBrj3RvL3M318K3fjzO83dw97+5EbHz9vt63f8Qc9/v9v/rF8O6Xj7l11AqfYW9z8/u/puQ9iwq9P4+fyn90Dv6C7+jRg/zc0jobP4tV9k8fMLQh36bxZ/c4fxb5v/3b3F/1+Mnxbbow91Gr+8cs2s3FyP/Lxxuv6XnzdObmbzn97teYf4X3mh1fz32FDjrRgfxtmotDPbrWw/or7T3nv7v9H59W3/t17ZbLOW34fxqdgnbYjTfQ55eyfd1j/dX5F+B3Zm0y8V/L7dqf3fUTDu7f9+LuZF34fU/u+t6yuX86rxJz+tn9W4LFN3pcWyvVu3NTCq3hur63/rkE5seIzpgc/j0KfDQ1CHeqpN9DBevZ24tcT+9dqXQ61W29gTWgUGGpyBL/9BHycMOv6gl3+RvP3ffB8+b/83L8/b/83L8/Z/8/KZ+B9qV563/5svz7z937z8vmy6efvAswXlHywo39W6vH7Yfn/B+LsLyj9UUL63Xn6oaYhU/kDB+A8WlN/bXL4pL3+oYPyPFJR/tKD84YLyRxvKG9uATuUfKxj/bpeeRxnX+Ydxlj+f5/sP4yNd/2n3/d9RUA6Mrp+8tv/Iid98tbry/P9U/XxIuo53OHZX4vHT92N3ft07NHQvlb0Zu/+alQ/7+Q4YJ/n7M/Lf90cKyoHRle7z8v2GMVSabt075kXvrWq3n89o+XjMPxHzT8b8sZjPxXxfzPfHfL5P9WNjHHn9dwdfKq0e72/Lyju9nzx/HqjpPVEhhIUO65OfH+j2fvb8PX7dWmv8Hh8HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJjy8t/FxdnpEC698crRp4+f2bfU51B9iOry38mGrkp9vBAej/lEzH8eP9y8/uKpxvxWzEthPpRCqd4/PHWtHmlLCOF82BMuh2rYdenKy2/NP3n8wrGLe99+9eDVjVsCAAAAcPf7fwAAAP//PecHeg==")
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES8=r2, @ANYRESOCT=r0], 0x48)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chroot(&(0x7f0000000000)='./bus\x00')
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000100)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001", @ANYRES32=r4, @ANYBLOB="f4060000"], 0x6f4}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x3c1, 0x3, 0x1b78, 0x1918, 0xffffff80, 0x178, 0x0, 0x178, 0x1aa8, 0x22b, 0x258, 0x1aa8, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x18b8, 0x1918, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@u32={{0x7e0}, {[{}, {[{}, {}, {}, {}, {}, {0x0, 0x1}]}, {}, {}, {}, {}, {[{}, {}, {}, {}, {}, {}, {0x1}]}]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff, 0xffffff00], 0x4e21, 0x4e22, 0x4e23, 0x4e22, 0x7ff, 0x3, 0x7, 0x4, 0x5}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local, @private1}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1bd8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x9, 0x0, 0x48})

5m13.181208312s ago: executing program 1 (id=165):
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000000c0))

5m12.527101504s ago: executing program 1 (id=170):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x9, 0x50, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {<r2=>r0}}, './file0\x00'})
write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e)
write$6lowpan_control(r1, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:pinentry_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x20800)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4879977}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048884}, 0x4041)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8001)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000640)=0xffff, 0x4)
pipe(&(0x7f0000000680)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000006c0)={{r8}, {@void, @actul_num={@void, 0xa, 0x4b}}})
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000700)=0x8000, 0x9, 0x2)
ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000740)=0x4)
sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x354}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}}, 0x4000080)
r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x50840, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r9, 0x111, 0x4, 0x1, 0x4)
r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
write$6lowpan_control(r10, &(0x7f0000000940)='connect aa:aa:aa:aa:aa:11 1', 0x1b)
mq_notify(r9, &(0x7f0000000a40)={0x0, 0x1c, 0x4, @thr={&(0x7f0000000980)="57603e9046b0de1e6fc7755f93ee9f35f19b9604879c98c6cbe644fdb292c1f125c1f602cea0bc2b8df07d60b302e9c40205498390819ece58bb05112534f50d8171eefefa96", &(0x7f0000000a00)="b1ea3cdbaeab650e769fcae348ddbcd7"}})
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b80), 0x40040, 0x0)
bind$bt_rfcomm(r7, &(0x7f0000000bc0)={0x1f, @any, 0x5}, 0xa)
write$6lowpan_control(r9, &(0x7f0000000c00)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0)

5m10.251033862s ago: executing program 32 (id=170):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x9, 0x50, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {<r2=>r0}}, './file0\x00'})
write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e)
write$6lowpan_control(r1, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:pinentry_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x20800)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4879977}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048884}, 0x4041)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8001)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000640)=0xffff, 0x4)
pipe(&(0x7f0000000680)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000006c0)={{r8}, {@void, @actul_num={@void, 0xa, 0x4b}}})
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000700)=0x8000, 0x9, 0x2)
ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000740)=0x4)
sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x354}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}}, 0x4000080)
r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x50840, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r9, 0x111, 0x4, 0x1, 0x4)
r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
write$6lowpan_control(r10, &(0x7f0000000940)='connect aa:aa:aa:aa:aa:11 1', 0x1b)
mq_notify(r9, &(0x7f0000000a40)={0x0, 0x1c, 0x4, @thr={&(0x7f0000000980)="57603e9046b0de1e6fc7755f93ee9f35f19b9604879c98c6cbe644fdb292c1f125c1f602cea0bc2b8df07d60b302e9c40205498390819ece58bb05112534f50d8171eefefa96", &(0x7f0000000a00)="b1ea3cdbaeab650e769fcae348ddbcd7"}})
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b80), 0x40040, 0x0)
bind$bt_rfcomm(r7, &(0x7f0000000bc0)={0x1f, @any, 0x5}, 0xa)
write$6lowpan_control(r9, &(0x7f0000000c00)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0)

19.699455632s ago: executing program 0 (id=1034):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={r3}, &(0x7f0000000040)=0x8)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x25031caa, 0xff, 0x6, 0x3, 0x7})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x890)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
msgsnd(0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r4 = socket(0x2a, 0x2, 0x0)
connect$inet(r4, 0x0, 0x0)
socket$inet(0x2, 0x80003, 0x2)
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0xb042, &(0x7f0000000180)=ANY=[], 0x0, 0xc46, &(0x7f0000001280)="$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")
sched_setscheduler(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8280, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000180)=@t={0x81, 0x3, 0x8, 0x4, @generic=0x726802bf})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)
ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000080)=""/121)

19.201721118s ago: executing program 2 (id=1035):
pipe2$9p(0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

18.896196064s ago: executing program 2 (id=1036):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5401000010003306000000000000000000000000000000000000000000000000ffffffff00"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f"], 0x154}}, 0x0)

18.525778766s ago: executing program 2 (id=1037):
iopl(0x3)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)

18.063858018s ago: executing program 5 (id=1038):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/255, 0x4})

17.983384399s ago: executing program 2 (id=1039):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt(r1, 0x7, 0x10, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000400000006001900c88674a2"], 0x44}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001)
r5 = getpgid(0x0)
fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5})
kcmp(r2, r5, 0x1, r0, r0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100))
symlink(&(0x7f0000000480)='.\x00', &(0x7f0000000040)='./file0\x00')
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r7, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0/..\x00', &(0x7f0000000080)={0x0, 0x0, 0xb}, 0x18)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa7a1976d5ebe6f97, &(0x7f0000000280)={0x3, &(0x7f0000000080)=[{0x8, 0x4, 0x2, 0x10000}, {0x21, 0x6, 0xf, 0x4}, {0x7, 0x6, 0xf1, 0x9}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x4, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})

17.779286383s ago: executing program 4 (id=1040):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_io_uring_setup(0x5816, &(0x7f0000000080)={0x0, 0x1767, 0x10100}, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0001"], 0xd8}}, 0x0)

17.491349451s ago: executing program 5 (id=1041):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3000}, [@IFLA_LINK={0x8, 0x5, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_open_dev$vbi(&(0x7f0000000300), 0x0, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x164, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2b}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0xc010)
r5 = syz_io_uring_setup(0xa2e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x4000, 0x10000}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, {0x2}})
sendto(0xffffffffffffffff, &(0x7f0000000200)="99e4e7ebcf12144e0b0c920d6eb4641bee18694cae82d66ab6b49a85feff7108adcdb74673133f1429803af34357d1b872f33ca0f8f65e5a02f9a81553b7de9ea74180767f0efa6c3a9340680e73cef8e052018de523f103219cc343a020505b40f0ef9a84cbb9400c2c324ebb0400d9ac8f90cf0057ab894e2140bfb07b34ffb9c26056adcc8a788c6e27cf5f0b14f471056d01e4dfc8d921", 0x99, 0x440c4, 0x0, 0x0)
io_uring_enter(r5, 0x5b3f, 0x0, 0x6, 0x0, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, 0x0, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r11}})

17.369500545s ago: executing program 4 (id=1042):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x34}}, 0x0)

16.87521223s ago: executing program 2 (id=1043):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)={0x107000, 0x10a}, 0x18)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x80)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0)
openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r2], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000180)={[{@barrier}, {@nossd}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@space_cache_v1}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0x202, 0x1000)
fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r8}, 0x11)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000150001000000000000000000fe880000000000000000000000000001fe80000000000000000000000000000000000000000000000000000000000000f2691942800428b0a25cb043b2"], 0x5c}}, 0x0)

16.65159942s ago: executing program 4 (id=1045):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89b1, 0x0)
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4430, &(0x7f0000000240)="$eJzs3c9PHNcdAPA3A67BtV1wfXClSl2pllq1FQKf2mKpGGNjsKkrt7aqXNYLrG2ShbVgiXLwgdws5RQphygHK5Fy42RxyNX5E3LJ0TlbSg65RIpkhWh3Z2FndldsEAux8/kcGOb9Zr8zb98chhcnKg+W1nJLa7nCSq68cG/tQu7tcml9uRjiQ9K2/2OH1z/d6cV1ctTX3i/ZzctX/3vnQgifL375Ynt7eztU9Ye2xpp+/+7bRwvNx4Y4U6fabvvWDsobIYSzLeOq6gsh/P+zEKIQwqUkbTI5DoYQToV63p1H793NHdBonj4vXsy/nHu8NX5+dvPJVue/PQrho9Lv/nZ/+es/9o1/9ZcD6h4AAAAAAAAAAAAAAAAAgFfc9K2bt/8zOhaeRaF/M2p9X3c6OXZ6P3b7wPyh938sAAAAAAAAAAAAAAAAAAAA/Eztvv+fi860ef9/KjlOdKi//a/ej5Hemfn3zakro2PJ/u9RS/7fk6RvLvWF4Tb7vmf3f7+Uqd9+//fWfvarMb5Gv0MhikdS53E8MhLCJ8nG7+eiE3GpvFb5673y+srigQ3jlZWOf333/lR0kg39u43/ZKb93u///9uWq6l6fvfgLrHXWjr+fR3Lffpu1FX8L2fqHUb82b90/PtraYPNBSbqE0A1/u/37x3/qUz7vYr/6RBCLqqONZeaAaprmGp6p/UKaen4H6ulpabO5IPsdP9/n4n/lUz7RzX/b2S/iGgrHf9f1dIGUiV27//heO/7/2qm/aOIf3X8G77/u5KO//F6Yn+qSO2T7Hb+n86036v4346TcZ6OUlfAZlRP7/T/6khLx3+gJX/3+S/uav13LVP/sJ7/Gv02nv8a0/+fo/rzH+2l4z/YsVy39/9Mpl6v5/+J2vqP/UrH/0QtLb12Hqr97Db+s5n2exX/2qpkoBH/3fnkh+P19I+t/7qSjv+v64lxc4mN2s/a+i/ae/1/PdP+Uaz/quPfiHvb6+siHf+THctV4/9FF9//NzL1muLfurg4IKPW+vuWjv+pjuVq9//A3vGfy9Tr9f3/p142DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAKmEyOQyEaSp/H8chICJeT83PhRDRfWMzPl8oLb62FMJWk58KZ6H6pPF8o5ZdWyovFfKFUKi+EcCXJPxsGorVSuZJfLjy8utPWYPSgWFitzBcLlRDCdJL++3Cq0db8UmW58DCEcG0n7zdxefXhg8JKfnFp9Z+jo6OjYWZnDMNR8Z1KcaVS772eG8LsTt2hqGlwtezrO2M5Gb1ZXl9dKZRq6Tea6pTKC4VSU525JO+DMBxVVtdXFgqVYr5Uvt/o7yhNJMepmVv/u3VjrCX/blQ/Th7usAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4iZ6N/+PDEEJ//SwOIUw0fonalX/6vHgx/3Lu8db4+dnNJ1svOpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ed24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsEvHKA0EURiA34yF2nkMq2W3s11RRAtXBE+gx/AwehQv4R1SpEibIgSSWQibXdgmqb6veTA/M+/BPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//9kGHvg=")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xfffffffd, @empty}, 0x1c)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0xfffffffd}]}, 0x10)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x0, "59416d570165203d41bec7080089122c000004002231a11000000900"})
ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000680)={0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2401})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x173)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1, 0x1b9, &(0x7f0000000200)="$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")
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
mkdir(&(0x7f0000000080)='./bus\x00', 0x2)
chdir(&(0x7f00000003c0)='./bus\x00')

15.731694606s ago: executing program 5 (id=1046):
pipe2$9p(0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

15.280607726s ago: executing program 5 (id=1047):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
setgroups(0x0, 0x0)
r1 = socket(0x3, 0x4, 0xfffffffe)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f00000001c0)=0xffffffffffffffd5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4008090)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32, @ANYRES8], 0x30}}, 0x0)
setregid(0xffffffffffffffff, r3)
io_setup(0xffee, &(0x7f00000000c0))
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f05006d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r6, &(0x7f0000006840)={0x2020}, 0x2020)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0xad, 0x4ff, &(0x7f0000000ac0)="$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")
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000000)=0xffb)
r9 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, r9, 0x0, 0x0, 'syz0\x00', 0x0})
close_range(r7, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
sendmsg$qrtr(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2a, 0x3, 0x8000}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000340)="79ff3c86f3861e6bc4b5081b858d0c370bb8a3034b28137a46fc7bc3c99aea57394f0cb23e7397e8dc2414fb51af319090a59080f9e0512bf3d76e25fb3cac051d0ed0b417e55699f820826d5293b700d5a3b7a57e4762dc410fa2271fd1c5598b237d623ce72ca1238d2e71b6e2aa632ed955fd120e81253e380ca0", 0x7c}, {&(0x7f0000000440)="1a17f906b99c4ce839075159a21e9001b8df56db20ac337430", 0x19}, {&(0x7f0000000480)="834fc3eb05a62d2d97db60f36edb91a19b7fc10e457439e5746cdaddd2fe5e8f5b74f1a6b765598bc4", 0x29}], 0x3, &(0x7f00000042c0)=ANY=[@ANYBLOB="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"], 0x12d8, 0x400c044}, 0x38)
r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r11, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0xe7d1, 0x0)
read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, <r12=>0x0}, 0x2020)
chown(&(0x7f0000000280)='./file1\x00', r2, r12)

13.990431969s ago: executing program 0 (id=1048):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x1, 0xffffffff}}}, 0x10) (fail_nth: 2)

