last executing test programs:

15.252073575s ago: executing program 1 (id=1881):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x51, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x2, 0x2}, {0x2, 0x0, 0x0, 0x0, @adapter}]})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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")
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000c80)='\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0xc85, &(0x7f0000001980)="$eJzs3V1oXOl5B/Dn1ZFsyds0s5uN8+FAh24gW292kSzvWsUbkGNFZMF4zcrKxULBY0t2h9WXJbl4QwkuJJSQtrjkIpc1bEJ7V0OhhaUB92obQkD0qvSiuO3GbO8mIWlLL6JwZt6RRlp9xbYs2fv7Gft/5sxzzrxnVs/oHO05OgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARHz5K6f6B9IWBT2PcDAAwCNxduyN/sGtvv8DAE+c89sd/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQESKIr4ZKd75TiNdaD5u6T1Tn7l2fXxkdOPF+lKk6IqiWV/+7R04Nnj85VdODLVz6+Ufts/E62PnT1VPz07PzU8uLExOVMdn6pdmJyZ3vIYHXX69o803oDr91rWJy5cXqsdeGlzz9PXKvYNPHa6cHDoy+Ga7dnxkdHSso6a7575f/UPSw1sVT5ADUcRXI8V7L36QahHRFQ/eC9t8duy2vugu+6+5EeMjo80NmarXZhbLJ1NXruqOqHQsNNzukUfQiw9kOOJG+d+pHPDRcvPG5mrztYtTk9VztfnF+mJ9diZ1tUZbbk8lumIoRcxFRKPY68Gz3/REEccjxb2fN9LFiCjaffDC2bE3+ge3X0H3IxjkJi9bKSKW4jHoWdinDkYRfxkpvnuhPy7lvmq2zfsRXyjz1YirZd5JcTM/TuUHxFDEz3w/gcdadxTxk0gxmxppot37zf3KM1+rvjZzebajtr1f+ZgcHxw6uPH8vt192XXsm7CP9UYRF5t7/I10/z/sAgAAAAAAAAAAAAAejSLejRS3p59Pc9F5TWl95kr1fO3iVOus4Pa5/9W81PLygaikMpeXqzn7cw7nPJfzQs65nDdy3sx5K+ftnHdyLuW8m7ORM7paWclZzdmfczjnuZwXcs7lvJHzZs5bOW/nvJNzKefdnI2c4bonAAAAAAAAAAAAAAAAAAAAHrK+KGI0Utx654+a95WO5n3pP35y6OzIs533jP/UNuspa1+KiHdjZ/fk7cn3Gk9d5Z+Hv13A9nqjiG80pxrpT/Z6MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL7QFUV8M1J875eNFCkihiMuRCvvFns9OgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg1JuKOB0p/vsrvc3HSxHx2Yj41XL5J+L/ltfb6xEDAAAAAAAAAAAAAAAAAADAEygVcTVSfP+9RqpExPXKvYNPHa6cHDoy+GYRRaSypLP+9bHzp6qnZ6fn5icXFiYnquMz9UuzE5M7fbneM/WZa9fHR0Z3ZWO21bfL4+/rPT079/Z8/cofLm74/KHeUxcXFudrlzZ+OvqiO6K/c87R5oDHR0abg56q12aai6auTQbYHVHd6cYAAAAAAAAAAAAAAAAAAACwbxxKRYxEiud+eDy1rxvvbl3z/7HWo2Kl9gd/vPq7AKbWZVvn7w9YnW5frL5+/uCbaacDPdq88L46PjI6OtYxu7vnw6XlmFIq4pOR4sg/frp5PXyKQxteG1/W/VmkGPr/47mucqSsG15T1Xt0fGS0enZ25sVTU1Ozl2p9tYtTk9WxudqlHf/iAAAAAAAAAAAAAAAAAAAAANjCoVTEn0eK468tpfZ95/P1/92tRx3X/78a0b6SvzetzRXNa/t/u3ltf2v64yeHXjv23Gbzd+P6/3JMKRXxq0jx9F99unk//fb1//3rasu670eKn3zrc7mu60BZN9DenNYaL9enJvvL2hcixbfPtWujWftKrv3Eau1AWftPkeKZP1hbeyLXPrtae6ysvRcpRs9uXPvJ1drBsrYvUnzxT6vt2kNl7Zdz7eHV2pcuzU5N7PTt5aOp7P9/jxSfH/hqan/Nb9r/Hb//48a6XPGhnt96+mH1f6Vj3o3c18u5/we26f+rkeIvbn4u17V671h+/unmv6v9/+1I8XsfW1v7cq59ZrV2YKebBXup7P8fRYqlu/+68jWf+z931mqHdvb/Z7vXZnu/YK/6/+mOeZU8rsHf8L2Aj5qFt7/+Vm1qanL+wxPDEbHJU0/WRNofw9h6oi8idu8lfmfvN9DE/prY4MPir3+xvLwHn1HA7ij3//8nUnzpapHax7F5//+3Wo9Wj///9xur+/8n1+WKPdr/f6Zj3sl81NLTHdG7OD3X86mI3oW3v/5ifbp2ZfLK5Mzg4NCJ3z8+cOzEQM+B9sH96tSO3zt43JX9/1ak+MHf/svKz7HXHv9v/PO/Q+tyxR71/yc6t2nNcc2O3wr4yCn7/28ixb/d+mDl/zdt9fO/9s/5nn9ubfa1i/ao/5/tmFfN/wx1zHu+iDi109cCAAAAAAAAAIDHxKFUxA8jxd83/nnlnvdrz/+Jz7drO8//28zG9//ffHqD9R3ccMW/wfX/AMDWyu//Y5Hix4e+mNq/Q2Yn5/9PrMsVe3T+7+GOeRNbX9f80CZ2/CYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB9SlHEwUjxznca6W5RPm7pPVOfuXZ9fGR048XenY2Iriia9eXf3oFjg8dffuXEUDu3Xv5h+0y8Pnb+VPX07PTc/OTCwuREdXymfml2YnLHa3jQ5dc72nwDqtNvXZu4fHmheuylwTVPX6/cO/jU4crJoSODb5a1w9euV8dHRkfHOmq6e9avtO++h5Pue0meZAeiiB9Hivde/CD9R1H29IP3wjafHbutL7rL/mtuxPjIaHNDpuq1mcXyydSVq7ojKh0LDbd7JPft9r24R4YjbpSfveWAj46PjC4Xc7X52sWpyeq52vxifbE+O5O6WqNNP/pFVKIrhlLEXEQ0ir0ePPtNTxTxD5Hi3s8b6T+LiKLdBy+cHXujf3D7FXQ/gkFu8rKVImIpHoOehX3qYBTxbKT47oX++K+i1VfNtnk/4gtlvhpxtcw7KW7mx6n8gBiK+JnvJ/BY644izkWK2dRI7xe598v9yuqZr1Vfm7k821Hb3q/c6fHBZrsGe3588CjZN2Ef640iftrc42+kn/p+DgAAAAAAAAAAAAD7XBFfihS3p59PzetDm+f+j83V5uszV6rnaxenWqf1t8/9r+allpeXlyu/+3fNiWpqPe7POZzzXM4LOedy3sh5M+etnLdz3sm5lPNuzkbO6Mqvn7Oasz/ncM5zOS/knMt5I+fNnLdy3s55J+dSzrs5GznDedIAAAAAAAAAAAAAAAAAAOySrijiW5Hie79spOWidX/ZC9HKu65zhSfarwMAAP//1yBFXQ==")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x46)
mknod$loop(&(0x7f0000000000)='./file0/bus\x00', 0x6000, 0x0)
stat(&(0x7f0000000040)='.\x02\x00', 0x0)
lchown(&(0x7f0000000280)='./file0/bus\x00', 0x0, 0x0)

14.186099973s ago: executing program 1 (id=1885):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x51, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x2, 0x2}, {0x2, 0x0, 0x0, 0x0, @adapter}]})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$eJzsmb+LE0EUx78zu9mchwg2FjYWHniit9ndqFxzRQRLQYiilsGsIbpJJFkhCQgGGxtLC8HWxtLCwsrCv8BWCxUEC1PaCSMzO7s7JpsQf2BE3wdu7jszb+fNe7DfYgOCIP5bPrz/8u7B2d2LJwHsxxbKev2TlcdwI/7to9snHu6de/zszZNX3QN3XsyexwAIsXp+B8DLmoUYzE5Wvn96y7iC1rgEjuNaXwaDm8ivQpFMQjBc1TE3DN3bp0UUutd6UfN6Owo9OfhyCORQNfPLS00nDE0AG+p2QjBjfzAa32xEUdifFSWR5pnb+lGxrH/qfjWOPaTdE0I268r9exM5172BB571zweHr3UVDHWtd1GG67p5S4z6D9v5+dYq9a9XPFXi4M6fSpq+I39D7f+wKP2Wc9jsinyhs5VD09QDzZiPa6/954UyLgBzW683o+j8L5zsFDQqE7k/SWc/ZviTDTvzj0rcuVUZjMY77U6jFbbCbhBUz3inPO90UFFGlIxL/G9D+dOmcX5pQazDHAwbcdz3h0Dc97N5kIyG49af9z6rZ7jyP47to2qqPFWVXS7OwfQfV/+l2raKI+8urIkgCIIgCIIgCIIgCIIgCKKYI2BIfgkTTH8QLSK4oL5QfgsAAP//g4hmcg==")
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000c80)='\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0xc85, &(0x7f0000001980)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
getpid()
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x46)
stat(&(0x7f0000000040)='.\x02\x00', 0x0)
lchown(&(0x7f0000000280)='./file0/bus\x00', 0x0, 0x0)

13.342206245s ago: executing program 3 (id=1889):
epoll_create(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = io_uring_setup(0x354a, &(0x7f0000000480))
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
pipe2$watch_queue(0x0, 0x80)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x1a, 0x0, 0x1, 0x4}}, 0x48)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x40047435, &(0x7f0000000280))
close_range(r4, 0xffffffffffffffff, 0x0)

13.062981725s ago: executing program 0 (id=1890):
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0)
r0 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
close(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x5}, 0x10)
close(r5)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000380))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000140), &(0x7f0000000280)=r4}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xa, 0x3, 0x0, 0x0}, 0x90)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x3, 0x7, 0x41, r8, 0x8, '\x00', 0x0, r0, 0x4, 0x1, 0x4, 0x9}, 0x48)

11.157431786s ago: executing program 0 (id=1892):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@gettaction={0x2c, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x2c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='cachefiles_mkdir\x00', r4}, 0xfffffffffffffd93)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x805'}]}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r7 = dup2(r6, r3)
ioctl$TIOCVHANGUP(r7, 0x89e3, 0x1000000000000)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
fsetxattr$system_posix_acl(r8, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000002240)=ANY=[@ANYBLOB="020000000140000004000000000000001000fd00000000002000df8000"], 0x24, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0)
close(r9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})

11.143216597s ago: executing program 3 (id=1894):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@gettaction={0x2c, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x2c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='cachefiles_mkdir\x00', r4}, 0xfffffffffffffd93)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x805'}]}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r7 = dup2(r6, r3)
ioctl$TIOCVHANGUP(r7, 0x89e3, 0x1000000000000)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
fsetxattr$system_posix_acl(r8, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000002240)=ANY=[@ANYBLOB="020000000140000004000000000000001000fd00000000002000df8000"], 0x24, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0)
close(r9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})

10.664152283s ago: executing program 2 (id=1895):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x51, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x2, 0x2}, {0x2, 0x0, 0x0, 0x0, @adapter}]})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$eJzsmb+LE0EUx78zu9mchwg2FjYWHniit9ndqFxzRQRLQYiilsGsIbpJJFkhCQgGGxtLC8HWxtLCwsrCv8BWCxUEC1PaCSMzO7s7JpsQf2BE3wdu7jszb+fNe7DfYgOCIP5bPrz/8u7B2d2LJwHsxxbKev2TlcdwI/7to9snHu6de/zszZNX3QN3XsyexwAIsXp+B8DLmoUYzE5Wvn96y7iC1rgEjuNaXwaDm8ivQpFMQjBc1TE3DN3bp0UUutd6UfN6Owo9OfhyCORQNfPLS00nDE0AG+p2QjBjfzAa32xEUdifFSWR5pnb+lGxrH/qfjWOPaTdE0I268r9exM5172BB571zweHr3UVDHWtd1GG67p5S4z6D9v5+dYq9a9XPFXi4M6fSpq+I39D7f+wKP2Wc9jsinyhs5VD09QDzZiPa6/954UyLgBzW683o+j8L5zsFDQqE7k/SWc/ZviTDTvzj0rcuVUZjMY77U6jFbbCbhBUz3inPO90UFFGlIxL/G9D+dOmcX5pQazDHAwbcdz3h0Dc97N5kIyG49af9z6rZ7jyP47to2qqPFWVXS7OwfQfV/+l2raKI+8urIkgCIIgCIIgCIIgCIIgCKKYI2BIfgkTTH8QLSK4oL5QfgsAAP//g4hmcg==")
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000c80)='\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0xc85, &(0x7f0000001980)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x46)
mknod$loop(&(0x7f0000000000)='./file0/bus\x00', 0x6000, 0x0)
stat(&(0x7f0000000040)='.\x02\x00', 0x0)
lchown(&(0x7f0000000280)='./file0/bus\x00', 0x0, 0x0)

10.540924352s ago: executing program 1 (id=1897):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000c5020000010000008500000086000000850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000004, 0x0, 0x0, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x28}], 0x2, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xff)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x40)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x3a)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000003c0)=0x7e)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001640)={{}, &(0x7f00000015c0), &(0x7f0000001600)='%pI4   \x00'}, 0x20)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00@1\x00'/32], 0x20)
r7 = socket$inet6(0xa, 0x3, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

10.504928815s ago: executing program 0 (id=1898):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000c502000001000000850000008600000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x43400)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000004, 0x0, 0x0, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x28}], 0x2, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0xff)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x40)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0x3a)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000003c0)=0x7e)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001640)={{}, &(0x7f00000015c0), &(0x7f0000001600)='%pI4   \x00'}, 0x20)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00@1\x00'/32], 0x20)
r8 = socket$inet6(0xa, 0x3, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

10.371805144s ago: executing program 3 (id=1899):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x51, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x2, 0x2}, {0x2, 0x0, 0x0, 0x0, @adapter}]})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$eJzsmb+LE0EUx78zu9mchwg2FjYWHniit9ndqFxzRQRLQYiilsGsIbpJJFkhCQgGGxtLC8HWxtLCwsrCv8BWCxUEC1PaCSMzO7s7JpsQf2BE3wdu7jszb+fNe7DfYgOCIP5bPrz/8u7B2d2LJwHsxxbKev2TlcdwI/7to9snHu6de/zszZNX3QN3XsyexwAIsXp+B8DLmoUYzE5Wvn96y7iC1rgEjuNaXwaDm8ivQpFMQjBc1TE3DN3bp0UUutd6UfN6Owo9OfhyCORQNfPLS00nDE0AG+p2QjBjfzAa32xEUdifFSWR5pnb+lGxrH/qfjWOPaTdE0I268r9exM5172BB571zweHr3UVDHWtd1GG67p5S4z6D9v5+dYq9a9XPFXi4M6fSpq+I39D7f+wKP2Wc9jsinyhs5VD09QDzZiPa6/954UyLgBzW683o+j8L5zsFDQqE7k/SWc/ZviTDTvzj0rcuVUZjMY77U6jFbbCbhBUz3inPO90UFFGlIxL/G9D+dOmcX5pQazDHAwbcdz3h0Dc97N5kIyG49af9z6rZ7jyP47to2qqPFWVXS7OwfQfV/+l2raKI+8urIkgCIIgCIIgCIIgCIIgCKKYI2BIfgkTTH8QLSK4oL5QfgsAAP//g4hmcg==")
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000c80)='\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0xc85, &(0x7f0000001980)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
mknod$loop(&(0x7f0000000000)='./file0/bus\x00', 0x6000, 0x0)
lchown(&(0x7f0000000280)='./file0/bus\x00', 0x0, 0x0)

9.34652642s ago: executing program 2 (id=1902):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000072010000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r0=>0x0})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000001c0)=0x3ff, 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'})
close(r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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")
r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sched_setaffinity(0x0, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20}, 0x20)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', 0x0})
sendfile(r6, r4, 0x0, 0x2c62)
writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r0}, 0x14)

9.298609783s ago: executing program 0 (id=1903):
epoll_create(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
write$vhost_msg_v2(r6, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x1a, 0x0, 0x1, 0x4}}, 0x48)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

8.516571611s ago: executing program 2 (id=1904):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000072010000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r0=>0x0})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000001c0)=0x3ff, 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'})
close(r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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")
r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20}, 0x20)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', 0x0})
sendfile(r6, r4, 0x0, 0x2c62)
writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r0}, 0x14)

8.505115122s ago: executing program 1 (id=1905):
epoll_create(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = io_uring_setup(0x354a, &(0x7f0000000480))
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
write$vhost_msg_v2(r7, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x40047435, &(0x7f0000000280))
close_range(r4, 0xffffffffffffffff, 0x0)

8.26383159s ago: executing program 0 (id=1906):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x805'}]}]}, 0x24}}, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r6 = dup2(r5, r3)
ioctl$TIOCVHANGUP(r6, 0x89e3, 0x1000000000000)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
fsetxattr$system_posix_acl(r7, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000002240)=ANY=[@ANYBLOB="020000000140000004000000000000001000fd00000000002000df8000"], 0x24, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0)
close(r8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})

7.896975387s ago: executing program 4 (id=1907):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x51, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x2, 0x2}, {0x2, 0x0, 0x0, 0x0, @adapter}]})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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")
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000c80)='\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0xc85, &(0x7f0000001980)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x46)
mknod$loop(&(0x7f0000000000)='./file0/bus\x00', 0x6000, 0x0)
stat(&(0x7f0000000040)='.\x02\x00', 0x0)
lchown(&(0x7f0000000280)='./file0/bus\x00', 0x0, 0x0)

7.081065107s ago: executing program 1 (id=1908):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@gettaction={0x2c, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x2c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='cachefiles_mkdir\x00', r4}, 0xfffffffffffffd93)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x805'}]}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r7 = dup2(r6, r3)
ioctl$TIOCVHANGUP(r7, 0x89e3, 0x1000000000000)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
fsetxattr$system_posix_acl(r8, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000002240)=ANY=[@ANYBLOB="020000000140000004000000000000001000fd00000000002000df8000"], 0x24, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0)
close(r9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})

7.056205118s ago: executing program 0 (id=1909):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x10000)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8042, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380001000000000000000300000000000000ffffffffffffffff000000000000000000000000000000000900ef00"/120], 0x78)
socket(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x80000)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x48, r7, 0x713, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x48}}, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xa0, 0x0, &(0x7f00000009c0)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@fda={0x66646185, 0x7, 0x2, 0x100000000000003d}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x6}}, &(0x7f0000000440)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/252, 0xfc, 0x0, 0x1c}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}}, @increfs_done={0x40106308, 0x2}], 0x1, 0x1800, &(0x7f00000007c0)='b'})
socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)

