last executing test programs:

7m35.874419099s ago: executing program 1 (id=992):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x20}}, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)

7m34.187277559s ago: executing program 32 (id=992):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x20}}, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)

6m11.310282935s ago: executing program 4 (id=1100):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0xffffffffffffff1a, &(0x7f0000000580)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x49, 0xfffffff8, 0x2, 0x400, 0xffffffffffffffff, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0xa}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
dup2(r5, r4)

6m7.20215234s ago: executing program 3 (id=1106):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x20040040)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbce, &(0x7f00000016c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x2c020400)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[0x0], 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000100)}}, 0x10)
r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000616161616161616161616161616161616161616161616132313131313131313131313131313131313131313131313131313131313131314deb01b999f9c2b035a65227eab530e4ca6e21df00163a73b2bb1d561519d4ab2def1637b18ebcc98ef104552ccd71a3e4c22d28b1c9b6cc61404a717092ee6d565c78c881281eb374c6e11a1740564adc185bbd6c0780aa1239e615bb09373eb68ca3ea46dd0478eb783eb47ef6f8a938244ae425a63f2c0b55d7147eb62924d79f6c12"], 0x48, 0xfffffffffffffffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz1\x00', {0x1000, 0x7, 0x5, 0xffff}, 0x57, [0x400, 0x6, 0xb66a, 0x4, 0x2db, 0x5, 0x1, 0x800, 0x865, 0xfffffffa, 0x101, 0x7, 0x7fff, 0x408, 0x8, 0x1, 0x3, 0x5a, 0x3, 0x4, 0x5, 0x4f, 0x1000, 0x5, 0x8001, 0x80, 0xe9b, 0x5, 0xffffb830, 0x8, 0x9e00, 0x8, 0x0, 0x1, 0x99, 0x4, 0x9, 0x8000, 0xfff, 0x8, 0xa, 0x1, 0x5, 0x5, 0x7, 0x5, 0x39fc, 0x6, 0x2, 0x2, 0x2, 0x4, 0x6, 0x8, 0x4c23, 0xc, 0x9, 0x99, 0x2a, 0x1, 0x2, 0x7, 0x8, 0x3], [0xfffeffff, 0x6, 0x3986, 0x7fff, 0xffff, 0x6, 0x3, 0x6d61, 0x3, 0x4, 0x0, 0x800, 0x0, 0x101, 0x1, 0x4, 0x6, 0xffffd6e4, 0x400, 0x8, 0x1000, 0x5, 0x3, 0x5, 0x5, 0x4, 0x6, 0x4, 0x1, 0x7, 0x80, 0x6, 0x6, 0xffffff00, 0x3, 0xae, 0x10001, 0xffffff31, 0x1f9, 0xaf, 0x4, 0x100, 0x54938bf9, 0xb, 0xef4e, 0x24, 0x4, 0x100, 0x7, 0x2, 0xfff, 0x0, 0x4, 0x7, 0xfffffff7, 0xb, 0x0, 0x1000, 0x9, 0x3, 0x56, 0x1950, 0x0, 0x5], [0x1, 0x1000, 0x4, 0x8, 0x87, 0x40000, 0x6, 0x5, 0xfffffffb, 0x7, 0x5, 0x3ff, 0x8, 0xffffffff, 0x7, 0x0, 0x8, 0x9, 0x9, 0x5, 0x40, 0x3, 0x4, 0x0, 0x7, 0x2, 0x4, 0x2, 0x7fffffff, 0xe9, 0x0, 0x4, 0xfa, 0x10000, 0x6, 0x2b1d, 0x0, 0x0, 0x5, 0x101, 0x485f, 0x6, 0x9, 0x4, 0x5, 0x7fffffff, 0x0, 0xee6, 0x101, 0x1, 0x7e3e446b, 0x9, 0x1ff, 0x80000001, 0x4, 0x6, 0x6, 0xc565, 0x1, 0x8, 0xffff, 0x9, 0x8, 0x4], [0x7fffffff, 0xfffffffa, 0x5, 0x0, 0x4, 0x1, 0x1a, 0x3, 0x40, 0x7, 0x200, 0x3, 0x5, 0xeb48, 0xa3b, 0x2, 0x3, 0x400, 0x3, 0xf4c0, 0x6, 0x4, 0xf0c, 0x5, 0x6, 0x2, 0x1, 0x2, 0x8, 0x3, 0x8001, 0x8001, 0x2, 0xa447, 0x10001, 0x7, 0x8, 0x1806aad, 0xd, 0x1, 0x9, 0x3, 0x0, 0x80000001, 0x4, 0xfffffffe, 0x5, 0x87e, 0x2, 0x9, 0x6, 0x5, 0x7f, 0x2, 0x800, 0x7, 0x6, 0x3, 0x6, 0x7, 0x9, 0x5, 0x7fffffff, 0x7]}, 0x45c)

6m7.170574613s ago: executing program 4 (id=1107):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000004)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2)
fallocate(r3, 0x3, 0x4100, 0x8000c62)
pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

6m5.688294475s ago: executing program 3 (id=1108):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
fsopen(&(0x7f00000001c0)='nfs4\x00', 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x23}, 0x1c)
writev(0xffffffffffffffff, 0x0, 0x0)
fchdir(0xffffffffffffffff)
creat(0x0, 0xdafbe5d6891b6e4)

6m4.250278563s ago: executing program 3 (id=1109):
r0 = syz_io_uring_setup(0xea8, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000040))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12)
fcntl$setstatus(r1, 0x4, 0x40800)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendfile(r1, r5, 0x0, 0x7ffff004)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000500)=[{&(0x7f0000000580)=""/124, 0x7c}], 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5b7c2aee}, 0x1c)
write(r6, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d", 0x5e)
io_uring_enter(r0, 0x0, 0x464f, 0x1, 0x0, 0x0)

6m0.253958848s ago: executing program 4 (id=1115):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0xffffffffffffff1a, &(0x7f0000000580)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x49, 0xfffffff8, 0x2, 0x400, 0xffffffffffffffff, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0xa}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
dup2(r5, r4)

5m58.624418543s ago: executing program 4 (id=1117):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
fsopen(&(0x7f00000001c0)='nfs4\x00', 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x23}, 0x1c)
writev(0xffffffffffffffff, 0x0, 0x0)
fchdir(0xffffffffffffffff)
creat(0x0, 0xdafbe5d6891b6e4)

5m57.566261007s ago: executing program 3 (id=1118):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000000005000700030000007400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6261746164760014000200697036746e6c30000000000000000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000fd860763f94476cd0f83006e84fc66ae5d0544a3292a98cae29554d33cc8e90d2fbde96e1caee790df02172b76f0e2fc9b48b663ddb9fa8252a7ef06909e71591e8c7bff5d19ad92d5d8937545181f4c1757c83359e01c5f03a6e60aef46557e34c93337b41bd37c0c5a69c9822b91cf960f77f737d878a4dc083a37032098a2726dbfd2c9bce43ab1fb36fb8ede020a49d25b6f2f146d2b84f380d707c70b2cf98fd128c28c109a78dbca98bc7251a299891e47d1b2c76fef53f183cc47034bdd4813cad0ec21d9948ea8a31049b80d5c"], 0xa8}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000030000000000000000000061195000000000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x4, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r5}, 0x48)

5m55.816390333s ago: executing program 3 (id=1119):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpgrp(0x0)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c)

5m53.993464284s ago: executing program 3 (id=1122):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = shmget$private(0x0, 0x1000, 0x184, &(0x7f0000ffd000/0x1000)=nil)
shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x7000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000287000/0x2000)=nil)
removexattr(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=ANY=[])
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000340)=""/232)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x0, 0x1c8, 0xfeffffff, 0xf8, 0x298, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@broadcast, @private=0xa010102, 0xffffffff, 0xffffff00, 'batadv_slave_0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x67, 0x3, 0x8}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "e26e"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr, 0x0, 0x0, 'lo\x00', 'veth1_to_team\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@broadcast, @loopback, 0xff000000, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x3, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x240448d0}, 0x20000800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400d0}, 0x0)

5m52.122243211s ago: executing program 4 (id=1125):
r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e")
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0xc00, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
ioctl$FICLONE(r0, 0x40049409, r0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r8, 0x11, 0x2, 0x0, &(0x7f0000000000))

5m49.061933063s ago: executing program 4 (id=1127):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000000005000700030000007400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6261746164760014000200697036746e6c30000000000000000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000fd860763f94476cd0f83006e84fc66ae5d0544a3292a98cae29554d33cc8e90d2fbde96e1caee790df02172b76f0e2fc9b48b663ddb9fa8252a7ef06909e71591e8c7bff5d19ad92d5d8937545181f4c1757c83359e01c5f03a6e60aef46557e34c93337b41bd37c0c5a69c9822b91cf960f77f737d878a4dc083a37032098a2726dbfd2c9bce43ab1fb36fb8ede020a49d25b6f2f146d2b84f380d707c70b2cf98fd128c28c109a78dbca98bc7251a299891e47d1b2c76fef53f183cc47034bdd4813cad0ec21d9948ea8a31049b80d5caa99911e"], 0xa8}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000030000000000000000000061195000000000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x4, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r5}, 0x48)

5m38.939251273s ago: executing program 33 (id=1122):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = shmget$private(0x0, 0x1000, 0x184, &(0x7f0000ffd000/0x1000)=nil)
shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x7000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000287000/0x2000)=nil)
removexattr(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=ANY=[])
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000340)=""/232)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x0, 0x1c8, 0xfeffffff, 0xf8, 0x298, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@broadcast, @private=0xa010102, 0xffffffff, 0xffffff00, 'batadv_slave_0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x67, 0x3, 0x8}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "e26e"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr, 0x0, 0x0, 'lo\x00', 'veth1_to_team\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@broadcast, @loopback, 0xff000000, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x3, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x240448d0}, 0x20000800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400d0}, 0x0)

5m33.257747957s ago: executing program 0 (id=1144):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x800, 0xfc8, 0x3, 0x8, 0x5, <r0=>0xffffffffffffffff})
syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/time\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f00000000c0)=0x8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x4c844)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000003c0)=ANY=[], 0x49, 0x0)
setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14)

5m33.177387714s ago: executing program 34 (id=1127):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000000005000700030000007400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6261746164760014000200697036746e6c30000000000000000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000fd860763f94476cd0f83006e84fc66ae5d0544a3292a98cae29554d33cc8e90d2fbde96e1caee790df02172b76f0e2fc9b48b663ddb9fa8252a7ef06909e71591e8c7bff5d19ad92d5d8937545181f4c1757c83359e01c5f03a6e60aef46557e34c93337b41bd37c0c5a69c9822b91cf960f77f737d878a4dc083a37032098a2726dbfd2c9bce43ab1fb36fb8ede020a49d25b6f2f146d2b84f380d707c70b2cf98fd128c28c109a78dbca98bc7251a299891e47d1b2c76fef53f183cc47034bdd4813cad0ec21d9948ea8a31049b80d5caa99911e"], 0xa8}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000030000000000000000000061195000000000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x4, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r5}, 0x48)