13.581813015s ago: executing program 4 (id=1049):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xe62390}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0xfffffffffffffffe, 0xffffffffffffffff, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x20000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7)
umount2(&(0x7f0000000e80)='./file0/file0/file0/file0/file0\x00', 0x8)
r2 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000005440), 0x28, 0x774, &(0x7f0000000a40)="$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")
close_range(r2, 0xffffffffffffffff, 0x0)

13.438085934s ago: executing program 2 (id=1050):
unshare(0x2000400)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0xf1d, 0x4)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x52e, &(0x7f0000000a80)="$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")
setxattr$system_posix_acl(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000001000000000008000400000000000000040003000000000020"], 0x24, 0x0)
syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xfe, 0x15f, &(0x7f0000000200)="$eJzs0M1qE2EUxvH/O/PmQ0yIYoQgaAJuokHIB7oTyYjBgHFAceMqEEcNJEQMaHYmiDsXgW6zKO22FHoFSZNFaUk27U10k12hy5SZSVtKcwc9v9085z3PgXnzcpZWXHrdav746bTbzpfUB7tS+ng8HBbdPAidnStz//2oCN/RjDTMe+DGkyh8rTcco9ZquN/zIoQA67aXB4DY+T0rrulpyOHvpx/D+L73zuB65hQIeHsPNFgxP8sCi/otv++un7l9J4AJSgWXxx6a/CtnkvcUdAaZ7a2D99P98rOnr5z/+VL/SSRhZv7ABpYK702+HZnLrdm08s6u2LNCPv+ikM0ZPD/0Crt99NvIL/isQLt9Bl5fkMQj/Qn+Kljzbs13VRQYr5/azdDFv+7+NlOgkoNaNRHYrMbvGJhp7U4WrOBNCK8aCSGEEEIIIYQQQgghhBBCCCGEuOnOAgAA//9IRFHZ")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2nnAwMpOZndk1xkQ2K7f7+TT72+d5vjPPMxmys0WefPjy7OhuHvcfffFLZFkSvXGM40kSo+hF46s4ZfxNAADPsidFEb8XC5vkkojItjctAGCL1vv732/Lny5kWgDAFt1597239w8Obr2TRRa3Z18fT8r/7Mufi/79+/FxTONevBbDeBpRPSjsRvW0UJa3i6KY9/PSKK7P5seTMjn74HF9/P3fIqr8XgxjVDWdPG1U+bcObu3lC538vJzH8/X5x2X+ZgzjxZPwqfzNJfmYpPHqK53534hh/PxRfBLTuFtNos1/uZfnbxbf/vH5++X0ynwyP54MqnGtYueCXxoAAAAAAAAAAAAAAAAAAAAAAC6xG/XeOYPIr8X1WdlU77+z8zTS8te8MWpTZf+iSpqm7v5ARVHMi/i+s6VgXtQD2/19+vFSv7uxIAAAAAAAAAAAAAAAAAAAAFxdDz/97OhwOr334FyKZjeAfkT8eSfivx5n3Gm5FqsHD+pzHk6nvbo8NeZx2m2JnWZMErFyGuUizumy/Fvx3Nk5N8UPP5YL3OSAWafl9eUL3N3+upq76+gwWX6uQTQtWX2TfJdGtGPSWPNc6T91FbHJ7Zcu7RpuvPb0haqYrxgTyaqJvfHr4srVLcnZVaTVVV0a362LTvzMvbHW6x7ZIv7394qk2q1jsL03IwAAAAAAAAAAAAAAAAAAuOLaT/8u6Xy0MtorfBQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEui/f7/DYp5HV5jcBoPHv7PSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAK+CsAAP//hipWFQ==")
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff19)
chmod(&(0x7f0000000140)='./file1\x00', 0x24)
syz_usb_connect(0x0, 0x51, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000025697086708129808460102030109023f00010000c000090454f605cf2c02020905faffa7010407010905091000040800050905c81100040a078009050101080001bd0909050e"], 0x0)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4)

13.345561496s ago: executing program 0 (id=1051):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0xffffffffffffffda}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2800)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1, 0x0)
fcntl$setstatus(r0, 0x408, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13.18755813s ago: executing program 3 (id=1052):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_io_uring_setup(0x5816, &(0x7f0000000080)={0x0, 0x1767, 0x10100}, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0001"], 0xd8}}, 0x0)

13.001681822s ago: executing program 3 (id=1053):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='9p_protocol_dump\x00', r0}, 0x10)
pipe2$9p(&(0x7f0000000240), 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0xab}, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000000001000000ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000000000000000000000000000f7ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000530b0000000000000000000000000000c4000500e0000002000000000000000000000000000000002b00000000000000ffffffff0000000000000000000000000535000000000500000000000000000000000000ac1414bb000000000000000000000000000000002b00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000000044000000006c00000000000000ac1414aa0000000000000000000000000000000000000000050000000000000005000000"], 0x17c}}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)

12.056737025s ago: executing program 3 (id=1054):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x280, 0x460, 0x460, 0x280, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x148, 0xd8000000, {0x9402}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x228}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@private1, @empty, [], [], 'pim6reg0\x00', 'vxcan1\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)

11.861084111s ago: executing program 5 (id=1055):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0x11, 0x148, 0x14c, 0x10, 0x374, 0x2a8, 0x2a8, 0x374, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x104, 0x14c, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@limit={{0x3c}, {0x6, 0x8, 0x2, 0x12, 0x0, 0x7, 0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1ff, 0x0, 0x2, 'snmp\x00', {0xff}}}}, {{@ip={@multicast1, @rand_addr=0x64010102, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80, 0x0, 0x18}, {0x91}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x3, 0x2, 0x0, 0x2, 0x1]}, {0x1, [0x3, 0x2, 0x1, 0x0, 0x3, 0x5], 0x4}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x464)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'wlc\x00'}, 0x2c)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000000000c000300686173683a697000050005000a000000050004"], 0x50}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000040601080000000000000000000000000500010007"], 0x1c}}, 0x0)

11.858424433s ago: executing program 3 (id=1056):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000540)=@keyring={'key_or_keyring:', r2})

11.755156221s ago: executing program 0 (id=1057):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000100)={0x0, r2})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000900)={0x0, r2})
write$eventfd(r2, &(0x7f00000000c0), 0x8)

7.464027406s ago: executing program 3 (id=1058):
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r0 = syz_io_uring_setup(0xd6, &(0x7f0000000400)={0x0, 0x10}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

3.007731006s ago: executing program 0 (id=1059):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES32], 0xf9, 0x187, &(0x7f0000000200)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000340)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/63, 0x18)

3.004825667s ago: executing program 4 (id=1060):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='attr/prev\x00')
preadv(r3, 0x0, 0x0, 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x3, 'team0\x00', {0x9}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b0001000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)
write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0xc1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
lseek(r4, 0x200000002, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x800)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023})

1.146812244s ago: executing program 3 (id=1061):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x25, 0x354, &(0x7f0000000fc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
sendfile(r0, r0, 0x0, 0x80000000)

524.113461ms ago: executing program 4 (id=1062):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x8, 0xb086, 0xd056413133670fd4, r5, 0xe213, '\x00', 0x0, r4, 0x4, 0x3, 0x4, 0x3, @void, @value, @value=r2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0)

164.181155ms ago: executing program 5 (id=1063):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000240)='./file0\x00')
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

0s ago: executing program 0 (id=1064):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082)

kernel console output (not intermixed with test programs):