6.944127907s ago: executing program 1 (id=1910):
r0 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7fc}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2)
getpgid(0xffffffffffffffff)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x6)
futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800ff7f000000000000000001820a741000000000006300"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='highspeed\x00', 0xa)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xa89)
sendto$inet(r2, &(0x7f0000000300)="a3", 0x1, 0x2c091, 0x0, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {}], 0x70)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x150, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x146, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "24b0b059d1fc2dae21c3b333d018aa890e5eacebc33f7c16ed0930265218d3fb678f67c95fe3cc098719da52fa1399d57bc8cc74a44a3f4577e1209ecc9289dea747af04a6c6cb3c523e3578be4cc22ef04c66e377afe1fd393ec6034fa6dd3cc2b84a23d3aba376f73a7573ad2f192f75fd3e4323e7a6472aef0ecc164443068e5a84865eabcbd2a3fe1b6341f2c0040e799b00658236ee27c35dae10eefc27dcbab76fec5e5b51b0148ac9c7f449a946b240ec62e91c5d02f97c2dcb26d5670845a6c9d7911523243ece635af8b11b4325359e7b2a5785b6d0922bae7ce37bb8725ab2c850bce6289ae58fcd2b17207589d9ca06fcfd9aad7c64716568615a"}, @TCA_RED_MAX_P={0x8}]}}]}, 0x150}}, 0x0)

6.894892881s ago: executing program 3 (id=1911):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="66113006e73914c23324b7b035aebe6c66b1956649e6dabdd6a266d5c56b3ee905000000000000002a561709dfe16bf5d28387233e630c25ada26531627d73e5e03df328ccb20eeedbe1e5edf2582bf74ed14b4d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

5.123198782s ago: executing program 4 (id=1912):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file0\x00', 0x14812, &(0x7f0000000040)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d352c757466383dc657ef5a75c89a037d6779312c73686f72746e616d653d6c6f7765722c696f636861727365743d69736f383835392d362c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c757466383d312c756e695f786c6174653d302c747a3d5554432c7379735f696d6d757461626c652c756e695f786c6174653d302c757466383d302c636f6465706167653d3836322c6e6f6e756d7461696c3d302c00"], 0x1, 0x2a1, &(0x7f0000002300)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0xac42, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2)
mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r3, 0x0)
r4 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_setup(0x197d, &(0x7f0000000280), &(0x7f0000000140)=<r6=>0x0, &(0x7f00000005c0))
mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0)
syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_MCE_KILL(0x43724f53, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
prctl$PR_MCE_KILL(0x21, 0x0, 0x2)
write(r2, &(0x7f00000002c0)="348dcf585cbf643b90f2682e140a39def606798922789f24855e62fa61bc4516f89cf249857173bfce8cce72aef1a23782a242f7c6bf5ff5dbd7551e59c747b14154e91a6ce1018fffd6ad8776b923a3f6f53b0c138871bd6f15f06ed150f2fca265d0a33bb361db6e221b4732ba0cc292f3d8eaadf951f3ba4617e1e2bb230f1db1fcdf6fb5ff32a82648ff3a6ec16b61b1223c445c2835f9fb8fcb82730e8a18ff255cc25325222a433b209378df783719a19451bf29a0b39729fe7881dea58468f0e426ed744b4d4ddc2b6c195e6acf28ce3f5975a9b0c95d14d4367d355f936d7b8191795694286522ef", 0xec)

5.122473441s ago: executing program 3 (id=1922):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@gettaction={0x2c, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x2c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='cachefiles_mkdir\x00', r4}, 0xfffffffffffffd93)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x805'}]}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r7 = dup2(r6, r3)
ioctl$TIOCVHANGUP(r7, 0x89e3, 0x1000000000000)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
fsetxattr$system_posix_acl(r8, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000002240)=ANY=[@ANYBLOB="020000000140000004000000000000001000fd00000000002000df8000"], 0x24, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0)
close(r9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})

5.050125427s ago: executing program 2 (id=1913):
epoll_create(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = io_uring_setup(0x354a, &(0x7f0000000480))
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
write$vhost_msg_v2(r7, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x1a, 0x0, 0x1, 0x4}}, 0x48)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x40047435, &(0x7f0000000280))
close_range(r4, 0xffffffffffffffff, 0x0)

4.155366353s ago: executing program 2 (id=1914):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000c502000001000000850000008600000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x43400)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000004, 0x0, 0x0, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x28}], 0x2, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0xff)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x40)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0x3a)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000003c0)=0x7e)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001640)={{}, &(0x7f00000015c0), &(0x7f0000001600)='%pI4   \x00'}, 0x20)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00@1\x00'/32], 0x20)
r8 = socket$inet6(0xa, 0x3, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

2.986397179s ago: executing program 3 (id=1915):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000300)={'gretap0\x00', <r0=>0x0, 0x20, 0x7800, 0x7, 0x100, {{0x1a, 0x4, 0x0, 0x2b, 0x68, 0x68, 0x0, 0x6, 0x29, 0x0, @private=0xa010102, @broadcast, {[@timestamp_prespec={0x44, 0x54, 0xd4, 0x3, 0x8, [{@multicast1, 0xff}, {@loopback, 0x1}, {@remote, 0x3}, {@loopback, 0x6}, {@rand_addr=0x64010100, 0x4}, {@empty, 0x6}, {@rand_addr=0x64010100, 0x3}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@multicast2, 0x1}, {@multicast1, 0x9}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000240), 0xa, 0x301000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYRES16=r6], 0x20}, 0x1, 0xc00000000000000}, 0x0)
bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd)
pipe2$9p(0x0, 0x0)
r9 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r9, &(0x7f0000000080)=r10, 0x12)

2.986177129s ago: executing program 4 (id=1916):
epoll_create(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
write$vhost_msg_v2(r6, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x1a, 0x0, 0x1, 0x4}}, 0x48)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.060058117s ago: executing program 4 (id=1917):
epoll_create(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = io_uring_setup(0x354a, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
write$vhost_msg_v2(r6, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x1a, 0x0, 0x1, 0x4}}, 0x48)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x40047435, &(0x7f0000000280))
close_range(r4, 0xffffffffffffffff, 0x0)

1.180882212s ago: executing program 2 (id=1918):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
creat(0x0, 0x0)
r0 = open(&(0x7f0000000180)='mnt/encrypted_dir\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
r7 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f0000000540))
syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r5, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000b00)={&(0x7f00000009c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r5, &(0x7f0000008300)="e6b2d8eb9406f12cfd43305633357dfb3e2d73d89c590dc3362bb0567cbe79a7c2b21c4249e9a8322f9cedeb0c2abd64a3126589210ade91ae0c8526f52b456d665156d896996268a898f36449d851d54554e27d44f5f1faa87e52ae334ada7eee34a961d17960490867f3b2497a1beac798b24777867e5d1668fad5a1ffbd1e6cf7ec1cda625108794be053a3423550d951208b2dde7fb97ea6caf02dac213e411024910862123516aa94aed3900481f67dc97e439f918f449f50cea07ad61aaf5b24c89cb7af089da7980711a966afd7a960616af019ec65f045914c8e52288baad80bd032293c0467be6cab6115f0f0ee233e69f4e87324af6046704310d942a60ac37416542ce4c2feb1eeb8190c8655956fa6e90a86627a23d438887b264acbaf012f38e301bcf122ee0705094815aed78387c9aa767db8a7be62824f565c6d1fdf9f3955f15dc8fec8c60f4b056d7e6c7618a088c12b99260f1501fb26a0270c53d91a98b2bf5e3d57a7e8ae4b7a960bca27977bab898a38bd7d695f1a6a5b3d3b1e40ec907541fdd272c191aeacb7a8ff21c91db6e9b75efc34e94f8496bffe16c0f3d05d0e7422c3b1252eac5323852b508e8f83ea2e601cba97bd4e2089cb6653e397689184ce82d173cfbad1090939dbf635c80ea50e82a0aba5fbbdce00c09fd27de59be9fbdb6858d0b6c5f98d3ca1a2011649fbbe3dfc4cd084a538201094bc5914581b0e68899219e182d19bca1195eca71368c822178ef761bb7f0b2d1604c9b04005a70aa061f6c760057f5949ffed5c2576efe67ba6e4201596b980aec2633aa4aaa051ad6334cbe343a1863b49bde6ddf69c9679cb9532b74569017c0acc86055cef594592fd39531300a9ade7ddcede6fb4b916209071fe96d855b4d0caab47767544e73bcd032dd0e55e46fcd29b9cfa68f3fdb82ef7ff03903e998332c54fdd1ca7d586be95d9783c430cb1ee78dc6022560e8ba41ce0fc8457a4b0d798eadde0aa96d68285e6d3d042ecd140aed08b596f828e913bb1bd26e39c2dffae14eef8b1c4d6fc7f4cde5a2e9e1e8cfb8b65da2888899712c6e98a959eb3d817c1deaa92ce01cdc6026eb764b0254b9db4a8e9aee360adc93ca6993882c09e8a4fac70dacb7e3ece0b1be0751d2ff02fa08696f398f389817138114f8b733bf1c3e4e39b479197d40e39d42375973588e905f01195bd3c7672ed06169d8f75a1a8dca78b4e93d71b884cb510eb87902f01283027e2c0b8480503142fe290e89ac0015dbbbf1f68a51fd51a5f1e5f464864ef35d8c736912a704caf85979bee2f649ac32e0349bd9c766c79a8df22455d5f75ed31a9d0ac5ebde6cc165da464aed619b8ca3ebdd61eb3ecc7acee205c6122229a5e13f6f0ece0240eef82d961b5efce5dcc30133c3ef359bd47adbae3e96673ea2c9a145b923e4af41a216f7b9a6fae298b4db736ea354c15da242e37c24521fa642a8b4fee4fcdd40a47488edd22822bbb22b21a7ed245e0752eb789ac2f5e2f1186717afc9c0cdc7f489b158b199c62024c68a94e7bff75b2f28d8a85ed8222dfe717153c0d2f4968e0ceac8ea3f76d7aa3ae9ebf480db818ac8a37890a71febf1945f5939a937acb14b438d034a832d088d987184e845c5e2fcfec0e11afe7d962a33f7e3cd855c8218299ebf20441e23bfc02756d12d3ebce5482cb2501313df9987b74e2df6df6b2aba84ab94ece32c3a60aff72bd8f79fd3a73431d8bd3ceeace2ed5b58b417b7cb9cca4d79867829ae0f91ebcc68255eb5475fdb057c15b855f0b3c42839856cbdf7f32c6821bbfb359a9340b7b8e00cb10e858fb91043716f1d416e6b9a3b98bfcc721a026cb913aac1036c2200fc1db87f65f687bf1ad4ab4eecc3bf8297da22e669e9b2710f3e782f1c6daf73a7b9dd496a1f1f3c5ea88e47a703805941466caa44b639714f0e1b5de17abc594f98e2c6b60378ca650db5077da65e1463ad84a1487367b4bc93e571301ae7a0998fb05e4d956cb9ccac4125af9515fd3e8d16ac1b0f2f44b2e6af9784eb711fcca60570a83f0e315d79f777374627428707a44f62ba8cd8c7fd1d1b403c197f0587e42daaa72ea76b1f27bef0f0287ed7109e6d533447a4792ee53744daacfea5fdbc30130940c702fb92c0b696b6b4b19f0d984d9987486c5a543fb81a8bb2c7778113ddea8b3b3c4905fb8661ad792eba530bebf71b45c43f4ed108703ae6592dae85de9443b85df872b98f15ad010929b3d3de62dc64822c087f2e126f940d7378617cc118554ab0842153011cf115cea196f054f1a7e13a1beceafbd4de0b9429d8dea6d5efc3e7b31a42ee580cfdb411d098de26248c903f6cf4a20465775f161f743e6658cd13bb854b00d8bf951331191fd76b8c9e9336d61d5f8c712c6755bf0ae3214d432468036857d007adc990ce5ad7b5d5db9853e36bb821a8cd4fab2ce019ca68da5c5c7644e973b63040db6130f52a5bbff8a7a943d945fe51c40f6f4e6e32b54a9362dd1b12600980ce274aef335d5eeac2bbca1787c3e56196e73a5a9dac9b1805e21b8de6116b2df23215bf62d77e5776b9b5f2a24aa518f261973dc4a4583461222c2c512442ae24ba68c3582acbd20c0804a55b7dd25fbe7103aed3eef21cd82ccc33464bf500cb6b7b9dd4f2c450704b27720ab9fd0dd6dd2716b975451950575d4b56960076cb509bf2d1139ef37eb8c67664ef441ab63387c7109d410927df1c20b434ac4f9a35800926bf65974542c7f2ea747069626c9b282f03ba351cdaede99db8ddb79901aa753464704b5e82498e14a11fa0908056c1c3a22ae390afd199c9dc855651f0f3a047ce870ccfdd9c813c9a0d45e0af1906adaef707f11e573e69d6847b78701a6e6da2e5abea3ae7b89c223cbf863ecf89ed64bad8e249f3004eda4afd15e649e4d776649835112247975516f3021fecccee1a328d8f35aaa62b1111b5b76fb4cb75791d7719a87706d94fda405a64dd72141f3db774ccbeab5c103f616d56be9d361c4b4c6107e4d6cf09036c81df396619002f1d667bd1992f83d8a750d2c92e31ff397468215fdd763cff3e25412f3046896187663837ec2375e87dce9a01fa93751f7d11970d2e9048321fc80ba241118bfa161b76a5c91fdb9a4f1b096cf029c6f4e450f9b5e9be7bc461d171e0414b1438680e68c527d621aed3c2612924f7f82ebb22fd94839e3f53e47c61652206908baab84518ad69ec2f207709bef0623a4d8a4