5m32.131333967s ago: executing program 0 (id=1146):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100})
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x58000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xf, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x6, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0xc0000006, 0x0, 0xdddd0000, 0x2024, 0x2, 0x0, 0xffff1000, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f00000002c0)='./bus\x00', 0x1000800, &(0x7f00000003c0)=ANY=[], 0x1, 0x1cb, &(0x7f0000000580)="$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")
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=r4, 0xffffffffffffffff, 0x27, 0xc}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc)
socket$nl_route(0x10, 0x3, 0x0)

5m27.965601268s ago: executing program 0 (id=1149):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)

5m26.004716422s ago: executing program 0 (id=1151):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x2048c5, &(0x7f0000000640)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@utf8no}, {@numtail}, {@fat=@nfs_nostale_ro}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@usefree}, {@fat=@debug}, {@numtail}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

5m25.658216933s ago: executing program 0 (id=1152):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x800, 0xfc8, 0x3, 0x8, 0x5, <r0=>0xffffffffffffffff})
syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/time\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f00000000c0)=0x8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x4c844)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000003c0)=ANY=[], 0x49, 0x0)
setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14)

5m25.104522742s ago: executing program 0 (id=1154):
r0 = syz_io_uring_setup(0xea8, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000040))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12)
fcntl$setstatus(r1, 0x4, 0x40800)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendfile(r1, r5, 0x0, 0x7ffff004)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5b7c2aee}, 0x1c)
write(r6, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d", 0x5e)
io_uring_enter(r0, 0x0, 0x464f, 0x1, 0x0, 0x0)

5m23.6692428s ago: executing program 35 (id=1154):
r0 = syz_io_uring_setup(0xea8, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000040))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12)
fcntl$setstatus(r1, 0x4, 0x40800)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendfile(r1, r5, 0x0, 0x7ffff004)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5b7c2aee}, 0x1c)
write(r6, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d", 0x5e)
io_uring_enter(r0, 0x0, 0x464f, 0x1, 0x0, 0x0)

4m35.275789981s ago: executing program 6 (id=1211):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x16, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r1, r1, 0x0, 0x3fffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x8001)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r6 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rt6_stats\x00')
fchdir(r6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000600)={{0xf7}, 'port1\x00', 0x94, 0x20060, 0x81, 0x0, 0xe, 0x6, 0x1, 0x0, 0x0, 0x2})

4m32.732381148s ago: executing program 6 (id=1214):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)

4m27.483149114s ago: executing program 6 (id=1220):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c)

4m23.394132167s ago: executing program 6 (id=1225):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x800, 0xfc8, 0x3, 0x8, 0x5, <r0=>0xffffffffffffffff})
syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/time\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f00000000c0)=0x8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'})
sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x4c844)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x49, 0x0)
setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14)

4m18.391992482s ago: executing program 6 (id=1231):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = shmget$private(0x0, 0x1000, 0x184, &(0x7f0000ffd000/0x1000)=nil)
shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x7000)
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
removexattr(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=ANY=[])
mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000340)=""/232)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x0, 0x1c8, 0xfeffffff, 0xf8, 0x298, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@broadcast, @private=0xa010102, 0xffffffff, 0xffffff00, 'batadv_slave_0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x67, 0x3, 0x8}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "e26e"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr, 0x0, 0x0, 'lo\x00', 'veth1_to_team\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@broadcast, @loopback, 0xff000000, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x3, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400d0}, 0x0)

4m16.520232018s ago: executing program 6 (id=1232):
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x890)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x62000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2)
fspick(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1)
madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x65)
r3 = syz_io_uring_setup(0x2532, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0x20e}, &(0x7f0000000080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x2e, &(0x7f0000001800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb88}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff81}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpgid(0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x9, 0x6, 0x8, 0x5, 0x2]}, &(0x7f0000000180)=0x54)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)

4m0.449549247s ago: executing program 36 (id=1232):
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x890)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x62000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2)
fspick(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1)
madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x65)
r3 = syz_io_uring_setup(0x2532, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0x20e}, &(0x7f0000000080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x2e, &(0x7f0000001800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb88}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff81}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpgid(0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x9, 0x6, 0x8, 0x5, 0x2]}, &(0x7f0000000180)=0x54)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)

2m59.281086694s ago: executing program 2 (id=1312):
ioperm(0x0, 0x2, 0x7e)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
socket$key(0xf, 0x3, 0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGPTPEER(r4, 0x5441, 0xfffffffffffffff4)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x8, 0x4101, 0x4000000000000b, 0x0, 0x9, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x20000000000009f, 0x56ee, 0xffff, 0x6, 0x6, 0xa, 0x8001, 0x3, 0x0, 0x3, 0x72a3, 0xe})
clock_adjtime(0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b28, &(0x7f0000000000)={'wlan0\x00'})
write$binfmt_format(r5, &(0x7f0000000100)='-1\x00', 0x2)

2m54.189145277s ago: executing program 2 (id=1318):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
fallocate(r0, 0x4f, 0x2, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428)
link(0x0, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv4_delroute={0x24, 0x18, 0xa01, 0x0, 0xffffffff, {0x2, 0x10, 0x0, 0x10, 0x0, 0x0, 0xfe, 0x8}, [@RTA_PREFSRC={0x8, 0x7, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040818)

2m52.874294803s ago: executing program 2 (id=1319):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000000c0)=0xffffffffffffff40, 0x4)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
pipe(0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x2008000, 0x0, 0xdd7198c608b29410, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0)

2m51.892942221s ago: executing program 2 (id=1320):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14)

2m45.622163878s ago: executing program 2 (id=1327):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50)

2m39.918198925s ago: executing program 2 (id=1333):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
shutdown(r0, 0x1)
socket(0x10, 0x803, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

2m24.760464852s ago: executing program 37 (id=1333):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
shutdown(r0, 0x1)
socket(0x10, 0x803, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

1m24.830082929s ago: executing program 5 (id=1406):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x16, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r1, r1, 0x0, 0x3fffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x8001)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rt6_stats\x00')
fchdir(r7)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000600)={{0xf7}, 'port1\x00', 0x94, 0x20060, 0x81, 0x0, 0xe, 0x6, 0x1, 0x0, 0x0, 0x2})

1m21.406482214s ago: executing program 5 (id=1410):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x20040040)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbce, &(0x7f00000016c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x2c020400)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0], 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000100)}}, 0x10)
r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000616161616161616161616161616161616161616161616132313131313131313131313131313131313131313131313131313131313131314deb01b999f9c2b035a65227eab530e4ca6e21df00163a73b2bb1d561519d4ab2def1637b18ebcc98ef104552ccd71a3e4c22d28b1c9b6cc61404a717092ee6d565c78c881281eb374c6e11a1740564adc185bbd6c0780aa1239e615bb09373eb68ca3ea46dd0478eb783eb47ef6f8a938244ae425a63f2c0b"], 0x48, 0xfffffffffffffffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz1\x00', {0x1000, 0x7, 0x5, 0xffff}, 0x57, [0x400, 0x6, 0xb66a, 0x4, 0x2db, 0x5, 0x1, 0x800, 0x865, 0xfffffffa, 0x101, 0x7, 0x7fff, 0x408, 0x8, 0x1, 0x3, 0x5a, 0x3, 0x4, 0x5, 0x4f, 0x1000, 0x5, 0x8001, 0x80, 0xe9b, 0x5, 0xffffb830, 0x8, 0x9e00, 0x8, 0x0, 0x1, 0x99, 0x4, 0x9, 0x8000, 0xfff, 0x8, 0xa, 0x1, 0x5, 0x5, 0x7, 0x5, 0x39fc, 0x6, 0x2, 0x2, 0x2, 0x4, 0x6, 0x8, 0x4c23, 0xc, 0x9, 0x99, 0x2a, 0x1, 0x2, 0x7, 0x8, 0x3], [0xfffeffff, 0x6, 0x3986, 0x7fff, 0xffff, 0x6, 0x3, 0x6d61, 0x3, 0x4, 0x0, 0x800, 0x0, 0x101, 0x1, 0x4, 0x6, 0xffffd6e4, 0x400, 0x8, 0x1000, 0x5, 0x3, 0x5, 0x5, 0x4, 0x6, 0x4, 0x1, 0x7, 0x80, 0x6, 0x6, 0xffffff00, 0x3, 0xae, 0x10001, 0xffffff31, 0x1f9, 0xaf, 0x4, 0x100, 0x54938bf9, 0xb, 0xef4e, 0x24, 0x4, 0x100, 0x7, 0x2, 0xfff, 0x0, 0x4, 0x7, 0xfffffff7, 0xb, 0x0, 0x1000, 0x9, 0x3, 0x56, 0x1950, 0x0, 0x5], [0x1, 0x1000, 0x4, 0x8, 0x87, 0x40000, 0x6, 0x5, 0xfffffffb, 0x7, 0x5, 0x3ff, 0x8, 0xffffffff, 0x7, 0x0, 0x8, 0x9, 0x9, 0x5, 0x40, 0x3, 0x4, 0x0, 0x7, 0x2, 0x4, 0x2, 0x7fffffff, 0xe9, 0x0, 0x4, 0xfa, 0x10000, 0x6, 0x2b1d, 0x0, 0x0, 0x5, 0x101, 0x485f, 0x6, 0x9, 0x4, 0x5, 0x7fffffff, 0x0, 0xee6, 0x101, 0x1, 0x7e3e446b, 0x9, 0x1ff, 0x80000001, 0x4, 0x6, 0x6, 0xc565, 0x1, 0x8, 0xffff, 0x9, 0x8, 0x4], [0x7fffffff, 0xfffffffa, 0x5, 0x0, 0x4, 0x1, 0x1a, 0x3, 0x40, 0x7, 0x200, 0x3, 0x5, 0xeb48, 0xa3b, 0x2, 0x3, 0x400, 0x3, 0xf4c0, 0x6, 0x4, 0xf0c, 0x5, 0x6, 0x2, 0x1, 0x2, 0x8, 0x3, 0x8001, 0x8001, 0x2, 0xa447, 0x10001, 0x7, 0x8, 0x1806aad, 0xd, 0x1, 0x9, 0x3, 0x0, 0x80000001, 0x4, 0xfffffffe, 0x5, 0x87e, 0x2, 0x9, 0x6, 0x5, 0x7f, 0x2, 0x800, 0x7, 0x6, 0x3, 0x6, 0x7, 0x9, 0x5, 0x7fffffff, 0x7]}, 0x45c)