g attributes in process `syz.4.590'.
[  457.923135][ T8419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.933081][ T8419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.010497][ T8419] netlink: 'syz.5.584': attribute type 3 has an invalid length.
[  458.018461][ T8419] netlink: 'syz.5.584': attribute type 1 has an invalid length.
[  458.026711][ T8419] netlink: 216 bytes leftover after parsing attributes in process `syz.5.584'.
[  458.036143][ T8419] NCSI netlink: No device for ifindex 33022
[  458.740897][ T1629] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  458.793610][ T8427] loop3: detected capacity change from 0 to 32768
[  458.808717][ T8433] loop0: detected capacity change from 0 to 512
[  458.824332][ T8427] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.591 (8427)
[  458.859114][ T8427] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  458.868796][ T8433] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.592: invalid indirect mapped block 32768 (level 0)
[  458.869880][ T8427] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[  458.898816][ T8427] BTRFS info (device loop3): using free-space-tree
[  458.950170][ T8433] EXT4-fs (loop0): Remounting filesystem read-only
[  459.061616][ T1629] usb 5-1: Using ep0 maxpacket: 16
[  459.095687][ T8433] EXT4-fs (loop0): 1 truncate cleaned up
[  459.104352][ T8433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.236324][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.247291][ T1629] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  459.256053][ T1629] usb 5-1: config 0 has no interface number 0
[  459.262563][ T1629] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  459.274478][ T1629] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  459.377179][ T1629] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  459.386789][ T1629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.399484][ T1629] usb 5-1: Product: syz
[  459.405376][ T1629] usb 5-1: Manufacturer: syz
[  459.410269][ T1629] usb 5-1: SerialNumber: syz
[  459.532108][    T8] usb 6-1: USB disconnect, device number 5
[  459.545415][ T1629] usb 5-1: config 0 descriptor??
[  459.859377][ T8434] loop4: detected capacity change from 0 to 512
[  459.881015][ T8434] EXT4-fs: inline encryption not supported
[  459.997369][ T8459] SET target dimension over the limit!
[  460.159648][ T8434] EXT4-fs (loop4): blocks per group (64) and clusters per group (20800) inconsistent
[  460.391176][ T5839] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  460.454802][ T8463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.598'.
[  460.551129][ T5839] usb 3-1: Using ep0 maxpacket: 32
[  460.574183][ T5839] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  460.583166][ T5839] usb 3-1: config 0 has no interface number 0
[  460.639642][ T5839] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  460.649680][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  460.658227][ T5839] usb 3-1: Product: syz
[  460.662876][ T5839] usb 3-1: Manufacturer: syz
[  460.795364][    T8] em28xx 6-1:0.0: Disconnecting em28xx
[  460.809778][ T5839] usb 3-1: config 0 descriptor??
[  460.813461][    T8] em28xx 6-1:0.0: Freeing device
[  461.047847][ T8468] loop5: detected capacity change from 0 to 512
[  461.123734][ T5787] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  461.185619][ T5839] usb 3-1: USB disconnect, device number 26
[  461.239371][ T8468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  461.840711][ T5845] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  462.130701][ T5845] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  462.189372][ T1629] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71
[  462.198013][ T1629] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71
[  462.227291][ T5845] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  462.237882][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.247179][ T5845] usb 1-1: Product: syz
[  462.251735][ T5845] usb 1-1: Manufacturer: syz
[  462.256590][ T5845] usb 1-1: SerialNumber: syz
[  462.339963][ T1629] usb 5-1: USB disconnect, device number 12
[  462.628584][ T8474] loop4: detected capacity change from 0 to 512
[  462.993223][ T5845] cdc_ncm 1-1:1.0: bind() failure
[  463.010054][ T5845] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  463.018051][ T5845] cdc_ncm 1-1:1.1: bind() failure
[  463.120715][ T5866] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  463.191827][ T5845] usb 1-1: USB disconnect, device number 9
[  463.625868][ T8485] loop2: detected capacity change from 0 to 512
[  463.851361][ T5866] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  463.859970][ T5866] usb 5-1: config 0 has no interface number 0
[  463.866472][ T5866] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  464.072831][ T5866] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  464.082816][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.091339][ T5866] usb 5-1: Product: syz
[  464.095754][ T5866] usb 5-1: Manufacturer: syz
[  464.100784][ T5866] usb 5-1: SerialNumber: syz
[  464.143038][ T5866] usb 5-1: config 0 descriptor??
[  464.155448][ T8474] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  464.252842][ T5866] usb-storage 5-1:0.20: USB Mass Storage device detected
[  464.380866][ T8485] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.605: invalid indirect mapped block 32768 (level 0)
[  464.414926][ T5866] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  464.448991][ T6629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.470269][ T8485] EXT4-fs (loop2): Remounting filesystem read-only
[  464.476047][ T8490] loop0: detected capacity change from 0 to 2048
[  464.488421][ T8485] EXT4-fs (loop2): 1 truncate cleaned up
[  464.497327][ T8485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.567072][ T8487] loop3: detected capacity change from 0 to 1764
[  464.712251][ T8495] cgroup: Unknown subsys name 'cpuset'
[  464.793154][ T8495] cgroup: Unknown subsys name 'cpuset'
[  464.852583][ T8495] cgroup: Unknown subsys name 'cpuset'
[  464.864247][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  464.871183][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  464.912212][ T8495] cgroup: Unknown subsys name 'cpuset'
[  464.918974][ T8495] cgroup: Unknown subsys name 'cpuset'
[  464.961377][ T8495] cgroup: Unknown subsys name 'cpuset'
[  464.968167][ T8495] cgroup: Unknown subsys name 'cpuset'
[  464.981635][ T8495] cgroup: Unknown subsys name 'cpuset'
[  464.997077][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.016729][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.084578][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.240024][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.247449][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.257177][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.335368][ T5866] scsi host1: usb-storage 5-1:0.20
[  465.470874][ T5866] usb 5-1: USB disconnect, device number 13
[  465.501288][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.516186][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.553741][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.562087][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.575510][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.604334][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.611051][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.707312][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.759295][ T8505] loop3: detected capacity change from 0 to 256
[  465.767134][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.790718][ T8505] exfat: Deprecated parameter 'utf8'
[  465.798395][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.826112][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.862393][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.869846][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.897487][ T8495] cgroup: Unknown subsys name 'cpuset'
[  465.910961][ T8505] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  466.211926][   T29] audit: type=1800 audit(1734146642.257:20): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.610" name="file1" dev="loop3" ino=1048643 res=0 errno=0
[  466.926477][ T8520] loop2: detected capacity change from 0 to 1764
[  466.935892][ T8520] iso9660: Unknown parameter ''
[  467.413724][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'.
[  467.632306][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.620'.
[  467.699563][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.620'.
[  467.930966][ T8539] loop2: detected capacity change from 0 to 512
[  468.038968][ T8539] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.621: invalid indirect mapped block 32768 (level 0)
[  468.147131][ T8539] EXT4-fs (loop2): Remounting filesystem read-only
[  468.206631][ T8539] EXT4-fs (loop2): 1 truncate cleaned up
[  468.214386][ T8539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.908810][ T8546] loop5: detected capacity change from 0 to 2048
[  468.967739][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.008666][ T8546] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  469.727099][ T8564] loop4: detected capacity change from 0 to 256
[  469.846034][ T8566] netlink: 256 bytes leftover after parsing attributes in process `syz.3.630'.
[  469.895221][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.622'.
[  470.173325][ T8564] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  470.400957][   T29] audit: type=1800 audit(1734146646.387:21): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.629" name="bus" dev="loop4" ino=1048646 res=0 errno=0
[  471.121703][ T8581] loop5: detected capacity change from 0 to 1764
[  471.197403][ T8578] loop2: detected capacity change from 0 to 512
[  471.315055][ T8578] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.636: invalid indirect mapped block 32768 (level 0)
[  471.381970][ T8578] EXT4-fs (loop2): Remounting filesystem read-only
[  471.427930][ T8578] EXT4-fs (loop2): 1 truncate cleaned up
[  471.435663][ T8578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  471.960177][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.043783][ T8591] loop5: detected capacity change from 0 to 512
[  472.498230][ T8591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.515158][ T8591] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  472.548406][ T8603] loop4: detected capacity change from 0 to 8
[  472.774628][ T8607] netlink: 52 bytes leftover after parsing attributes in process `syz.3.644'.
[  472.785275][ T8607] netlink: 15 bytes leftover after parsing attributes in process `syz.3.644'.
[  473.323328][ T6629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.825581][   T51] Bluetooth: hci1: Unknown advertising packet type: 0x18
[  473.825710][   T51] Bluetooth: hci1: Unknown advertising packet type: 0x1e
[  473.836163][   T51] Bluetooth: hci1: Unknown advertising packet type: 0x30
[  473.844388][   T51] Bluetooth: hci1: Malformed LE Event: 0x0d
[  473.964073][ T1629] kernel write not supported for file /snd/seq (pid: 1629 comm: kworker/0:2)
[  473.981381][ T8625] loop2: detected capacity change from 0 to 512
[  474.050209][ T8625] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.651: invalid indirect mapped block 32768 (level 0)
[  474.092284][ T8625] EXT4-fs (loop2): Remounting filesystem read-only
[  474.124465][ T8625] EXT4-fs (loop2): 1 truncate cleaned up
[  474.132680][ T8625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.627063][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.790009][ T8631] loop5: detected capacity change from 0 to 16
[  474.901518][ T8631] erofs (device loop5): mounted with root inode @ nid 36.
[  474.911534][ T8633] loop3: detected capacity change from 0 to 512
[  474.977153][ T1629] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  474.992561][ T8623] erofs (device loop5): read error -117 @ 72 of nid 36
[  475.160851][ T8633] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  475.175772][ T8633] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  475.184429][ T8633] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.655: bad orphan inode 13
[  475.200069][ T1629] usb 5-1: Using ep0 maxpacket: 8
[  475.244525][ T8633] EXT4-fs (loop3): Remounting filesystem read-only
[  475.253441][ T8633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.483633][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.534217][ T1629] usb 5-1: New USB device found, idVendor=16d8, idProduct=6003, bcdDevice=5d.c2
[  475.543985][ T1629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.552653][ T1629] usb 5-1: Product: syz
[  475.557070][ T1629] usb 5-1: Manufacturer: syz
[  475.562140][ T1629] usb 5-1: SerialNumber: syz
[  475.584472][ T1629] usb 5-1: config 0 descriptor??
[  475.856694][ T1629] usb 5-1: USB disconnect, device number 14
[  475.940090][ T8643] loop3: detected capacity change from 0 to 512
[  476.218335][ T8643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.232627][ T8643] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  476.978164][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.190034][ T8660] loop2: detected capacity change from 0 to 512
[  477.351414][    T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  477.424169][ T8660] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.664: invalid indirect mapped block 32768 (level 0)
[  477.431200][ T5866] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  477.488570][ T8660] EXT4-fs (loop2): Remounting filesystem read-only
[  477.501707][ T8660] EXT4-fs (loop2): 1 truncate cleaned up
[  477.509226][ T8660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  477.551668][    T8] usb 1-1: Using ep0 maxpacket: 16
[  477.570210][ T8664] loop3: detected capacity change from 0 to 1024
[  477.651510][    T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE
[  477.663504][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  477.674266][    T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0
[  477.829199][    T8] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e
[  477.839040][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.847612][    T8] usb 1-1: Product: syz
[  477.852248][    T8] usb 1-1: Manufacturer: syz
[  477.857117][    T8] usb 1-1: SerialNumber: syz
[  477.896703][ T5866] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  477.907498][ T5866] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  477.937528][ T5866] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  477.947344][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  477.956065][ T5866] usb 6-1: SerialNumber: syz
[  477.975498][ T8664] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  477.995374][ T8664] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  478.022613][    T8] usb 1-1: config 0 descriptor??
[  478.095777][    T8] opticon 1-1:0.0: required endpoints missing
[  478.122768][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.277065][ T5866] usb 6-1: 0:2 : does not exist
[  478.365008][ T5866] usb 6-1: USB disconnect, device number 6
[  478.381698][ T5845] usb 1-1: USB disconnect, device number 10
[  478.531168][ T2980] hfsplus: b-tree write err: -5, ino 4
[  478.721894][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  479.150196][ T8674] netlink: 'syz.3.668': attribute type 24 has an invalid length.
[  479.439065][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'.
[  479.450069][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'.
[  479.994343][ T8691] loop2: detected capacity change from 0 to 512
[  480.621098][ T8697] loop0: detected capacity change from 0 to 8
[  480.838204][ T8691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.850510][ T8703] loop4: detected capacity change from 0 to 512
[  480.851485][ T8691] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  480.936716][ T8703] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.677: invalid indirect mapped block 32768 (level 0)
[  480.984358][ T8703] EXT4-fs (loop4): Remounting filesystem read-only
[  481.077475][ T8703] EXT4-fs (loop4): 1 truncate cleaned up
[  481.085383][ T8703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  481.432295][ T8692] loop5: detected capacity change from 0 to 4096
[  481.494822][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.583101][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.963819][ T8714] loop0: detected capacity change from 0 to 16
[  482.029460][ T8717] FAULT_INJECTION: forcing a failure.
[  482.029460][ T8717] name failslab, interval 1, probability 0, space 0, times 0
[  482.042872][ T8717] CPU: 1 UID: 0 PID: 8717 Comm: syz.4.681 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  482.053784][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  482.064101][ T8717] Call Trace:
[  482.067604][ T8717]  <TASK>
[  482.070789][ T8717]  dump_stack_lvl+0x216/0x2d0
[  482.075844][ T8717]  dump_stack+0x1e/0x24
[  482.080302][ T8717]  should_fail_ex+0x748/0x7f0
[  482.085289][ T8717]  should_failslab+0x17f/0x210
[  482.090358][ T8717]  kmem_cache_alloc_noprof+0xee/0xe10
[  482.096085][ T8717]  ? vm_area_dup+0x5c/0x620
[  482.100963][ T8717]  ? kmsan_get_metadata+0x13e/0x1c0
[  482.106464][ T8717]  vm_area_dup+0x5c/0x620
[  482.111111][ T8717]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  482.117219][ T8717]  __split_vma+0x27c/0x13a0
[  482.122053][ T8717]  ? kmsan_get_metadata+0x13e/0x1c0
[  482.127532][ T8717]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  482.133634][ T8717]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  482.139742][ T8717]  vms_gather_munmap_vmas+0x63f/0x1830
[  482.145732][ T8717]  __mmap_region+0x5c1/0x4a90
[  482.150749][ T8717]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  482.156854][ T8717]  ? arch_get_unmapped_area_topdown+0x8d/0x1100
[  482.163440][ T8717]  ? filter_irq_stacks+0x60/0x1a0
[  482.168832][ T8717]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  482.175256][ T8717]  ? kmsan_get_metadata+0x13e/0x1c0
[  482.180746][ T8717]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  482.186867][ T8717]  mmap_region+0x2dc/0x420
[  482.191598][ T8717]  do_mmap+0xead/0x1b00
[  482.196076][ T8717]  vm_mmap_pgoff+0x23b/0x5a0
[  482.200971][ T8717]  ksys_mmap_pgoff+0x16e/0x790
[  482.206030][ T8717]  ? kmsan_get_metadata+0x13e/0x1c0
[  482.211531][ T8717]  __x64_sys_mmap+0x1a8/0x240
[  482.216628][ T8717]  x64_sys_call+0x1d2c/0x3c30
[  482.221628][ T8717]  do_syscall_64+0xcd/0x1e0
[  482.226408][ T8717]  ? clear_bhb_loop+0x25/0x80
[  482.231439][ T8717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.237662][ T8717] RIP: 0033:0x7fcef0f85d19
[  482.242321][ T8717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  482.262249][ T8717] RSP: 002b:00007fcef1e9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  482.271011][ T8717] RAX: ffffffffffffffda RBX: 00007fcef1175fa0 RCX: 00007fcef0f85d19
[  482.279254][ T8717] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020001000
[  482.287486][ T8717] RBP: 00007fcef1e9a090 R08: ffffffffffffffff R09: 0000000000000000