ed72bb6badb02ebd1277b0d9fbaf61a03ed934f9893cff6404499a73fc340432cd5b5bb31f7a79aa842c653bf4050c0e4ab661bcb5d8567de7350e1e739ca3b35287983fc1972d5c516ae130e3ab3b0d9f6c38976d2c0a867954410df7309f0733ee4466f4171d64897b15c39c134512e7c85caf83a26f5aea79eac3d8767a5c71c6e73d3c4acdb08e8108dc28a23aa96945da0f1c8db23f89e14875b026b6d8f6add936a05d5a6eec248e5d99591f799ddca437a85490d7b33998733e5dc7a6142e8a0830cd9611c421016656ee0453bbe451c7fcee28fc27d64b154da17a710d4ef3a172a4c65174a2849c24901568a3f2e48b84a8efe19fc7a8be16c37d0fd80480321da55919d0221de041c7f6a652cc0c96f98829bfd7bacbf72000644ac5d6bb7f0b844508697165d595ab6d0f30e6f8f97c74df99b9bf31e22364d109e813ca2a5d8937606f779fe80ee41bb598c66d35a7094eb45ef851bc5f3d69debc1af5faba38256d7372f31858a4bfc4a764f2310ba4e97bc928c98d2ae69797250c42d101f3d39158b647cb67014f6db71c29994e57a543acdb395f6eff14d431d9b26f0dc193588c600289688c9d03a3e0639a39967330d9d6f7ef224e2030f7eb4995c8df1daecb499a28762f342e632dc18345bb43a43d5604205aed358769b8bcb497efd17d0f1adab4ac6517ddf58c112a00f980aff1944cbcee1b612ed876dbe90fa5a46f9bc4d8c07eb825347934957debc2960aafa024ba4f900c0541b067f3533fa640dddcce7d3aa7804bd618541d9af9c06b1bfcc1e558815e9de97820dbeebabca6af0cdf9bebde0f565b73e968ed5090a7fc5e7dc38de688082753321be5d6c6612b0ed14c6bc0dea8b8f0147f37ba9d2ab70de6f04c5dd68c1f021712ab854f6ea82f63bd9236f4e14d86c9f7aa5770bac766d5bb670ab4a1f44f5beb317cb3f7ae8e0c1c0aa90db34069711f9c17470dadcd6df9ba0894d0f1e74658b257fbfdacef9a9403686008f9539acc3838390727b60d739ff08ca5f54b6afdce136cd22545322cc394979ecc44c8d842492e5a5e57908bda633e0e8bcec2b1875b676dd37ff1e5150e95ff0b7dae843d9f7c57a83337171e455f3963043cc64b82d35a2bb0067ba854e4c7ea937864e27c3bcd1729f21c1eb4188e99cab9c6c2604a350e9f99e6756de9018fcd04a483dd9b5b6d58caf65e68ede75adba5070d476961ca193ebf8a838cdad434ea2ba30f959e1cf605f24cd00aa47f74701f037cc2069c1de37c9cba6c077317fb94868b1e082dd91187226340ddf517b02680e2b8e031674fe39f83bf4c68628503f4803012f0ff4a6b5a7488c9ce35632b58c185bb7fa0e5c69d7acc3b34e41952f49bd2c526767cc47a9aff86153b259bbf0bca92be6e817474ee5e44c11ee5b955745718ae5ea5a12cd769c8787eb3d599d5a1babb60e1f9177766e1efee69fc48fb8c4144cb6f1433363e8dea541277645a4d48a1435cae465274c267248882818f2610b030d16168dedb4d7fa6480f53b3f94be8f2dd9f8235920e1aabf4babf43103bc95a5b8702d79bc2786bb61349284c371f461848af849d671cf05991c9a4511801efd48e4f9688ce8a3c273d6b4a50737bea743f9acd1be1bcd3920a18c3e8de035d023bfdfa58558094f3e94e4231cd150d74fc6532b99c50df809d76118ab43eaf2adcca288ce7a09a7e6bd9bbe25c20c24bb62c381c40bae2b49be5f5ec3cc9659132237407ec3d4cf6c5d74b0a7af4898e0c00000000000033d0f330c591f9942ae97f289053931d091735086b05a6ba7baf4a398ba931e99e50ede1e24e88285a9b02ac4858c935471b5344f93830de5f737c943e38e085214aaf9d6274feaeb7fc9fd3f7690ed2215696ee614c56e35c94f6007ca891477f8a58810d57a2787db702c0441ddddd5d7c1526b0e3bbbb40719597d6a73f27eff4b2c67ff56b575d378e0ebd006b59b6a5139dff7cc9086a7de2335e736103a00ab9a717679c6d0792f4b25bb5ac7599546a62f8f67d9c4478a8e6fce723843877c6ea9e9e25e003d26553191478f6e68ee5df7254ce7d6eb45f5702611b8bc6217a6f5afe5326b4988736dc9bb42a02b717a8fc8859ace12ded8f7c7a0439e07d50f5543754061056723c4c7164bc05b4b3ac10f6f84878ca6c3e75f8b51920fe97661a5c04f126d523d20359df9514f612739c62ef6eeff716cee77d3de28744b626091faeada3d90d7b1a54740621e156793021e380232beafd17b988f48b76caed0610abfb85896c5fc9f427451d1860fa3cc9b88371952f69a2330c46d9a578a168f5ae2bcf74a7d425c1fc529e534f000f2139c805a48902d12425f3dc37343aaeb0ac9b69d35bbd81dd19a912f4bdb3f2ff597a0c89c886c17660a03058977b9ec150d824464f44a97453da98829f1322bee43e29b35602bb3604d187b03236f87443a20cbe4be8268d9d43c9316bcae3d5e9c7664e65a218996e47351b7bff86ffe65ce7de2745e5fc0ef7222fc081c36a44c80276882cd89d51e55a7bc53d604fa6222542f2f82616933384fab97ac23b1e50a8520d4013be3c9431faecfeb066c781a1126c1dbb25c933a85e8fc0a1fea9e2bb9e4889c82732a7d614111b0b29b50d69a2547b50abd6910bc17f36f3adca26abcfc3f709fbdec5950bfa4349c5f1131f734178c26b6954612de972da99d30e9e4c09e60c05471d9d4df1b1750dcff0c5a577816cdff7474a722696870494093060d3d765122598346b76cb0b9477d6320f4a0ca49f53be1d457f485e5a7c914ab9de26ece89c43ce4a491f088d154175b7c114032690bb779b4d32b3c27cae1feef2a95b88903e4d82d983318042f1595b01c158c40f089ba07e73f5049b2ad490c5242d0981476fe9195e20e84a489b67caa240509338733f5b38922fcd14d7859af55942a15955fe6914781562d3e82f89eadcc8e93e4c48a2e8860912a9ae8ea2e898bf5eaab1f854e4f8f504ba382eda95fb2de4375c8ac0211203722dd7d6e1c97306c4f78fa3279a92f89ff1fbcfa2c751e891f3bca77e97a63934e10a354228f5ff4ef1981853f391884677e7abc8243a810c68fef3c722d2588df21bafa28f3bf4d382be14602da6320019939cbf9ccc8c5843b19565b294c318e96c6278ec3fb1e52d6396e7e73d0d854c05f18e03e7e83b3a971e4b584041561be5ffba9239281a6cf3acd6fce2605de6817aac73877531a3320a36cb828bfa4f7a21e2c337b9653f60321b1d3546dcbf7023d56e9981e319c90efd3b1d042774fbf26a85d845221be8a67654add6d1d9d3226dc082f7856a8bc1c94de962dcc9224dd2a1834b0f1e5ac74829e86c65fa88d6d488e4a6b781d9717a174e3cbd0730c05ab3324d133eb322c72171b8269870cace07df073a48f1491de9d6b14847430910b6858d7dc2eda9a52efd6dbad5f37752fe4ebf33f65027d9f4f23b6a02153035914b6d28e37c0f0fd24c8866f7956f2bf33a1285df443e4b54da7159ace95694c897aa52ed4eabd9af7886d7375dadda3a57a805475a4d08c181111b23990ed89b092e05d88889cfc06610321bc05d812672306f64df19425e00766a8d4654511286ac0e660ea8d64160fa622d5ec42e86628a778385e07a7977b2d726794f4ac15735c4b264132e05c932469c2bbc066dac680099b736d829162984f0c8c5cbc9481335d2ed6545fbcd2c533524230f2a669253aabed93b3e2d83963a8b4efa029166ee266bf3d09a009985596ffb629a03c685877e0e5a5a503ecdfd1d0abf2849806190475b5d96fe39843076ccf4ec7e6eccc90a8f912c3810176864965feabdac69e4efa40cd2e9f7f5a330f0c531bf2fa4856d3d3121d6bfb63ecd76399ff9ff0915826bd8de4c7a62547b8c1de5b1299d0f95cd437fe8ac67e26c9fd6cf3aa6999d60ad419a4ac88803cf6132121c169704cc50aba219f4024dcb63ecbc1b45b32d794046e990018ffd2a06f11e9fdef0c0fc745b6a0578e4ce8fd7b06d3848b7db196cc8b887fcfedd18085232aa926f5bd0af6c6e47204e2c9ce64f4095c7d5f3468d32bb897410056b7539533f7ab668dd2330c786c87bce5706e746e4cbd2b4ddd9f671850a43075e61bd93837580b835682fed9f270d804bd9813be025e26d2ef46308302118a0208bcb411fcfebed5210a846f8db02a67e496e77378e8c269053b979989e0ba03f391e4491752e435669bb5b0ea7ff26638aa3f87ed26e57a7355ea2d9fd5727089c7e19a63448fa5f9f55af8f94c1a65e8b42a2722eeb8ab83bfc40eda2825b59bf9d248e6d9ce9c539a233d5b5ca9e3304f37d7f45f91413db23f72b7feb97bdf65626cea125f76bc594215aeaad7853becf89c8f2cc3f6bd523d4f0dcaf417c691108163d8f1128212e49caa32097ebf0a45c60af6bf8e4a070d27e793c0e891d0dc170052bb40c88eb3331f302565abd87c0ff4de1c511b36491c2e9f5da92858d49d15b4e579458536d235c31bd56a82315c94727e4cb636ef920e6c4393c52472ea3e0bf99a4061d7931b512e066ec54135555a1d852970c76734c1026ca8d73d40a8b394bffcc91e6fd2fd896ee393bafaa7f9c99362704bbf493006e21c625a7bf0359ec66028fafe1a7fa7432c7c4c89a07c48f56bc3554e813c538725278c1113ef8f61a4a673551040be6f1b8aa5bd1f8528c8dd10c8c2bca58fb8ff936b2ad24cb675145fcf9b6e1beb90ef6955026d8b6a76344a3e09bbc3e290471a480b26601610caf540c8058be1ce152394caeafdbf0bf69bb781153a6eff91e03c072f8b337488f4389c681c7077276d928072433a5f453717c34c0f02c5d4bdb279eef0ddd396c1d6a09a6b784b143f3c592883668c35d11db6a213949c6a9dacda839a3f89437d2b51a6e13601f8b92dcf579d40527d7c2a7ee42ba7d559f3f938e0cbe7efb835f923eee1a682db1d458a0dd3f1624f63d16f0413637f8abcdbe242b38d1016615a4e202144c48a30105cca27187e1c90ac0d1f9471bfffd09e49785f516a0ff032e2febba4481e1cab04f9e658949d3c4ffd35ca44b1f0ffd3cd0ff3ba9f5492d1a342af0bc8633f2b4851b7c729cb0e8d6f60d09c7558c0f3c846ed31546b9f433755c629db5471416af9df1ba9d09ef41af03b317dc7e77c7b94b99a02a629d902ddcf1daf3ec9c82066b0cc7126b876e09b21984fec89da8c92c1c9e6a8874cc66e23944eb2cd5a4196b2f79b25d410e46b9e734eec34c0903219a5f89f1a6db7e8ab9253a6a053b7c13318799040a502f567d9d7d2c4d03e2212de08e130bf39af099153add603fe16fd2cf326014217b33c9adeebbfba5b3ef34d46f7864607321ff8ddf1bc196064c0f03356f60358aa73b509e90d1a5e68c3b168eff433c75e3daad0754115f39385d47aead75767b401284d1f5b6d53b88e96555dabac12facf293855bbfa7bc6c9872d0fa0421ae35991282abdab2b8de08e3752b5fca7df1823b8f1954a94449fe29d27c0edd473a95d5ef2d082555a7930c04043e4046bbe9a5d087da48c00cd7277236eec85b86d781d42a9f49a7d1d25d0d0f653d50c86b277b9319c38080d380e30e690f88a50b3eb68fac870a1bcd3c280769c16705d6c887270ffab9de115ac9456ab82e257ab3433d2b7833304b7a17dc8ed0d2f65df0135755542715c62234008f3fb48b1cf6611605fe2fee4d0b3c50cb1dc833b77af1e1808d2eea57f8318053ce82ad6bc537bae869cfaa45a43b07257aa49d075bdc306dc71eba9263ed50a6317e3061304d46e79f6cf8b759ca0d3fb36596a93f35a64d56b27a9f0e5b93f1aa0365e3ea3f521ae3d3f43e9ad9e69ee724c281e2b584b1a7542a66e9ac7feb30c3c50c823899feeb2f39609f28d6ab3dc8017e17b7b9dd57c4ba30dce0c804129dea0609b4cdc3ab47fbb5cd709f5122f24b425db4c7de246423446f0ef5e55c4b598fc1b48bcf9e3253951a39d741df6ceb42c185caa55c25fcd56a45184818c51b1db347feefc946527f3bbc66d6979420006da0dfc031e340f75ee59f4a9783eb7b5cb8b0001e8044b330aba8ccf622edcf072236ba1e6a5e67ff697d5f11d7b068a63e3dea84afc949e1ead85bd1593cd2a6303df6657d0131dea9455754d0223a85882a344fe84c9b2076f844402117459c0ead86c80f3ec7eabade2fbbe62e4497fa314c0146e74f0e86bff364cc03f3c30600e92130e3f7730a391b298e5f131f72872998349040f5e8f0bc61149e7314d64af838248c800e4c9e4c267eda85500c6d8e18e0ad1f86b79a8a33bf907d8b6574757f18e06e85c775c1ff588b5ec5098f7997036c07b99a6dbf634dce941edb093414e8307d689647b5881a01c132ee8df0fb04b908d96f84598ed4afc0ed3a2246afd51d79f171ab2e311e6ba1d49740296803b69d056d4bdc9a5fef13f6f0d274819e54c4973e14b7549c2e2b8596cfbec539379a9006d23fc617ad79efcd4d38a462c0241227549089f6d3ef16e35bb52a95c87b49ba37162a4b2e124edcdd7e5c64ae6ed0200638f8cb3e0ea6b213acb5b75c4a033a85fcf7ef9ea935787bbe7aec9ddf808ed98e761138c82a7eee69b9cb7687327a30b3c0c796bbf050df4e4853c6f32e468e223a9175cec15bbee96430dce64b1c8c51b2bd271abbf75ac441937fbc7b19a8458d99a27bbdde7f574873577b476b665de5c2d96d1349bb36cec16a56b438869e83285a50ccb7d9f4634d48cfa53e41857d8a991879eccce5b4b53595e8a17396f679dab975bafdce8eab8aebea90c2ce217d60c9569c76648d7d4725abfa53a728f3efb0c881c070a6d4346efe6f80f42440dfefb1503c2ce3c10fa1dfa94feb04e13460c0edbc177ef6e1fce179fdec24a9f74190f6a48d986a8d2661e805cf9916c68acbfeddfcffa017de1978ecfd5be69b4630dc6d3216131f5cb3809997d3a75744e87363ff6d44367fc958eaabe8b2e4def8677453e6bafd543177d28583e3021b431a852e3694efe669278acf4352d611dc6ee187f9a3f7c6a02a4b4738e101bf15ec435b0a28e38e423b0d0d11908d6681bdc8a0882b6bca86808790ec45d6f9e09b73546a5e02603ea4f5e7b2229b6f2717b01119f0ce571c448b68045810ea25e67ae5c662d5bb4d832ca75586f7651ee9307de66e1910b35f51c226addb26d3e5150e68fa9301c019bab7f5f6880e8cd1b6d458d6529d044624090e260211de3e4037309ccae8106402debfb3a2219be3346cec9c70d26e8ca82f0a904bcbd9d01f0c914f079294acc59f2f8929bc7a9d735e9b5365af1d2d304199891121dd009b326c4eadb06386bf5fae8120461235ac07622e6849a61ee973a1bca2fbc2541c9ee8ae36460f698dfcd0b2f550f82199e192e502bf077060839b82607dc4ef1b963f55edfb0026264237d78a373790abbe48a807641d1bc9841e4a59b8e56f26816bfeb39e45b63448578200c74abfeabba8315131a6cdc62f7927f05ccae5001542f6d71974a8953d262c72cce17faabc78461e50d5f6c8b941f801b4449d4178f13dea617c19bc3685ff1aef6f8f1ce3cfd350473a47b73edf504655c665c61a21a1a6f8db46cca293a73e7bfdaa24f5ed6532b38a84fbf9579a6c17dc99b1c21776885a63315bc9ad6b5aa1675034ad99d875b38de854ed931f3af23e3a0e1933d0c1631e9d2254827879c271192c7ef47bf08d59b271c341e2e2e134cf4c2bfe442b49c2a40b0d1d99fd32f166e1b50876d5972f14382712963cc14fd51d9882aac41b38f46dbb6936c8915a312132aa5eb2a07b9abdfaea8f1c72ab9b9018027e27d1bd07c6b2360328522059c20d3c6853e416173bb72b599d44e2cfed21509718bb58319d0a824f39cdcbab6dfab839bc7744bff0ce1e27eb87b924dbb5e45cd4618ce303da4acf5f83710c3dc9a45d0870e204a9a87b5cf9fb8be3e38742d2338fec2f2f69607bbf6e6c7677df0beff9c33c66afd0faa4926462788fea58c2217f36b62c50804e008a000c16983131873bb9b4f4817689912d877d5e9da72cda35cd489f49e41b2dc6c3f40f67f0856dc6a943a6307a858a5701b2515c1abf6401f15c903177e4047dc5683b39c86e1799d66ad3159e6864d7021173720510086a44f5b468b03c52b75ec234b9ece759e149683606457a57a591f5638d80570e15263bf96c7b0bd62ea857a3f2476bc7cef0a67a686ed9feeaa73cf8abbc72af624da4140b6a21aa657cb1800652571f2bb9b400", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x78, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r5, &(0x7f0000000e00)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x23072d}}, 0x50)
unlink(&(0x7f0000000100)='./file0/file0\x00')
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f00000000c0))