1m17.118159225s ago: executing program 5 (id=1416):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
fsopen(&(0x7f00000001c0)='nfs4\x00', 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x23}, 0x1c)
writev(0xffffffffffffffff, 0x0, 0x0)
fchdir(0xffffffffffffffff)
creat(0x0, 0xdafbe5d6891b6e4)

1m15.070227867s ago: executing program 5 (id=1420):
syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x80100)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000a100))

1m10.484984974s ago: executing program 5 (id=1427):
r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e")
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0xc00, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
ioctl$FICLONE(r0, 0x40049409, r0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r8, 0x11, 0x2, 0x0, &(0x7f0000000000))

1m4.182278555s ago: executing program 5 (id=1432):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xd0, "94660f00000000000058000000000004a200000080fc4eb15500", <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ppoll(&(0x7f0000000380)=[{r1, 0x624}], 0x1, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

48.907595002s ago: executing program 38 (id=1432):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xd0, "94660f00000000000058000000000004a200000080fc4eb15500", <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ppoll(&(0x7f0000000380)=[{r1, 0x624}], 0x1, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

18.774022411s ago: executing program 7 (id=1487):
pipe(&(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setstatus(r3, 0x4, 0x42400)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x2000000000000)

17.166291293s ago: executing program 7 (id=1488):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
fsopen(&(0x7f00000001c0)='nfs4\x00', 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x23}, 0x1c)
writev(0xffffffffffffffff, 0x0, 0x0)
fchdir(0xffffffffffffffff)
creat(0x0, 0xdafbe5d6891b6e4)

16.898032547s ago: executing program 8 (id=1489):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
shutdown(r0, 0x1)

15.941003162s ago: executing program 8 (id=1490):
syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x2000, &(0x7f0000000580)=ANY=[], 0xfa, 0x66b, &(0x7f0000001180)="$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")
open(0x0, 0x64842, 0x86)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {0x1}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0xe}}, @val={0x3e, 0x1, 0x3}, @void}}}}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1d0c25bd7000ffdbdf250c0000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)

15.445290346s ago: executing program 9 (id=1492):
r0 = socket$inet6(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@private=0xa010100, 0x4e68, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100, 0x6}, {0x0, 0x4, 0x0, 0x5000207ffffffc, 0x0, 0x9, 0x2, 0x8000000002}, {0x7ffffffffffffffd, 0x1000000004, 0x8, 0x1f}, 0xfffffffe, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@private=0xa010101, 0x0, 0x32}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x3505, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c)

15.150245133s ago: executing program 9 (id=1493):
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0)

15.075918139s ago: executing program 8 (id=1494):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$erofs(&(0x7f0000019300), &(0x7f0000000280)='./file0\x00', 0xb18400, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0], 0xf, 0x18f, &(0x7f00000002c0)="$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")
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/252, 0xfc)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x7)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket(0x3, 0x2, 0x101)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x10, @empty}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
pause()

14.214416276s ago: executing program 7 (id=1495):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14)

12.746901657s ago: executing program 8 (id=1496):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
r1 = getpgrp(0x0)
prlimit64(r1, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x8, 0x80000006, 0x2, 0x40, 0x3, 0x0, 0x6, 0x5})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x141800, 0xd, 0x2, 0x80000107, 0x6, 0x5, 0x0, 0x3, 0x3})

11.202087104s ago: executing program 8 (id=1497):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
shutdown(r0, 0x1)

10.750242244s ago: executing program 9 (id=1498):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

10.135125868s ago: executing program 1 (id=1447):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x20040040)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbce, &(0x7f00000016c0)="$eJzs3M1rXOUaAPDnnHy3uXfSy+Vy6yYRkRbUaVpJsUWwlYobF4JuhYZ0UkKmHySRmjRgov+AqGvBjaAWpQu77kbBrRutW4sLoUhsFEQ0cuYjSZuZJK2TnJD8fvBm3vc8Z/I+zxza874wJwHsWQPZjzTiYEScTSIKteNpRHRWet0Rc9XzFhdmR35bmB1JYmnplZ+TSCLi7sLsSP13JbXX/T3VQXdEfPN8Ev95e+28k9Mz48PlcmmiNj4ydeHykcnpmafGLgyfL50vXTx6/JmhY0PHB08MtazW3384dePXR1/8ce6PT/689st7HyVxKnprsdV1tMpADCx/Jqu1R8RwqyfLSVutntV1Ju0bvCnd4qQAAGgqXbWG+18Uoi1WFm+F+PLbXJMDAAAAWmKpLWIJAAAA2OUS+38AAADY5erfA7i7MDtSb/l+I2F73Tldebw5ImZHFheqrRpprx3vjo6I2Hc3idWPtSYR0deC+Qci4vb3Jz7PWmzRc8jrmZuPiP83uv5Jpf6+ylPca+tPI2KwBfMP3DfeafU/2dm8/lMtmD/v+gHYm26ert7I1t7/0uX1TzS4/7U3uHc9jLzvf9n6L1vI1dd+iwuzJ6qRlfrbmqz/Xt7kHFc//uBKs1hW/7M3Xvis3rIcstd/VNQDuDMf8Uj7PfXfs/7J6k+a1H92k3MU/rpSahbLu/6lDyMOReP665L1/z7RkdGxcmmw+rPhHPNfD33abP6868+u/74m9W90/S9vco7Xzpy53iy2cf3pT53Jq5VeZ+3IG8NTUxNHIzqTl9YeP1Z7oL2J+jn135HVf/ixRvWn69afTTFX+xyyvcB87TUbv3XfnM9du/rFevVne788r/+5h7z+72xyjse/evdws9jq/W/WsvlvJ9W9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUpRHRG0laXO6nabEYsT8i/hv70vKlyaknRi+9fvFcFovoi450dKxcGoyIQnWcZOOjlf7K+Nh946cj4kBEvF/oqYyLI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGX7I6I3krQYEWlELBbStFjMOysAAACg5fryTgAAAADYcvb/AAAAsPttsP/v79+uRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANitDvTfvJVExNzJnkrLdNZiHblmBmy1NO8EgNy05Z0AkJv2vBMAcvOAe3zLBdiFkg3i3U0jXS3PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICd69DBm7eSiJg72VNpmc5arKPhO/q3MTtgK6V5JwDkpm29YPv25QFsP//EYe9qvMcH9pJkg3j3yjlz90a6tiwnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHae3kpL0mJEpJV+mhaLEf+KiL7oSEbHyqXBiPh3RHxX6OjKxl15Jw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDLTU7PjA+Xy6WJPdF5MyIe4u1LXXvtg9LJo5PsjDSqnbz/ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA+T0zPjw+VyaWIy70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE1Oz4wPl8uliU10rj/Iyas6edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+/g4AAP//kpcK8Q==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x2c020400)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0], 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000100)}}, 0x10)
r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000616161616161616161616161616161616161616161616132313131313131313131313131313131313131313131313131313131313131314deb01b999f9c2b035a65227eab530e4ca6e21df00163a73b2bb1d561519d4ab2def1637b18ebcc98ef104552ccd71a3e4c22d28b1c9b6cc61404a717092ee6d565c78c881281eb374c6e11a1740564adc185bbd6c0780aa1239e615bb09373eb68ca3ea46dd0478eb783eb47ef6f8a938244ae425a63f2c0b55d7147eb629"], 0x48, 0xfffffffffffffffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz1\x00', {0x1000, 0x7, 0x5, 0xffff}, 0x57, [0x400, 0x6, 0xb66a, 0x4, 0x2db, 0x5, 0x1, 0x800, 0x865, 0xfffffffa, 0x101, 0x7, 0x7fff, 0x408, 0x8, 0x1, 0x3, 0x5a, 0x3, 0x4, 0x5, 0x4f, 0x1000, 0x5, 0x8001, 0x80, 0xe9b, 0x5, 0xffffb830, 0x8, 0x9e00, 0x8, 0x0, 0x1, 0x99, 0x4, 0x9, 0x8000, 0xfff, 0x8, 0xa, 0x1, 0x5, 0x5, 0x7, 0x5, 0x39fc, 0x6, 0x2, 0x2, 0x2, 0x4, 0x6, 0x8, 0x4c23, 0xc, 0x9, 0x99, 0x2a, 0x1, 0x2, 0x7, 0x8, 0x3], [0xfffeffff, 0x6, 0x3986, 0x7fff, 0xffff, 0x6, 0x3, 0x6d61, 0x3, 0x4, 0x0, 0x800, 0x0, 0x101, 0x1, 0x4, 0x6, 0xffffd6e4, 0x400, 0x8, 0x1000, 0x5, 0x3, 0x5, 0x5, 0x4, 0x6, 0x4, 0x1, 0x7, 0x80, 0x6, 0x6, 0xffffff00, 0x3, 0xae, 0x10001, 0xffffff31, 0x1f9, 0xaf, 0x4, 0x100, 0x54938bf9, 0xb, 0xef4e, 0x24, 0x4, 0x100, 0x7, 0x2, 0xfff, 0x0, 0x4, 0x7, 0xfffffff7, 0xb, 0x0, 0x1000, 0x9, 0x3, 0x56, 0x1950, 0x0, 0x5], [0x1, 0x1000, 0x4, 0x8, 0x87, 0x40000, 0x6, 0x5, 0xfffffffb, 0x7, 0x5, 0x3ff, 0x8, 0xffffffff, 0x7, 0x0, 0x8, 0x9, 0x9, 0x5, 0x40, 0x3, 0x4, 0x0, 0x7, 0x2, 0x4, 0x2, 0x7fffffff, 0xe9, 0x0, 0x4, 0xfa, 0x10000, 0x6, 0x2b1d, 0x0, 0x0, 0x5, 0x101, 0x485f, 0x6, 0x9, 0x4, 0x5, 0x7fffffff, 0x0, 0xee6, 0x101, 0x1, 0x7e3e446b, 0x9, 0x1ff, 0x80000001, 0x4, 0x6, 0x6, 0xc565, 0x1, 0x8, 0xffff, 0x9, 0x8, 0x4], [0x7fffffff, 0xfffffffa, 0x5, 0x0, 0x4, 0x1, 0x1a, 0x3, 0x40, 0x7, 0x200, 0x3, 0x5, 0xeb48, 0xa3b, 0x2, 0x3, 0x400, 0x3, 0xf4c0, 0x6, 0x4, 0xf0c, 0x5, 0x6, 0x2, 0x1, 0x2, 0x8, 0x3, 0x8001, 0x8001, 0x2, 0xa447, 0x10001, 0x7, 0x8, 0x1806aad, 0xd, 0x1, 0x9, 0x3, 0x0, 0x80000001, 0x4, 0xfffffffe, 0x5, 0x87e, 0x2, 0x9, 0x6, 0x5, 0x7f, 0x2, 0x800, 0x7, 0x6, 0x3, 0x6, 0x7, 0x9, 0x5, 0x7fffffff, 0x7]}, 0x45c)