[  482.295731][ T8717] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000001
[  482.303967][ T8717] R13: 0000000000000000 R14: 00007fcef1175fa0 R15: 00007fff7012f0a8
[  482.312213][ T8717]  </TASK>
[  482.315616][    C1] vkms_vblank_simulate: vblank timer overrun
[  482.440114][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'.
[  482.532520][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'.
[  483.478249][ T8737] loop0: detected capacity change from 0 to 1024
[  483.883011][ T8737] hfsplus: bad catalog entry type
[  484.216427][ T8745] loop4: detected capacity change from 0 to 512
[  484.291373][ T8745] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.691: invalid indirect mapped block 32768 (level 0)
[  484.345470][ T8745] EXT4-fs (loop4): Remounting filesystem read-only
[  484.454171][ T8745] EXT4-fs (loop4): 1 truncate cleaned up
[  484.463436][ T8745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.694194][ T6193] hfsplus: b-tree write err: -5, ino 4
[  485.137291][ T8758] loop3: detected capacity change from 0 to 512
[  485.238714][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.398050][ T8758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.414776][ T8758] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  485.581959][ T8766] loop5: detected capacity change from 0 to 2048
[  485.782753][ T8766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.804142][ T8771] loop4: detected capacity change from 0 to 512
[  485.815014][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.824977][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.902377][ T8766] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.695: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  486.154015][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.174169][ T8771] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  486.208416][ T8771] EXT4-fs (loop4): orphan cleanup on readonly fs
[  486.282285][ T8771] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated!
[  486.291719][ T8771] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota
[  486.302392][ T8771] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.697: Failed to acquire dquot type 1
[  486.347926][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'.
[  486.369150][ T8771] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.697: bg 0: block 40: padding at end of block bitmap is not set
[  486.424416][ T8771] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  486.551906][ T8766] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.695: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  486.574046][ T8771] EXT4-fs (loop4): 1 truncate cleaned up
[  486.582117][ T8771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  486.592080][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'.
[  486.727343][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.785757][ T8781] loop2: detected capacity change from 0 to 512
[  486.800939][ T8781] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  486.810742][ T8781] syz.2.701: attempt to access beyond end of device
[  486.810742][ T8781] loop20: rw=0, sector=2, nr_sectors = 2 limit=0
[  486.824183][ T8781] EXT4-fs (loop2): couldn't read superblock of external journal
[  487.112469][ T8787] FAULT_INJECTION: forcing a failure.
[  487.112469][ T8787] name failslab, interval 1, probability 0, space 0, times 0
[  487.125666][ T8787] CPU: 1 UID: 0 PID: 8787 Comm: syz.2.703 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  487.136570][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  487.146869][ T8787] Call Trace:
[  487.150341][ T8787]  <TASK>
[  487.153462][ T8787]  dump_stack_lvl+0x216/0x2d0
[  487.158460][ T8787]  dump_stack+0x1e/0x24
[  487.162921][ T8787]  should_fail_ex+0x748/0x7f0
[  487.167926][ T8787]  should_failslab+0x17f/0x210
[  487.172997][ T8787]  __kmalloc_noprof+0x176/0x1230
[  487.178279][ T8787]  ? kfree+0x20/0xdb0
[  487.182557][ T8787]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  487.188660][ T8787]  ? tomoyo_realpath_from_path+0x104/0xaa0
[  487.194809][ T8787]  ? kmsan_get_metadata+0x13e/0x1c0
[  487.200293][ T8787]  tomoyo_realpath_from_path+0x104/0xaa0
[  487.206269][ T8787]  ? __srcu_read_lock+0x76/0xd0
[  487.211415][ T8787]  tomoyo_path_number_perm+0x1d9/0x8f0
[  487.217186][ T8787]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  487.223859][ T8787]  ? kmsan_get_metadata+0x13e/0x1c0
[  487.229355][ T8787]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  487.235487][ T8787]  tomoyo_file_ioctl+0x3f/0x50
[  487.240532][ T8787]  security_file_ioctl+0x145/0x590
[  487.245957][ T8787]  __se_sys_ioctl+0xd0/0x440
[  487.250878][ T8787]  __x64_sys_ioctl+0x96/0xe0
[  487.255783][ T8787]  x64_sys_call+0x19f0/0x3c30
[  487.260788][ T8787]  do_syscall_64+0xcd/0x1e0
[  487.265565][ T8787]  ? clear_bhb_loop+0x25/0x80
[  487.270565][ T8787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.276768][ T8787] RIP: 0033:0x7f0188d85d19
[  487.281429][ T8787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  487.301348][ T8787] RSP: 002b:00007f0189b86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  487.310096][ T8787] RAX: ffffffffffffffda RBX: 00007f0188f75fa0 RCX: 00007f0188d85d19
[  487.318324][ T8787] RDX: 00000000200001c0 RSI: 00000000c02064b9 RDI: 0000000000000003
[  487.326562][ T8787] RBP: 00007f0189b86090 R08: 0000000000000000 R09: 0000000000000000
[  487.334787][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  487.343004][ T8787] R13: 0000000000000000 R14: 00007f0188f75fa0 R15: 00007ffd45f1dcc8
[  487.351258][ T8787]  </TASK>
[  487.354732][    C1] vkms_vblank_simulate: vblank timer overrun
[  487.364758][ T8787] ERROR: Out of memory at tomoyo_realpath_from_path.
[  487.366352][ T6629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.163962][ T8798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.708'.
[  488.186747][ T8794] loop4: detected capacity change from 0 to 512
[  488.395634][ T8794] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.707: invalid indirect mapped block 32768 (level 0)
[  488.496843][ T8796] loop5: detected capacity change from 0 to 4096
[  488.531161][ T8794] EXT4-fs (loop4): Remounting filesystem read-only
[  488.580057][ T8796] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  488.647344][ T8794] EXT4-fs (loop4): 1 truncate cleaned up
[  488.655033][ T8794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.761486][ T8796] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  488.821373][ T8796] ntfs3(loop5): Failed to load $MFTMirr (-22).
[  488.945440][ T8798] loop3: detected capacity change from 0 to 32768
[  489.115237][ T8811] loop0: detected capacity change from 0 to 512
[  489.215558][ T8798] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  489.237836][ T8798] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  489.247466][ T8798] bcachefs (loop3): Version upgrade required:
[  489.247466][ T8798] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  489.247466][ T8798] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  489.247466][ T8798]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  489.336269][ T8798] bcachefs (loop3): dropping and reconstructing all alloc info
[  489.410271][ T8811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.425125][ T8811] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  489.554682][ T8798] bcachefs (loop3): check_topology... done
[  489.561310][ T8798] bcachefs (loop3): accounting_read... done
[  489.569198][ T8798] bcachefs (loop3): alloc_read... done
[  489.575763][ T8798] bcachefs (loop3): stripes_read... done
[  489.582067][ T8798] bcachefs (loop3): snapshots_read... done
[  489.588748][ T8798] bcachefs (loop3): check_allocations...
[  489.714006][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.754600][ T8798]  done
[  489.783535][ T8798] bcachefs (loop3): going read-write
[  489.955637][ T8798] bcachefs (loop3): done starting filesystem
[  490.382397][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.641287][    T8] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  490.867197][    T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  490.877772][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  490.947020][ T8835] netlink: 6084 bytes leftover after parsing attributes in process `syz.4.717'.
[  490.957634][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'.
[  490.967662][ T8835] netlink: 6084 bytes leftover after parsing attributes in process `syz.4.717'.
[  491.007044][    T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  491.017217][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.025698][    T8] usb 4-1: Product: syz
[  491.030088][    T8] usb 4-1: Manufacturer: syz
[  491.039168][    T8] usb 4-1: SerialNumber: syz
[  491.159345][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'.
[  491.271204][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'.
[  491.643861][    T8] usb 4-1: 0:2 : does not exist
[  491.725750][    T8] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  491.947553][ T8843] loop5: detected capacity change from 0 to 1024
[  491.951104][    T8] usb 4-1: USB disconnect, device number 13
[  492.216561][ T8848] loop0: detected capacity change from 0 to 512
[  492.312360][ T5787] bcachefs (loop3): shutting down
[  492.317768][ T5787] bcachefs (loop3): going read-only
[  492.323383][ T5787] bcachefs (loop3): finished waiting for writes to stop
[  492.478153][ T5787] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10
[  492.492474][ T5787] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10
[  492.511230][ T8848] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.722: invalid indirect mapped block 32768 (level 0)
[  492.568079][ T8848] EXT4-fs (loop0): Remounting filesystem read-only
[  492.591841][ T8848] EXT4-fs (loop0): 1 truncate cleaned up
[  492.599455][ T8848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  492.621534][ T5787] bcachefs (loop3): unshutdown complete, journal seq 11
[  492.629404][ T5787] bcachefs (loop3): done going read-only, filesystem not clean
[  492.866250][ T5787] bcachefs (loop3): shutdown complete
[  492.935196][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  493.017055][ T8854] netlink: 60 bytes leftover after parsing attributes in process `syz.2.724'.
[  493.028827][ T8852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.724'.
[  493.374053][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.928752][    T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  494.104535][    T8] usb 1-1: Using ep0 maxpacket: 8
[  494.146621][    T8] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  494.156279][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.258256][    T8] usb 1-1: config 0 descriptor??
[  494.446008][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'.
[  494.552876][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.732'.
[  494.608654][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.732'.
[  494.940596][    T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  494.951629][    T8] asix 1-1:0.0: probe with driver asix failed with error -61
[  495.500001][ T8886] netlink: 224 bytes leftover after parsing attributes in process `syz.4.734'.
[  495.913623][ T8884] loop5: detected capacity change from 0 to 4096
[  496.101805][ T8884] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  496.456471][ T8893] loop4: detected capacity change from 0 to 2048
[  496.601919][ T8893] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  496.610254][ T8893] UDF-fs: Scanning with blocksize 512 failed
[  496.727545][ T8905] loop2: detected capacity change from 0 to 512
[  496.752203][ T8893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  497.014059][ T8883] ntfs3(loop5): failed to convert "c46c" to iso8859-13
[  497.033187][ T5845] usb 1-1: USB disconnect, device number 11
[  497.092684][ T8905] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.738: invalid indirect mapped block 32768 (level 0)
[  497.093560][ T8910] loop0: detected capacity change from 0 to 256
[  497.113820][ T8905] EXT4-fs (loop2): Remounting filesystem read-only
[  497.125377][ T8883] ntfs3(loop5): failed to convert "c46c" to iso8859-13
[  497.141958][ T8905] EXT4-fs (loop2): 1 truncate cleaned up
[  497.149451][ T8905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  497.247384][ T8910] exfat: Deprecated parameter 'utf8'
[  497.253453][ T8910] exfat: Deprecated parameter 'utf8'
[  497.259250][ T8910] exfat: Deprecated parameter 'utf8'
[  497.266572][ T8910] /dev/loop0: Can't open blockdev
[  497.982988][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.242515][ T8919] loop3: detected capacity change from 0 to 4096
[  498.250680][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  498.331553][ T8919] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  499.018024][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.745'.
[  499.076220][ T8933] loop5: detected capacity change from 0 to 64
[  499.140867][ T8933] hfs: get root inode failed
[  499.274190][ T8928] loop0: detected capacity change from 0 to 4096
[  499.313800][ T8928] nilfs2: Unknown parameter ''
[  500.171394][ T8940] evm: overlay not supported
[  500.199763][ T8940] overlayfs: failed to verify origin (150/file1, ino=854, err=-116)
[  500.221973][ T8940] overlayfs: failed to verify origin (150/file1, ino=854, err=-116)
[  501.105347][ T8948] loop5: detected capacity change from 0 to 40427
[  501.119274][ T8948] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  501.127538][ T8948] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  501.197163][ T8948] F2FS-fs (loop5): Found nat_bits in checkpoint
[  501.577228][ T8955] loop3: detected capacity change from 0 to 512
[  501.598510][ T8948] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  501.606918][ T8948] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  501.618434][ T8965] dccp_invalid_packet: P.Data Offset(102) too large
[  501.644333][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'.
[  501.653705][ T8960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.754'.
[  501.800534][ T8966] dlm: no locking on control device
[  501.906207][ T8955] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.753: invalid indirect mapped block 32768 (level 0)
[  502.034247][ T8955] EXT4-fs (loop3): Remounting filesystem read-only
[  502.048393][ T8955] EXT4-fs (loop3): 1 truncate cleaned up
[  502.056121][ T8955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.182075][ T6629] syz-executor: attempt to access beyond end of device
[  502.182075][ T6629] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  502.201976][ T6629] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  502.612389][ T8980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.759'.
[  502.762945][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.957873][ T8997] loop4: detected capacity change from 0 to 64
[  504.676429][ T9007] loop2: detected capacity change from 0 to 512
[  504.951218][ T5845] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  505.230198][ T5845] usb 4-1: Using ep0 maxpacket: 16
[  505.313803][ T9011] loop4: detected capacity change from 0 to 512
[  505.334490][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.346005][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.356368][ T5845] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  505.365837][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.418272][ T5845] usb 4-1: config 0 descriptor??
[  505.430863][ T9007] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  505.439163][ T9007] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8842c018, mo2=0002]
[  505.547053][ T9007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  505.817696][ T9011] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.770: invalid indirect mapped block 32768 (level 0)
[  505.849895][ T9011] EXT4-fs (loop4): Remounting filesystem read-only
[  505.866802][ T9011] EXT4-fs (loop4): 1 truncate cleaned up
[  505.875796][ T9011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  506.076379][ T5845] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0005/input/input13
[  506.132756][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.142669][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.156643][ T9006] input: syz1 as /devices/virtual/input/input12
[  506.164442][ T9018] loop5: detected capacity change from 0 to 2048
[  506.983576][ T5845] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  507.154714][ T9018] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  507.241080][ T9020] input: syz1 as /devices/virtual/input/input14
[  507.253946][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.319995][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.336225][ T5845] usb 4-1: reset high-speed USB device number 14 using dummy_hcd
[  507.754930][ T9018] Process accounting resumed
[  507.768243][ T9029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.772'.
[  508.202433][ T5866] usb 4-1: USB disconnect, device number 14
[  508.212005][   T29] audit: type=1326 audit(1734146684.237:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.5.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf35385d19 code=0x7ffc0000
[  508.234758][   T29] audit: type=1326 audit(1734146684.237:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.5.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf35385d19 code=0x7ffc0000
[  508.259965][   T29] audit: type=1326 audit(1734146684.257:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.5.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7faf35385d19 code=0x7ffc0000
[  508.283406][   T29] audit: type=1326 audit(1734146684.267:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.5.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf35385d19 code=0x7ffc0000
[  508.672602][ T9038] loop4: detected capacity change from 0 to 512
[  508.729682][ T9041] loop2: detected capacity change from 0 to 8
[  508.760827][   T29] audit: type=1326 audit(1734146684.367:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.5.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faf35385d19 code=0x7ffc0000
[  508.784193][   T29] audit: type=1326 audit(1734146684.367:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.5.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf35385d19 code=0x7ffc0000
[  508.807289][   T29] audit: type=1326 audit(1734146684.377:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.5.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7faf35385d19 code=0x7ffc0000
[  508.830046][   T29] audit: type=1326 audit(1734146684.377:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.5.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  508.857429][   T29] audit: type=1326 audit(1734146684.377:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.5.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf35385d19 code=0x7ffc0000
[  508.881316][   T29] audit: type=1326 audit(1734146684.387:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.5.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf35385d19 code=0x7ffc0000