1.179817822s ago: executing program 4 (id=1919):
epoll_create(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = io_uring_setup(0x354a, &(0x7f0000000480))
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
write$vhost_msg_v2(r7, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x40047435, &(0x7f0000000280))
close_range(r4, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=1920):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000c5020000010000008500000086000000850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x43400)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000004, 0x0, 0x0, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x28}], 0x2, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0xff)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x40)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0x3a)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000003c0)=0x7e)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001640)={{}, &(0x7f00000015c0), &(0x7f0000001600)='%pI4   \x00'}, 0x20)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00@1\x00'/32], 0x20)
r8 = socket$inet6(0xa, 0x3, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

T11840] device bridge_slave_0 entered promiscuous mode
[  841.158169][T11840] bridge0: port 2(bridge_slave_1) entered blocking state
[  841.257038][T11840] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.414513][T11840] device bridge_slave_1 entered promiscuous mode
[  841.524026][T11154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  841.582696][T11154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  841.755622][T11154] bridge0: port 1(bridge_slave_0) entered blocking state
[  841.762772][T11154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  841.994793][T11154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  842.016327][T11154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  842.065119][T11154] bridge0: port 2(bridge_slave_1) entered blocking state
[  842.072335][T11154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  842.102526][T11154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  843.620016][ T7662] Bluetooth: hci2: command tx timeout
[  843.645248][T11910] tty tty22: ldisc open failed (-12), clearing slot 21
[  843.714351][T11137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.867169][T11914] netlink: 'syz.4.1464': attribute type 1 has an invalid length.
[  843.975245][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  844.028355][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  844.032211][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  844.033669][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  844.036526][T11840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  844.208716][T11137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.245263][T11924] netlink: 'syz.4.1466': attribute type 1 has an invalid length.
[  844.296260][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  844.331109][T11840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  844.417986][ T7662] Bluetooth: min 2 > max 0
[  844.502212][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  844.533495][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  844.639208][T11137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.704063][T11937] loop4: detected capacity change from 0 to 16
[  844.734280][T11840] team0: Port device team_slave_0 added
[  844.742043][T11937] erofs: (device loop4): mounted with root inode @ nid 36.
[  844.799015][T11840] team0: Port device team_slave_1 added
[  844.906941][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  844.936821][T11945] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.1468'.
[  844.951709][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  844.972126][T11944] loop1: detected capacity change from 0 to 1024
[  845.100908][T11937] syz.4.1467: attempt to access beyond end of device
[  845.100908][T11937] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  845.118855][T11946] syz.4.1467: attempt to access beyond end of device
[  845.118855][T11946] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  845.170595][T11937] syz.4.1467: attempt to access beyond end of device
[  845.170595][T11937] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  845.189701][T11946] syz.4.1467: attempt to access beyond end of device
[  845.189701][T11946] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  845.222482][T11937] syz.4.1467: attempt to access beyond end of device
[  845.222482][T11937] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  845.269709][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  845.282732][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  845.313805][T11944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  845.626667][   T26] audit: type=1804 audit(1725345032.849:342): pid=11947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1469" name="/newroot/55/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=861 res=1 errno=0
[  845.729907][T11137] team0: Port device netdevsim0 removed
[  845.759851][T11137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  845.785239][T11571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  845.792746][   T26] audit: type=1804 audit(1725345032.849:343): pid=11947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1469" name="/newroot/55/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=861 res=1 errno=0
[  845.822600][    C1] vkms_vblank_simulate: vblank timer overrun
[  846.561364][ T7662] Bluetooth: hci6: command 0x0406 tx timeout
[  846.648132][T11840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  846.670275][T11840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  846.805824][   T26] audit: type=1804 audit(1725345032.869:344): pid=11947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1469" name="/newroot/55/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=861 res=1 errno=0
[  846.838732][T11840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  846.911016][T11840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  846.921437][T11840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  846.981814][T11840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  847.228527][T11962] loop1: detected capacity change from 0 to 128
[  847.266350][T11962] EXT4-fs (loop1): Test dummy encryption mode enabled
[  847.401233][T11962] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  847.465845][T11963] loop4: detected capacity change from 0 to 512
[  847.472410][T11962] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038 (0x7fffffff)
[  847.499467][T11963] EXT4-fs: Ignoring removed i_version option
[  847.549256][T11963] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  848.350353][T11962] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  848.370452][T11977] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  848.391818][T11963] EXT4-fs (loop4): 1 truncate cleaned up
[  848.400686][T11963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  848.452932][T11840] device hsr_slave_0 entered promiscuous mode
[  848.645077][ T3645] Bluetooth: hci6: command 0x0406 tx timeout
[  848.724583][   T26] audit: type=1800 audit(1725345035.949:345): pid=11958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1472" name="bus" dev="loop4" ino=18 res=0 errno=0
[  848.888339][   T26] audit: type=1804 audit(1725345035.989:346): pid=11958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1472" name="/newroot/117/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  848.910123][   T26] audit: type=1804 audit(1725345036.029:347): pid=11958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1472" name="/newroot/117/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  848.933906][T11840] device hsr_slave_1 entered promiscuous mode
[  849.003257][T11840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  849.031084][T11840] Cannot create hsr debugfs directory
[  849.495086][T10202] EXT4-fs (loop1): unmounting filesystem.
[  849.504146][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  849.534195][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  849.555083][ T8998] EXT4-fs (loop4): unmounting filesystem.
[  849.712828][T12003] netlink: 'syz.1.1475': attribute type 1 has an invalid length.
[  849.805766][T12011] loop4: detected capacity change from 0 to 16
[  849.825403][T12011] erofs: (device loop4): mounted with root inode @ nid 36.
[  849.861758][T11571] 8021q: adding VLAN 0 to HW filter on device batadv0
[  850.256961][T12010] syz.4.1476: attempt to access beyond end of device
[  850.256961][T12010] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  850.296340][T12011] syz.4.1476: attempt to access beyond end of device
[  850.296340][T12011] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  850.591921][T12016] loop1: detected capacity change from 0 to 2048
[  850.720121][T12016] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  851.278655][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  851.558020][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  851.726216][T12030] loop4: detected capacity change from 0 to 16
[  851.740231][T12016] netlink: 'syz.1.1477': attribute type 4 has an invalid length.
[  851.779825][T12030] erofs: (device loop4): mounted with root inode @ nid 36.
[  851.877743][ T3721] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  851.916866][ T3721] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  851.955958][ T3721] EXT4-fs (loop1): This should not happen!! Data will be lost
[  851.955958][ T3721] 
[  851.991207][ T3721] EXT4-fs (loop1): Total free blocks count 0
[  851.997358][ T3721] EXT4-fs (loop1): Free/Dirty block details
[  852.028274][ T3721] EXT4-fs (loop1): free_blocks=2415919104
[  852.061544][ T3721] EXT4-fs (loop1): dirty_blocks=16
[  852.077074][ T3721] EXT4-fs (loop1): Block reservation details
[  852.092705][ T3721] EXT4-fs (loop1): i_reserved_data_blocks=1
[  852.096290][T12028] syz.4.1479: attempt to access beyond end of device
[  852.096290][T12028] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  852.163590][T12030] syz.4.1479: attempt to access beyond end of device
[  852.163590][T12030] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  852.204392][T11571] device veth0_vlan entered promiscuous mode
[  852.226890][T12028] syz.4.1479: attempt to access beyond end of device
[  852.226890][T12028] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  852.248524][T12036] syz.4.1479: attempt to access beyond end of device
[  852.248524][T12036] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  852.307936][T12028] syz.4.1479: attempt to access beyond end of device
[  852.307936][T12028] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  852.489830][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  852.491881][T10202] EXT4-fs (loop1): unmounting filesystem.
[  852.532265][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  852.605284][T11137] bridge0: port 3(gretap0) entered disabled state
[  852.673490][T11137] device gretap0 left promiscuous mode
[  853.522183][T11137] bridge0: port 3(gretap0) entered disabled state
[  853.596356][T11571] device veth1_vlan entered promiscuous mode
[  853.637140][T12049] loop4: detected capacity change from 0 to 2048
[  853.646188][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  853.667781][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  853.686373][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  853.773577][T12049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  853.851600][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  853.861144][ T4679] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  853.894936][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  854.031513][T11571] device veth0_macvtap entered promiscuous mode
[  854.059242][T12043] netlink: 'syz.4.1481': attribute type 4 has an invalid length.
[  854.096860][T11571] device veth1_macvtap entered promiscuous mode
[  854.120780][ T4679] usb 2-1: Using ep0 maxpacket: 16
[  854.164291][T11158] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  854.181400][T11158] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  854.193764][T11158] EXT4-fs (loop4): This should not happen!! Data will be lost
[  854.193764][T11158] 
[  854.205772][T11158] EXT4-fs (loop4): Total free blocks count 0
[  854.212182][T11158] EXT4-fs (loop4): Free/Dirty block details
[  854.218089][T11158] EXT4-fs (loop4): free_blocks=2415919104
[  854.224297][T11158] EXT4-fs (loop4): dirty_blocks=16
[  854.229416][T11158] EXT4-fs (loop4): Block reservation details
[  854.235809][T11158] EXT4-fs (loop4): i_reserved_data_blocks=1
[  854.258816][ T8998] EXT4-fs (loop4): unmounting filesystem.
[  854.270828][ T4679] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  854.308681][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  854.325831][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  854.351342][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  854.362573][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  854.390581][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  854.407428][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  854.426596][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  854.439691][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  854.456287][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  854.469198][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  854.496383][T12057] netlink: 'syz.4.1483': attribute type 1 has an invalid length.
[  854.505028][T11571] batman_adv: batadv0: Interface activated: batadv_slave_0
[  854.534697][ T4679] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25
[  854.550963][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  854.564786][ T4679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.573866][ T4679] usb 2-1: Product: syz
[  854.578314][ T4679] usb 2-1: Manufacturer: syz
[  854.584180][ T4679] usb 2-1: SerialNumber: syz
[  854.584745][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  854.591827][ T4679] usb 2-1: config 0 descriptor??
[  854.621416][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  854.661124][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  854.798238][T12063] loop4: detected capacity change from 0 to 512
[  854.820953][T12061] netlink: 'syz.2.1485': attribute type 1 has an invalid length.
[  854.832613][T12063] EXT4-fs: Invalid want_extra_isize 5
[  854.906153][T12046] loop1: detected capacity change from 0 to 16
[  854.925330][T12063] loop4: detected capacity change from 0 to 512
[  854.952283][T12046] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x9596901f, 0xe73df4ff expected
[  854.973364][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  855.019313][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  855.048739][T12063] loop4: detected capacity change from 0 to 1764
[  855.055309][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  855.076443][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  855.208232][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  855.259633][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  855.269789][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  855.280792][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  855.310552][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  855.416277][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  855.520548][T11571] batman_adv: batadv0: Interface activated: batadv_slave_1
[  855.586410][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  855.777812][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  855.993154][T10804] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  856.069107][T11571] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  856.083624][T12046] loop1: detected capacity change from 0 to 256
[  856.093870][T11571] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  856.128705][T11571] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  856.149925][T11571] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  856.184966][T11137] device hsr_slave_0 left promiscuous mode
[  856.258016][T12072] program syz.4.1487 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  856.282010][ T3639] usb 2-1: USB disconnect, device number 14
[  856.389373][T11137] device hsr_slave_1 left promiscuous mode
[  856.521826][T11137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  856.566361][T11137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  856.640780][T11137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  856.682455][T11137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  856.711542][T11137] device bridge_slave_1 left promiscuous mode
[  856.717945][T11137] bridge0: port 2(bridge_slave_1) entered disabled state
[  856.726610][T11137] device bridge_slave_0 left promiscuous mode
[  856.733212][T11137] bridge0: port 1(bridge_slave_0) entered disabled state
[  856.769105][T11137] device veth1_macvtap left promiscuous mode
[  856.775552][T11137] device veth0_macvtap left promiscuous mode
[  856.781779][T11137] device veth1_vlan left promiscuous mode
[  856.787800][T11137] device veth0_vlan left promiscuous mode
[  857.569358][T12077] binder: 12076:12077 ioctl c0306201 0 returned -14
[  858.818424][T12085] loop1: detected capacity change from 0 to 2048
[  858.931835][T12085] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  859.256196][T12093] loop2: detected capacity change from 0 to 16
[  859.291624][T12093] erofs: (device loop2): mounted with root inode @ nid 36.
[  859.612188][T12095] syz.2.1489: attempt to access beyond end of device
[  859.612188][T12095] loop2: rw=0, sector=8, nr_sectors = 32 limit=16
[  859.687156][T12095] syz.2.1489: attempt to access beyond end of device
[  859.687156][T12095] loop2: rw=0, sector=8, nr_sectors = 32 limit=16
[  859.702657][T12095] syz.2.1489: attempt to access beyond end of device
[  859.702657][T12095] loop2: rw=0, sector=8, nr_sectors = 32 limit=16
[  859.730719][T12095] syz.2.1489: attempt to access beyond end of device
[  859.730719][T12095] loop2: rw=0, sector=8, nr_sectors = 32 limit=16
[  859.807075][T12095] syz.2.1489: attempt to access beyond end of device
[  859.807075][T12095] loop2: rw=0, sector=8, nr_sectors = 32 limit=16
[  860.179604][T11137] team0 (unregistering): Port device team_slave_1 removed
[  860.251117][T11137] team0 (unregistering): Port device team_slave_0 removed
[  860.317357][T11137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  860.382164][T11137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  861.390557][T11137] bond0 (unregistering): Released all slaves
[  861.522248][T12092] netlink: 'syz.1.1491': attribute type 4 has an invalid length.
[  861.610880][T11840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  861.658625][ T3992] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  861.683151][T11840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  861.734674][T12097] netlink: 'syz.4.1492': attribute type 1 has an invalid length.
[  861.736856][ T3992] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  861.761359][T11840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  861.797289][T11840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  861.805257][ T3992] EXT4-fs (loop1): This should not happen!! Data will be lost
[  861.805257][ T3992] 
[  861.835033][ T3992] EXT4-fs (loop1): Total free blocks count 0
[  861.849549][ T3992] EXT4-fs (loop1): Free/Dirty block details
[  861.895733][T12102] loop2: detected capacity change from 0 to 256
[  861.926561][T12102] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  861.998175][T12102] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293)
[  861.998175][T12102] 
[  862.010303][T12102] exFAT-fs (loop2): Filesystem has been set read-only
[  862.017168][T12102] exFAT-fs (loop2): error, failed to bmap (inode : ffff888073b74260 iblock : 0, err : -5)
[  862.045968][T12102] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293)
[  862.045968][T12102] 
[  862.058084][T12102] exFAT-fs (loop2): error, failed to bmap (inode : ffff888073b748e0 iblock : 0, err : -5)
[  862.170918][   T26] audit: type=1800 audit(1725345049.199:348): pid=12102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1493" name="bus" dev="loop2" ino=1048721 res=0 errno=0
[  862.308960][ T3992] EXT4-fs (loop1): free_blocks=2415919104
[  862.399846][ T3992] EXT4-fs (loop1): dirty_blocks=16
[  862.487250][ T3992] EXT4-fs (loop1): Block reservation details
[  862.670712][ T3992] EXT4-fs (loop1): i_reserved_data_blocks=1
[  862.716351][T12104] loop4: detected capacity change from 0 to 256
[  862.737008][T10202] EXT4-fs (loop1): unmounting filesystem.
[  862.793316][T11840] 8021q: adding VLAN 0 to HW filter on device bond0
[  862.916799][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  862.962443][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  862.971716][T12108] netlink: 'syz.1.1494': attribute type 1 has an invalid length.
[  863.005089][T11158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  863.005148][T11158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  863.101677][T12109] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  863.139725][T11840] 8021q: adding VLAN 0 to HW filter on device team0
[  863.158759][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  863.196040][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  863.212152][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  863.248239][T11142] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.255430][T11142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  863.356732][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  863.365685][T12120] binder: 12119:12120 ioctl c0306201 0 returned -14
[  863.382713][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  863.392940][ T3625] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  863.404043][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  863.424676][T11142] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.431860][T11142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  863.452819][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  863.462416][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  863.472034][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  863.484931][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  863.502776][ T3992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  863.519823][ T3992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  863.535046][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  863.546136][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  863.567369][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  863.579152][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  863.588224][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  863.612163][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  863.626988][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  863.669258][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  863.781443][ T3625] usb 5-1: No LPM exit latency info found, disabling LPM.
[  863.880887][ T3625] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  863.903407][ T3625] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  863.971579][ T3625] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  864.281387][ T3625] usb 5-1: string descriptor 0 read error: -22
[  864.292128][ T3625] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  864.320822][ T3625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.332954][T11840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  864.425385][ T3625] usb 5-1: 0:2 : does not exist
[  864.654182][ T3684] usb 5-1: USB disconnect, device number 17
[  866.163098][T12132] loop2: detected capacity change from 0 to 16
[  866.205759][T12132] erofs: (device loop2): mounted with root inode @ nid 36.
[  869.289515][T12149] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  869.300995][T12149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  869.308760][T12149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  870.182418][T12159] netlink: 'syz.4.1503': attribute type 1 has an invalid length.
[  870.447857][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  871.255066][T12176] loop1: detected capacity change from 0 to 256
[  871.282814][T12174] tty tty24: ldisc open failed (-12), clearing slot 23
[  871.362219][T12176] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  871.452894][T12176] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293)
[  871.452894][T12176] 
[  871.465006][T12176] exFAT-fs (loop1): Filesystem has been set read-only
[  871.471890][T12176] exFAT-fs (loop1): error, failed to bmap (inode : ffff888073b755e0 iblock : 0, err : -5)
[  871.501351][T12176] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293)
[  871.501351][T12176] 
[  871.513467][T12176] exFAT-fs (loop1): error, failed to bmap (inode : ffff888073b75c60 iblock : 0, err : -5)
[  871.600796][   T26] audit: type=1800 audit(1725345058.659:349): pid=12176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1506" name="bus" dev="loop1" ino=1048727 res=0 errno=0
[  871.805454][T12163] netlink: 'syz.3.1505': attribute type 1 has an invalid length.
[  871.841614][T12179] binder: 12177:12179 ioctl c0306201 0 returned -14