10.012124539s ago: executing program 9 (id=1499):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x2e06, 0x0, &(0x7f0000000340), &(0x7f0000000380))

7.789169067s ago: executing program 9 (id=1500):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)

7.41809722s ago: executing program 7 (id=1501):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x4, 0x4}, 0x6)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0x9, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x1, 0x4, 0xf8, 0x3, 0x68, 0x2, 0x7, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x10, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0x5, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x2, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x80a0000, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0xa101, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)

6.605670352s ago: executing program 1 (id=1502):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
fsopen(&(0x7f00000001c0)='nfs4\x00', 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x23}, 0x1c)
writev(0xffffffffffffffff, 0x0, 0x0)
fchdir(0xffffffffffffffff)
creat(0x0, 0xdafbe5d6891b6e4)

4.819708741s ago: executing program 1 (id=1503):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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")
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0xffffffff, 0x1, 'queue1\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r1, &(0x7f0000000200)=[{0x1e, 0x0, 0x0, 0xfd, @tick=0x6, {}, {}, @result}], 0x1c)

3.486012269s ago: executing program 8 (id=1504):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000002300)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x2f, {0x2f, 0x6, "25f4e4e9f494c657ebb4910a7d1e160d0e3c2199b77bb91ea647ba8c686a59370f60a1d38ebb6f07b1b1461dd1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000940)={[{@jqfmt_vfsold}, {@debug}, {@noblock_validity}, {@noload}, {@nombcache}, {@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000001f80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=")
chdir(0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x60, 0xea546b1303185b8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
rename(0x0, 0x0)

3.14578333s ago: executing program 7 (id=1505):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgid(0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, 0x0, 0x2000, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_MAP={0x24, 0xe, {0x3, 0x6, 0x9, 0x1, 0x8, 0x8}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
execveat(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r7=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r7, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1.948740306s ago: executing program 9 (id=1506):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
shutdown(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'trans=fd,'}}]}})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x0, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

1.770721092s ago: executing program 7 (id=1507):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8002, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x1, 0x6249, &(0x7f000000c6c0)="$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")
chdir(&(0x7f0000000340)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00')
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x19a)
getdents64(r0, &(0x7f00000000c0)=""/55, 0x37)

1.326328311s ago: executing program 1 (id=1508):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x2e06, 0x0, &(0x7f0000000340), &(0x7f0000000380))

0s ago: executing program 1 (id=1509):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14)

kernel console output (not intermixed with test programs):

d filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  570.393741][ T9652] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.1004: reserved inode found cleared - inode=18
[  570.507262][ T9604] Bluetooth: hci1: command tx timeout
[  570.520554][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.765634][ T9602] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.632253][ T9602] 8021q: adding VLAN 0 to HW filter on device team0
[  571.667884][ T9664] loop0: detected capacity change from 0 to 256
[  571.678872][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.686026][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  571.734099][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.741328][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.004101][ T9602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  572.035792][ T9602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  574.793928][ T9602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  576.780353][ T9689] loop0: detected capacity change from 0 to 1024
[  576.794242][ T9602] veth0_vlan: entered promiscuous mode
[  576.798785][ T9689] EXT4-fs: Ignoring removed orlov option
[  576.839872][ T9602] veth1_vlan: entered promiscuous mode
[  576.849779][ T9689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  576.910600][ T9602] veth0_macvtap: entered promiscuous mode
[  577.010967][ T9602] veth1_macvtap: entered promiscuous mode
[  577.092847][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.105767][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  577.130588][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.161638][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  577.175594][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.216082][ T9602] batman_adv: batadv0: Interface activated: batadv_slave_0
[  577.264835][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  577.335987][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.353980][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  577.365082][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.386846][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  577.390152][ T9697] loop0: detected capacity change from 0 to 4096
[  577.399132][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.414074][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  577.425639][ T9697] EXT4-fs: Ignoring removed mblk_io_submit option
[  577.469786][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.482157][ T9697] EXT4-fs (loop0): Test dummy encryption mode enabled
[  577.498428][ T9697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  577.516375][ T9602] batman_adv: batadv0: Interface activated: batadv_slave_1
[  577.650691][ T9602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  577.666489][ T9701] loop3: detected capacity change from 0 to 4096
[  577.712712][ T9602] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  577.721553][ T9602] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  577.730297][ T9602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  578.350450][ T9705] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.1012: reserved inode found cleared - inode=18
[  578.425428][ T9701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  578.469972][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  578.643377][ T9701] EXT4-fs: Cannot change journaled quota options when quota turned on
[  579.289999][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.036964][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.185320][ T2891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.194398][ T2891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.490089][ T9719] loop2: detected capacity change from 0 to 512
[  581.516616][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  581.554219][ T9719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  581.587726][ T9719] ext4 filesystem being mounted at /236/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  583.512265][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.532566][ T9744] loop4: detected capacity change from 0 to 4096
[  588.558527][ T9744] EXT4-fs: Ignoring removed mblk_io_submit option
[  588.626071][ T9744] EXT4-fs (loop4): Test dummy encryption mode enabled
[  588.668366][ T9744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  588.744839][ T9748] loop2: detected capacity change from 0 to 512
[  588.769807][ T9748] EXT4-fs: inline encryption not supported
[  588.814582][ T9748] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  588.938106][ T9748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  590.382845][ T9748] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  590.399020][ T9756] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.1021: reserved inode found cleared - inode=18
[  590.581891][ T9602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.385494][ T9762] loop4: detected capacity change from 0 to 4096
[  591.456250][ T9762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  592.531336][ T9762] EXT4-fs: Cannot change journaled quota options when quota turned on
[  592.712944][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.732120][ T9770] loop3: detected capacity change from 0 to 512
[  593.082470][ T9770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  593.108827][ T9770] ext4 filesystem being mounted at /257/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  593.693553][ T9776] loop2: detected capacity change from 0 to 128
[  593.821450][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.900652][ T9776] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  593.958185][ T9776] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  594.807224][ T9785] overlayfs: failed to resolve './file0': -2
[  596.098560][ T9602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.139244][ T5766] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  596.495042][ T9796] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  596.657544][   T23] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  596.700511][ T9796] batadv_slave_0: entered promiscuous mode
[  596.859174][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  596.876599][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  596.910795][   T23] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  596.925756][ T9790] loop0: detected capacity change from 0 to 40427
[  596.930450][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.941274][ T9790] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  596.968373][   T23] usb 3-1: config 0 descriptor??
[  596.973777][ T9790] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  597.004053][ T9790] F2FS-fs (loop0): invalid crc value
[  597.022937][ T9790] F2FS-fs (loop0): Found nat_bits in checkpoint
[  597.219491][ T9790] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  597.256301][ T9790] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  597.369443][ T9804] loop4: detected capacity change from 0 to 4096
[  597.409189][ T9804] EXT4-fs: Ignoring removed mblk_io_submit option
[  597.492859][ T9804] EXT4-fs (loop4): Test dummy encryption mode enabled
[  597.554140][   T23] usbhid 3-1:0.0: can't add hid device: -71
[  597.555862][ T9804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  597.560379][   T23] usbhid: probe of 3-1:0.0 failed with error -71
[  597.582473][   T23] usb 3-1: USB disconnect, device number 44
[  598.776559][ T9817] loop3: detected capacity change from 0 to 512
[  598.845764][ T9817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  598.885679][ T9817] ext4 filesystem being mounted at /261/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  599.128317][ T9822] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.1033: reserved inode found cleared - inode=18
[  601.272258][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  601.539276][ T9832] loop3: detected capacity change from 0 to 512
[  601.557078][ T9832] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  602.137820][ T9602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.575624][ T9843] loop2: detected capacity change from 0 to 2048
[  603.783404][ T9843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  604.123902][   T27] audit: type=1800 audit(1771504340.801:28): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1040" name="file1" dev="loop2" ino=1415 res=0 errno=0
[  604.760040][ T9852] loop0: detected capacity change from 0 to 256
[  604.790570][ T9853] loop3: detected capacity change from 0 to 128
[  604.833326][ T9852] FAT-fs (loop0): Directory bread(block 64) failed
[  604.852154][ T9852] FAT-fs (loop0): Directory bread(block 65) failed
[  604.880491][ T9852] FAT-fs (loop0): Directory bread(block 66) failed
[  604.880701][ T2891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.897267][ T9852] FAT-fs (loop0): Directory bread(block 67) failed
[  604.912538][ T9852] FAT-fs (loop0): Directory bread(block 68) failed
[  604.920599][ T9852] FAT-fs (loop0): Directory bread(block 69) failed
[  604.932867][ T9852] FAT-fs (loop0): Directory bread(block 70) failed
[  604.951053][ T9852] FAT-fs (loop0): Directory bread(block 71) failed
[  604.982073][ T9852] FAT-fs (loop0): Directory bread(block 72) failed
[  605.022037][ T9852] FAT-fs (loop0): Directory bread(block 73) failed
[  605.135648][ T9852] syz.0.1043: attempt to access beyond end of device
[  605.135648][ T9852] loop0: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  605.166421][ T2891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.233462][ T9855] loop2: detected capacity change from 0 to 512
[  605.234126][ T9852] syz.0.1043: attempt to access beyond end of device
[  605.234126][ T9852] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256
[  606.089819][   T27] audit: type=1800 audit(1771504342.801:29): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1043" name="file0" dev="loop0" ino=1048623 res=0 errno=0
[  606.150466][ T9855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  606.182852][ T2891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.199245][ T9855] ext4 filesystem being mounted at /245/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  606.534712][ T9864] loop0: detected capacity change from 0 to 4096
[  606.893426][ T9864] EXT4-fs: Ignoring removed mblk_io_submit option
[  606.989386][ T9864] EXT4-fs (loop0): Test dummy encryption mode enabled
[  607.046778][ T9864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  607.119356][ T2891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.172741][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.023597][ T9875] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.1050: reserved inode found cleared - inode=18
[  608.193238][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.191912][ T9900] loop4: detected capacity change from 0 to 4096
[  611.227045][ T9900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  611.387469][  T787] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  611.587215][  T787] usb 4-1: Using ep0 maxpacket: 16
[  611.630191][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  611.671255][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  611.697397][  T787] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  611.747867][  T787] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  611.756955][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.808268][  T787] usb 4-1: config 0 descriptor??
[  611.880033][ T9602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.164988][ T9918] loop4: detected capacity change from 0 to 512
[  612.270765][ T9918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  612.343219][ T9918] ext4 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  612.381416][ T9924] loop2: detected capacity change from 0 to 1024
[  612.389053][ T9924] EXT4-fs: Invalid gid value -1
[  612.630972][  T787] usbhid 4-1:0.0: can't add hid device: -71
[  612.634706][ T6132] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  612.637633][  T787] usbhid: probe of 4-1:0.0 failed with error -71
[  612.656795][  T787] usb 4-1: USB disconnect, device number 44
[  614.838847][ T9602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.562103][ T2891] hsr_slave_0: left promiscuous mode
[  615.604836][ T2891] hsr_slave_1: left promiscuous mode
[  616.915211][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  616.930266][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_0
[  616.953580][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  616.979232][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_1
[  617.018652][ T2891] bridge_slave_1: left allmulticast mode
[  617.021869][ T9963] loop3: detected capacity change from 0 to 4096
[  617.024337][ T2891] bridge_slave_1: left promiscuous mode
[  617.071810][ T9963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.091715][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.334844][ T2891] veth1_macvtap: left promiscuous mode
[  618.521571][ T2891] veth0_macvtap: left promiscuous mode
[  618.557409][ T2891] veth1_vlan: left promiscuous mode
[  618.591679][ T2891] veth0_vlan: left promiscuous mode
[  618.602788][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.642424][ T9974] loop0: detected capacity change from 0 to 4096
[  619.712433][ T9974] EXT4-fs: Ignoring removed mblk_io_submit option
[  619.802142][ T9974] EXT4-fs (loop0): Test dummy encryption mode enabled
[  619.863689][ T9974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  620.708853][ T9982] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.1061: reserved inode found cleared - inode=18
[  620.810828][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.577210][   T23] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  622.787278][   T23] usb 1-1: Using ep0 maxpacket: 16
[  622.824895][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  622.847309][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  622.872082][   T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  622.895471][ T9992] loop2: detected capacity change from 0 to 512
[  622.909036][   T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  622.933573][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.966117][   T23] usb 1-1: config 0 descriptor??
[  622.990397][ T9994] loop3: detected capacity change from 0 to 256
[  623.019094][ T9992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  623.052064][ T9994] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  623.074022][ T9992] ext4 filesystem being mounted at /251/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  623.087246][ T9994] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  623.174296][ T9994] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  623.837313][   T23] usbhid 1-1:0.0: can't add hid device: -71
[  623.863835][   T23] usbhid: probe of 1-1:0.0 failed with error -71
[  623.958030][   T23] usb 1-1: USB disconnect, device number 35
[  624.006859][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.142363][T10006] loop3: detected capacity change from 0 to 128
[  624.163482][T10006] EXT4-fs: Ignoring removed orlov option
[  624.191535][T10006] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  624.270264][ T5755] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  624.306809][ T2891] team0 (unregistering): Port device team_slave_1 removed
[  624.314609][T10006] loop3: detected capacity change from 0 to 2048
[  624.384544][ T2891] team0 (unregistering): Port device team_slave_0 removed
[  624.387680][T10006]  loop3: p1 p2
[  624.442659][ T5140]  loop3: p1 p2
[  624.467255][ T5755] usb 5-1: Using ep0 maxpacket: 32
[  624.491410][ T5755] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  624.506231][ T5755] usb 5-1: config 0 has no interface number 0
[  624.514076][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  624.522596][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  624.534192][ T2891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  624.535919][ T5755] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  624.576887][ T5755] usb 5-1: config 0 interface 85 has no altsetting 0
[  624.610590][T10013] loop0: detected capacity change from 0 to 2048
[  624.620148][ T5755] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  624.635693][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.650272][T10013] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  624.665148][ T5755] usb 5-1: Product: syz
[  624.672847][T10013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  624.685033][ T5755] usb 5-1: Manufacturer: syz
[  624.691704][ T5755] usb 5-1: SerialNumber: syz
[  624.720923][ T5756] udevd[5756]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  624.732112][T10016] loop3: detected capacity change from 0 to 4096
[  624.741767][ T5755] usb 5-1: config 0 descriptor??
[  624.762215][T10016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  624.817319][ T2891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  624.842373][ T5756] udevd[5756]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  625.038466][    T9] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  625.259143][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  625.277864][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  625.302620][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  625.330933][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.347342][    T9] usb 1-1: Product: syz