[  509.005854][ T9038] EXT4-fs (loop4): filesystem is read-only
[  509.051964][ T9038] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  509.082738][ T9038] EXT4-fs (loop4): filesystem is read-only
[  509.088831][ T9038] EXT4-fs (loop4): orphan cleanup on readonly fs
[  509.109412][ T9041] unable to read id index table
[  509.111551][ T9038] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.776: bg 0: block 64: padding at end of block bitmap is not set
[  509.199355][ T9038] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  509.233898][ T9038] EXT4-fs (loop4): 1 orphan inode deleted
[  509.242108][ T9038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  509.443772][ T9038] xt_TPROXY: Can be used only with -p tcp or -p udp
[  509.802799][ T9049] loop3: detected capacity change from 0 to 1024
[  509.971991][ T9049] hfsplus: bad catalog entry type
[  510.023806][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.083161][ T5866] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  510.281461][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.295303][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  510.306292][ T5866] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  510.315977][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.328899][ T9049] tmpfs: Unknown parameter 'nr_inod�s'
[  510.420918][ T9049] autofs: Unknown parameter '���9���c�3�����n���cd�������l���;�Z�T�'
[  510.449647][ T5866] usb 1-1: config 0 descriptor??
[  510.512178][ T9061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  510.519815][ T9061] IPv6: NLM_F_CREATE should be set when creating new route
[  510.527409][ T9061] IPv6: NLM_F_CREATE should be set when creating new route
[  510.548659][ T9059] loop4: detected capacity change from 0 to 512
[  510.565547][ T9049] netlink: 'syz.3.780': attribute type 21 has an invalid length.
[  510.574122][ T9049] netlink: 'syz.3.780': attribute type 6 has an invalid length.
[  510.582634][ T9049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.780'.
[  510.839262][ T9059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  510.852968][ T9059] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  511.005643][ T5866] uclogic 0003:5543:0781.0006: item fetching failed at offset 5/7
[  511.031605][ T5866] uclogic 0003:5543:0781.0006: parse failed
[  511.038134][ T5866] uclogic 0003:5543:0781.0006: probe with driver uclogic failed with error -22
[  511.227531][ T4211] hfsplus: b-tree write err: -5, ino 4
[  511.256901][ T5866] usb 1-1: USB disconnect, device number 12
[  511.647229][ T9070] loop2: detected capacity change from 0 to 128
[  511.771961][ T9070] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  511.835521][ T9070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  511.893362][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  511.982483][ T9070] UDF-fs: error (device loop2): udf_read_inode: (ino 98) failed !bh
[  512.380867][ T9077] loop4: detected capacity change from 0 to 256
[  512.638607][ T9083] loop0: detected capacity change from 0 to 512
[  512.855259][ T9088] netlink: 'syz.2.793': attribute type 13 has an invalid length.
[  512.881566][ T9077] FAT-fs (loop4): Directory bread(block 64) failed
[  512.888615][ T9077] FAT-fs (loop4): Directory bread(block 65) failed
[  512.896312][ T9077] FAT-fs (loop4): Directory bread(block 66) failed
[  512.903279][ T9077] FAT-fs (loop4): Directory bread(block 67) failed
[  512.910200][ T9077] FAT-fs (loop4): Directory bread(block 68) failed
[  512.917159][ T9077] FAT-fs (loop4): Directory bread(block 69) failed
[  512.925004][ T9077] FAT-fs (loop4): Directory bread(block 70) failed
[  512.931981][ T9077] FAT-fs (loop4): Directory bread(block 71) failed
[  512.938882][ T9077] FAT-fs (loop4): Directory bread(block 72) failed
[  512.945885][ T9077] FAT-fs (loop4): Directory bread(block 73) failed
[  513.197955][ T9083] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.792: corrupted in-inode xattr: invalid ea_ino
[  513.352474][ T9083] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.792: couldn't read orphan inode 15 (err -117)
[  513.443062][ T9083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  513.617093][ T9082] loop5: detected capacity change from 0 to 4096
[  513.685758][ T9082] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  514.065793][    T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  514.151134][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.928463][ T9094] loop2: detected capacity change from 0 to 32768
[  515.179775][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.191424][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  515.206245][    T8] usb 4-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00
[  515.217053][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.252608][    T8] usb 4-1: config 0 descriptor??
[  515.424280][ T9109] loop5: detected capacity change from 0 to 512
[  515.769002][ T9112] vlan2: entered allmulticast mode
[  515.813421][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  515.827427][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  515.986868][    T8] usb 4-1: USB disconnect, device number 15
[  516.079322][ T9109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.092858][ T9109] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  516.586654][ T9117] loop4: detected capacity change from 0 to 256
[  516.972443][   T29] kauditd_printk_skb: 56 callbacks suppressed
[  516.972521][   T29] audit: type=1800 audit(1734146693.037:88): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.798" name="file1" dev="loop5" ino=15 res=0 errno=0
[  516.999163][    C1] vkms_vblank_simulate: vblank timer overrun
[  517.015581][ T9120] loop0: detected capacity change from 0 to 16
[  517.075882][ T9117] netlink: 56 bytes leftover after parsing attributes in process `syz.4.801'.
[  517.319200][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'.
[  517.640143][ T6629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.288458][ T9130] loop2: detected capacity change from 0 to 512
[  518.297215][ T9130] EXT4-fs: Ignoring removed oldalloc option
[  518.339559][ T9130] EXT4-fs (loop2): Test dummy encryption mode enabled
[  518.346774][ T9130] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  518.607085][ T9130] EXT4-fs (loop2): 1 truncate cleaned up
[  518.615592][ T9130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.657566][ T9130] FAULT_INJECTION: forcing a failure.
[  518.657566][ T9130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  518.671730][ T9130] CPU: 0 UID: 0 PID: 9130 Comm: syz.2.804 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  518.682673][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  518.693003][ T9130] Call Trace:
[  518.696496][ T9130]  <TASK>
[  518.699634][ T9130]  dump_stack_lvl+0x216/0x2d0
[  518.704651][ T9130]  dump_stack+0x1e/0x24
[  518.709118][ T9130]  should_fail_ex+0x748/0x7f0
[  518.714122][ T9130]  should_fail+0x2a/0x40
[  518.718696][ T9130]  should_fail_usercopy+0x2e/0x40
[  518.724061][ T9130]  strncpy_from_user+0x39/0x550
[  518.729218][ T9130]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  518.735332][ T9130]  getname_flags+0x187/0xa30
[  518.740224][ T9130]  __x64_sys_renameat2+0xf7/0x1f0
[  518.745565][ T9130]  x64_sys_call+0x204b/0x3c30
[  518.750568][ T9130]  do_syscall_64+0xcd/0x1e0
[  518.755363][ T9130]  ? clear_bhb_loop+0x25/0x80
[  518.760377][ T9130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.766637][ T9130] RIP: 0033:0x7f0188d85d19
[  518.771431][ T9130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  518.791365][ T9130] RSP: 002b:00007f0189b86038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  518.800152][ T9130] RAX: ffffffffffffffda RBX: 00007f0188f75fa0 RCX: 00007f0188d85d19
[  518.808402][ T9130] RDX: 0000000000000004 RSI: 0000000020000000 RDI: 0000000000000004
[  518.816634][ T9130] RBP: 00007f0189b86090 R08: 0000000000000000 R09: 0000000000000000
[  518.824860][ T9130] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001
[  518.833096][ T9130] R13: 0000000000000000 R14: 00007f0188f75fa0 R15: 00007ffd45f1dcc8
[  518.841346][ T9130]  </TASK>
[  519.042807][ T9135] loop0: detected capacity change from 0 to 4096
[  519.105544][ T9135] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  519.145673][ T9138] loop4: detected capacity change from 0 to 512
[  519.198764][ T9140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.809'.
[  519.208593][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'.
[  519.236487][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.288592][ T9138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.305129][ T9138] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  519.353955][ T9138] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.810: corrupted inode contents
[  519.383626][ T9138] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.810: mark_inode_dirty error
[  519.475532][ T9138] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.810: corrupted inode contents
[  519.538561][ T9138] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.810: mark_inode_dirty error
[  519.614641][ T9135] ntfs3(loop0): failed to convert "c46c" to iso8859-13
[  519.729594][ T9138] netlink: 'syz.4.810': attribute type 1 has an invalid length.
[  519.737855][ T9138] netlink: 236 bytes leftover after parsing attributes in process `syz.4.810'.
[  520.386005][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.446169][ T9154] loop3: detected capacity change from 0 to 256
[  520.453707][ T9155] loop2: detected capacity change from 0 to 512
[  520.488635][ T9155] EXT4-fs: Ignoring removed oldalloc option
[  520.521380][ T9155] EXT4-fs (loop2): Test dummy encryption mode enabled
[  520.531171][ T9155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  520.556193][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'.
[  520.665694][ T9155] EXT4-fs (loop2): 1 truncate cleaned up
[  520.673762][ T9155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  520.798753][ T9155] netlink: 'syz.2.813': attribute type 23 has an invalid length.
[  520.807121][ T9155] netlink: 244 bytes leftover after parsing attributes in process `syz.2.813'.
[  520.912780][ T9128] loop5: detected capacity change from 0 to 32768
[  521.194168][ T9166] loop4: detected capacity change from 0 to 512
[  521.698057][ T9165] loop3: detected capacity change from 0 to 512
[  521.938319][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.979650][ T5866] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  522.025159][ T9166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.038493][ T9166] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  522.118758][ T9165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.132393][ T9165] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  522.248580][ T5866] usb 1-1: Using ep0 maxpacket: 32
[  522.261539][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  522.291216][ T5866] usb 1-1: New USB device found, idVendor=03eb, idProduct=21fe, bcdDevice=17.ac
[  522.300864][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.309150][ T5866] usb 1-1: Product: syz
[  522.313776][ T5866] usb 1-1: Manufacturer: syz
[  522.318634][ T5866] usb 1-1: SerialNumber: syz
[  522.395787][ T9180] netlink: 100 bytes leftover after parsing attributes in process `syz.2.820'.
[  522.435279][   T29] audit: type=1800 audit(1734146698.487:89): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.817" name="file1" dev="loop3" ino=15 res=0 errno=0
[  522.442263][ T5866] usb 1-1: config 0 descriptor??
[  522.476280][ T5866] igorplugusb 1-1:0.0: endpoint incorrect
[  522.577697][   T29] audit: type=1800 audit(1734146698.627:90): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.817" name="file2" dev="loop3" ino=16 res=0 errno=0
[  522.714679][ T5866] usb 1-1: USB disconnect, device number 13
[  522.777202][    C0] vkms_vblank_simulate: vblank timer overrun
[  522.878901][ T9160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  523.012310][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.5.823'.
[  523.357486][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.742485][ T9183] loop2: detected capacity change from 0 to 32768
[  523.755985][ T9183] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.822 (9183)
[  523.985641][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.081678][ T9183] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  524.092453][ T9183] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[  524.381539][ T9183] BTRFS info (device loop2): rebuilding free space tree
[  524.434124][ T9183] BTRFS info (device loop2): disabling free space tree
[  524.441787][ T9183] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  524.451980][ T9183] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  524.857646][ T9210] loop3: detected capacity change from 0 to 4096
[  524.944513][ T9210] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  525.116224][ T5781] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  525.484092][ T9210] ntfs3(loop3): failed to convert "c46c" to iso8859-13
[  526.037515][ T9226] misc userio: Invalid payload size
[  526.286177][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  526.294041][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  526.871307][ T9234] netlink: 100 bytes leftover after parsing attributes in process `syz.4.832'.
[  527.302606][ T9214] loop5: detected capacity change from 0 to 32768
[  527.327435][ T9214] 
[  527.327435][ T9214]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  527.327435][ T9214] 
[  527.351714][ T9214] 
[  527.351714][ T9214]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  527.351714][ T9214] 
[  527.362692][ T9214] 
[  527.362692][ T9214]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  527.362692][ T9214] 
[  527.373621][ T9214] 
[  527.373621][ T9214]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  527.373621][ T9214] 
[  527.384448][ T9214] 
[  527.384448][ T9214]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  527.384448][ T9214] 
[  527.402819][   T29] audit: type=1800 audit(1734146703.467:91): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.828" name="bus" dev="loop5" ino=7 res=0 errno=0
[  527.434527][ T9214] ialloc: diAlloc returned -5!
[  527.457121][  T115] 
[  527.457121][  T115]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  527.457121][  T115] 
[  527.762932][ T9236] ialloc: diAlloc returned -5!
[  527.891635][ T9239] netlink: 60 bytes leftover after parsing attributes in process `syz.4.833'.
[  527.958930][ T9238] netlink: 60 bytes leftover after parsing attributes in process `syz.4.833'.
[  528.028660][ T9242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.834'.
[  528.544585][ T9244] loop0: detected capacity change from 0 to 512
[  528.745775][ T9244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  528.759110][ T9244] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  528.837974][ T6629] 
[  528.837974][ T6629]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  528.837974][ T6629] 
[  528.866410][ T6629] 
[  528.866410][ T6629]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  528.866410][ T6629] 
[  529.246698][    T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  529.442264][   T29] audit: type=1800 audit(1734146705.487:92): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.835" name="file1" dev="loop0" ino=15 res=0 errno=0
[  529.463215][   T29] audit: type=1800 audit(1734146705.487:93): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.835" name="file2" dev="loop0" ino=16 res=0 errno=0
[  529.593329][    T8] usb 5-1: Using ep0 maxpacket: 32
[  529.625264][    T8] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  529.634044][    T8] usb 5-1: config 0 has no interface number 0
[  529.676253][    T8] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  529.686074][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.694636][    T8] usb 5-1: Product: syz
[  529.699061][    T8] usb 5-1: Manufacturer: syz
[  529.704078][    T8] usb 5-1: SerialNumber: syz
[  529.792481][    T8] usb 5-1: config 0 descriptor??
[  529.806328][    T8] smsc95xx v2.0.0
[  530.129619][ T9257] loop3: detected capacity change from 0 to 4096
[  530.170863][ T9257] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  530.248101][    T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  530.266842][    T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  530.537448][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.760232][   T29] audit: type=1326 audit(1734146706.817:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0188d85d19 code=0x7ffc0000
[  530.787954][   T29] audit: type=1326 audit(1734146706.817:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0188d85d19 code=0x7ffc0000
[  530.812190][   T29] audit: type=1326 audit(1734146706.857:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0188d84680 code=0x7ffc0000
[  530.835115][   T29] audit: type=1326 audit(1734146706.857:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0188d8591b code=0x7ffc0000
[  530.857950][   T29] audit: type=1326 audit(1734146706.877:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0188d8591b code=0x7ffc0000
[  530.885241][   T29] audit: type=1326 audit(1734146706.877:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0188d8591b code=0x7ffc0000
[  530.914441][   T29] audit: type=1326 audit(1734146706.877:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0188d8591b code=0x7ffc0000
[  530.963820][   T29] audit: type=1326 audit(1734146707.027:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0188d8591b code=0x7ffc0000
[  531.203073][    T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  531.216221][    T8] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61
[  531.239257][ T5866] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  531.448691][ T5866] usb 3-1: Using ep0 maxpacket: 8
[  531.473671][ T9272] netlink: 24 bytes leftover after parsing attributes in process `syz.5.846'.
[  531.571350][ T5866] usb 3-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice=8d.a7
[  531.580861][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.611775][ T5866] usb 3-1: config 0 descriptor??
[  531.645202][ T5866] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  531.653503][ T5866] imon 3-1:0.0: unable to initialize intf0, err -19
[  531.660518][ T5866] imon:imon_probe: failed to initialize context!
[  531.667110][ T5866] imon 3-1:0.0: unable to register, err -19
[  531.896746][ T9267] Cannot find set identified by id 0 to match
[  531.940020][ T9275] loop3: detected capacity change from 0 to 16
[  531.971572][ T9275] erofs (device loop3): mounted with root inode @ nid 36.
[  532.213471][ T9279] loop0: detected capacity change from 0 to 2048
[  532.283712][    T8] usb 3-1: USB disconnect, device number 27
[  532.362894][ T9279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.502559][ T9279] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.849: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  532.669874][ T9292] loop2: detected capacity change from 0 to 512