[  871.861631][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  871.900993][T12173] bridge0: port 3(erspan0) entered blocking state
[  871.907540][T12173] bridge0: port 3(erspan0) entered disabled state
[  871.915899][T12173] device erspan0 entered promiscuous mode
[  871.922149][T12173] bridge0: port 3(erspan0) entered blocking state
[  871.928634][T12173] bridge0: port 3(erspan0) entered forwarding state
[  871.947967][T11840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  872.102870][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  872.120572][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  872.399586][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  872.451321][ T4679] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  872.480029][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  872.590956][T11840] device veth0_vlan entered promiscuous mode
[  872.632242][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  872.677065][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  872.827572][T11840] device veth1_vlan entered promiscuous mode
[  872.871060][ T4679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  872.904679][ T4679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  872.926924][ T4679] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  872.973369][ T4679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.043732][ T4679] usb 3-1: config 0 descriptor??
[  873.121495][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  873.142580][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  873.237986][ T3683] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  873.651283][ T3683] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  873.709932][ T3683] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  873.800210][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.831936][ T3683] usb 2-1: config 0 descriptor??
[  873.942120][ T3683] rndis_wlan 2-1:0.0: skipping garbage
[  873.947638][ T3683] usb 2-1: bad CDC descriptors
[  873.959241][T11840] device veth0_macvtap entered promiscuous mode
[  873.977005][ T3683] rndis_host 2-1:0.0: skipping garbage
[  873.992150][T12196] netlink: 'syz.4.1512': attribute type 25 has an invalid length.
[  874.010264][T12196] netlink: 'syz.4.1512': attribute type 8 has an invalid length.
[  874.019119][ T3683] usb 2-1: bad CDC descriptors
[  874.060954][T11154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  874.075496][T11154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  874.094180][T11154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  874.128082][T11840] device veth1_macvtap entered promiscuous mode
[  874.136629][T10482] usb 2-1: USB disconnect, device number 15
[  874.155572][T11154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  874.206507][T11840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  874.237743][T11840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.254125][T12207] loop4: detected capacity change from 0 to 1024
[  874.268724][T11840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  874.297255][T11840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.310623][T11840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  874.332810][T11840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.350597][T11840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  874.824815][T11840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.857968][T11840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  874.875549][T11840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.888194][T11840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  874.907961][T11840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  874.956486][T11840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.982061][ T4680] usb 3-1: USB disconnect, device number 10
[  875.008358][T11840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  875.025383][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  875.031940][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  875.081769][T11840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.285485][T11840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  875.296425][T11840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.309848][T11840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  875.321172][T11840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.334076][T11840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  875.345138][T11840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.371434][T11840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  875.379324][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  875.427258][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  875.459463][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  875.478839][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  875.505385][T11840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  875.546711][T11840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  875.581873][T11840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  875.600734][T11840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  876.590466][T11154] hfsplus: b-tree write err: -5, ino 4
[  876.656321][T12219] loop1: detected capacity change from 0 to 16
[  876.771366][T12219] erofs: (device loop1): mounted with root inode @ nid 36.
[  876.799925][   T52] block nbd2: Attempted send on invalid socket
[  876.810530][   T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  876.830768][   T52] block nbd2: Attempted send on invalid socket
[  876.839170][   T52] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  876.874237][T12226] Mount JFS Failure: -5
[  876.878487][T12226] jfs_mount failed w/return code = -5
[  876.902698][T12225] netlink: 'syz.3.1520': attribute type 1 has an invalid length.
[  876.995488][T12230] netlink: 'syz.4.1517': attribute type 1 has an invalid length.
[  877.095974][T12221] syz.1.1518: attempt to access beyond end of device
[  877.095974][T12221] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  877.149895][T12221] syz.1.1518: attempt to access beyond end of device
[  877.149895][T12221] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  877.177518][T12232] syz.1.1518: attempt to access beyond end of device
[  877.177518][T12232] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  877.222819][T12221] syz.1.1518: attempt to access beyond end of device
[  877.222819][T12221] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  877.252692][T12232] syz.1.1518: attempt to access beyond end of device
[  877.252692][T12232] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  877.463389][T11154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  877.615931][T11154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  877.942158][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  877.942705][ T3744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  877.969905][ T3744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.728773][T12239] loop2: detected capacity change from 0 to 512
[  878.732420][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  878.860651][T12239] EXT4-fs (loop2): bad s_min_extra_isize: 65528
[  878.898801][T12243] loop4: detected capacity change from 0 to 512
[  878.969693][T12243] EXT4-fs (loop4): bad s_min_extra_isize: 65528
[  878.995667][ T3645] Bluetooth: hci2: unexpected event 0x04 length: 14 > 10
[  879.014720][T12245] loop1: detected capacity change from 0 to 16
[  879.037306][T12245] erofs: (device loop1): mounted with root inode @ nid 36.
[  879.133532][T12251] xt_CT: You must specify a L4 protocol and not use inversions on it
[  880.131609][T12259] syz.1.1525: attempt to access beyond end of device
[  880.131609][T12259] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  880.149479][T12260] syz.1.1525: attempt to access beyond end of device
[  880.149479][T12260] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  880.184240][T12259] syz.1.1525: attempt to access beyond end of device
[  880.184240][T12259] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  880.217636][T12259] syz.1.1525: attempt to access beyond end of device
[  880.217636][T12259] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  880.270191][T12259] syz.1.1525: attempt to access beyond end of device
[  880.270191][T12259] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  882.695803][T12270] netlink: 'syz.4.1531': attribute type 1 has an invalid length.
[  883.679104][T12289] netlink: 'syz.3.1532': attribute type 1 has an invalid length.
[  883.855558][   T52] block nbd1: Attempted send on invalid socket
[  883.864239][   T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  883.883041][   T52] block nbd1: Attempted send on invalid socket
[  883.889234][   T52] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  883.898584][T12306] Mount JFS Failure: -5
[  883.902831][T12306] jfs_mount failed w/return code = -5
[  884.441347][T12309] binder: 12303:12309 ioctl c0306201 0 returned -14
[  884.836442][T12315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1537'.
[  884.910686][T12315] loop2: detected capacity change from 0 to 1024
[  884.927415][T12315] EXT4-fs: Ignoring removed orlov option
[  884.933448][T12315] EXT4-fs: Ignoring removed nomblk_io_submit option
[  884.934821][T12316] loop1: detected capacity change from 0 to 16
[  884.982604][T12316] erofs: (device loop1): mounted with root inode @ nid 36.
[  885.029527][T12315] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  885.115428][T12329] bio_check_eod: 1 callbacks suppressed
[  885.115459][T12329] syz.1.1538: attempt to access beyond end of device
[  885.115459][T12329] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  885.158544][T12329] syz.1.1538: attempt to access beyond end of device
[  885.158544][T12329] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  885.189540][T12329] syz.1.1538: attempt to access beyond end of device
[  885.189540][T12329] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  885.228767][T12329] syz.1.1538: attempt to access beyond end of device
[  885.228767][T12329] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  885.278017][T12329] syz.1.1538: attempt to access beyond end of device
[  885.278017][T12329] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  885.304153][T12330] syz.1.1538: attempt to access beyond end of device
[  885.304153][T12330] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  885.635434][T12315] EXT4-fs (loop2): Online resizing not supported with bigalloc
[  885.751435][T12335] loop4: detected capacity change from 0 to 512
[  885.784976][T12335] EXT4-fs (loop4): bad s_min_extra_isize: 65528
[  885.889242][T12336] loop1: detected capacity change from 0 to 512
[  885.940738][T12336] EXT4-fs (loop1): bad s_min_extra_isize: 65528
[  885.985656][T10695] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  886.423043][ T7662] Bluetooth: hci6: unexpected event for opcode 0x200b
[  887.409341][   T26] audit: type=1326 audit(1725345074.629:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.4.1544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8210b79eb9 code=0x0
[  888.148918][T12357] netlink: 'syz.1.1546': attribute type 1 has an invalid length.
[  889.738942][T12369] loop1: detected capacity change from 0 to 2048
[  890.090823][T12369] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  890.101710][T12369] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  890.114103][T12369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  890.174264][T12363] netlink: 'syz.4.1550': attribute type 1 has an invalid length.
[  892.252485][T12389] loop4: detected capacity change from 0 to 16
[  892.288135][T12391] loop1: detected capacity change from 0 to 512
[  892.295351][T12389] erofs: (device loop4): mounted with root inode @ nid 36.
[  892.320283][T12391] EXT4-fs (loop1): bad s_min_extra_isize: 65528
[  892.440658][T12392] binder: 12372:12392 ioctl c0306201 0 returned -14
[  892.748177][T12389] syz.4.1553: attempt to access beyond end of device
[  892.748177][T12389] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  892.810610][T12389] syz.4.1553: attempt to access beyond end of device
[  892.810610][T12389] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  892.837606][T12394] syz.4.1553: attempt to access beyond end of device
[  892.837606][T12394] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  892.873988][T12389] syz.4.1553: attempt to access beyond end of device
[  892.873988][T12389] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  892.905776][T12389] syz.4.1553: attempt to access beyond end of device
[  892.905776][T12389] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  894.113305][T12401] loop4: detected capacity change from 0 to 512
[  894.169023][T12401] EXT4-fs (loop4): bad s_min_extra_isize: 65528
[  894.355724][T10804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  894.374886][T12406] loop0: detected capacity change from 0 to 512
[  895.473562][T12409] "syz.1.1558" (12409) uses obsolete ecb(arc4) skcipher
[  896.493279][T12406] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  896.525843][T12406] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff)
[  896.822828][T12406] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1560: Directory hole found for htree leaf block 0
[  897.290293][T12417] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1560: Directory hole found for htree leaf block 0
[  898.078909][T12406] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1560: Directory hole found for htree leaf block 0
[  898.630981][ T3645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  898.642337][ T3645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  898.650827][ T3645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  898.664648][ T3645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  898.674543][ T3645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  898.682475][ T3645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  898.744443][T12435] netlink: 'syz.1.1565': attribute type 1 has an invalid length.
[  898.750968][T12433] netlink: 'syz.4.1564': attribute type 1 has an invalid length.
[  898.938234][T11840] EXT4-fs (loop0): unmounting filesystem.
[  898.979415][T12442] loop4: detected capacity change from 0 to 512
[  899.060338][T12442] EXT4-fs (loop4): bad s_min_extra_isize: 65528
[  899.902728][T12450] loop0: detected capacity change from 0 to 512
[  899.933157][T12450] EXT4-fs (loop0): bad s_min_extra_isize: 65528
[  899.958071][T12429] chnl_net:caif_netlink_parms(): no params data found
[  899.974928][T10695] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  900.770647][ T3645] Bluetooth: hci5: command tx timeout
[  900.827605][T12461] loop4: detected capacity change from 0 to 512
[  900.836689][T12461] EXT4-fs (loop4): bad s_min_extra_isize: 65528
[  900.988586][T12429] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.996567][T12429] bridge0: port 1(bridge_slave_0) entered disabled state
[  901.005265][T12429] device bridge_slave_0 entered promiscuous mode
[  901.014431][T12429] bridge0: port 2(bridge_slave_1) entered blocking state
[  901.022112][T12429] bridge0: port 2(bridge_slave_1) entered disabled state
[  901.029845][T12429] device bridge_slave_1 entered promiscuous mode
[  901.049364][T12429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  901.071991][T12463] loop1: detected capacity change from 0 to 16
[  901.110880][T12463] erofs: (device loop1): mounted with root inode @ nid 36.
[  901.122508][T12429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  901.277187][T12429] team0: Port device team_slave_0 added
[  901.306096][T12429] team0: Port device team_slave_1 added
[  901.511708][T12468] syz.1.1570: attempt to access beyond end of device
[  901.511708][T12468] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  901.526731][T12469] syz.1.1570: attempt to access beyond end of device
[  901.526731][T12469] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  901.566561][T12468] syz.1.1570: attempt to access beyond end of device
[  901.566561][T12468] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  901.585826][T12468] syz.1.1570: attempt to access beyond end of device
[  901.585826][T12468] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  901.629561][T12468] syz.1.1570: attempt to access beyond end of device
[  901.629561][T12468] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  901.884068][T12429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  901.893967][T12429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  901.934122][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  901.970874][T12429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  902.010793][T12429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  902.032572][T12429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  902.104323][T12429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  902.125054][T12476] netlink: 'syz.4.1575': attribute type 1 has an invalid length.
[  902.187509][T12479] netlink: 'syz.0.1576': attribute type 1 has an invalid length.
[  902.207791][T12429] device hsr_slave_0 entered promiscuous mode
[  902.269697][T12429] device hsr_slave_1 entered promiscuous mode
[  902.307371][T12484] loop4: detected capacity change from 0 to 256
[  902.990288][ T3645] Bluetooth: hci5: command tx timeout
[  904.195307][T12503] loop1: detected capacity change from 0 to 1024
[  904.202142][T12503] cgroup2: Unknown parameter 'journal_path'
[  904.267492][T12503] loop1: detected capacity change from 0 to 8192
[  904.286175][T12429] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.324054][T12503]  loop1: p1 p2[DM] p4
[  904.328312][T12503] loop1: p1 size 196608 extends beyond EOD, truncated
[  904.336227][T12503] loop1: p2 size 150994946 extends beyond EOD, truncated
[  904.344224][T12503] loop1: p4 size 50331648 extends beyond EOD, truncated
[  904.512905][T12506] loop0: detected capacity change from 0 to 512
[  904.530412][T10695] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  904.595297][T12506] EXT4-fs (loop0): bad s_min_extra_isize: 65528
[  904.617311][T12511] loop1: detected capacity change from 0 to 512
[  904.626666][T12512] loop4: detected capacity change from 0 to 16
[  904.633213][T10695] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  904.644895][T12429] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.668899][T12512] erofs: (device loop4): mounted with root inode @ nid 36.
[  904.669424][T12511] EXT4-fs (loop1): bad s_min_extra_isize: 65528
[  904.774996][T12429] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.010742][T12508] syz.4.1584: attempt to access beyond end of device
[  905.010742][T12508] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  905.032932][ T7662] Bluetooth: hci5: command tx timeout
[  905.052454][T12508] syz.4.1584: attempt to access beyond end of device
[  905.052454][T12508] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  905.086444][T12508] syz.4.1584: attempt to access beyond end of device
[  905.086444][T12508] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  905.152951][T12512] syz.4.1584: attempt to access beyond end of device
[  905.152951][T12512] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  905.164809][ T3645] Bluetooth: hci6: unexpected event for opcode 0x200b
[  905.169849][T10804] udevd[10804]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  905.197886][T12517] syz.4.1584: attempt to access beyond end of device
[  905.197886][T12517] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  905.401948][T11284] udevd[11284]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  905.469071][T10695] udevd[10695]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  905.469288][T12429] team0: Port device netdevsim0 removed
[  905.493373][T12429] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.724544][T12519] netlink: 'syz.0.1586': attribute type 1 has an invalid length.
[  905.797958][T12429] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  905.830588][T12429] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  905.849978][T12429] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  905.881570][T12524] binder: 12523:12524 ioctl 400c620e 0 returned -14
[  905.889178][T12429] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  906.074955][T12528] netlink: 'syz.0.1588': attribute type 1 has an invalid length.
[  906.108846][T12429] 8021q: adding VLAN 0 to HW filter on device bond0
[  906.139655][T12429] 8021q: adding VLAN 0 to HW filter on device team0
[  906.396701][T12533] loop1: detected capacity change from 0 to 16
[  908.007118][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  908.010974][ T3645] Bluetooth: hci5: command tx timeout
[  908.028133][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  908.035942][T12533] erofs: (device loop1): mounted with root inode @ nid 36.
[  908.049877][T12531] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  908.065402][T12531] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4 in[53, 4043] out[1851]
[  908.078100][T12531] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[  908.483231][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  908.539191][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  908.582165][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  908.589295][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  909.581693][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  909.590712][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  909.599397][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.606586][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  909.615117][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  909.628735][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  909.654346][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  909.675596][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  909.694851][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  909.717074][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  909.729080][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  909.738131][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  909.751104][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  909.760148][T12550] loop4: detected capacity change from 0 to 16
[  909.833128][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  909.850884][T12550] erofs: (device loop4): mounted with root inode @ nid 36.
[  909.865447][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  909.895403][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  909.912350][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  910.159342][T12549] syz.4.1595: attempt to access beyond end of device
[  910.159342][T12549] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  910.173027][T12549] syz.4.1595: attempt to access beyond end of device
[  910.173027][T12549] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  910.186693][T12549] syz.4.1595: attempt to access beyond end of device
[  910.186693][T12549] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  910.200250][T12549] syz.4.1595: attempt to access beyond end of device
[  910.200250][T12549] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  910.213969][T12549] syz.4.1595: attempt to access beyond end of device
[  910.213969][T12549] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  910.266233][ T3645] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  910.278649][ T3645] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  910.290527][ T3645] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  910.299452][ T3645] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  910.300165][T12562] loop1: detected capacity change from 0 to 512
[  910.314473][ T7659] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  910.322044][ T7659] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  910.423869][T12562] EXT4-fs (loop1): bad s_min_extra_isize: 65528
[  910.526230][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  910.536077][T12559] netlink: 'syz.0.1597': attribute type 1 has an invalid length.
[  910.549169][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  910.568936][ T7659] Bluetooth: hci6: unexpected event for opcode 0x200b
[  910.673256][T12429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  910.772660][T12571] loop1: detected capacity change from 0 to 512
[  910.805375][T12571] EXT4-fs (loop1): bad s_min_extra_isize: 65528
[  910.947898][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  910.964024][ T7659] Bluetooth: hci6: unexpected event for opcode 0x200b
[  911.017190][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  911.096567][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  911.111365][T12578] netlink: 'syz.4.1600': attribute type 1 has an invalid length.
[  911.120135][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  911.160050][T12429] device veth0_vlan entered promiscuous mode
[  911.183577][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  911.203762][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  911.227829][T12554] chnl_net:caif_netlink_parms(): no params data found
[  911.360335][T12429] device veth1_vlan entered promiscuous mode