[  625.357298][    T9] usb 1-1: Manufacturer: syz
[  625.367633][    T9] usb 1-1: SerialNumber: syz
[  625.399190][ T5755] appletouch 5-1:0.85: Geyser mode initialized.
[  625.418195][ T5755] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input11
[  625.457504][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.570574][ T2891] bond0 (unregistering): Released all slaves
[  625.607673][ T9604] Bluetooth: hci2: Unknown advertising packet type: 0x30
[  625.607714][ T9604] Bluetooth: hci2: Malformed LE Event: 0x0d
[  625.623557][ T5755] usb 5-1: USB disconnect, device number 2
[  625.623737][    C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  625.680696][    T9] usb 1-1: 0:2 : does not exist
[  625.704566][ T5755] appletouch 5-1:0.85: input: appletouch disconnected
[  626.506637][    T9] usb 1-1: USB disconnect, device number 36
[  626.603776][ T5758] udevd[5758]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  626.746107][T10011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  626.754882][T10011] batadv_slave_0: entered promiscuous mode
[  629.713725][T10045] loop0: detected capacity change from 0 to 512
[  629.813090][ T5758] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  630.290636][T10049] loop3: detected capacity change from 0 to 4096
[  630.328242][T10049] EXT4-fs: Ignoring removed mblk_io_submit option
[  630.391670][T10049] EXT4-fs (loop3): Test dummy encryption mode enabled
[  630.448677][T10049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  630.517218][  T787] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  631.403338][T10061] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.1080: reserved inode found cleared - inode=18
[  631.467395][  T787] usb 1-1: Using ep0 maxpacket: 16
[  631.480460][  T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  631.513966][  T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  631.537159][  T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  631.551926][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.567268][  T787] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  631.599545][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.638263][  T787] usb 1-1: config 0 descriptor??
[  631.902216][T10068] loop3: detected capacity change from 0 to 4096
[  631.960316][T10068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  632.060638][T10073] loop2: detected capacity change from 0 to 512
[  632.155583][T10073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  632.200806][T10073] ext4 filesystem being mounted at /254/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  632.427589][  T787] usbhid 1-1:0.0: can't add hid device: -71
[  632.434408][  T787] usbhid: probe of 1-1:0.0 failed with error -71
[  632.454157][  T787] usb 1-1: USB disconnect, device number 37
[  633.422702][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.738147][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.471366][T10097] loop0: detected capacity change from 0 to 256
[  637.006846][T10115] loop2: detected capacity change from 0 to 512
[  637.025045][T10115] EXT4-fs: Ignoring removed nobh option
[  637.091770][T10115] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.1094: iget: bad i_size value: 38620345925642
[  637.205577][T10115] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.1094: couldn't read orphan inode 15 (err -117)
[  637.263848][T10115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  638.063900][T10070] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  638.136694][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  638.768345][T10126] loop0: detected capacity change from 0 to 4096
[  638.795951][T10126] EXT4-fs: Ignoring removed mblk_io_submit option
[  638.884437][T10126] EXT4-fs (loop0): Test dummy encryption mode enabled
[  638.917795][T10126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  639.849185][T10139] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.1095: reserved inode found cleared - inode=18
[  639.920706][T10146] loop3: detected capacity change from 0 to 512
[  639.960330][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.099873][T10146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  640.137241][T10146] ext4 filesystem being mounted at /281/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  642.144951][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  642.997697][ T6052] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  643.609698][ T6052] usb 4-1: Using ep0 maxpacket: 32
[  643.649560][ T6052] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  643.679257][ T6052] usb 4-1: config 0 has no interface number 0
[  643.685479][ T6052] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  643.745788][ T6052] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  643.776377][ T6052] usb 4-1: config 0 interface 85 has no altsetting 0
[  643.808939][ T6052] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  643.818826][ T6052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.826823][ T6052] usb 4-1: Product: syz
[  643.846802][ T6052] usb 4-1: Manufacturer: syz
[  643.867162][ T6052] usb 4-1: SerialNumber: syz
[  643.883911][ T6052] usb 4-1: config 0 descriptor??
[  645.841274][ T6052] appletouch 4-1:0.85: Failed to request geyser raw mode
[  645.856958][ T6052] appletouch: probe of 4-1:0.85 failed with error -5
[  645.955844][ T6052] usb 4-1: USB disconnect, device number 45
[  646.225037][T10195] loop3: detected capacity change from 0 to 4096
[  646.269973][T10195] EXT4-fs: Ignoring removed mblk_io_submit option
[  646.358876][T10195] EXT4-fs (loop3): Test dummy encryption mode enabled
[  646.405750][T10195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  647.275694][T10207] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.1106: reserved inode found cleared - inode=18
[  647.342816][T10203] loop0: detected capacity change from 0 to 4096
[  647.445715][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  647.571218][T10203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  648.999048][T10218] EXT4-fs: Cannot change journaled quota options when quota turned on
[  649.773930][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.780619][T10227] loop4: detected capacity change from 0 to 128
[  649.812230][T10227] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  649.883175][T10227] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  651.154540][T10237] loop0: detected capacity change from 0 to 1024
[  652.313869][T10237] EXT4-fs: Invalid gid value -1
[  652.901809][ T9602] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  653.136544][T10259] loop3: detected capacity change from 0 to 512
[  654.503832][T10264] loop0: detected capacity change from 0 to 4096
[  654.514686][T10259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  654.529396][T10264] EXT4-fs: Ignoring removed mblk_io_submit option
[  654.530026][T10259] ext4 filesystem being mounted at /285/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  654.572375][T10264] EXT4-fs (loop0): Test dummy encryption mode enabled
[  654.608318][T10264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  655.552125][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  656.133801][T10274] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.1116: reserved inode found cleared - inode=18
[  659.153770][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.984579][T10316] loop2: detected capacity change from 0 to 1024
[  660.992258][T10316] EXT4-fs: Invalid gid value -1
[  661.394255][T10322] loop4: detected capacity change from 0 to 2048
[  661.609988][T10322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  663.916382][T10337] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  663.932092][T10337] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28
[  663.944614][T10337] EXT4-fs (loop4): This should not happen!! Data will be lost
[  663.944614][T10337] 
[  663.954487][T10337] EXT4-fs (loop4): Total free blocks count 0
[  663.960510][T10337] EXT4-fs (loop4): Free/Dirty block details
[  663.966427][T10337] EXT4-fs (loop4): free_blocks=2415919504
[  663.972738][T10337] EXT4-fs (loop4): dirty_blocks=48000
[  663.978120][T10337] EXT4-fs (loop4): Block reservation details
[  663.984076][T10337] EXT4-fs (loop4): i_reserved_data_blocks=2488
[  664.033695][T10332] loop0: detected capacity change from 0 to 512
[  664.124242][T10332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  664.128146][ T2891] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28
[  664.147928][T10332] ext4 filesystem being mounted at /290/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  667.049494][   T42] EXT4-fs: 15 callbacks suppressed
[  667.049511][   T42] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 2054 with max blocks 2048 with error 28
[  667.077269][   T42] EXT4-fs (loop4): This should not happen!! Data will be lost
[  667.077269][   T42] 
[  667.086960][   T42] EXT4-fs (loop4): Total free blocks count 0
[  667.107577][   T42] EXT4-fs (loop4): Free/Dirty block details
[  667.113530][   T42] EXT4-fs (loop4): free_blocks=2415919504
[  667.119846][   T42] EXT4-fs (loop4): dirty_blocks=43904
[  667.125235][   T42] EXT4-fs (loop4): Block reservation details
[  667.131453][   T42] EXT4-fs (loop4): i_reserved_data_blocks=2360
[  667.239479][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.319173][   T42] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  667.350246][   T42] EXT4-fs (loop4): This should not happen!! Data will be lost
[  667.350246][   T42] 
[  668.744593][T10355] loop0: detected capacity change from 0 to 4096
[  668.768421][T10355] EXT4-fs: Ignoring removed mblk_io_submit option
[  668.848640][T10355] EXT4-fs (loop0): Test dummy encryption mode enabled
[  668.888041][T10355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  669.773268][T10366] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.1130: reserved inode found cleared - inode=18
[  669.862704][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  673.454468][T10394] loop2: detected capacity change from 0 to 4096
[  673.778056][T10394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  674.170163][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  674.389989][T10406] loop0: detected capacity change from 0 to 512
[  674.476450][T10408] loop2: detected capacity change from 0 to 1024
[  674.479184][T10406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  674.497332][T10406] ext4 filesystem being mounted at /296/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  674.518004][T10408] EXT4-fs: Invalid gid value -1
[  676.750197][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  676.819272][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  676.834510][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  676.847248][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  676.877362][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  676.887918][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  676.895871][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  678.902536][T10424] chnl_net:caif_netlink_parms(): no params data found
[  678.989392][ T9604] Bluetooth: hci4: command tx timeout
[  680.048711][T10424] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.289636][T10461] loop0: detected capacity change from 0 to 4096
[  680.319517][T10424] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.329931][T10424] bridge_slave_0: entered allmulticast mode
[  680.406639][T10424] bridge_slave_0: entered promiscuous mode
[  680.518357][T10461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  680.892129][T10424] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.907868][T10424] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.915214][T10424] bridge_slave_1: entered allmulticast mode
[  680.973940][T10424] bridge_slave_1: entered promiscuous mode
[  681.005708][T10424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  681.018041][T10424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  681.068701][ T9604] Bluetooth: hci4: command tx timeout
[  681.071481][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  681.124105][T10424] team0: Port device team_slave_0 added
[  681.153364][T10424] team0: Port device team_slave_1 added
[  681.186936][T10424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  681.194350][T10424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.269364][T10424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  681.335145][T10424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  681.360537][T10424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.467293][T10424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  681.561320][ T9602] EXT4-fs: 6 callbacks suppressed
[  681.561336][ T9602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  681.670345][ T5085] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  681.699442][ T5085] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  681.729112][ T5085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  681.767637][T10424] hsr_slave_0: entered promiscuous mode
[  681.788971][ T5085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  681.797508][ T5085] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  681.804815][ T5085] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  682.187141][T10471] loop0: detected capacity change from 0 to 4096
[  682.541159][T10424] hsr_slave_1: entered promiscuous mode
[  682.599445][T10424] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  682.609549][T10424] Cannot create hsr debugfs directory
[  682.869631][T10489] loop2: detected capacity change from 0 to 512
[  682.881476][T10471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  682.958582][T10489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  683.080689][T10475] EXT4-fs: Cannot change journaled quota options when quota turned on
[  683.120604][T10489] ext4 filesystem being mounted at /272/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  683.150034][ T5085] Bluetooth: hci4: command tx timeout
[  684.842948][ T5085] Bluetooth: hci5: command tx timeout
[  685.143042][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  685.158807][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  685.244589][ T5085] Bluetooth: hci4: command tx timeout
[  686.548726][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  686.558325][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  686.653715][ T2891] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.917213][ T5085] Bluetooth: hci5: command tx timeout
[  687.196164][T10517] loop0: detected capacity change from 0 to 128
[  687.259438][ T2891] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.431171][ T2891] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.612815][ T2891] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.053980][T10424] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  688.987359][ T5085] Bluetooth: hci5: command tx timeout
[  689.064616][T10424] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  689.139556][T10424] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  689.169310][T10478] chnl_net:caif_netlink_parms(): no params data found
[  689.221945][T10424] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  689.719333][T10478] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.726480][T10478] bridge0: port 1(bridge_slave_0) entered disabled state
[  690.950310][T10478] bridge_slave_0: entered allmulticast mode
[  690.982377][T10478] bridge_slave_0: entered promiscuous mode
[  691.088089][ T5085] Bluetooth: hci5: command tx timeout
[  691.164723][T10478] bridge0: port 2(bridge_slave_1) entered blocking state
[  691.191930][T10478] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.211123][T10478] bridge_slave_1: entered allmulticast mode
[  691.234562][T10478] bridge_slave_1: entered promiscuous mode
[  691.319938][T10478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  691.445178][T10478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  691.490514][ T9604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  691.504384][ T9604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  691.514627][ T9604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  691.527398][ T9604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  691.535196][ T9604] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  691.542714][ T9604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  691.798332][T10478] team0: Port device team_slave_0 added
[  691.944376][T10478] team0: Port device team_slave_1 added
[  691.980844][T10566] loop2: detected capacity change from 0 to 1024
[  692.019634][T10424] 8021q: adding VLAN 0 to HW filter on device bond0
[  692.029453][T10566] EXT4-fs: Ignoring removed nomblk_io_submit option
[  692.114686][T10566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  692.358941][T10478] batman_adv: batadv0: Adding interface: batadv_slave_0
[  692.365946][T10478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  692.393875][T10478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  692.474457][T10478] batman_adv: batadv0: Adding interface: batadv_slave_1
[  692.509798][T10478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  692.655973][T10478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  693.005169][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.045759][T10424] 8021q: adding VLAN 0 to HW filter on device team0