[  532.719050][ T9292] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  532.848201][ T9292] EXT4-fs (loop2): 1 truncate cleaned up
[  532.856182][ T9292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.215027][ T9297] loop3: detected capacity change from 0 to 256
[  533.385874][ T9298] loop5: detected capacity change from 0 to 512
[  533.465870][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.524966][ T5866] usb 5-1: USB disconnect, device number 15
[  533.559959][ T9298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  533.573435][ T9298] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  533.794809][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.807508][    T8] usb 4-1: new low-speed USB device number 16 using dummy_hcd
[  533.960152][ T9306] loop4: detected capacity change from 0 to 64
[  533.991138][    T8] usb 4-1: device descriptor read/64, error -71
[  534.185246][ T9305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.855'.
[  534.302390][    T8] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  534.422676][ T6629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.428508][ T9308] loop2: detected capacity change from 0 to 4096
[  534.488053][ T9308] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  534.732385][    T8] usb 4-1: device descriptor read/64, error -71
[  534.782622][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.5.858'.
[  534.884844][    T8] usb usb4-port1: attempt power cycle
[  535.167253][ T9319] loop5: detected capacity change from 0 to 256
[  535.267895][ T9319] exfat: Deprecated parameter 'utf8'
[  535.278855][ T9319] exfat: Deprecated parameter 'utf8'
[  535.286729][ T9319] exfat: Deprecated parameter 'utf8'
[  535.395256][ T9319] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  535.421163][    T8] usb 4-1: new low-speed USB device number 18 using dummy_hcd
[  535.482842][    T8] usb 4-1: device descriptor read/8, error -71
[  535.772067][    T8] usb 4-1: new low-speed USB device number 19 using dummy_hcd
[  535.835065][    T8] usb 4-1: device descriptor read/8, error -71
[  535.971935][    T8] usb usb4-port1: unable to enumerate USB device
[  536.117067][ T9328] loop2: detected capacity change from 0 to 512
[  536.407428][ T9328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.420886][ T9328] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  536.899705][ T9335] loop4: detected capacity change from 0 to 512
[  536.921555][ T9340] AppArmor: change_hat: Invalid input 'G'
[  537.145564][ T9335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  537.164865][ T9335] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  537.236294][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.376488][ T9345] loop0: detected capacity change from 0 to 128
[  537.635703][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.5.871'.
[  537.807904][   T29] kauditd_printk_skb: 41 callbacks suppressed
[  537.807994][   T29] audit: type=1800 audit(1734146713.867:143): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.868" name="file1" dev="loop4" ino=15 res=0 errno=0
[  537.929495][   T29] audit: type=1800 audit(1734146713.917:144): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.868" name="file2" dev="loop4" ino=16 res=0 errno=0
[  538.264031][ T9353] loop2: detected capacity change from 0 to 128
[  538.349805][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.466939][ T4997] kworker/u8:26: attempt to access beyond end of device
[  538.466939][ T4997] loop0: rw=1, sector=145, nr_sectors = 33 limit=128
[  538.679319][ T9356] loop5: detected capacity change from 0 to 4096
[  538.724038][ T9356] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  539.080111][ T9362] loop0: detected capacity change from 0 to 2048
[  539.227010][ T9362] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  539.235073][ T9362] UDF-fs: Scanning with blocksize 512 failed
[  539.283404][ T9367] FAULT_INJECTION: forcing a failure.
[  539.283404][ T9367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  539.297034][ T9367] CPU: 1 UID: 0 PID: 9367 Comm: syz.2.879 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  539.307965][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  539.318262][ T9367] Call Trace:
[  539.321739][ T9367]  <TASK>
[  539.324898][ T9367]  dump_stack_lvl+0x216/0x2d0
[  539.329897][ T9367]  dump_stack+0x1e/0x24
[  539.334342][ T9367]  should_fail_ex+0x748/0x7f0
[  539.339325][ T9367]  should_fail+0x2a/0x40
[  539.343856][ T9367]  should_fail_usercopy+0x2e/0x40
[  539.349188][ T9367]  _copy_to_user+0x34/0x120
[  539.353990][ T9367]  simple_read_from_buffer+0x199/0x340
[  539.359790][ T9367]  proc_fail_nth_read+0x1e5/0x2c0
[  539.365188][ T9367]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  539.371022][ T9367]  vfs_read+0x29d/0xf50
[  539.375483][ T9367]  ? stack_depot_save_flags+0x2c/0x750
[  539.381240][ T9367]  ? kmsan_get_metadata+0x13e/0x1c0
[  539.386722][ T9367]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  539.393416][ T9367]  ksys_read+0x240/0x4b0
[  539.397976][ T9367]  ? kmsan_get_metadata+0x13e/0x1c0
[  539.403486][ T9367]  __x64_sys_read+0x93/0xe0
[  539.408305][ T9367]  x64_sys_call+0x314c/0x3c30
[  539.413310][ T9367]  do_syscall_64+0xcd/0x1e0
[  539.418081][ T9367]  ? clear_bhb_loop+0x25/0x80
[  539.423099][ T9367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.429314][ T9367] RIP: 0033:0x7f0188d8472c
[  539.433986][ T9367] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  539.453929][ T9367] RSP: 002b:00007f0189b86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  539.462705][ T9367] RAX: ffffffffffffffda RBX: 00007f0188f75fa0 RCX: 00007f0188d8472c
[  539.470943][ T9367] RDX: 000000000000000f RSI: 00007f0189b860a0 RDI: 0000000000000004
[  539.479191][ T9367] RBP: 00007f0189b86090 R08: 0000000000000000 R09: 0000000000000000
[  539.487419][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  539.495649][ T9367] R13: 0000000000000000 R14: 00007f0188f75fa0 R15: 00007ffd45f1dcc8
[  539.503900][ T9367]  </TASK>
[  539.567122][ T9369] loop4: detected capacity change from 0 to 512
[  539.659306][ T9362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  539.742697][ T9369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  539.756679][ T9369] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  540.612278][ T9384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.885'.
[  540.694803][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.062248][ T9393] nbd: socks must be embedded in a SOCK_ITEM attr
[  541.263144][ T9396] loop2: detected capacity change from 0 to 512
[  541.393122][ T9396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  541.406554][ T9396] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  542.008964][   T29] audit: type=1800 audit(1734146718.067:145): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.886" name="file1" dev="loop2" ino=15 res=0 errno=0
[  542.091850][   T29] audit: type=1800 audit(1734146718.097:146): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.886" name="file2" dev="loop2" ino=16 res=0 errno=0
[  542.268188][ T9412] loop0: detected capacity change from 0 to 64
[  542.502081][ T9406] loop5: detected capacity change from 0 to 4096
[  542.672013][ T9406] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  542.699368][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.391925][ T9418] syz.4.898 uses old SIOCAX25GETINFO
[  543.542259][ T9423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.899'.
[  543.648752][ T9420] loop2: detected capacity change from 0 to 512
[  543.894651][ T9420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  543.908001][ T9420] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  544.565381][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  544.784973][ T9441] loop5: detected capacity change from 0 to 512
[  544.813850][ T9441] EXT4-fs: Ignoring removed nobh option
[  544.836268][ T9441] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  544.941842][ T9441] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal
[  545.047435][ T9443] loop0: detected capacity change from 0 to 512
[  545.151618][ T9446] loop2: detected capacity change from 0 to 16
[  545.179312][ T9446] erofs (device loop2): mounted with root inode @ nid 36.
[  545.229912][ T9446] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  545.273546][ T9443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  545.278927][ T9446] erofs (device loop2): read error -117 @ 43 of nid 36
[  545.286992][ T9443] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  545.334239][ T9446] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  545.344603][ T9446] erofs (device loop2): read error -117 @ 43 of nid 36
[  545.377123][ T9436] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present
[  545.427514][ T9449] loop5: detected capacity change from 0 to 8
[  545.437314][ T9446] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  545.447334][ T9446] erofs (device loop2): read error -117 @ 43 of nid 36
[  545.459875][ T9449] squashfs: Unknown parameter '�ۈ��2Э{�����_`Π�w�'
[  546.174969][   T29] audit: type=1800 audit(1734146721.667:147): pid=9443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.907" name="file2" dev="loop0" ino=16 res=0 errno=0
[  546.196705][   T29] audit: type=1800 audit(1734146721.737:148): pid=9436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.907" name="file1" dev="loop0" ino=15 res=0 errno=0
[  546.397923][ T9452] loop3: detected capacity change from 0 to 32768
[  546.407046][ T9452] jfs: Unknown parameter '��%X��'
[  546.557813][ T9454] loop2: detected capacity change from 0 to 256
[  546.567760][ T9454] exfat: Bad value for 'fmask'
[  546.958798][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.295164][ T9452] loop3: detected capacity change from 0 to 128
[  547.340869][ T9452] FAT-fs (loop3): bogus number of reserved sectors
[  547.347681][ T9452] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  547.361396][ T9452] FAT-fs (loop3): Can't find a valid FAT filesystem
[  547.450553][ T5799] Bluetooth: hci2: command 0x0406 tx timeout
[  547.797105][ T9452] loop3: detected capacity change from 0 to 128
[  547.978839][ T9465] loop0: detected capacity change from 0 to 16
[  548.068603][ T9465] erofs (device loop0): mounted with root inode @ nid 36.
[  548.422163][ T9461] loop2: detected capacity change from 0 to 4096
[  548.451276][ T9461] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  548.467464][ T9469] lo: entered allmulticast mode
[  548.470838][    T8] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  548.478541][ T9469] tunl0: entered allmulticast mode
[  548.494466][ T9471] FAULT_INJECTION: forcing a failure.
[  548.494466][ T9471] name failslab, interval 1, probability 0, space 0, times 0
[  548.495305][ T9469] gre0: entered allmulticast mode
[  548.507649][ T9471] CPU: 0 UID: 0 PID: 9471 Comm: syz.5.918 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  548.518169][ T9469] gretap0: entered allmulticast mode
[  548.523228][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  548.523310][ T9471] Call Trace:
[  548.523359][ T9471]  <TASK>
[  548.523408][ T9471]  dump_stack_lvl+0x216/0x2d0
[  548.534093][ T9469] erspan0: entered allmulticast mode
[  548.538933][ T9471]  dump_stack+0x1e/0x24
[  548.547698][ T9469] ip_vti0: entered allmulticast mode
[  548.550127][ T9471]  should_fail_ex+0x748/0x7f0
[  548.561450][ T9469] ip6_vti0: entered allmulticast mode
[  548.565087][ T9471]  should_failslab+0x17f/0x210
[  548.575173][ T9469] sit0: entered allmulticast mode
[  548.579747][ T9469] ip6tnl0: entered allmulticast mode
[  548.580086][ T9471]  kmem_cache_alloc_node_noprof+0xf4/0xe00
[  548.593814][ T9469] ip6gre0: entered allmulticast mode
[  548.596379][ T9471]  ? __alloc_skb+0x1e9/0x7b0
[  548.606799][ T9469] syz_tun: entered allmulticast mode
[  548.608162][ T9471]  ? kmsan_get_metadata+0x13e/0x1c0
[  548.618777][ T9469] ip6gretap0: entered allmulticast mode
[  548.624006][ T9469] bridge0: entered allmulticast mode
[  548.624472][ T9471]  __alloc_skb+0x1e9/0x7b0
[  548.635540][ T9469] vcan0: entered allmulticast mode
[  548.635543][ T9471]  netlink_alloc_large_skb+0x1b4/0x280
[  548.642326][ T9469] bond0: entered allmulticast mode
[  548.646299][ T9471]  netlink_sendmsg+0xa96/0x11e0
[  548.651578][ T9469] bond_slave_0: entered allmulticast mode
[  548.656355][ T9471]  ? __pfx_netlink_sendmsg+0x10/0x10
[  548.662491][ T9469] bond_slave_1: entered allmulticast mode
[  548.667483][ T9471]  ? __pfx_netlink_sendmsg+0x10/0x10
[  548.679180][ T9471]  __sock_sendmsg+0x30f/0x380
[  548.679924][ T9469] team0: entered allmulticast mode
[  548.684157][ T9471]  ____sys_sendmsg+0x877/0xb60
[  548.684347][ T9471]  ___sys_sendmsg+0x28d/0x3c0
[  548.684514][ T9471]  ? __rcu_read_unlock+0x7b/0xe0
[  548.684698][ T9471]  ? __fget_files+0x42b/0x500
[  548.684865][ T9471]  ? kmsan_get_metadata+0x13e/0x1c0
[  548.685008][ T9471]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  548.685166][ T9471]  __x64_sys_sendmsg+0x212/0x3c0
[  548.685332][ T9471]  ? kmsan_get_metadata+0x13e/0x1c0
[  548.685484][ T9471]  x64_sys_call+0x2ed6/0x3c30
[  548.685676][ T9471]  do_syscall_64+0xcd/0x1e0
[  548.685810][ T9471]  ? clear_bhb_loop+0x25/0x80
[  548.685996][ T9471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.686177][ T9471] RIP: 0033:0x7faf35385d19
[  548.686290][ T9471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  548.686420][ T9471] RSP: 002b:00007faf36199038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  548.686567][ T9471] RAX: ffffffffffffffda RBX: 00007faf35575fa0 RCX: 00007faf35385d19
[  548.686676][ T9471] RDX: 0000000000000800 RSI: 00000000200001c0 RDI: 0000000000000003
[  548.686775][ T9471] RBP: 00007faf36199090 R08: 0000000000000000 R09: 0000000000000000
[  548.686878][ T9471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  548.686971][ T9471] R13: 0000000000000000 R14: 00007faf35575fa0 R15: 00007fff8f4219e8
[  548.687091][ T9471]  </TASK>
[  548.693184][ T9469] team_slave_0: entered allmulticast mode
[  548.843583][ T9469] team_slave_1: entered allmulticast mode
[  548.864381][ T9469] nlmon0: entered allmulticast mode
[  549.077605][ T9469] caif0: entered allmulticast mode
[  549.084288][ T9469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  549.128811][    T8] usb 1-1: not running at top speed; connect to a high speed hub
[  549.152262][    T8] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  549.165813][    T8] usb 1-1: config 1 interface 0 has no altsetting 0
[  549.189639][    T8] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.40
[  549.202707][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.212500][    T8] usb 1-1: Product: х
[  549.216857][    T8] usb 1-1: Manufacturer: 㠊
[  549.221827][    T8] usb 1-1: SerialNumber: 坜鸓穹тႍྏ榄攡왪⎲ꢧ齓郞矞浈氚캛֝䄊ⴂ滮닥䁢┳鄇㎳撂椬謍⤪涡蜷㈙ꛖ詾床Ꮼ貯
[  550.302530][    T8] usbhid 1-1:1.0: can't add hid device: -71
[  550.309306][    T8] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  550.403405][ T1629] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  550.514115][ T9488] loop5: detected capacity change from 0 to 512
[  550.521403][ T9482] loop2: detected capacity change from 0 to 512
[  550.572181][    T8] usb 1-1: USB disconnect, device number 14
[  550.660807][ T5866] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  550.746010][ T1629] usb 5-1: Using ep0 maxpacket: 8
[  550.785225][ T1629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  550.797750][ T1629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  550.808626][ T1629] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  550.822037][ T1629] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  550.831563][ T1629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.861720][ T9488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  550.877651][ T1629] usb 5-1: config 0 descriptor??
[  550.919774][ T9482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.934201][ T9482] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  551.001570][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.013151][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  551.023632][ T5866] usb 4-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00
[  551.033098][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.081356][ T9481] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present
[  551.146488][ T5866] usb 4-1: config 0 descriptor??
[  551.182853][   T29] audit: type=1800 audit(1734146727.237:149): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.922" name="file1" dev="loop2" ino=15 res=0 errno=0
[  551.224067][ T5866] usbhid 4-1:0.0: can't add hid device: -22
[  551.230937][ T5866] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  551.261148][   T29] audit: type=1800 audit(1734146727.267:150): pid=9481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.922" name="file2" dev="loop2" ino=16 res=0 errno=0
[  551.392686][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'.
[  551.402572][ T9497] netlink: 'syz.3.924': attribute type 6 has an invalid length.
[  551.431463][ T9497] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  551.440917][ T9497] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  551.455221][ T9497] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  551.465559][ T9497] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  551.475084][ T9497] vxlan0: entered promiscuous mode
[  551.581549][    T8] usb 4-1: USB disconnect, device number 20
[  551.599038][ T1629] usbhid 5-1:0.0: can't add hid device: -71
[  551.607285][ T1629] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  551.709516][ T1629] usb 5-1: USB disconnect, device number 16
[  552.104847][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  552.529621][ T9509] loop3: detected capacity change from 0 to 16
[  552.670914][ T9509] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 66300)
[  553.413469][ T9510] loop4: detected capacity change from 0 to 4096
[  553.530999][ T9510] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  553.564355][ T9512] loop0: detected capacity change from 0 to 4096
[  553.688585][ T9512] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  553.982241][ T9516] loop2: detected capacity change from 0 to 40427
[  553.993821][ T9516] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  554.002014][ T9516] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  554.061667][ T9510] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  554.093693][ T9516] F2FS-fs (loop2): Found nat_bits in checkpoint
[  554.103532][ T9512] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  554.399271][ T9516] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  554.407055][ T9516] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  554.744971][ T9516] syz.2.927 (9516) used greatest stack depth: 4024 bytes left
[  554.759252][ T9519] loop3: detected capacity change from 0 to 4096
[  554.802626][ T9510] ntfs3(loop4): ino=5, "/" ntfs3_write_inode failed, -22.
[  554.851345][ T9519] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  554.883940][ T6629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.769852][ T5781] syz-executor: attempt to access beyond end of device