[  911.874276][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  911.887110][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  912.010632][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  912.033550][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  912.078626][T12429] device veth0_macvtap entered promiscuous mode
[  912.370891][ T7659] Bluetooth: hci7: command tx timeout
[  912.583883][T12554] bridge0: port 1(bridge_slave_0) entered blocking state
[  912.600306][T12554] bridge0: port 1(bridge_slave_0) entered disabled state
[  912.685923][T12554] device bridge_slave_0 entered promiscuous mode
[  912.723848][T12429] device veth1_macvtap entered promiscuous mode
[  912.739929][T12608] loop4: detected capacity change from 0 to 512
[  912.764607][T12554] bridge0: port 2(bridge_slave_1) entered blocking state
[  912.800806][T12608] EXT4-fs (loop4): bad s_min_extra_isize: 65528
[  912.812464][T12554] bridge0: port 2(bridge_slave_1) entered disabled state
[  912.832323][T12554] device bridge_slave_1 entered promiscuous mode
[  912.866586][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1604'.
[  912.977906][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  912.991231][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  913.014696][T12554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  913.033893][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.058652][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.091428][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.142849][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.157235][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.186285][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.215024][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.229198][T12613] netlink: 'syz.0.1608': attribute type 1 has an invalid length.
[  913.239574][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.263073][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.274518][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.289035][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.300100][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.325342][T12429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  913.353635][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  913.371838][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  913.519340][T12554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  913.567750][T12618] netlink: 'syz.4.1611': attribute type 1 has an invalid length.
[  913.626605][T12616] loop1: detected capacity change from 0 to 512
[  913.639797][T12622] loop0: detected capacity change from 0 to 16
[  913.649324][T12616] EXT4-fs (loop1): bad s_min_extra_isize: 65528
[  913.662579][T12622] erofs: (device loop0): mounted with root inode @ nid 36.
[  914.150037][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.239795][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.585738][ T7662] Bluetooth: hci7: command tx timeout
[  914.718151][T12630] syz.0.1609: attempt to access beyond end of device
[  914.718151][T12630] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  914.755615][T12631] syz.0.1609: attempt to access beyond end of device
[  914.755615][T12631] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  914.790510][T12630] syz.0.1609: attempt to access beyond end of device
[  914.790510][T12630] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  914.823300][T12630] syz.0.1609: attempt to access beyond end of device
[  914.823300][T12630] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  914.870412][T12630] syz.0.1609: attempt to access beyond end of device
[  914.870412][T12630] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  915.085570][ T7659] Bluetooth: hci6: unexpected event for opcode 0x200b
[  915.103763][T12628] loop4: detected capacity change from 0 to 512
[  915.113018][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  915.113853][T12628] EXT4-fs (loop4): bad s_min_extra_isize: 65528
[  915.123765][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.139758][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  915.152149][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.162819][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  915.173558][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.204343][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  915.220533][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.240769][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  915.272359][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.292100][T12429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  915.304992][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  915.323534][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  915.334078][T10804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  915.374829][T12429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  915.403475][T12429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  915.414270][T12429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  915.424363][T12429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  915.472927][T12554] team0: Port device team_slave_0 added
[  915.500365][T12554] team0: Port device team_slave_1 added
[  915.602564][T12554] batman_adv: batadv0: Adding interface: batadv_slave_0
[  915.623528][T12554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  915.799496][T12554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  915.819367][T12554] batman_adv: batadv0: Adding interface: batadv_slave_1
[  915.827105][T12554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  915.944322][T12554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  916.027707][T12641] loop1: detected capacity change from 0 to 512
[  916.161252][T12641] EXT4-fs (loop1): bad s_min_extra_isize: 65528
[  916.474112][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  916.514822][T12554] device hsr_slave_0 entered promiscuous mode
[  916.520058][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  916.532902][T12554] device hsr_slave_1 entered promiscuous mode
[  916.540259][T12554] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  916.555884][T12554] Cannot create hsr debugfs directory
[  916.563692][ T7659] Bluetooth: hci6: unexpected event for opcode 0x200b
[  916.701385][ T7659] Bluetooth: hci7: command tx timeout
[  916.707844][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  916.721433][T11154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  916.741438][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  917.439149][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  917.570645][T12655] netlink: 'syz.4.1617': attribute type 1 has an invalid length.
[  917.689535][T12657] loop4: detected capacity change from 0 to 512
[  917.786471][T12657] EXT4-fs (loop4): bad s_min_extra_isize: 65528
[  917.902177][T12660] netlink: 'syz.2.1559': attribute type 1 has an invalid length.
[  917.912269][   T26] audit: type=1326 audit(2000000000.019:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12658 comm="syz.1.1619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05c2379eb9 code=0x0
[  918.050203][T12651] loop0: detected capacity change from 0 to 8192
[  918.105092][T12651] FAT-fs (loop0): Unrecognized mount option "kmem_cache_free" or missing value
[  918.219504][T12554] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.813122][ T7659] Bluetooth: hci7: command tx timeout
[  919.134658][T12672] netlink: 'syz.1.1622': attribute type 1 has an invalid length.
[  919.293027][T12554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  920.396687][T12684] loop4: detected capacity change from 0 to 512
[  920.481256][T12684] EXT4-fs (loop4): bad s_min_extra_isize: 65528
[  920.519398][T12687] binder: 12675:12687 ioctl c0306201 0 returned -14
[  920.844041][T12554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  920.902306][T12692] netlink: 'syz.2.1628': attribute type 1 has an invalid length.
[  920.960620][ T3052] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  921.152545][T12554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.565037][T12690] sch_fq: defrate 0 ignored.
[  921.990644][ T3052] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  922.028177][ T3052] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  922.220891][ T3052] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  922.229980][ T3052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.293981][ T3052] usb 1-1: Product: syz
[  922.298179][ T3052] usb 1-1: Manufacturer: syz
[  922.350647][ T3052] usb 1-1: SerialNumber: syz
[  922.429053][ T3052] usb 1-1: selecting invalid altsetting 1
[  922.519862][T12706] binder: 12704:12706 ioctl c0306201 0 returned -14
[  922.919283][T12711] sch_fq: defrate 0 ignored.
[  922.924982][T12554] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  923.074946][T12686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  923.194586][T12554] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  923.217157][T12686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  923.241192][T12554] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  923.270372][T12686] CUSE: unknown device info ""
[  925.039427][T12723] MTD: Attempt to mount non-MTD device "/dev/nbd1"
[  925.046227][T12723] cramfs: wrong magic
[  925.080793][T12686] CUSE: DEVNAME unspecified
[  925.221458][ T3052] usb 1-1: selecting invalid altsetting 1
[  925.260431][ T3052] cdc_ncm 1-1:1.0: bind() failure
[  925.432101][T12554] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  925.889320][ T3052] usb 1-1: USB disconnect, device number 18
[  925.980194][T12727] netlink: 'syz.1.1635': attribute type 1 has an invalid length.
[  927.513799][T12741] netlink: 'syz.4.1638': attribute type 1 has an invalid length.
[  927.609557][T12742] netlink: 'syz.2.1637': attribute type 1 has an invalid length.
[  928.025115][T12746] netlink: 'syz.0.1640': attribute type 1 has an invalid length.
[  928.593921][T12554] 8021q: adding VLAN 0 to HW filter on device bond0
[  928.629526][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  928.662517][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  928.688904][T12554] 8021q: adding VLAN 0 to HW filter on device team0
[  928.851562][T12753] binder: 12748:12753 ioctl c0306201 0 returned -14
[  929.366618][T12769] loop0: detected capacity change from 0 to 16
[  929.399281][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  929.465170][T12769] erofs: (device loop0): mounted with root inode @ nid 36.
[  929.479318][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  929.519693][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.526871][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  929.583222][T12760] sch_fq: defrate 0 ignored.
[  929.590676][T12766] sch_fq: defrate 0 ignored.
[  929.782680][ T3744] device hsr_slave_0 left promiscuous mode
[  929.791261][T12767] syz.0.1644: attempt to access beyond end of device
[  929.791261][T12767] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  929.821937][ T3744] device hsr_slave_1 left promiscuous mode
[  929.840655][T12767] syz.0.1644: attempt to access beyond end of device
[  929.840655][T12767] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  929.890835][T12767] syz.0.1644: attempt to access beyond end of device
[  929.890835][T12767] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  929.913211][ T3744] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  929.948860][T12767] syz.0.1644: attempt to access beyond end of device
[  929.948860][T12767] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  929.952813][ T3744] batman_adv: batadv0: Removing interface: batadv_slave_0
[  929.975864][T12780] syz.0.1644: attempt to access beyond end of device
[  929.975864][T12780] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  930.271562][ T3744] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  930.279021][ T3744] batman_adv: batadv0: Removing interface: batadv_slave_1
[  930.369650][ T3744] device bridge_slave_1 left promiscuous mode
[  930.386474][ T3744] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.093731][T12793] loop4: detected capacity change from 0 to 16
[  931.389601][T12793] erofs: (device loop4): mounted with root inode @ nid 36.
[  931.770808][T12796] netlink: 'syz.0.1648': attribute type 1 has an invalid length.
[  931.837142][ T3744] device bridge_slave_0 left promiscuous mode
[  931.856023][ T3744] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.886964][T12802] loop1: detected capacity change from 0 to 512
[  931.941493][T12802] EXT4-fs (loop1): bad s_min_extra_isize: 65528
[  932.052017][T12789] syz.4.1646: attempt to access beyond end of device
[  932.052017][T12789] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  932.085396][ T3744] device veth1_macvtap left promiscuous mode
[  932.100821][T12789] syz.4.1646: attempt to access beyond end of device
[  932.100821][T12789] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  932.112451][ T3744] device veth0_macvtap left promiscuous mode
[  932.120972][ T3744] device veth1_vlan left promiscuous mode
[  932.133510][ T3744] device veth0_vlan left promiscuous mode
[  932.183698][T12791] syz.4.1646: attempt to access beyond end of device
[  932.183698][T12791] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  933.458339][ T7659] Bluetooth: hci6: unexpected event for opcode 0x200b
[  933.498771][T12815] netlink: 'syz.0.1653': attribute type 1 has an invalid length.
[  933.629349][T12818] netlink: 'syz.2.1654': attribute type 1 has an invalid length.
[  934.242769][T12836] loop1: detected capacity change from 0 to 16
[  934.285993][T12836] erofs: (device loop1): mounted with root inode @ nid 36.
[  934.641277][T12841] syz.1.1657: attempt to access beyond end of device
[  934.641277][T12841] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  934.669523][T12842] syz.1.1657: attempt to access beyond end of device
[  934.669523][T12842] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  934.815299][T12841] bio_check_eod: 2 callbacks suppressed
[  934.827215][T12841] syz.1.1657: attempt to access beyond end of device
[  934.827215][T12841] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  935.444202][ T3744] team0 (unregistering): Port device team_slave_1 removed
[  935.525665][ T3744] team0 (unregistering): Port device team_slave_0 removed
[  935.634203][ T3744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  935.728624][ T3744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  936.472131][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  936.478458][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  937.224808][ T3744] bond0 (unregistering): Released all slaves
[  937.369327][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  937.377579][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  937.386843][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  937.395691][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  937.402869][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  937.411521][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  937.431238][T12824] sch_fq: defrate 0 ignored.
[  937.495015][T12828] sch_fq: defrate 0 ignored.
[  937.551139][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  937.580427][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  937.595215][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  937.624924][T12847] loop4: detected capacity change from 0 to 16
[  937.671524][T12847] erofs: (device loop4): mounted with root inode @ nid 36.
[  937.735908][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  937.787693][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  937.804400][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  937.869942][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  937.901670][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  937.917071][T12849] loop1: detected capacity change from 0 to 2048
[  937.925191][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  938.051907][T12845] syz.4.1658: attempt to access beyond end of device
[  938.051907][T12845] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  938.097752][T12847] syz.4.1658: attempt to access beyond end of device
[  938.097752][T12847] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  938.130727][T12845] syz.4.1658: attempt to access beyond end of device
[  938.130727][T12845] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  938.158441][T12853] syz.4.1658: attempt to access beyond end of device
[  938.158441][T12853] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  938.179402][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  938.208451][T12845] syz.4.1658: attempt to access beyond end of device
[  938.208451][T12845] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  938.460736][T12554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  938.487962][T12854] loop0: detected capacity change from 0 to 2048
[  938.521405][T12849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  938.579893][T12854] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  938.680858][T12849] netlink: 'syz.1.1659': attribute type 4 has an invalid length.
[  938.723680][T12851] netlink: 'syz.0.1660': attribute type 4 has an invalid length.
[  938.795167][ T3680] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  938.877800][ T3680] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  938.923699][   T46] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  938.952110][ T3680] EXT4-fs (loop1): This should not happen!! Data will be lost
[  938.952110][ T3680] 
[  938.988672][ T3680] EXT4-fs (loop1): Total free blocks count 0
[  938.997460][ T3680] EXT4-fs (loop1): Free/Dirty block details
[  939.000973][   T46] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  939.006005][ T3680] EXT4-fs (loop1): free_blocks=2415919104
[  939.031150][   T46] EXT4-fs (loop0): This should not happen!! Data will be lost
[  939.031150][   T46] 
[  939.061273][   T46] EXT4-fs (loop0): Total free blocks count 0
[  939.062777][ T3680] EXT4-fs (loop1): dirty_blocks=16
[  939.087412][   T46] EXT4-fs (loop0): Free/Dirty block details
[  939.092063][ T3680] EXT4-fs (loop1): Block reservation details
[  939.099798][ T3680] EXT4-fs (loop1): i_reserved_data_blocks=1
[  939.113816][   T46] EXT4-fs (loop0): free_blocks=2415919104
[  939.129488][T12871] loop4: detected capacity change from 0 to 16
[  939.139461][   T46] EXT4-fs (loop0): dirty_blocks=16
[  939.140126][T10202] EXT4-fs (loop1): unmounting filesystem.
[  939.160884][   T46] EXT4-fs (loop0): Block reservation details
[  939.185919][T12871] erofs: (device loop4): mounted with root inode @ nid 36.
[  939.199143][   T46] EXT4-fs (loop0): i_reserved_data_blocks=1
[  939.252119][T12554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  939.256030][T11840] EXT4-fs (loop0): unmounting filesystem.
[  939.259199][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  939.292258][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  939.352328][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  939.376421][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  939.443051][T12871] syz.4.1663: attempt to access beyond end of device
[  939.443051][T12871] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  939.473791][T12871] syz.4.1663: attempt to access beyond end of device
[  939.473791][T12871] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  939.516506][T12871] syz.4.1663: attempt to access beyond end of device
[  939.516506][T12871] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  939.549189][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  939.568347][T12871] syz.4.1663: attempt to access beyond end of device
[  939.568347][T12871] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  939.575331][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  939.726467][T12554] device veth0_vlan entered promiscuous mode
[  939.766687][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  939.811827][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  939.941298][T12554] device veth1_vlan entered promiscuous mode
[  940.058767][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  940.075606][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  941.034840][T12554] device veth0_macvtap entered promiscuous mode
[  941.089907][T12554] device veth1_macvtap entered promiscuous mode
[  941.175544][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  941.191437][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  941.820470][    C0] hrtimer: interrupt took 47671 ns
[  941.882049][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  941.953299][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.041396][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  942.052373][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.072295][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  942.143333][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.171104][T12898] netlink: 'syz.2.1672': attribute type 1 has an invalid length.
[  942.199202][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  942.243194][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.287616][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  942.300715][ T7659] Bluetooth: hci7: command tx timeout
[  942.313366][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.400522][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  942.435820][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.486044][T12554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  942.508218][T12904] netlink: 'syz.0.1671': attribute type 1 has an invalid length.
[  942.530924][T12919] netlink: 'syz.2.1673': attribute type 1 has an invalid length.
[  942.559072][T12906] sch_fq: defrate 0 ignored.
[  942.584154][T12907] sch_fq: defrate 0 ignored.
[  942.588983][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  942.612010][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  942.664218][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  942.701598][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.727803][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  942.797242][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.817649][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  942.838446][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.860089][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  942.885508][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.899745][T12934] loop0: detected capacity change from 0 to 16
[  942.907653][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  942.920607][T12934] erofs: (device loop0): mounted with root inode @ nid 36.
[  942.940083][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  942.981730][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  943.020186][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  943.065899][T12554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  943.090908][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  943.101925][T12929] netlink: 'syz.2.1674': attribute type 1 has an invalid length.
[  943.122919][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  943.328874][T12931] bio_check_eod: 1 callbacks suppressed
[  943.328893][T12931] syz.0.1675: attempt to access beyond end of device
[  943.328893][T12931] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  943.365007][T12934] syz.0.1675: attempt to access beyond end of device
[  943.365007][T12934] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  943.379572][T12938] syz.0.1675: attempt to access beyond end of device
[  943.379572][T12938] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  943.666895][T12554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  943.700551][T12554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  943.729627][T12554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  943.748907][T12554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  943.972584][T11158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  943.998645][T12948] loop1: detected capacity change from 0 to 16
[  944.009038][T11158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  944.058476][T12948] erofs: (device loop1): mounted with root inode @ nid 36.
[  944.058503][T12947] loop4: detected capacity change from 0 to 1024
[  944.072923][T12947] hfsplus: unable to parse mount options
[  944.103198][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  944.174443][T12942] binder: 12939:12942 ioctl c0306201 0 returned -14
[  946.354178][T11137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  946.377876][T11137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  946.516777][T12965] loop4: detected capacity change from 0 to 16
[  946.772225][T11154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  947.003310][T12965] erofs: (device loop4): mounted with root inode @ nid 36.
[  947.604513][T12944] syz.1.1677: attempt to access beyond end of device
[  947.604513][T12944] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  947.629150][T12969] syz.1.1677: attempt to access beyond end of device
[  947.629150][T12969] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  947.730825][T12944] syz.1.1677: attempt to access beyond end of device
[  947.730825][T12944] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  947.772046][T12969] syz.1.1677: attempt to access beyond end of device