[  693.204484][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state
[  693.211856][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  693.278809][T10478] hsr_slave_0: entered promiscuous mode
[  693.296998][T10478] hsr_slave_1: entered promiscuous mode
[  693.307398][T10478] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  693.315129][T10478] Cannot create hsr debugfs directory
[  693.395529][ T3413] bridge0: port 2(bridge_slave_1) entered blocking state
[  693.402781][ T3413] bridge0: port 2(bridge_slave_1) entered forwarding state
[  693.637340][ T5085] Bluetooth: hci0: command tx timeout
[  693.686432][ T2891] hsr_slave_0: left promiscuous mode
[  693.712982][ T2891] hsr_slave_1: left promiscuous mode
[  693.719590][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_0
[  693.737998][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  693.745566][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_1
[  693.753925][ T2891] bridge_slave_1: left allmulticast mode
[  693.760173][ T2891] bridge_slave_1: left promiscuous mode
[  693.767887][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state
[  693.779577][ T2891] bridge_slave_0: left promiscuous mode
[  693.789385][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state
[  693.831692][ T2891] veth1_macvtap: left promiscuous mode
[  693.837366][ T2891] veth0_macvtap: left promiscuous mode
[  693.843383][ T2891] veth1_vlan: left promiscuous mode
[  693.849199][ T2891] veth0_vlan: left promiscuous mode
[  695.717569][ T5085] Bluetooth: hci0: command tx timeout
[  696.314625][T10600] loop2: detected capacity change from 0 to 4096
[  696.373823][ T2891] team0 (unregistering): Port device team_slave_1 removed
[  696.488306][T10600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  696.928993][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  696.967656][ T2891] team0 (unregistering): Port device team_slave_0 removed
[  697.051874][ T2891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  697.086187][T10604] loop2: detected capacity change from 0 to 1024
[  697.138072][T10604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  697.151204][T10604] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  697.169126][ T2891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  697.211680][T10604] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 3: comm syz.2.1161: lblock 3 mapped to illegal pblock 3 (length 3)
[  697.246529][T10604] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  697.264733][T10604] EXT4-fs (loop2): This should not happen!! Data will be lost
[  697.264733][T10604] 
[  697.283969][T10607] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.1161: lblock 3 mapped to illegal pblock 3 (length 1)
[  697.306462][T10607] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.1161: lblock 3 mapped to illegal pblock 3 (length 1)
[  697.318504][T10604] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 4: comm syz.2.1161: lblock 4 mapped to illegal pblock 4 (length 2)
[  697.324947][T10607] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.1161: lblock 3 mapped to illegal pblock 3 (length 1)
[  697.362084][T10604] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 4: comm syz.2.1161: lblock 4 mapped to illegal pblock 4 (length 2)
[  697.375479][T10607] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.1161: lblock 3 mapped to illegal pblock 3 (length 1)
[  697.392696][T10604] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 4: comm syz.2.1161: lblock 4 mapped to illegal pblock 4 (length 2)
[  697.408931][T10607] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.1161: lblock 3 mapped to illegal pblock 3 (length 1)
[  697.425033][T10604] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 4: comm syz.2.1161: lblock 4 mapped to illegal pblock 4 (length 2)
[  697.735510][ T2891] bond0 (unregistering): Released all slaves
[  697.796109][ T5085] Bluetooth: hci0: command tx timeout
[  697.972878][ T3448] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  697.995385][ T3448] EXT4-fs (loop2): This should not happen!! Data will be lost
[  697.995385][ T3448] 
[  698.042589][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  698.254883][T10558] chnl_net:caif_netlink_parms(): no params data found
[  699.713044][T10558] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.720580][T10558] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.727848][T10558] bridge_slave_0: entered allmulticast mode
[  699.735318][T10558] bridge_slave_0: entered promiscuous mode
[  699.763669][T10558] bridge0: port 2(bridge_slave_1) entered blocking state
[  699.773463][T10558] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.780807][T10558] bridge_slave_1: entered allmulticast mode
[  699.794289][T10558] bridge_slave_1: entered promiscuous mode
[  699.878837][T10478] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  699.892161][ T5085] Bluetooth: hci0: command tx timeout
[  699.920693][T10558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  699.960878][T10478] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  699.981114][T10558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  700.014325][T10478] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  700.033959][T10478] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  700.149884][T10558] team0: Port device team_slave_0 added
[  700.174530][T10424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  700.192465][T10558] team0: Port device team_slave_1 added
[  700.293831][ T2891] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.368769][T10558] batman_adv: batadv0: Adding interface: batadv_slave_0
[  700.375766][T10558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  700.447149][T10558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  700.542441][ T2891] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.582963][T10558] batman_adv: batadv0: Adding interface: batadv_slave_1
[  700.617984][T10558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  700.687241][T10558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  700.800014][ T2891] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.975830][ T2891] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.036498][T10558] hsr_slave_0: entered promiscuous mode
[  701.073526][T10558] hsr_slave_1: entered promiscuous mode
[  701.083652][T10558] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  701.092164][T10558] Cannot create hsr debugfs directory
[  701.361967][T10478] 8021q: adding VLAN 0 to HW filter on device bond0
[  701.523696][T10424] veth0_vlan: entered promiscuous mode
[  701.725946][T10424] veth1_vlan: entered promiscuous mode
[  701.784792][T10478] 8021q: adding VLAN 0 to HW filter on device team0
[  701.905626][ T3413] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.912788][ T3413] bridge0: port 1(bridge_slave_0) entered forwarding state
[  702.055393][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.062595][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state
[  702.163486][T10424] veth0_macvtap: entered promiscuous mode
[  702.184766][T10558] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  702.292476][T10424] veth1_macvtap: entered promiscuous mode
[  702.308707][T10558] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  702.416490][T10558] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  703.679314][T10424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  703.686676][T10558] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  703.779393][T10424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  703.817287][T10424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  703.837373][T10424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  703.867115][T10424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  703.876978][T10424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  703.899337][T10424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  703.915134][T10424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  704.024078][T10424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  704.053021][T10424] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  704.076497][T10424] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  704.085777][T10424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  704.233489][T10478] 8021q: adding VLAN 0 to HW filter on device batadv0
[  704.620673][ T2891] hsr_slave_0: left promiscuous mode
[  704.638092][ T2891] hsr_slave_1: left promiscuous mode
[  704.651363][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_0
[  704.697959][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  704.705421][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_1
[  704.741178][ T2891] bridge_slave_1: left allmulticast mode
[  704.746888][ T2891] bridge_slave_1: left promiscuous mode
[  704.770695][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.794042][ T2891] bridge_slave_0: left allmulticast mode
[  704.827945][ T2891] bridge_slave_0: left promiscuous mode
[  704.833740][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.776264][ T2891] veth1_macvtap: left promiscuous mode
[  705.782478][ T2891] veth0_macvtap: left promiscuous mode
[  705.788963][ T2891] veth1_vlan: left promiscuous mode
[  705.794313][ T2891] veth0_vlan: left promiscuous mode
[  708.033946][ T2891] team0 (unregistering): Port device team_slave_1 removed
[  708.103660][ T2891] team0 (unregistering): Port device team_slave_0 removed
[  708.190584][ T2891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  708.249836][ T2891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  708.799169][ T2891] bond0 (unregistering): Released all slaves
[  708.926764][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.937957][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.086183][T10558] 8021q: adding VLAN 0 to HW filter on device bond0
[  709.106345][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.131724][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.238579][T10558] 8021q: adding VLAN 0 to HW filter on device team0
[  709.391491][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.398702][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state
[  709.506265][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.513491][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state
[  709.579685][T10478] veth0_vlan: entered promiscuous mode
[  710.692103][T10478] veth1_vlan: entered promiscuous mode
[  712.044123][T10478] veth0_macvtap: entered promiscuous mode
[  712.099953][T10478] veth1_macvtap: entered promiscuous mode
[  712.163054][T10478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  712.175882][T10478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  712.191819][T10478] batman_adv: batadv0: Interface activated: batadv_slave_0
[  712.224588][T10478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  712.241996][T10478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  712.256467][T10478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  712.275786][T10478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  712.286278][T10478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  712.301256][T10478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  712.315722][T10478] batman_adv: batadv0: Interface activated: batadv_slave_1
[  712.349490][T10478] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  712.387150][T10478] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  712.395909][T10478] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  712.447233][T10478] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  712.662429][T10558] 8021q: adding VLAN 0 to HW filter on device batadv0
[  712.705787][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  712.742638][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  712.814027][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  712.867930][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  713.214490][T10781] loop6: detected capacity change from 0 to 1024
[  713.941023][T10781] hfsplus: xattr searching failed
[  714.006573][T10790] loop5: detected capacity change from 0 to 1024
[  714.041737][   T11] hfsplus: b-tree write err: -5, ino 3
[  714.095025][T10558] veth0_vlan: entered promiscuous mode
[  714.159297][T10790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  714.219098][T10558] veth1_vlan: entered promiscuous mode
[  714.247730][T10797] loop2: detected capacity change from 0 to 1024
[  714.265627][T10797] EXT4-fs: Invalid gid value -1
[  714.320325][ T5758] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  714.364266][T10558] veth0_macvtap: entered promiscuous mode
[  714.409072][T10558] veth1_macvtap: entered promiscuous mode
[  714.509089][T10558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.543079][T10558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.563750][T10558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.578120][T10558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.599049][T10806] loop6: detected capacity change from 0 to 164
[  714.615431][T10558] batman_adv: batadv0: Interface activated: batadv_slave_0
[  714.629131][T10790] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.1174: corrupted xattr entries
[  714.649382][T10790] EXT4-fs error (device loop5): get_max_inline_xattr_value_size:69: inode #15: comm syz.5.1174: corrupt xattr in inline inode
[  714.665885][T10558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.691581][T10790] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.1174: corrupted xattr entries
[  714.697127][T10558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.724247][T10558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.735531][T10558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.745916][T10558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.762680][T10558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.780121][T10558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.800945][T10558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.826295][T10558] batman_adv: batadv0: Interface activated: batadv_slave_1
[  714.842537][T10424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.869404][T10558] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  714.903167][T10558] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  714.907015][T10811] loop2: detected capacity change from 0 to 256
[  714.941516][T10558] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  714.964303][T10558] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  715.251164][T10816] loop6: detected capacity change from 0 to 128
[  715.309923][T10816] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  715.353754][T10819] loop2: detected capacity change from 0 to 512
[  715.366740][T10816] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  715.417653][T10819] EXT4-fs: Ignoring removed i_version option
[  715.438577][T10819] EXT4-fs: Ignoring removed bh option
[  715.464392][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.538679][ T3438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.547675][ T3438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.569779][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.609504][T10819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  715.978239][T10819] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  716.421800][T10478] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  716.550354][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  716.684156][T10837] loop7: detected capacity change from 0 to 512
[  717.714336][T10837] EXT4-fs: inline encryption not supported
[  719.035032][T10837] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  719.130900][T10837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  720.302439][T10837] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  720.516553][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  721.696386][T10868] loop7: detected capacity change from 0 to 128
[  721.754444][T10871] loop6: detected capacity change from 0 to 1024
[  721.772347][T10868] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  721.798345][T10871] EXT4-fs: Invalid gid value -1
[  721.844011][T10868] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  721.900880][ T5756] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  721.975462][T10876] loop2: detected capacity change from 0 to 4096
[  721.997936][T10876] EXT4-fs (loop2): Test dummy encryption mode enabled
[  722.094993][T10876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  722.865162][T10558] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  722.991918][T10893] bridge_slave_0: left allmulticast mode
[  723.044513][T10894] loop5: detected capacity change from 0 to 256
[  723.080495][T10893] bridge_slave_0: left promiscuous mode
[  723.110440][T10893] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.145204][T10897] loop7: detected capacity change from 0 to 512
[  723.192540][T10897] EXT4-fs: Ignoring removed i_version option
[  723.200641][T10893] bridge_slave_1: left allmulticast mode
[  723.232879][T10894] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  723.257957][T10893] bridge_slave_1: left promiscuous mode
[  723.263733][T10893] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.288496][T10897] EXT4-fs: Ignoring removed bh option