[  555.769852][ T5781] loop2: rw=2051, sector=49152, nr_sectors = 4096 limit=40427
[  555.901308][ T5781] F2FS-fs (loop2): Issue discard(6144, 6144, 512) failed, ret: -5
[  556.029982][ T9529] loop5: detected capacity change from 0 to 512
[  556.459656][ T9531] loop4: detected capacity change from 0 to 32768
[  556.488384][ T9531] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.938 (9531)
[  556.651433][ T9531] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  556.662187][ T9531] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm
[  556.691068][ T9529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  556.704428][ T9529] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  556.754693][ T9535] loop0: detected capacity change from 0 to 256
[  556.964794][ T9529] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present
[  557.019741][   T29] audit: type=1800 audit(1734146733.067:151): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.937" name="file1" dev="loop5" ino=15 res=0 errno=0
[  557.041622][   T29] audit: type=1800 audit(1734146733.077:152): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.937" name="file2" dev="loop5" ino=16 res=0 errno=0
[  557.229104][ T9549] loop3: detected capacity change from 0 to 1024
[  557.273306][ T9531] BTRFS info (device loop4): rebuilding free space tree
[  557.355681][ T9531] BTRFS info (device loop4): disabling free space tree
[  557.363138][ T9531] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  557.373404][ T9531] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  557.398044][ T9535] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  557.526048][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'.
[  557.741660][ T6629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.338351][ T9548] kvm: emulating exchange as write
[  558.343035][ T9565] syz_tun: tun_net_xmit 42
[  558.403577][ T5783] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  558.429506][ T9566] netlink: 100 bytes leftover after parsing attributes in process `syz.0.941'.
[  559.210268][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz.5.945'.
[  559.299714][ T9578] binder: 9573:9578 ioctl c0306201 0 returned -14
[  559.371470][    C1] syz_tun: tun_net_xmit 42
[  559.416751][ T3991] hfsplus: b-tree write err: -5, ino 4
[  559.801113][ T1629] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  559.862267][ T5845] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  560.002513][ T1629] usb 3-1: device descriptor read/64, error -71
[  560.030432][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.041041][ T5845] usb 5-1: config 0 interface 0 has no altsetting 0
[  560.047972][ T5845] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  560.059737][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.214284][ T5845] usb 5-1: config 0 descriptor??
[  560.234924][ T5845] usb 5-1: selecting invalid altsetting 0
[  560.245474][ T1629] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  560.411003][    C1] syz_tun: tun_net_xmit 42
[  560.523327][ T5845] usb 5-1: USB disconnect, device number 17
[  560.681225][ T9590] loop0: detected capacity change from 0 to 4096
[  560.721990][ T1629] usb 3-1: device descriptor read/64, error -71
[  560.808619][ T9590] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  560.832615][ T1629] usb usb3-port1: attempt power cycle
[  560.839514][ T9588] loop3: detected capacity change from 0 to 4096
[  560.901402][ T9588] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  560.995106][ T9590] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  561.021326][    T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  561.053334][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  561.170916][    T8] usb 6-1: device descriptor read/64, error -71
[  561.184080][ T9590] ntfs3(loop0): ino=5, "/" ntfs3_write_inode failed, -22.
[  561.201133][ T1629] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  561.223508][ T1629] usb 3-1: device descriptor read/8, error -71
[  561.271229][ T9588] ntfs3(loop3): failed to convert "c46c" to iso8859-13
[  561.432900][    T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  561.471287][ T1629] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  561.571438][ T1629] usb 3-1: device descriptor read/8, error -71
[  561.633043][    T8] usb 6-1: device descriptor read/64, error -71
[  561.687356][ T1629] usb usb3-port1: unable to enumerate USB device
[  561.742067][    T8] usb usb6-port1: attempt power cycle
[  561.814283][ T9597] netlink: 100 bytes leftover after parsing attributes in process `syz.0.953'.
[  562.180934][    T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  562.269277][    T8] usb 6-1: device descriptor read/8, error -71
[  562.419125][ T9596] loop4: detected capacity change from 0 to 32768
[  562.430606][ T9596] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.952 (9596)
[  562.453299][ T9596] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  562.464888][ T9596] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm
[  562.540735][    T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  562.594291][    T8] usb 6-1: device descriptor read/8, error -71
[  562.732231][    T8] usb usb6-port1: unable to enumerate USB device
[  562.814351][ T9596] BTRFS info (device loop4): rebuilding free space tree
[  562.860029][ T9596] BTRFS info (device loop4): disabling free space tree
[  562.867554][ T9596] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  562.877723][ T9596] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  563.084844][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.952'.
[  563.140806][ T5845] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  563.399543][ T5845] usb 1-1: config 4 has an invalid interface number: 231 but max is 0
[  563.408969][ T5845] usb 1-1: config 4 has no interface number 0
[  563.424708][ T5783] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  563.434546][ T5845] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  563.444541][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.453154][ T5845] usb 1-1: Product: syz
[  563.457610][ T5845] usb 1-1: Manufacturer: syz
[  563.462703][ T5845] usb 1-1: SerialNumber: syz
[  563.491764][ T5845] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  563.718624][ T9629] netlink: 72 bytes leftover after parsing attributes in process `syz.2.960'.
[  564.775149][ T9639] binder: 9637:9639 ioctl c0481273 20000400 returned -22
[  565.160096][ T9645] netlink: 100 bytes leftover after parsing attributes in process `syz.4.965'.
[  565.191408][ T5866] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  565.244338][ T9642] loop3: detected capacity change from 0 to 4096
[  565.282028][ T9642] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  565.393808][ T5866] usb 6-1: Using ep0 maxpacket: 32
[  565.442457][ T5866] usb 6-1: config 0 has no interfaces?
[  565.503238][ T5866] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  565.513208][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.521816][ T5866] usb 6-1: Product: syz
[  565.526409][ T5866] usb 6-1: Manufacturer: syz
[  565.531554][ T5866] usb 6-1: SerialNumber: syz
[  565.696073][ T5866] usb 6-1: config 0 descriptor??
[  565.810873][ T9642] ntfs3(loop3): failed to convert "c46c" to iso8859-13
[  565.854347][ T5845] vp7045: USB control message 'in' went wrong.
[  565.860890][ T5845] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  565.871821][ T5845] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  566.111019][    T8] usb 1-1: USB disconnect, device number 15
[  566.125751][ T9636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.135759][ T9636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.301457][ T1629] usb 6-1: USB disconnect, device number 11
[  566.720103][ T9655] loop2: detected capacity change from 0 to 512
[  566.769047][ T9655] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  566.992075][ T9655] loop2: detected capacity change from 0 to 2048
[  568.255785][ T9659] loop3: detected capacity change from 0 to 32768
[  568.268532][ T9659] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.969 (9659)
[  568.294084][ T9659] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  568.304873][ T9659] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[  568.369649][ T9667] loop2: detected capacity change from 0 to 4096
[  568.526571][ T9667] ntfs3(loop2): Failed to load $Volume (-22).
[  568.603875][ T9680] netlink: 100 bytes leftover after parsing attributes in process `syz.5.977'.
[  568.718368][ T5845] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  568.902096][ T9659] BTRFS info (device loop3): rebuilding free space tree
[  568.983393][ T9659] BTRFS info (device loop3): disabling free space tree
[  568.991283][ T9659] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  568.991435][ T5845] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  569.001741][ T9659] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  569.010998][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.029683][ T5845] usb 1-1: Product: syz
[  569.034491][ T5845] usb 1-1: Manufacturer: syz
[  569.039331][ T5845] usb 1-1: SerialNumber: syz
[  569.134592][ T9685] loop4: detected capacity change from 0 to 4096
[  569.144391][ T5845] usb 1-1: config 0 descriptor??
[  569.160782][ T5845] hub 1-1:0.0: bad descriptor, ignoring hub
[  569.170584][ T5845] hub 1-1:0.0: probe with driver hub failed with error -5
[  569.180248][ T5845] f81232 1-1:0.0: f81534a converter detected
[  569.260847][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'.
[  569.366852][ T9685] NILFS (loop4): invalid segment: Checksum error in segment payload
[  569.380249][ T9685] NILFS (loop4): trying rollback from an earlier position
[  569.743613][ T9695] loop5: detected capacity change from 0 to 4096
[  569.762783][ T9695] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  569.898385][ T9685] NILFS (loop4): recovery complete
[  570.018635][ T9696] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  570.114376][ T5787] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  570.282065][ T9698] loop2: detected capacity change from 0 to 2048
[  570.427308][ T9698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  570.519814][ T9695] ntfs3(loop5): failed to convert "c46c" to iso8859-13
[  570.538201][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'.
[  570.771794][ T9698] hsr_slave_1 (unregistering): left promiscuous mode
[  570.831556][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.980'.
[  570.967960][ T9706] loop4: detected capacity change from 0 to 128
[  571.079476][ T5845] f81534a ttyUSB0: f81232_set_register failed status: -71
[  571.087058][ T5845] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[  571.294690][ T5845] usb 1-1: USB disconnect, device number 16
[  571.303735][ T5845] f81232 1-1:0.0: device disconnected
[  571.483586][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.984'.
[  571.506650][ T9712] syz_tun: entered promiscuous mode
[  571.561124][ T9712] syz_tun: left promiscuous mode
[  572.254587][ T9715] loop3: detected capacity change from 0 to 128
[  572.519926][ T9718] loop0: detected capacity change from 0 to 2048
[  572.598752][ T9719] netlink: 100 bytes leftover after parsing attributes in process `syz.3.989'.
[  572.687625][ T9725] loop2: detected capacity change from 0 to 512
[  572.836402][ T9725] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  572.998835][ T9718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  573.033031][ T9725] EXT4-fs (loop2): 1 truncate cleaned up
[  573.083676][ T9718] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.986: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  573.104017][ T9725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  573.201252][ T9733] loop4: detected capacity change from 0 to 1024
[  573.298909][ T9733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  573.602418][ T9733] EXT4-fs: Ignoring removed orlov option
[  573.663517][ T9733] EXT4-fs (loop4): can't enable nombcache during remount
[  574.023537][ T9732] loop3: detected capacity change from 0 to 32768
[  574.044034][ T9732] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.991 (9732)
[  574.069656][ T9732] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  574.084080][ T9732] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[  574.116615][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.990'.
[  574.497799][ T9732] BTRFS info (device loop3): rebuilding free space tree
[  574.551342][ T9732] BTRFS info (device loop3): disabling free space tree
[  574.558764][ T9732] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  574.569183][ T9732] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  574.570769][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.785304][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.152136][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'.
[  575.594997][ T9769] loop4: detected capacity change from 0 to 256
[  575.683834][ T5787] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  575.827907][ T9767] loop5: detected capacity change from 0 to 4096
[  575.841930][ T9767] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  576.541676][ T9767] ntfs3(loop5): failed to convert "c46c" to iso8859-13
[  576.547046][ T9764] loop0: detected capacity change from 0 to 128
[  576.649559][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.110412][ T9778] program syz.2.998 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  577.203396][ T9778] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  577.422393][ T9780] usb usb1: usbfs: process 9780 (syz.5.999) did not claim interface 0 before use
[  577.598323][ T9780] loop5: detected capacity change from 0 to 1764
[  577.928691][ T9785] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1001'.
[  577.997580][ T9783] loop0: detected capacity change from 0 to 2048
[  578.056842][ T9783] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  578.366628][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1002'.
[  578.741717][ T9796] loop3: detected capacity change from 0 to 512
[  578.934355][ T9796] EXT4-fs (loop3): failed to initialize system zone (-117)
[  578.969733][ T9796] EXT4-fs (loop3): mount failed
[  580.846242][ T9808] loop5: detected capacity change from 0 to 32768
[  580.857843][ T9808] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1006 (9808)
[  580.984389][ T9814] loop3: detected capacity change from 0 to 4096
[  581.018448][ T9814] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  581.174435][ T9808] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  581.185436][ T9808] BTRFS info (device loop5): using sha256 (sha256-generic) checksum algorithm
[  581.411622][ T9808] BTRFS info (device loop5): rebuilding free space tree
[  581.558958][ T9808] BTRFS info (device loop5): disabling free space tree
[  581.566369][ T9808] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  581.576619][ T9808] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  581.829235][ T9837] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1013'.
[  581.931846][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1006'.
[  582.191868][ T9814] ntfs3(loop3): failed to convert "c46c" to iso8859-13
[  582.221076][ T9847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1014'.
[  582.379290][    T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  582.408683][ T6629] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  582.686386][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  582.697983][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  582.708493][    T8] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  582.718066][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.774027][    T8] usb 5-1: config 0 descriptor??
[  582.884892][ T9852] loop2: detected capacity change from 0 to 8
[  582.968414][ T9852] SQUASHFS error: zlib decompression failed, data probably corrupt
[  582.977291][ T9852] SQUASHFS error: Failed to read block 0x1b9: -5
[  582.984440][ T9852] SQUASHFS error: Unable to read metadata cache entry [1b7]
[  583.246752][    T8] hid-rmi 0003:1532:011D.0007: unbalanced delimiter at end of report description
[  583.307389][    T8] hid-rmi 0003:1532:011D.0007: parse failed
[  583.314362][    T8] hid-rmi 0003:1532:011D.0007: probe with driver hid-rmi failed with error -22
[  583.478776][ T9835] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1012'.
[  583.889473][ T9863] FAULT_INJECTION: forcing a failure.
[  583.889473][ T9863] name failslab, interval 1, probability 0, space 0, times 0
[  583.902916][ T9863] CPU: 1 UID: 0 PID: 9863 Comm: syz.0.1019 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  583.913915][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  583.924220][ T9863] Call Trace:
[  583.927684][ T9863]  <TASK>
[  583.930797][ T9863]  dump_stack_lvl+0x216/0x2d0
[  583.935799][ T9863]  dump_stack+0x1e/0x24
[  583.940273][ T9863]  should_fail_ex+0x748/0x7f0
[  583.945268][ T9863]  should_failslab+0x17f/0x210
[  583.950332][ T9863]  kmem_cache_alloc_node_noprof+0xf4/0xe00
[  583.956458][ T9863]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  583.963144][ T9863]  ? __alloc_skb+0x1e9/0x7b0
[  583.968023][ T9863]  ? kmsan_get_metadata+0x13e/0x1c0
[  583.973541][ T9863]  __alloc_skb+0x1e9/0x7b0
[  583.978263][ T9863]  _sctp_make_chunk+0x8e/0x7e0
[  583.983362][ T9863]  sctp_make_heartbeat+0x6c/0xa70
[  583.988734][ T9863]  ? filter_irq_stacks+0x60/0x1a0
[  583.994072][ T9863]  ? stack_depot_save_flags+0x2c/0x750
[  583.999847][ T9863]  ? kmsan_get_metadata+0x13e/0x1c0
[  584.005341][ T9863]  sctp_sf_do_prm_requestheartbeat+0x48/0x3a0
[  584.011713][ T9863]  ? kmsan_get_metadata+0x13e/0x1c0
[  584.017191][ T9863]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  584.023276][ T9863]  sctp_do_sm+0x181/0x93d0
[  584.027979][ T9863]  ? __ipv6_addr_type+0x461/0x490
[  584.033369][ T9863]  ? __sctp_v6_cmp_addr+0x2af/0x900
[  584.038895][ T9863]  ? kmsan_get_metadata+0x13e/0x1c0
[  584.044379][ T9863]  ? kmsan_get_metadata+0x13e/0x1c0
[  584.049867][ T9863]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  584.056539][ T9863]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  584.062945][ T9863]  ? kmsan_get_metadata+0x13e/0x1c0
[  584.068431][ T9863]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  584.074577][ T9863]  ? sctp_epaddr_lookup_transport+0xbe6/0xc40
[  584.081020][ T9863]  ? kmsan_get_metadata+0x13e/0x1c0
[  584.086510][ T9863]  ? __pfx_sctp_sf_do_prm_requestheartbeat+0x10/0x10
[  584.093524][ T9863]  ? kmsan_get_metadata+0x13e/0x1c0
[  584.099011][ T9863]  sctp_primitive_REQUESTHEARTBEAT+0xc6/0x100
[  584.105368][ T9863]  sctp_apply_peer_addr_params+0x12f/0x17f0
[  584.111583][ T9863]  sctp_setsockopt_peer_addr_params+0xab5/0xe20
[  584.118144][ T9863]  sctp_setsockopt+0xb9f/0x2040
[  584.123313][ T9863]  ? __pfx_sctp_setsockopt+0x10/0x10
[  584.128906][ T9863]  sock_common_setsockopt+0xf9/0x140
[  584.134499][ T9863]  do_sock_setsockopt+0x4bb/0x7d0