[  947.772046][T12969] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  947.799296][T12971] netlink: 'syz.0.1684': attribute type 1 has an invalid length.
[  947.810813][T12944] syz.1.1677: attempt to access beyond end of device
[  947.810813][T12944] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  947.848198][T12974] netlink: 'syz.2.1683': attribute type 1 has an invalid length.
[  948.124095][T12965] syz.4.1681: attempt to access beyond end of device
[  948.124095][T12965] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  948.240611][T12965] syz.4.1681: attempt to access beyond end of device
[  948.240611][T12965] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  948.430303][T12965] bio_check_eod: 1 callbacks suppressed
[  948.430321][T12965] syz.4.1681: attempt to access beyond end of device
[  948.430321][T12965] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  948.470315][T12981] netlink: 'syz.0.1685': attribute type 1 has an invalid length.
[  949.313616][T12960] syz.4.1681: attempt to access beyond end of device
[  949.313616][T12960] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  949.487496][T12986] sch_fq: defrate 0 ignored.
[  949.516119][T12988] netlink: 'syz.1.1687': attribute type 1 has an invalid length.
[  950.526969][T13002] loop0: detected capacity change from 0 to 16
[  950.566493][T13006] loop1: detected capacity change from 0 to 16
[  950.606499][T13002] erofs: (device loop0): mounted with root inode @ nid 36.
[  950.606499][T13006] erofs: (device loop1): mounted with root inode @ nid 36.
[  950.616676][T13003] sch_fq: defrate 0 ignored.
[  951.686254][T13020] syz.0.1690: attempt to access beyond end of device
[  951.686254][T13020] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  951.727526][T13020] syz.0.1690: attempt to access beyond end of device
[  951.727526][T13020] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  951.750379][T13020] syz.0.1690: attempt to access beyond end of device
[  951.750379][T13020] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  952.120991][T13025] syz.1.1691: attempt to access beyond end of device
[  952.120991][T13025] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  952.140651][T13026] syz.1.1691: attempt to access beyond end of device
[  952.140651][T13026] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  952.170709][T13025] syz.1.1691: attempt to access beyond end of device
[  952.170709][T13025] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  952.233621][T13025] syz.1.1691: attempt to access beyond end of device
[  952.233621][T13025] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  952.272128][T13025] syz.1.1691: attempt to access beyond end of device
[  952.272128][T13025] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  952.618556][T13019] loop4: detected capacity change from 0 to 2048
[  952.676600][T13027] netlink: 'syz.2.1695': attribute type 1 has an invalid length.
[  952.735871][T13019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  952.738606][T13032] loop0: detected capacity change from 0 to 2048
[  952.781021][T13032] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  952.841290][T13019] netlink: 'syz.4.1694': attribute type 4 has an invalid length.
[  952.900088][   T11] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  953.195597][   T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  953.212634][   T11] EXT4-fs (loop4): This should not happen!! Data will be lost
[  953.212634][   T11] 
[  953.259988][T13044] netlink: 'syz.0.1696': attribute type 4 has an invalid length.
[  953.277930][   T11] EXT4-fs (loop4): Total free blocks count 0
[  953.284414][   T11] EXT4-fs (loop4): Free/Dirty block details
[  953.290338][   T11] EXT4-fs (loop4): free_blocks=2415919104
[  953.296829][   T11] EXT4-fs (loop4): dirty_blocks=16
[  953.306758][   T11] EXT4-fs (loop4): Block reservation details
[  953.333574][T13048] netlink: 'syz.2.1699': attribute type 1 has an invalid length.
[  953.375626][   T11] EXT4-fs (loop4): i_reserved_data_blocks=1
[  953.412324][ T8998] EXT4-fs (loop4): unmounting filesystem.
[  953.529709][T13041] sch_fq: defrate 0 ignored.
[  953.638276][T13052] overlayfs: failed to resolve './file0': -2
[  955.103007][ T3680] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  955.429830][ T3680] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  955.677736][ T3680] EXT4-fs (loop0): This should not happen!! Data will be lost
[  955.677736][ T3680] 
[  955.687528][ T3680] EXT4-fs (loop0): Total free blocks count 0
[  955.693626][ T3680] EXT4-fs (loop0): Free/Dirty block details
[  955.699541][ T3680] EXT4-fs (loop0): free_blocks=2415919104
[  955.705411][ T3680] EXT4-fs (loop0): dirty_blocks=16
[  955.710631][ T3680] EXT4-fs (loop0): Block reservation details
[  955.716632][ T3680] EXT4-fs (loop0): i_reserved_data_blocks=1
[  955.725295][T11840] EXT4-fs (loop0): unmounting filesystem.
[  955.838472][T13060] netlink: 'syz.4.1701': attribute type 1 has an invalid length.
[  955.967096][T13075] netlink: 'syz.0.1702': attribute type 1 has an invalid length.
[  956.323505][T13071] sch_fq: defrate 0 ignored.
[  956.823861][T13083] loop0: detected capacity change from 0 to 16
[  956.843013][T13083] erofs: (device loop0): mounted with root inode @ nid 36.
[  957.752538][T13097] loop1: detected capacity change from 0 to 16
[  957.772930][T13097] erofs: (device loop1): mounted with root inode @ nid 36.
[  957.905272][T13092] binder: 13087:13092 ioctl c0306201 0 returned -14
[  958.019808][T13101] netlink: 'syz.4.1710': attribute type 1 has an invalid length.
[  958.322962][T13102] syz.0.1706: attempt to access beyond end of device
[  958.322962][T13102] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  958.341953][T13103] syz.0.1706: attempt to access beyond end of device
[  958.341953][T13103] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  958.390730][T13102] syz.0.1706: attempt to access beyond end of device
[  958.390730][T13102] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  958.417246][T13102] syz.0.1706: attempt to access beyond end of device
[  958.417246][T13102] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  958.764208][T13105] netlink: 'syz.3.1711': attribute type 1 has an invalid length.
[  959.010734][ T3645] Bluetooth: hci2: command 0x0406 tx timeout
[  959.970717][T13097] syz.1.1709: attempt to access beyond end of device
[  959.970717][T13097] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  960.003378][T13111] syz.1.1709: attempt to access beyond end of device
[  960.003378][T13111] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  960.056927][T13111] syz.1.1709: attempt to access beyond end of device
[  960.056927][T13111] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  961.047302][T13110] loop4: detected capacity change from 0 to 2048
[  961.673807][T13110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  961.768668][T13110] netlink: 'syz.4.1714': attribute type 4 has an invalid length.
[  962.669703][T13135] netlink: 'syz.0.1717': attribute type 1 has an invalid length.
[  962.679729][ T4504] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  962.709965][ T4504] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  962.823415][ T4504] EXT4-fs (loop4): This should not happen!! Data will be lost
[  962.823415][ T4504] 
[  962.850830][ T4504] EXT4-fs (loop4): Total free blocks count 0
[  962.860622][ T4504] EXT4-fs (loop4): Free/Dirty block details
[  962.863660][T13124] netlink: 'syz.3.1716': attribute type 4 has an invalid length.
[  962.866606][ T4504] EXT4-fs (loop4): free_blocks=2415919104
[  962.882186][ T4504] EXT4-fs (loop4): dirty_blocks=16
[  962.887378][ T4504] EXT4-fs (loop4): Block reservation details
[  962.895672][ T4504] EXT4-fs (loop4): i_reserved_data_blocks=1
[  962.995643][ T8998] EXT4-fs (loop4): unmounting filesystem.
[  963.789006][T13152] netlink: 'syz.1.1723': attribute type 1 has an invalid length.
[  963.808206][T13149] sch_fq: defrate 0 ignored.
[  964.560429][T13166] netlink: 'syz.3.1724': attribute type 1 has an invalid length.
[  964.720424][T13173] netlink: 'syz.4.1726': attribute type 1 has an invalid length.
[  964.846378][T13171] sch_fq: defrate 0 ignored.
[  965.644498][T13182] loop1: detected capacity change from 0 to 16
[  965.677781][T13182] erofs: Unknown parameter 'ÿÿÿÿ'
[  965.825719][T13190] loop4: detected capacity change from 0 to 16
[  966.701664][T13192] 9pnet_fd: Insufficient options for proto=fd
[  966.777443][T13190] erofs: (device loop4): mounted with root inode @ nid 36.
[  967.011796][T13195] binder: 13179:13195 ioctl c0306201 0 returned -14
[  967.425060][T13190] syz.4.1730: attempt to access beyond end of device
[  967.425060][T13190] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  967.439166][T13205] syz.4.1730: attempt to access beyond end of device
[  967.439166][T13205] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  967.479085][T13190] syz.4.1730: attempt to access beyond end of device
[  967.479085][T13190] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  967.894239][T13208] binder: 13197:13208 ioctl c0306201 0 returned -14
[  968.342833][T13202] netlink: 'syz.0.1732': attribute type 1 has an invalid length.
[  969.145604][T13218] loop1: detected capacity change from 0 to 16
[  969.466126][T13218] erofs: (device loop1): mounted with root inode @ nid 36.
[  969.740948][T13218] syz.1.1734: attempt to access beyond end of device
[  969.740948][T13218] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  969.790606][T13218] syz.1.1734: attempt to access beyond end of device
[  969.790606][T13218] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  969.864504][T13218] syz.1.1734: attempt to access beyond end of device
[  969.864504][T13218] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  969.865094][T13224] netlink: 'syz.3.1735': attribute type 1 has an invalid length.
[  969.885744][T13229] syz.1.1734: attempt to access beyond end of device
[  969.885744][T13229] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  969.928012][T13218] syz.1.1734: attempt to access beyond end of device
[  969.928012][T13218] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  969.980647][T13218] syz.1.1734: attempt to access beyond end of device
[  969.980647][T13218] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  970.956075][T13228] sch_fq: defrate 0 ignored.
[  971.029282][T13237] netlink: 'syz.1.1740': attribute type 1 has an invalid length.
[  971.044043][T13235] loop4: detected capacity change from 0 to 2048
[  971.145694][T13235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  972.298422][T13265] netlink: 'syz.4.1739': attribute type 4 has an invalid length.
[  972.355380][T13266] loop0: detected capacity change from 0 to 16
[  972.402660][T13266] erofs: (device loop0): mounted with root inode @ nid 36.
[  972.631819][T13261] netlink: 'syz.1.1743': attribute type 1 has an invalid length.
[  972.754428][ T3721] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  972.787629][ T3721] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  972.796187][T13256] sch_fq: defrate 0 ignored.
[  972.804294][ T3721] EXT4-fs (loop4): This should not happen!! Data will be lost
[  972.804294][ T3721] 
[  972.868649][T13266] syz.0.1744: attempt to access beyond end of device
[  972.868649][T13266] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  972.880497][ T3721] EXT4-fs (loop4): Total free blocks count 0
[  972.887678][ T3721] EXT4-fs (loop4): Free/Dirty block details
[  972.909009][T13274] syz.0.1744: attempt to access beyond end of device
[  972.909009][T13274] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  972.933984][ T3721] EXT4-fs (loop4): free_blocks=2415919104
[  972.940645][T13266] syz.0.1744: attempt to access beyond end of device
[  972.940645][T13266] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  972.945796][ T3721] EXT4-fs (loop4): dirty_blocks=16
[  972.978729][T13274] syz.0.1744: attempt to access beyond end of device
[  972.978729][T13274] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  973.295961][ T3721] EXT4-fs (loop4): Block reservation details
[  973.429694][ T3721] EXT4-fs (loop4): i_reserved_data_blocks=1
[  973.607957][ T8998] EXT4-fs (loop4): unmounting filesystem.
[  974.121120][T13284] loop4: detected capacity change from 0 to 2048
[  974.475103][T13284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  975.438694][T13284] netlink: 'syz.4.1746': attribute type 4 has an invalid length.
[  975.514486][ T3721] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  975.551807][T13295] netlink: 'syz.2.1750': attribute type 1 has an invalid length.
[  975.573565][ T3721] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  975.977622][ T3721] EXT4-fs (loop4): This should not happen!! Data will be lost
[  975.977622][ T3721] 
[  976.207844][ T3721] EXT4-fs (loop4): Total free blocks count 0
[  976.308490][ T3721] EXT4-fs (loop4): Free/Dirty block details
[  976.314905][ T3721] EXT4-fs (loop4): free_blocks=2415919104
[  976.325939][ T3721] EXT4-fs (loop4): dirty_blocks=16
[  976.350590][ T3721] EXT4-fs (loop4): Block reservation details
[  976.398844][ T3721] EXT4-fs (loop4): i_reserved_data_blocks=1
[  976.408987][ T8998] EXT4-fs (loop4): unmounting filesystem.
[  976.547743][T13304] netlink: 'syz.0.1753': attribute type 1 has an invalid length.
[  976.637412][T13310] netlink: 'syz.4.1752': attribute type 1 has an invalid length.
[  977.704464][T13318] netlink: 'syz.2.1766': attribute type 1 has an invalid length.
[  977.732444][T13325] sch_fq: defrate 0 ignored.
[  978.714651][T13316] binder: 13307:13316 ioctl c0306201 0 returned -14
[  979.251050][T13337] netlink: 'syz.4.1758': attribute type 1 has an invalid length.
[  980.489297][T13347] loop4: detected capacity change from 0 to 16
[  980.517570][T13347] erofs: (device loop4): mounted with root inode @ nid 36.
[  980.935638][T13358] syz.4.1762: attempt to access beyond end of device
[  980.935638][T13358] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  981.045406][T13358] syz.4.1762: attempt to access beyond end of device
[  981.045406][T13358] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  981.130396][T13358] syz.4.1762: attempt to access beyond end of device
[  981.130396][T13358] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  981.191419][T13358] syz.4.1762: attempt to access beyond end of device
[  981.191419][T13358] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  981.237450][T13358] syz.4.1762: attempt to access beyond end of device
[  981.237450][T13358] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  981.252742][T13358] syz.4.1762: attempt to access beyond end of device
[  981.252742][T13358] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  981.403726][   T26] audit: type=1326 audit(2000000063.509:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30579eb9 code=0x7ffc0000
[  981.789425][   T26] audit: type=1326 audit(2000000063.509:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30579eb9 code=0x7ffc0000
[  981.801465][T13364] sch_fq: defrate 0 ignored.
[  981.837086][T13366] loop1: detected capacity change from 0 to 2048
[  981.843755][   T26] audit: type=1326 audit(2000000063.509:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7eff30579eb9 code=0x7ffc0000
[  981.904671][T13366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  981.967973][   T26] audit: type=1326 audit(2000000063.509:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30579eb9 code=0x7ffc0000
[  982.324209][T13368] netlink: 'syz.1.1764': attribute type 4 has an invalid length.
[  982.420634][   T26] audit: type=1326 audit(2000000063.509:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30579eb9 code=0x7ffc0000
[  982.443183][   T26] audit: type=1326 audit(2000000063.509:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff30579eb9 code=0x7ffc0000
[  982.517005][   T46] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  982.549908][   T26] audit: type=1326 audit(2000000063.509:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30579eb9 code=0x7ffc0000
[  982.580557][   T46] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  982.615699][   T46] EXT4-fs (loop1): This should not happen!! Data will be lost
[  982.615699][   T46] 
[  982.625950][   T26] audit: type=1326 audit(2000000063.509:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30579eb9 code=0x7ffc0000
[  982.658864][   T46] EXT4-fs (loop1): Total free blocks count 0
[  982.668987][   T46] EXT4-fs (loop1): Free/Dirty block details
[  982.688147][   T46] EXT4-fs (loop1): free_blocks=2415919104
[  982.694514][   T46] EXT4-fs (loop1): dirty_blocks=16
[  982.698328][   T26] audit: type=1326 audit(2000000063.509:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff30579eb9 code=0x7ffc0000
[  982.720482][   T46] EXT4-fs (loop1): Block reservation details
[  982.728006][   T46] EXT4-fs (loop1): i_reserved_data_blocks=1
[  983.461147][T10202] EXT4-fs (loop1): unmounting filesystem.
[  983.570725][   T26] audit: type=1326 audit(2000000063.509:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff30579eb9 code=0x7ffc0000
[  983.732805][T13382] netlink: 'syz.3.1770': attribute type 1 has an invalid length.
[  983.758680][T13383] sch_fq: defrate 0 ignored.
[  983.880156][T13391] netlink: 'syz.0.1772': attribute type 1 has an invalid length.
[  983.880351][T13389] netlink: 'syz.1.1769': attribute type 1 has an invalid length.
[  983.894912][T13392] netlink: 'syz.2.1773': attribute type 1 has an invalid length.
[  985.188618][T13427] loop1: detected capacity change from 0 to 16
[  985.218667][T13428] loop0: detected capacity change from 0 to 16
[  985.239159][T13427] erofs: (device loop1): mounted with root inode @ nid 36.
[  985.347335][T13428] erofs: (device loop0): mounted with root inode @ nid 36.
[  985.551994][T13401] binder: 13399:13401 ioctl c0306201 0 returned -14
[  986.745987][T13427] syz.1.1779: attempt to access beyond end of device
[  986.745987][T13427] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  986.862171][T13427] syz.1.1779: attempt to access beyond end of device
[  986.862171][T13427] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  986.910796][T13427] syz.1.1779: attempt to access beyond end of device
[  986.910796][T13427] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  987.018567][T13427] syz.1.1779: attempt to access beyond end of device
[  987.018567][T13427] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  987.082081][T13427] syz.1.1779: attempt to access beyond end of device
[  987.082081][T13427] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  987.145649][T13427] syz.1.1779: attempt to access beyond end of device
[  987.145649][T13427] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  987.560489][T13428] syz.0.1778: attempt to access beyond end of device
[  987.560489][T13428] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  987.601172][T13434] syz.0.1778: attempt to access beyond end of device
[  987.601172][T13434] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  987.614678][T13435] syz.0.1778: attempt to access beyond end of device
[  987.614678][T13435] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  987.678702][T13428] syz.0.1778: attempt to access beyond end of device
[  987.678702][T13428] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  988.115980][T13445] netlink: 'syz.1.1785': attribute type 1 has an invalid length.
[  988.132761][T13443] netlink: 'syz.0.1784': attribute type 1 has an invalid length.
[  988.134675][T13440] sch_fq: defrate 0 ignored.
[  988.248723][T13439] netlink: 'syz.2.1783': attribute type 4 has an invalid length.
[  988.449417][T13453] netlink: 'syz.2.1786': attribute type 1 has an invalid length.
[  989.496608][T13464] loop1: detected capacity change from 0 to 32768
[  989.503817][T13464] XFS: noikeep mount option is deprecated.
[  989.874198][T13464] XFS (loop1): Mounting V5 Filesystem
[  990.566818][T13464] XFS (loop1): Ending clean mount
[  990.590004][T13464] XFS (loop1): Quotacheck needed: Please wait.
[  990.733314][T13459] netlink: 'syz.3.1787': attribute type 4 has an invalid length.
[  991.207486][T13464] XFS (loop1): Quotacheck: Done.
[  991.693172][T10202] XFS (loop1): Unmounting Filesystem
[  991.787053][T13491] netlink: 'syz.0.1794': attribute type 1 has an invalid length.
[  991.838548][T13500] loop4: detected capacity change from 0 to 16
[  991.894002][T13499] sch_fq: defrate 0 ignored.
[  991.903017][T13500] erofs: (device loop4): mounted with root inode @ nid 36.
[  992.211686][T13500] bio_check_eod: 1 callbacks suppressed
[  992.211707][T13500] syz.4.1796: attempt to access beyond end of device
[  992.211707][T13500] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  992.251641][T13500] syz.4.1796: attempt to access beyond end of device
[  992.251641][T13500] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  992.262023][T13507] netlink: 'syz.0.1798': attribute type 1 has an invalid length.
[  992.295326][T13509] syz.4.1796: attempt to access beyond end of device
[  992.295326][T13509] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  992.311636][T13500] syz.4.1796: attempt to access beyond end of device
[  992.311636][T13500] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  992.386322][T13500] syz.4.1796: attempt to access beyond end of device
[  992.386322][T13500] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  992.824048][T13502] binder: 13497:13502 ioctl c0306201 0 returned -14
[  993.289637][T13513] netlink: 'syz.4.1800': attribute type 1 has an invalid length.
[  993.310188][T13515] netlink: 'syz.0.1799': attribute type 1 has an invalid length.
[  993.317712][T13514] loop1: detected capacity change from 0 to 16
[  993.366568][T13514] erofs: (device loop1): mounted with root inode @ nid 36.
[  994.673102][T13533] syz.1.1795: attempt to access beyond end of device
[  994.673102][T13533] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  994.694881][T13534] syz.1.1795: attempt to access beyond end of device
[  994.694881][T13534] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  994.728267][T13533] syz.1.1795: attempt to access beyond end of device
[  994.728267][T13533] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  994.758728][T13533] syz.1.1795: attempt to access beyond end of device
[  994.758728][T13533] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  994.762289][T13527] sch_fq: defrate 0 ignored.
[  994.780956][T13533] syz.1.1795: attempt to access beyond end of device
[  994.780956][T13533] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  995.283704][T13537] loop4: detected capacity change from 0 to 16
[  995.339557][T13537] erofs: (device loop4): mounted with root inode @ nid 36.
[  996.094088][T13543] loop1: detected capacity change from 0 to 2048
[  996.417012][T13543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  996.743195][T13543] netlink: 'syz.1.1806': attribute type 4 has an invalid length.
[  996.819901][ T4504] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  996.844095][ T4504] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  996.871467][ T4504] EXT4-fs (loop1): This should not happen!! Data will be lost
[  996.871467][ T4504] 
[  996.874359][T13556] netlink: 'syz.0.1808': attribute type 1 has an invalid length.
[  996.921972][ T4504] EXT4-fs (loop1): Total free blocks count 0
[  996.964909][ T4504] EXT4-fs (loop1): Free/Dirty block details
[  996.981992][ T4504] EXT4-fs (loop1): free_blocks=2415919104
[  996.987766][ T4504] EXT4-fs (loop1): dirty_blocks=16
[  997.017884][ T4504] EXT4-fs (loop1): Block reservation details
[  997.045246][ T4504] EXT4-fs (loop1): i_reserved_data_blocks=1
[  997.072648][T10202] EXT4-fs (loop1): unmounting filesystem.
[  997.123675][T13563] loop0: detected capacity change from 0 to 16
[  997.166147][T13563] erofs: (device loop0): mounted with root inode @ nid 36.
[  997.251466][T13562] loop4: detected capacity change from 0 to 2048
[  997.329814][T13562] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  997.406414][T13563] bio_check_eod: 4 callbacks suppressed
[  997.406453][T13563] syz.0.1811: attempt to access beyond end of device
[  997.406453][T13563] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  997.484043][T13563] syz.0.1811: attempt to access beyond end of device
[  997.484043][T13563] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  997.536601][T13569] syz.0.1811: attempt to access beyond end of device
[  997.536601][T13569] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  997.549952][T13570] syz.0.1811: attempt to access beyond end of device
[  997.549952][T13570] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  997.592557][T13563] syz.0.1811: attempt to access beyond end of device
[  997.592557][T13563] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  997.871739][T13565] netlink: 'syz.1.1809': attribute type 1 has an invalid length.
[  997.893394][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  997.899752][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  998.017026][T13571] netlink: 'syz.4.1810': attribute type 4 has an invalid length.
[  998.187923][T13575] netlink: 'syz.0.1812': attribute type 1 has an invalid length.
[  998.222631][T13576] netlink: 'syz.1.1813': attribute type 1 has an invalid length.