[  584.139800][ T9863]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  584.146011][ T9863]  __x64_sys_setsockopt+0x33d/0x4f0
[  584.151497][ T9863]  x64_sys_call+0x30b9/0x3c30
[  584.156609][ T9863]  do_syscall_64+0xcd/0x1e0
[  584.161385][ T9863]  ? clear_bhb_loop+0x25/0x80
[  584.166379][ T9863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.172606][ T9863] RIP: 0033:0x7f1f0e185d19
[  584.177276][ T9863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  584.197187][ T9863] RSP: 002b:00007f1f0ef70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  584.205921][ T9863] RAX: ffffffffffffffda RBX: 00007f1f0e376080 RCX: 00007f1f0e185d19
[  584.214125][ T9863] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003
[  584.222320][ T9863] RBP: 00007f1f0ef70090 R08: 000000000000009c R09: 0000000000000000
[  584.230531][ T9863] R10: 0000000020000a00 R11: 0000000000000246 R12: 0000000000000001
[  584.238727][ T9863] R13: 0000000000000001 R14: 00007f1f0e376080 R15: 00007ffef4409d68
[  584.246949][ T9863]  </TASK>
[  585.031865][ T9876] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1024'.
[  585.072428][ T9873] 9pnet_fd: Insufficient options for proto=fd
[  585.615013][ T9886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1026'.
[  585.990649][ T9885] loop5: detected capacity change from 0 to 32768
[  585.994752][    T8] usb 5-1: USB disconnect, device number 18
[  586.025840][ T9885] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1025 (9885)
[  586.107287][ T9885] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  586.118187][ T9885] BTRFS info (device loop5): using sha256 (sha256-generic) checksum algorithm
[  586.558151][ T9885] BTRFS info (device loop5): rebuilding free space tree
[  586.577853][ T9891] loop0: detected capacity change from 0 to 4096
[  586.610849][ T9885] BTRFS info (device loop5): disabling free space tree
[  586.618227][ T9885] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  586.628419][ T9885] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  586.749952][ T9891] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  586.868846][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1025'.
[  587.133678][ T5845] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  587.176982][ T6629] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  587.226405][   T29] audit: type=1326 audit(1734146763.287:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd8585d19 code=0x7ffc0000
[  587.250747][   T29] audit: type=1326 audit(1734146763.287:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd8585d19 code=0x7ffc0000
[  587.274514][   T29] audit: type=1326 audit(1734146763.287:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fd8584680 code=0x7ffc0000
[  587.300598][   T29] audit: type=1326 audit(1734146763.287:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fd858591b code=0x7ffc0000
[  587.324146][   T29] audit: type=1326 audit(1734146763.287:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fd858591b code=0x7ffc0000
[  587.337805][ T9922] ntfs3(loop0): failed to convert "c46c" to iso8859-13
[  587.346819][   T29] audit: type=1326 audit(1734146763.317:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fd858591b code=0x7ffc0000
[  587.347034][   T29] audit: type=1326 audit(1734146763.317:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fd858591b code=0x7ffc0000
[  587.411711][   T29] audit: type=1326 audit(1734146763.467:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fd858591b code=0x7ffc0000
[  587.432995][ T9891] ntfs3(loop0): failed to convert "c46c" to iso8859-13
[  587.463783][ T5845] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  587.472734][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  587.484988][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  587.498528][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  587.510913][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  587.524454][ T5845] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  587.533875][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.570006][   T29] audit: type=1326 audit(1734146763.607:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fd858591b code=0x7ffc0000
[  587.610662][ T5839] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  587.629576][ T5845] usb 5-1: config 0 descriptor??
[  587.636449][   T29] audit: type=1326 audit(1734146763.677:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fd858591b code=0x7ffc0000
[  587.648667][ T9911] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  587.730202][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  587.737282][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  588.184042][ T5839] usb 4-1: device descriptor read/64, error -71
[  588.269442][ T5845] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd
[  588.372336][ T5845] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  588.451656][ T5839] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  588.664682][ T9929] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1036'.
[  588.675937][ T9924] loop5: detected capacity change from 0 to 4096
[  588.752703][ T5845] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  588.832209][ T9924] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  588.860951][ T5839] usb 4-1: device descriptor read/64, error -71
[  588.873148][ T5845] usb 5-1: USB disconnect, device number 19
[  588.966970][ T9924] ntfs3(loop5): Failed to load $BadClus (-22).
[  588.976537][ T5839] usb usb4-port1: attempt power cycle
[  589.074004][ T9924] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1033'.
[  589.271797][ T9931] loop0: detected capacity change from 0 to 2048
[  589.381673][ T5839] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  589.457558][ T5839] usb 4-1: device descriptor read/8, error -71
[  589.731210][ T5839] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  589.807696][ T9937] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (34504)
[  589.818081][ T9937] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  589.840633][ T5839] usb 4-1: device descriptor read/8, error -71
[  589.962667][ T5839] usb usb4-port1: unable to enumerate USB device
[  590.034532][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1040'.
[  591.134463][ T9952] loop4: detected capacity change from 0 to 512
[  591.153493][ T9952] EXT4-fs: Invalid want_extra_isize 9
[  591.618382][ T9950] loop2: detected capacity change from 0 to 32768
[  591.861597][ T9947] loop3: detected capacity change from 0 to 4096
[  591.906407][ T9950] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1043 (9950)
[  591.914936][ T9952] loop4: detected capacity change from 0 to 32768
[  591.952938][ T9950] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  591.963687][ T9950] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[  592.051889][ T9947] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  592.224032][ T9952] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  592.706372][ T9950] BTRFS info (device loop2): rebuilding free space tree
[  592.776306][ T9950] BTRFS info (device loop2): disabling free space tree
[  592.784062][ T9950] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  592.794190][ T9950] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  592.951528][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1043'.
[  593.652271][ T9978] tipc: Can't bind to reserved service type 1
[  593.671225][ T9978] FAULT_INJECTION: forcing a failure.
[  593.671225][ T9978] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  593.684875][ T9978] CPU: 1 UID: 0 PID: 9978 Comm: syz.0.1048 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  593.695872][ T9978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  593.706346][ T9978] Call Trace:
[  593.709819][ T9978]  <TASK>
[  593.712935][ T9978]  dump_stack_lvl+0x216/0x2d0
[  593.717933][ T9978]  dump_stack+0x1e/0x24
[  593.722382][ T9978]  should_fail_ex+0x748/0x7f0
[  593.727377][ T9978]  should_fail+0x2a/0x40
[  593.731915][ T9978]  should_fail_usercopy+0x2e/0x40
[  593.737250][ T9978]  _copy_to_user+0x34/0x120
[  593.742145][ T9978]  simple_read_from_buffer+0x199/0x340
[  593.747943][ T9978]  proc_fail_nth_read+0x1e5/0x2c0
[  593.753269][ T9978]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  593.759103][ T9978]  vfs_read+0x29d/0xf50
[  593.763636][ T9978]  ? stack_depot_save_flags+0x2c/0x750
[  593.769434][ T9978]  ? kmsan_get_metadata+0x13e/0x1c0
[  593.774970][ T9978]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  593.781637][ T9978]  ksys_read+0x240/0x4b0
[  593.786175][ T9978]  ? kmsan_get_metadata+0x13e/0x1c0
[  593.791653][ T9978]  __x64_sys_read+0x93/0xe0
[  593.796485][ T9978]  x64_sys_call+0x314c/0x3c30
[  593.801475][ T9978]  do_syscall_64+0xcd/0x1e0
[  593.806231][ T9978]  ? clear_bhb_loop+0x25/0x80
[  593.811195][ T9978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.817377][ T9978] RIP: 0033:0x7f1f0e18472c
[  593.822014][ T9978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  593.841899][ T9978] RSP: 002b:00007f1f0efaa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  593.850625][ T9978] RAX: ffffffffffffffda RBX: 00007f1f0e375fa0 RCX: 00007f1f0e18472c
[  593.858848][ T9978] RDX: 000000000000000f RSI: 00007f1f0efaa0a0 RDI: 0000000000000004
[  593.867076][ T9978] RBP: 00007f1f0efaa090 R08: 0000000000000000 R09: 0000000000000000
[  593.875306][ T9978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  593.883502][ T9978] R13: 0000000000000000 R14: 00007f1f0e375fa0 R15: 00007ffef4409d68
[  593.891744][ T9978]  </TASK>
[  593.926037][ T9979] loop5: detected capacity change from 0 to 512
[  593.935738][ T9947] ntfs3(loop3): Failed to read $UpCase (-4).
[  594.083606][ T5783] ocfs2: Unmounting device (7,4) on (node local)
[  594.096013][ T5781] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  594.402688][ T9984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1052'.
[  594.556954][ T9979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  594.574332][ T9979] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  594.678261][ T9973] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present
[  594.825393][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  594.825478][   T29] audit: type=1800 audit(1734146770.887:187): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1047" name="file1" dev="loop5" ino=15 res=0 errno=0
[  594.930987][   T29] audit: type=1800 audit(1734146770.917:188): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1047" name="file2" dev="loop5" ino=16 res=0 errno=0
[  595.068002][ T9987] loop4: detected capacity change from 0 to 2048
[  595.112619][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'.
[  595.222817][ T9987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  595.235892][ T9987] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  595.545673][ T9999] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  595.669271][ T6629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.791817][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  596.201617][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  596.403277][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  597.324695][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  597.326353][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  597.529193][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  597.531597][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  604.604898][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.679679][T10013] loop0: detected capacity change from 0 to 64
[  604.820192][T10016] loop2: detected capacity change from 0 to 512
[  606.983357][T10026] overlayfs: failed to resolve './file2': -2
[  607.014838][T10016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  607.028159][T10016] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  607.367139][T10031] loop3: detected capacity change from 0 to 256
[  607.387204][T10016] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 3: comm syz.2.1050: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0
[  607.595476][T10033] =====================================================
[  607.602853][T10033] BUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x470
[  607.609476][T10033]  ax25cmp+0x3a5/0x470
[  607.613891][T10033]  nr_dev_get+0x20e/0x450
[  607.618425][T10033]  nr_route_frame+0x1a2/0xfe0
[  607.623378][T10033]  nr_xmit+0x5a/0x1c0
[  607.627565][T10033]  dev_hard_start_xmit+0x247/0xa20
[  607.632958][T10033]  __dev_queue_xmit+0x366a/0x57d0
[  607.638179][T10033]  raw_sendmsg+0x6b5/0xdf0
[  607.642863][T10033]  ieee802154_sock_sendmsg+0x96/0xd0
[  607.648379][T10033]  __sock_sendmsg+0x30f/0x380
[  607.653459][T10033]  ____sys_sendmsg+0x903/0xb60
[  607.658418][T10033]  ___sys_sendmsg+0x28d/0x3c0
[  607.663392][T10033]  __sys_sendmmsg+0x2ff/0x880
[  607.668312][T10033]  __x64_sys_sendmmsg+0xbc/0x120
[  607.673579][T10033]  x64_sys_call+0x33c2/0x3c30
[  607.678508][T10033]  do_syscall_64+0xcd/0x1e0
[  607.683296][T10033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.689427][T10033] 
[  607.691989][T10033] Uninit was created at:
[  607.696484][T10033]  kmem_cache_alloc_node_noprof+0x907/0xe00
[  607.702583][T10033]  kmalloc_reserve+0x13d/0x4a0
[  607.707440][T10033]  __alloc_skb+0x363/0x7b0
[  607.712003][T10033]  alloc_skb_with_frags+0xc8/0xd00
[  607.717217][T10033]  sock_alloc_send_pskb+0xa81/0xbf0
[  607.722590][T10033]  raw_sendmsg+0x367/0xdf0
[  607.727125][T10033]  ieee802154_sock_sendmsg+0x96/0xd0
[  607.732578][T10033]  __sock_sendmsg+0x30f/0x380
[  607.737367][T10033]  ____sys_sendmsg+0x903/0xb60
[  607.742376][T10033]  ___sys_sendmsg+0x28d/0x3c0
[  607.747325][T10033]  __sys_sendmmsg+0x2ff/0x880
[  607.752167][T10033]  __x64_sys_sendmmsg+0xbc/0x120
[  607.757378][T10033]  x64_sys_call+0x33c2/0x3c30
[  607.762422][T10033]  do_syscall_64+0xcd/0x1e0
[  607.767034][T10033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.773160][T10033] 
[  607.775530][T10033] CPU: 0 UID: 0 PID: 10033 Comm: syz.4.1062 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  607.786462][T10033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  607.796759][T10033] =====================================================
[  607.803808][T10033] Disabling lock debugging due to kernel taint
[  607.810017][T10033] Kernel panic - not syncing: kmsan.panic set ...
[  607.816494][T10033] CPU: 0 UID: 0 PID: 10033 Comm: syz.4.1062 Tainted: G    B              6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  607.828855][T10033] Tainted: [B]=BAD_PAGE
[  607.833147][T10033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  607.843276][T10033] Call Trace:
[  607.846624][T10033]  <TASK>
[  607.849607][T10033]  dump_stack_lvl+0x216/0x2d0
[  607.854407][T10033]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  607.860329][T10033]  dump_stack+0x1e/0x24
[  607.864666][T10033]  panic+0x4e2/0xcf0
[  607.868700][T10033]  ? kmsan_get_metadata+0x71/0x1c0
[  607.873961][T10033]  kmsan_report+0x2c7/0x2d0
[  607.878638][T10033]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  607.885514][T10033]  ? filter_irq_stacks+0x60/0x1a0
[  607.890754][T10033]  ? kmsan_get_metadata+0x13e/0x1c0
[  607.896057][T10033]  ? __msan_warning+0x95/0x120
[  607.900961][T10033]  ? ax25cmp+0x3a5/0x470
[  607.905309][T10033]  ? nr_dev_get+0x20e/0x450
[  607.909932][T10033]  ? nr_route_frame+0x1a2/0xfe0
[  607.914909][T10033]  ? nr_xmit+0x5a/0x1c0
[  607.919153][T10033]  ? dev_hard_start_xmit+0x247/0xa20
[  607.924536][T10033]  ? __dev_queue_xmit+0x366a/0x57d0
[  607.929852][T10033]  ? raw_sendmsg+0x6b5/0xdf0
[  607.934554][T10033]  ? ieee802154_sock_sendmsg+0x96/0xd0
[  607.940132][T10033]  ? __sock_sendmsg+0x30f/0x380
[  607.945133][T10033]  ? ____sys_sendmsg+0x903/0xb60
[  607.950179][T10033]  ? ___sys_sendmsg+0x28d/0x3c0
[  607.955147][T10033]  ? __sys_sendmmsg+0x2ff/0x880
[  607.960119][T10033]  ? __x64_sys_sendmmsg+0xbc/0x120
[  607.965374][T10033]  ? x64_sys_call+0x33c2/0x3c30
[  607.970423][T10033]  ? do_syscall_64+0xcd/0x1e0
[  607.975281][T10033]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.981581][T10033]  ? kmsan_get_metadata+0x13e/0x1c0
[  607.986888][T10033]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  607.992813][T10033]  ? kmem_cache_free+0x401/0xdf0
[  607.997900][T10033]  ? __kfree_skb+0x1f6/0x250
[  608.002614][T10033]  ? __kfree_skb+0x1f6/0x250
[  608.007296][T10033]  ? kmsan_get_metadata+0x13e/0x1c0
[  608.012602][T10033]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  608.018513][T10033]  __msan_warning+0x95/0x120
[  608.023228][T10033]  ax25cmp+0x3a5/0x470
[  608.027407][T10033]  nr_dev_get+0x20e/0x450
[  608.031841][T10033]  nr_route_frame+0x1a2/0xfe0
[  608.036632][T10033]  ? __pfx_packet_rcv+0x10/0x10
[  608.041599][T10033]  ? dev_queue_xmit_nit+0x1311/0x1460
[  608.047099][T10033]  ? kmsan_get_metadata+0x13e/0x1c0
[  608.052406][T10033]  nr_xmit+0x5a/0x1c0
[  608.056497][T10033]  ? __pfx_nr_xmit+0x10/0x10
[  608.061180][T10033]  dev_hard_start_xmit+0x247/0xa20
[  608.066413][T10033]  __dev_queue_xmit+0x366a/0x57d0
[  608.071550][T10033]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  608.077497][T10033]  ? _copy_from_iter+0x9ae/0x2b00
[  608.082720][T10033]  ? __dev_queue_xmit+0x3d6/0x57d0
[  608.087977][T10033]  raw_sendmsg+0x6b5/0xdf0
[  608.092518][T10033]  ? __pfx_raw_sendmsg+0x10/0x10
[  608.097576][T10033]  ieee802154_sock_sendmsg+0x96/0xd0
[  608.102994][T10033]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  608.109098][T10033]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  608.115216][T10033]  __sock_sendmsg+0x30f/0x380
[  608.120029][T10033]  ____sys_sendmsg+0x903/0xb60
[  608.124938][T10033]  ___sys_sendmsg+0x28d/0x3c0
[  608.129732][T10033]  ? __rcu_read_unlock+0x7b/0xe0
[  608.134802][T10033]  ? __fget_files+0x42b/0x500
[  608.139612][T10033]  ? kmsan_get_metadata+0x13e/0x1c0
[  608.144941][T10033]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  608.150884][T10033]  __sys_sendmmsg+0x2ff/0x880
[  608.155683][T10033]  ? do_futex+0x341/0x4a0
[  608.160123][T10033]  ? kmsan_get_metadata+0x13e/0x1c0
[  608.165457][T10033]  __x64_sys_sendmmsg+0xbc/0x120
[  608.170560][T10033]  x64_sys_call+0x33c2/0x3c30
[  608.175415][T10033]  do_syscall_64+0xcd/0x1e0
[  608.180146][T10033]  ? clear_bhb_loop+0x25/0x80
[  608.185025][T10033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.191053][T10033] RIP: 0033:0x7fcef0f85d19
[  608.195546][T10033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  608.215704][T10033] RSP: 002b:00007fcef1e9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  608.224226][T10033] RAX: ffffffffffffffda RBX: 00007fcef1175fa0 RCX: 00007fcef0f85d19
[  608.232287][T10033] RDX: 000000000000fdef RSI: 00000000200020c0 RDI: 0000000000000004
[  608.240363][T10033] RBP: 00007fcef1001a20 R08: 0000000000000000 R09: 0000000000000000
[  608.248462][T10033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  608.256513][T10033] R13: 0000000000000000 R14: 00007fcef1175fa0 R15: 00007fff7012f0a8
[  608.264597][T10033]  </TASK>
[  608.268088][T10033] Kernel Offset: disabled
[  608.272490][T10033] Rebooting in 86400 seconds..