[  998.471065][ T3744] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  998.519901][ T3744] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  998.563148][ T3744] EXT4-fs (loop4): This should not happen!! Data will be lost
[  998.563148][ T3744] 
[  998.625591][ T3744] EXT4-fs (loop4): Total free blocks count 0
[  998.694235][ T3744] EXT4-fs (loop4): Free/Dirty block details
[  998.800142][ T3744] EXT4-fs (loop4): free_blocks=2415919104
[  998.889849][ T3744] EXT4-fs (loop4): dirty_blocks=16
[  998.964262][ T3744] EXT4-fs (loop4): Block reservation details
[  999.067254][ T3744] EXT4-fs (loop4): i_reserved_data_blocks=1
[  999.136560][T13582] sch_fq: defrate 0 ignored.
[  999.181872][ T8998] EXT4-fs (loop4): unmounting filesystem.
[  999.557645][T13595] loop4: detected capacity change from 0 to 16
[  999.586189][T13595] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1000.569530][T13595] syz.4.1816: attempt to access beyond end of device
[ 1000.569530][T13595] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1000.584534][T13595] syz.4.1816: attempt to access beyond end of device
[ 1000.584534][T13595] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1000.604683][T13595] syz.4.1816: attempt to access beyond end of device
[ 1000.604683][T13595] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1000.709485][T13595] syz.4.1816: attempt to access beyond end of device
[ 1000.709485][T13595] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1000.781226][T13595] syz.4.1816: attempt to access beyond end of device
[ 1000.781226][T13595] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1001.102222][T13600] sch_fq: defrate 0 ignored.
[ 1001.392688][ T3645] Bluetooth: hci2: unexpected event for opcode 0x0403
[ 1001.795324][ T3645] Bluetooth: Unexpected continuation frame (len 10)
[ 1002.314516][T13614] netlink: 'syz.4.1821': attribute type 1 has an invalid length.
[ 1002.385649][T13617] loop1: detected capacity change from 0 to 16
[ 1002.441091][T13617] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1002.585045][T13620] netlink: 'syz.4.1823': attribute type 1 has an invalid length.
[ 1002.669072][ T3645] Bluetooth: hci5: ACL packet for unknown connection handle 0
[ 1002.671695][T13626] bio_check_eod: 1 callbacks suppressed
[ 1002.671711][T13626] syz.1.1822: attempt to access beyond end of device
[ 1002.671711][T13626] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1002.705496][T13626] syz.1.1822: attempt to access beyond end of device
[ 1002.705496][T13626] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1002.722181][T13626] syz.1.1822: attempt to access beyond end of device
[ 1002.722181][T13626] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1002.738352][T13626] syz.1.1822: attempt to access beyond end of device
[ 1002.738352][T13626] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1003.191715][T13630] netlink: 'syz.0.1825': attribute type 1 has an invalid length.
[ 1003.404157][T13635] netlink: 'syz.3.1826': attribute type 1 has an invalid length.
[ 1005.268303][T13667] netlink: 'syz.0.1834': attribute type 1 has an invalid length.
[ 1005.417714][T13659] binder: 13654:13659 ioctl c0306201 0 returned -14
[ 1005.419996][T13656] sch_fq: defrate 0 ignored.
[ 1005.801592][T13671] sch_fq: defrate 0 ignored.
[ 1006.008846][T13679] loop0: detected capacity change from 0 to 16
[ 1006.236912][T13672] binder: 13663:13672 ioctl c0306201 0 returned -14
[ 1007.039812][T13679] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1007.412853][T13687] netlink: 'syz.4.1837': attribute type 1 has an invalid length.
[ 1007.491358][T13691] syz.0.1835: attempt to access beyond end of device
[ 1007.491358][T13691] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1007.560920][T13691] syz.0.1835: attempt to access beyond end of device
[ 1007.560920][T13691] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1007.669178][T13691] syz.0.1835: attempt to access beyond end of device
[ 1007.669178][T13691] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1007.774759][T13691] syz.0.1835: attempt to access beyond end of device
[ 1007.774759][T13691] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1007.844886][T13691] syz.0.1835: attempt to access beyond end of device
[ 1007.844886][T13691] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1007.901705][T13679] syz.0.1835: attempt to access beyond end of device
[ 1007.901705][T13679] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1008.114837][T13699] loop1: detected capacity change from 0 to 16
[ 1008.128495][T13699] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1008.933455][T13703] netlink: 'syz.2.1838': attribute type 4 has an invalid length.
[ 1009.025104][T13707] netlink: 'syz.0.1841': attribute type 1 has an invalid length.
[ 1010.026144][T13699] syz.1.1839: attempt to access beyond end of device
[ 1010.026144][T13699] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1010.047020][T13712] syz.1.1839: attempt to access beyond end of device
[ 1010.047020][T13712] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1010.070488][T13699] syz.1.1839: attempt to access beyond end of device
[ 1010.070488][T13699] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1010.110059][T13699] syz.1.1839: attempt to access beyond end of device
[ 1010.110059][T13699] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1010.426405][T13711] netlink: 'syz.3.1842': attribute type 1 has an invalid length.
[ 1011.452303][T13720] netlink: 'syz.1.1845': attribute type 1 has an invalid length.
[ 1012.280964][T13732] sch_fq: defrate 0 ignored.
[ 1012.370729][T10482] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1012.441870][T13738] netlink: 'syz.4.1851': attribute type 1 has an invalid length.
[ 1012.664213][T13747] sch_fq: defrate 0 ignored.
[ 1012.921363][T10482] usb 3-1: config 0 has an invalid interface number: 204 but max is 1
[ 1012.973683][T10482] usb 3-1: config 0 has no interface number 1
[ 1013.451109][T10482] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[ 1013.480745][T10482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1013.570526][T10482] usb 3-1: Product: syz
[ 1013.585213][T10482] usb 3-1: Manufacturer: syz
[ 1013.591250][T10482] usb 3-1: SerialNumber: syz
[ 1013.606392][T13752] loop4: detected capacity change from 0 to 16
[ 1013.635606][T10482] usb 3-1: config 0 descriptor??
[ 1013.671598][T13752] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1013.714765][T13758] loop1: detected capacity change from 0 to 16
[ 1013.772709][T13758] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1013.812571][T10482] snd-usb-audio: probe of 3-1:0.204 failed with error -22
[ 1013.863165][T10695] udevd[10695]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.204/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1014.038987][T13759] syz.4.1852: attempt to access beyond end of device
[ 1014.038987][T13759] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1014.122039][T13759] syz.4.1852: attempt to access beyond end of device
[ 1014.122039][T13759] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1014.190111][T13759] syz.4.1852: attempt to access beyond end of device
[ 1014.190111][T13759] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1014.225246][T13759] syz.4.1852: attempt to access beyond end of device
[ 1014.225246][T13759] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1014.756502][T13758] syz.1.1853: attempt to access beyond end of device
[ 1014.756502][T13758] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1014.848869][T11322] usb 3-1: USB disconnect, device number 11
[ 1014.859872][T13764] syz.1.1853: attempt to access beyond end of device
[ 1014.859872][T13764] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1014.920831][T13758] syz.1.1853: attempt to access beyond end of device
[ 1014.920831][T13758] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1015.044015][T13765] syz.1.1853: attempt to access beyond end of device
[ 1015.044015][T13765] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1015.126721][T13755] syz.1.1853: attempt to access beyond end of device
[ 1015.126721][T13755] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1015.150686][T13755] syz.1.1853: attempt to access beyond end of device
[ 1015.150686][T13755] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1015.892861][T13778] netlink: 'syz.3.1858': attribute type 1 has an invalid length.
[ 1016.966442][T13792] netlink: 'syz.3.1859': attribute type 1 has an invalid length.
[ 1016.994677][T13790] netlink: 'syz.1.1862': attribute type 1 has an invalid length.
[ 1017.018881][T13784] netlink: 'syz.0.1860': attribute type 1 has an invalid length.
[ 1017.962209][T13809] loop0: detected capacity change from 0 to 8
[ 1020.131398][T13812] sch_fq: defrate 0 ignored.
[ 1020.226394][T13826] netlink: 'syz.3.1870': attribute type 1 has an invalid length.
[ 1020.391092][T13805] overlayfs: missing 'lowerdir'
[ 1020.676056][T13813] sch_fq: defrate 0 ignored.
[ 1020.881729][T13833] binder: 13821:13833 ioctl c0306201 0 returned -14
[ 1022.457066][T13852] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted
[ 1023.132039][T13856] netlink: 'syz.1.1876': attribute type 1 has an invalid length.
[ 1024.381981][T13870] netlink: 'syz.4.1880': attribute type 1 has an invalid length.
[ 1024.448688][T13871] netlink: 'syz.0.1875': attribute type 1 has an invalid length.
[ 1024.519129][T13881] loop1: detected capacity change from 0 to 16
[ 1024.589399][T13881] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1024.718145][T13884] sch_fq: defrate 0 ignored.
[ 1024.746437][T13887] netlink: 'syz.0.1884': attribute type 1 has an invalid length.
[ 1024.780276][T13885] sch_fq: defrate 0 ignored.
[ 1024.787090][T13881] syz.1.1881: attempt to access beyond end of device
[ 1024.787090][T13881] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1024.801779][T13877] syz.1.1881: attempt to access beyond end of device
[ 1024.801779][T13877] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1024.880806][T13866] binder: 13858:13866 ioctl c0306201 0 returned -14
[ 1024.953285][T13877] syz.1.1881: attempt to access beyond end of device
[ 1024.953285][T13877] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1025.005932][T13881] syz.1.1881: attempt to access beyond end of device
[ 1025.005932][T13881] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1025.019681][T13893] syz.1.1881: attempt to access beyond end of device
[ 1025.019681][T13893] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1025.032930][T13892] syz.1.1881: attempt to access beyond end of device
[ 1025.032930][T13892] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1025.635840][T13897] loop1: detected capacity change from 0 to 16
[ 1025.861387][ T7662] Bluetooth: hci5: command 0x0406 tx timeout
[ 1026.141858][T13897] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1026.204087][T13910] loop4: detected capacity change from 0 to 16
[ 1026.240843][T13910] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1026.385544][T13912] syz.1.1885: attempt to access beyond end of device
[ 1026.385544][T13912] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1028.033065][T13927] syz.4.1888: attempt to access beyond end of device
[ 1028.033065][T13927] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1028.077367][T13927] syz.4.1888: attempt to access beyond end of device
[ 1028.077367][T13927] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1028.133402][T13925] syz.4.1888: attempt to access beyond end of device
[ 1028.133402][T13925] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1028.849798][T13931] netlink: 'syz.2.1893': attribute type 1 has an invalid length.
[ 1028.852456][T13934] netlink: 'syz.0.1892': attribute type 1 has an invalid length.
[ 1028.937092][T13933] netlink: 'syz.3.1894': attribute type 1 has an invalid length.
[ 1029.045493][T13940] netlink: 'syz.4.1896': attribute type 1 has an invalid length.
[ 1029.295100][T13939] binder: 13938:13939 ioctl c0306201 0 returned -14
[ 1029.338733][T13946] sch_fq: defrate 0 ignored.
[ 1029.364888][T13947] sch_fq: defrate 0 ignored.
[ 1031.004155][T13964] netlink: 'syz.2.1902': attribute type 4 has an invalid length.
[ 1031.122003][T13965] binder: 13952:13965 ioctl c0306201 0 returned -14
[ 1031.671705][T13978] netlink: 'syz.0.1906': attribute type 1 has an invalid length.
[ 1032.461938][T13983] loop4: detected capacity change from 0 to 16
[ 1032.502381][T13986] netlink: 'syz.1.1908': attribute type 1 has an invalid length.
[ 1032.509431][T13983] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1032.697692][T13994] netlink: 'syz.2.1904': attribute type 4 has an invalid length.
[ 1032.921756][T13997] bio_check_eod: 7 callbacks suppressed
[ 1032.921791][T13997] syz.4.1907: attempt to access beyond end of device
[ 1032.921791][T13997] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1032.974621][T13997] syz.4.1907: attempt to access beyond end of device
[ 1032.974621][T13997] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1033.053646][T13997] syz.4.1907: attempt to access beyond end of device
[ 1033.053646][T13997] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1033.090692][T13997] syz.4.1907: attempt to access beyond end of device
[ 1033.090692][T13997] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1033.125554][T13997] syz.4.1907: attempt to access beyond end of device
[ 1033.125554][T13997] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1033.168583][T13997] syz.4.1907: attempt to access beyond end of device
[ 1033.168583][T13997] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[ 1034.448225][T13996] dlm: no locking on control device
[ 1034.576292][T13996] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1910'.
[ 1035.435276][T14009] loop4: detected capacity change from 0 to 256
[ 1035.464289][T14009] FAT-fs (loop4): Unrecognized mount option "utf8=ÆWïZuÈš}gy1" or missing value
[ 1036.370647][ T3645] Bluetooth: hci7: command 0x0406 tx timeout
[ 1036.390993][T14013] netlink: 'syz.3.1922': attribute type 1 has an invalid length.
[ 1036.541736][T14017] sch_fq: defrate 0 ignored.
[ 1039.520663][   T28] INFO: task syz.2.1537:12315 blocked for more than 143 seconds.
[ 1039.528422][   T28]       Not tainted 6.1.107-syzkaller #0
[ 1039.580607][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1039.615191][   T28] task:syz.2.1537      state:D stack:24240 pid:12315 ppid:8843   flags:0x00004004
[ 1039.656348][   T28] Call Trace:
[ 1039.672798][   T28]  <TASK>
[ 1039.685791][   T28]  __schedule+0x143f/0x4570
[ 1039.706099][   T28]  ? release_firmware_map_entry+0x186/0x186
[ 1039.733690][   T28]  ? __mutex_trylock_common+0x8d/0x2e0
[ 1039.757452][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1039.783941][   T28]  schedule+0xbf/0x180
[ 1039.812186][   T28]  schedule_preempt_disabled+0xf/0x20
[ 1039.849700][   T28]  __mutex_lock+0x6b9/0xd80
[ 1039.856951][T14047] sch_fq: defrate 0 ignored.
[ 1039.879733][   T28]  ? __mutex_lock+0x53c/0xd80
[ 1039.913812][   T28]  ? exfat_sync_fs+0x67/0x100
[ 1039.949655][   T28]  ? mutex_lock_nested+0x10/0x10
[ 1040.010259][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1040.047138][   T28]  exfat_sync_fs+0x67/0x100
[ 1040.055129][   T28]  iterate_supers+0x127/0x1e0
[ 1040.060143][   T28]  ? sync_inodes_one_sb+0x60/0x60
[ 1040.085128][   T28]  ksys_sync+0xd7/0x1c0
[ 1040.113799][   T28]  ? sync_filesystem+0x220/0x220
[ 1040.118801][   T28]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1040.138122][   T28]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1040.191751][   T28]  __do_sys_sync+0xa/0x10
[ 1040.221862][   T28]  do_syscall_64+0x3b/0xb0
[ 1040.226588][   T28]  ? clear_bhb_loop+0x45/0xa0
[ 1040.243645][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1040.259920][   T28] RIP: 0033:0x7f2f9bf79eb9
[ 1040.271604][   T28] RSP: 002b:00007f2f9bdff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 1040.301929][   T28] RAX: ffffffffffffffda RBX: 00007f2f9c115f80 RCX: 00007f2f9bf79eb9
[ 1040.310594][   T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1040.328854][   T28] RBP: 00007f2f9bfe793e R08: 0000000000000000 R09: 0000000000000000
[ 1040.358028][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1040.366623][   T28] R13: 0000000000000000 R14: 00007f2f9c115f80 R15: 00007fff4ae8c358
[ 1040.375252][   T28]  </TASK>
[ 1040.381336][   T28] 
[ 1040.381336][   T28] Showing all locks held in the system:
[ 1040.391876][   T28] 1 lock held by rcu_tasks_kthre/12:
[ 1040.397544][   T28]  #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[ 1040.408696][   T28] 1 lock held by rcu_tasks_trace/13:
[ 1040.438993][   T28]  #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[ 1040.490454][   T28] 1 lock held by khungtaskd/28:
[ 1040.495378][   T28]  #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[ 1040.530521][   T28] 2 locks held by kworker/1:2/3052:
[ 1040.535765][   T28]  #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1040.560475][   T28]  #1: ffffc9000c52fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1040.590492][   T28] 2 locks held by getty/3390:
[ 1040.595211][   T28]  #0: ffff88814b0a7098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[ 1040.620476][   T28]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[ 1040.640485][   T28] 6 locks held by syz-executor/8502:
[ 1040.646425][   T28] 2 locks held by syz.2.1537/12315:
[ 1040.660487][   T28]  #0: ffff888077c9e0e0 (&type->s_umount_key#88){++++}-{3:3}, at: iterate_supers+0xac/0x1e0
[ 1040.679894][   T28]  #1: ffff88802e1780e0 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100
[ 1040.700470][   T28] 2 locks held by syz.1.1910/13991:
[ 1040.705716][   T28]  #0: ffff88806ac2b210 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230
[ 1040.730468][   T28]  #1: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[ 1040.750445][   T28] 1 lock held by syz.3.1915/14026:
[ 1040.780084][   T28] 
[ 1040.787714][   T28] =============================================
[ 1040.787714][   T28] 
[ 1040.816061][   T28] NMI backtrace for cpu 1
[ 1040.820446][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.107-syzkaller #0
[ 1040.828351][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1040.838414][   T28] Call Trace:
[ 1040.841711][   T28]  <TASK>
[ 1040.844652][   T28]  dump_stack_lvl+0x1e3/0x2cb
[ 1040.849352][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[ 1040.854825][   T28]  ? panic+0x764/0x764
[ 1040.858887][   T28]  ? vprintk_emit+0x622/0x740
[ 1040.863562][   T28]  ? printk_sprint+0x490/0x490
[ 1040.868325][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[ 1040.873438][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[ 1040.878376][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[ 1040.884526][   T28]  ? _printk+0xd1/0x111
[ 1040.888691][   T28]  ? panic+0x764/0x764
[ 1040.892766][   T28]  ? __wake_up_klogd+0xcc/0x100
[ 1040.897620][   T28]  ? panic+0x764/0x764
[ 1040.901689][   T28]  ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0
[ 1040.907765][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1040.913840][   T28]  nmi_trigger_cpumask_backtrace+0x1ae/0x3f0
[ 1040.919823][   T28]  watchdog+0xf88/0xfd0
[ 1040.923976][   T28]  ? watchdog+0x1f8/0xfd0
[ 1040.928301][   T28]  kthread+0x28d/0x320
[ 1040.932359][   T28]  ? hungtask_pm_notify+0x50/0x50
[ 1040.937375][   T28]  ? kthread_blkcg+0xd0/0xd0
[ 1040.941956][   T28]  ret_from_fork+0x1f/0x30
[ 1040.946377][   T28]  </TASK>
[ 1040.950342][   T28] Sending NMI from CPU 1 to CPUs 0:
[ 1040.956233][    C0] NMI backtrace for cpu 0
[ 1040.956245][    C0] CPU: 0 PID: 8502 Comm: syz-executor Not tainted 6.1.107-syzkaller #0
[ 1040.956261][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1040.956269][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60
[ 1040.956292][    C0] Code: c4 c0 77 7e 65 8b 15 c5 c0 77 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc
[ 1040.956304][    C0] RSP: 0018:ffffc900032df4b8 EFLAGS: 00000246
[ 1040.956318][    C0] RAX: ffffffff81bc53f2 RBX: ffffea0002ff9280 RCX: ffff88802ea5bb80
[ 1040.956328][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002ff9280
[ 1040.956338][    C0] RBP: ffffc900032df590 R08: ffffffff81bb4414 R09: fffffbfff1d33b4e
[ 1040.956348][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[ 1040.956358][    C0] R13: ffff88806ae8dd98 R14: dffffc0000000000 R15: 0000000000036900
[ 1040.956368][    C0] FS:  0000555594325500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1040.956381][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1040.956391][    C0] CR2: 00007f8210ce8178 CR3: 0000000075e2d000 CR4: 00000000003506f0
[ 1040.956404][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1040.956412][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1040.956421][    C0] Call Trace:
[ 1040.956426][    C0]  <NMI>
[ 1040.956431][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[ 1040.956451][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1040.956471][    C0]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[ 1040.956490][    C0]  ? nmi_handle+0x25/0x440
[ 1040.956515][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[ 1040.956533][    C0]  ? nmi_handle+0x12e/0x440
[ 1040.956551][    C0]  ? nmi_handle+0x25/0x440
[ 1040.956569][    C0]  ? __sanitizer_cov_trace_pc+0x32/0x60
[ 1040.956584][    C0]  ? default_do_nmi+0x62/0x150
[ 1040.956599][    C0]  ? exc_nmi+0xa8/0x100
[ 1040.956611][    C0]  ? end_repeat_nmi+0x16/0x31
[ 1040.956631][    C0]  ? mark_page_accessed+0x44/0x130
[ 1040.956649][    C0]  ? folio_mark_accessed+0x72/0x1c90
[ 1040.956663][    C0]  ? __sanitizer_cov_trace_pc+0x32/0x60
[ 1040.956678][    C0]  ? __sanitizer_cov_trace_pc+0x32/0x60
[ 1040.956695][    C0]  ? __sanitizer_cov_trace_pc+0x32/0x60
[ 1040.956711][    C0]  </NMI>
[ 1040.956715][    C0]  <TASK>
[ 1040.956719][    C0]  folio_mark_accessed+0x72/0x1c90
[ 1040.956733][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1040.956752][    C0]  ? folio_activate_fn+0x2910/0x2910
[ 1040.956771][    C0]  ? rcu_is_watching+0x11/0xb0
[ 1040.956786][    C0]  __find_get_block+0x2c8/0x1120
[ 1040.956802][    C0]  ? write_boundary_block+0xb0/0xb0
[ 1040.956815][    C0]  ? __getblk_gfp+0x50/0xa20
[ 1040.956830][    C0]  ? exfat_get_dentry_set+0x1320/0x1320
[ 1040.956853][    C0]  __getblk_gfp+0x2d/0xa20
[ 1040.956865][    C0]  ? exfat_get_dentry+0x680/0x8f0
[ 1040.956888][    C0]  __bread_gfp+0x2a/0x370
[ 1040.956901][    C0]  exfat_ent_get+0x149/0x400
[ 1040.956921][    C0]  exfat_iterate+0xccc/0x3280
[ 1040.956954][    C0]  ? exfat_check_dir_empty+0x520/0x520
[ 1040.956999][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1040.957019][    C0]  ? rwsem_write_trylock+0x166/0x210
[ 1040.957042][    C0]  ? iterate_dir+0x131/0x560
[ 1040.957056][    C0]  iterate_dir+0x224/0x560
[ 1040.957071][    C0]  __se_sys_getdents64+0x209/0x4f0
[ 1040.957086][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1040.957105][    C0]  ? __x64_sys_getdents64+0x80/0x80
[ 1040.957117][    C0]  ? filldir+0x6f0/0x6f0
[ 1040.957132][    C0]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1040.957147][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[ 1040.957162][    C0]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1040.957178][    C0]  do_syscall_64+0x3b/0xb0
[ 1040.957194][    C0]  ? clear_bhb_loop+0x45/0xa0
[ 1040.957212][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1040.957228][    C0] RIP: 0033:0x7f483e3ac053
[ 1040.957240][    C0] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[ 1040.957251][    C0] RSP: 002b:00007ffe164d2fb8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[ 1040.957265][    C0] RAX: ffffffffffffffda RBX: 0000555594340600 RCX: 00007f483e3ac053
[ 1040.957275][    C0] RDX: 0000000000008000 RSI: 0000555594340600 RDI: 0000000000000005
[ 1040.957284][    C0] RBP: 00005555943405d4 R08: 0000000000000000 R09: 0000000000000000
[ 1040.957293][    C0] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[ 1040.957302][    C0] R13: 0000000000000010 R14: 00005555943405d0 R15: 00007ffe164d5260
[ 1040.957319][    C0]  </TASK>
[ 1041.563608][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 1041.570499][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.107-syzkaller #0
[ 1041.578403][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1041.588472][   T28] Call Trace:
[ 1041.591761][   T28]  <TASK>
[ 1041.594701][   T28]  dump_stack_lvl+0x1e3/0x2cb
[ 1041.599408][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[ 1041.604889][   T28]  ? panic+0x764/0x764
[ 1041.608971][   T28]  ? llist_add_batch+0x160/0x1d0
[ 1041.613932][   T28]  ? vscnprintf+0x59/0x80
[ 1041.618274][   T28]  panic+0x318/0x764
[ 1041.622160][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[ 1041.628305][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[ 1041.633664][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[ 1041.639805][   T28]  ? nmi_trigger_cpumask_backtrace+0x338/0x3f0
[ 1041.645949][   T28]  ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0
[ 1041.652093][   T28]  watchdog+0xfc7/0xfd0
[ 1041.656243][   T28]  ? watchdog+0x1f8/0xfd0
[ 1041.660585][   T28]  kthread+0x28d/0x320
[ 1041.664656][   T28]  ? hungtask_pm_notify+0x50/0x50
[ 1041.669706][   T28]  ? kthread_blkcg+0xd0/0xd0
[ 1041.674286][   T28]  ret_from_fork+0x1f/0x30
[ 1041.678695][   T28]  </TASK>
[ 1041.681956][   T28] Kernel Offset: disabled
[ 1041.686275][   T28] Rebooting in 86400 seconds..