[  724.285671][T10897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  724.286551][T10897] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  724.321318][T10893] bond0: (slave bond_slave_0): Releasing backup interface
[  724.455551][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  724.497722][T10893] bond0: (slave bond_slave_1): Releasing backup interface
[  724.571908][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  725.519996][T10893] team0: Port device team_slave_0 removed
[  726.964114][T10893] team0: Port device team_slave_1 removed
[  727.008104][T10893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  727.015602][T10893] batman_adv: batadv0: Removing interface: batadv_slave_0
[  727.134661][T10893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  727.147230][T10893] batman_adv: batadv0: Removing interface: batadv_slave_1
[  729.329417][T10936] loop5: detected capacity change from 0 to 164
[  730.728125][ T5758] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  733.000031][T10959] loop2: detected capacity change from 0 to 512
[  733.018107][T10959] EXT4-fs: Ignoring removed i_version option
[  733.024146][T10959] EXT4-fs: Ignoring removed bh option
[  733.160320][T10959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  733.281290][T10959] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  734.417543][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  743.497338][ T5813] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  743.774386][ T5813] usb 8-1: Using ep0 maxpacket: 16
[  743.796618][ T5813] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  743.834724][ T5813] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  743.865257][ T5813] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  744.677090][ T5813] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  744.686179][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.715855][ T5813] usb 8-1: config 0 descriptor??
[  745.387172][ T5813] usbhid 8-1:0.0: can't add hid device: -71
[  745.393233][ T5813] usbhid: probe of 8-1:0.0 failed with error -71
[  745.437910][ T5813] usb 8-1: USB disconnect, device number 2
[  747.997391][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  748.003851][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  749.079088][T11106] loop5: detected capacity change from 0 to 512
[  749.115757][T11106] EXT4-fs: Ignoring removed i_version option
[  749.192602][T11106] EXT4-fs: Ignoring removed oldalloc option
[  749.254504][T11106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  749.549321][T11116] loop2: detected capacity change from 0 to 2048
[  749.635077][T11116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  749.779695][T10424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  752.383091][T11137] loop6: detected capacity change from 0 to 4096
[  754.390525][T11137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  754.897817][T10478] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  755.366181][T10788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.621093][T10788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.901124][T10788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.355608][T11173] loop2: detected capacity change from 0 to 736
[  758.545685][T10788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.903338][T11205] loop5: detected capacity change from 0 to 512
[  762.975714][T11205] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  767.645519][T11240] loop7: detected capacity change from 0 to 4096
[  768.177766][T11240] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  769.704859][T10788] hsr_slave_0: left promiscuous mode
[  769.710117][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.735449][T10788] hsr_slave_1: left promiscuous mode
[  769.757721][T10788] batman_adv: batadv0: Removing interface: batadv_slave_0
[  769.767208][T10788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  769.774652][T10788] batman_adv: batadv0: Removing interface: batadv_slave_1
[  769.786228][T10788] bridge_slave_1: left allmulticast mode
[  769.838427][T10788] bridge_slave_1: left promiscuous mode
[  769.844216][T10788] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.875895][T10788] bridge_slave_0: left allmulticast mode
[  769.891066][T10788] bridge_slave_0: left promiscuous mode
[  769.896831][T10788] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.037601][T10788] veth1_macvtap: left promiscuous mode
[  771.052878][T10788] veth0_macvtap: left promiscuous mode
[  771.068317][T10788] veth1_vlan: left promiscuous mode
[  771.083658][T10788] veth0_vlan: left promiscuous mode
[  771.100197][T11252] loop7: detected capacity change from 0 to 2048
[  771.174136][T11252] EXT4-fs: Ignoring removed nomblk_io_submit option
[  771.403328][T11252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  771.578405][T11252] EXT4-fs error (device loop7): ext4_iget_extra_inode:4732: inode #15: comm syz.7.1243: corrupted in-inode xattr: invalid ea_ino
[  771.664125][T11252] EXT4-fs (loop7): Remounting filesystem read-only
[  772.619028][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  773.731422][ T9604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  773.747442][ T9604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  773.755645][ T9604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  773.764477][ T9604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  773.783151][ T9604] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  773.791708][ T9604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  774.615131][T11273] loop2: detected capacity change from 0 to 512
[  774.629124][T11273] EXT4-fs: Ignoring removed i_version option
[  774.649350][T11273] EXT4-fs: Ignoring removed bh option
[  774.701416][T11273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  774.758092][T11273] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  774.934150][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  775.129004][T10788] team0 (unregistering): Port device team_slave_1 removed
[  776.053111][ T9604] Bluetooth: hci1: command tx timeout
[  776.162455][T10788] team0 (unregistering): Port device team_slave_0 removed
[  777.135486][T10788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  777.338380][T10788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  778.177345][ T5085] Bluetooth: hci1: command tx timeout
[  779.985764][T10788] bond0 (unregistering): Released all slaves
[  780.187113][ T5085] Bluetooth: hci1: command tx timeout
[  781.304818][T11305] loop7: detected capacity change from 0 to 512
[  781.348313][T11305] EXT4-fs: Ignoring removed i_version option
[  781.354362][T11305] EXT4-fs: Ignoring removed bh option
[  781.590541][T11305] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  781.673446][T11305] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  782.095633][T11268] chnl_net:caif_netlink_parms(): no params data found
[  782.114924][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  782.267196][ T5085] Bluetooth: hci1: command tx timeout
[  783.930134][T11268] bridge0: port 1(bridge_slave_0) entered blocking state
[  783.957361][T11268] bridge0: port 1(bridge_slave_0) entered disabled state
[  783.964624][T11268] bridge_slave_0: entered allmulticast mode
[  784.089793][T11268] bridge_slave_0: entered promiscuous mode
[  784.862253][T11268] bridge0: port 2(bridge_slave_1) entered blocking state
[  784.882379][T11268] bridge0: port 2(bridge_slave_1) entered disabled state
[  784.906717][T11268] bridge_slave_1: entered allmulticast mode
[  784.923539][T11268] bridge_slave_1: entered promiscuous mode
[  784.993146][T11268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  785.099585][T11268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  785.801206][T11268] team0: Port device team_slave_0 added
[  786.966632][T11268] team0: Port device team_slave_1 added
[  787.149435][T11268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  787.175068][T11268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  787.278980][T11268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  787.319387][T11268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  787.347091][T11268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  787.457172][T11268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  787.647200][T11268] hsr_slave_0: entered promiscuous mode
[  787.684499][T11268] hsr_slave_1: entered promiscuous mode
[  789.475505][T11268] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  789.530468][T11268] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  789.571857][T11268] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  789.617498][T11268] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  789.884426][T11268] 8021q: adding VLAN 0 to HW filter on device bond0
[  789.902979][T11379] loop5: detected capacity change from 0 to 2048
[  789.959725][T11268] 8021q: adding VLAN 0 to HW filter on device team0
[  789.963137][T11379]  loop5: p1 p2
[  789.984166][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  789.991330][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  790.079811][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  790.086934][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  790.256302][T11385] loop2: detected capacity change from 0 to 512
[  790.293082][T11268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  790.308806][T11385] EXT4-fs: Ignoring removed i_version option
[  790.314864][T11385] EXT4-fs: Ignoring removed bh option
[  790.316439][T11268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  790.578590][T11385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  790.823335][T11385] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  791.300847][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  791.514900][T11268] 8021q: adding VLAN 0 to HW filter on device batadv0
[  796.540700][T11268] veth0_vlan: entered promiscuous mode
[  796.619898][T11268] veth1_vlan: entered promiscuous mode
[  796.729727][T11268] veth0_macvtap: entered promiscuous mode
[  796.760235][T11268] veth1_macvtap: entered promiscuous mode
[  796.809951][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  796.854772][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.883395][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  796.922731][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.958953][T11268] batman_adv: batadv0: Interface activated: batadv_slave_0
[  796.994411][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  797.037088][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  797.046957][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  797.107070][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  797.116944][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  797.177137][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  798.398417][T11268] batman_adv: batadv0: Interface activated: batadv_slave_1
[  798.459694][T11268] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  798.522158][T11268] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  798.572236][T11268] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  798.622602][T11268] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  799.022560][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.045233][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.142172][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.151561][T11454] loop7: detected capacity change from 0 to 764
[  799.172975][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.604395][T11458] rock: directory entry would overflow storage
[  799.611050][T11458] rock: sig=0x4f50, size=4, remaining=3
[  799.616600][T11458] iso9660: Corrupted directory entry in block 4 of inode 1792
[  800.029939][T11466] loop7: detected capacity change from 0 to 512
[  800.096245][T11466] EXT4-fs: Ignoring removed i_version option
[  800.103577][T11466] EXT4-fs: Ignoring removed bh option
[  800.176447][T11466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  800.293037][T11466] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  801.487220][ T9604] Bluetooth: hci4: command 0x0406 tx timeout
[  801.859058][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  801.994044][T11483] loop5: detected capacity change from 0 to 4096
[  802.022946][T11483] EXT4-fs: Ignoring removed mblk_io_submit option
[  802.203104][T11483] EXT4-fs (loop5): Test dummy encryption mode enabled
[  804.055869][T11483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  805.044202][T11502] EXT4-fs error (device loop5): __ext4_new_inode:1075: comm syz.5.1280: reserved inode found cleared - inode=18
[  805.299538][T10424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  805.613083][T11511] loop5: detected capacity change from 0 to 256
[  805.690973][T11511] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  805.767429][   T27] audit: type=1800 audit(1771504542.471:30): pid=11511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1285" name="file1" dev="loop5" ino=1048638 res=0 errno=0
[  805.806752][T11511] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008)
[  805.847340][T11511] exFAT-fs (loop5): Filesystem has been set read-only
[  809.600986][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  809.607426][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  810.062866][T11537] loop8: detected capacity change from 0 to 512
[  810.293414][T11537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  810.347230][T11537] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  810.642336][T11547] ip6t_rpfilter: unknown options
[  811.008431][T11548] EXT4-fs error (device loop8): ext4_do_update_inode:5248: inode #2: comm syz.8.1288: corrupted inode contents
[  811.044458][T11548] EXT4-fs error (device loop8): ext4_dirty_inode:6124: inode #2: comm syz.8.1288: mark_inode_dirty error
[  811.059072][T11548] EXT4-fs error (device loop8): ext4_do_update_inode:5248: inode #2: comm syz.8.1288: corrupted inode contents
[  811.107408][T11548] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.1288: mark_inode_dirty error
[  811.238044][T11268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  813.594391][T11567] loop5: detected capacity change from 0 to 1024
[  814.317148][ T5758] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  814.358513][T11566] loop2: detected capacity change from 0 to 4096
[  814.365895][T11566] EXT4-fs: Ignoring removed mblk_io_submit option
[  814.690794][T11566] EXT4-fs (loop2): Test dummy encryption mode enabled
[  814.799026][T11566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  815.577546][T11578] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.1293: reserved inode found cleared - inode=18
[  815.820038][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.211679][ T9604] Bluetooth: hci0: command 0x0406 tx timeout
[  825.253242][T11635] loop7: detected capacity change from 0 to 512
[  825.318908][T11635] EXT4-fs: Ignoring removed nobh option
[  825.395049][T11635] EXT4-fs (loop7): Test dummy encryption mode enabled
[  825.452701][T11635] EXT4-fs error (device loop7): __ext4_iget:5071: inode #11: block 1: comm syz.7.1300: invalid block
[  825.595601][T11635] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.1300: couldn't read orphan inode 11 (err -117)
[  825.745749][T11635] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  826.624488][T11635] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000.
[  826.777581][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  827.280673][T11654] loop2: detected capacity change from 0 to 128
[  827.310273][T11657] loop7: detected capacity change from 0 to 1024
[  827.334739][T11654] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  827.337712][T11657] EXT4-fs: Ignoring removed nomblk_io_submit option
[  828.674745][T11654] ext4 filesystem being mounted at /335/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  828.705228][T11657] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  829.613277][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  829.698358][ T5766] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  829.998115][T11687] loop8: detected capacity change from 0 to 4096
[  830.049025][T11687] EXT4-fs: Ignoring removed mblk_io_submit option
[  830.070092][T11687] EXT4-fs (loop8): Test dummy encryption mode enabled
[  831.211951][T11687] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  833.729311][T11703] EXT4-fs error (device loop8): __ext4_new_inode:1075: comm syz.8.1304: reserved inode found cleared - inode=18
[  833.904694][T11268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  835.381438][T10486] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.743892][T10486] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.776015][T11723] trusted_key: encrypted_key: keylen parameter is missing
[  835.826446][T11724] loop7: detected capacity change from 0 to 1024
[  836.091100][T11724] hfsplus: bad catalog entry type
[  836.286507][T10486] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.294068][   T12] hfsplus: b-tree write err: -5, ino 4
[  837.390121][T10486] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  839.580377][T11750] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  841.673088][T11760] loop8: detected capacity change from 0 to 4096
[  841.702650][T11760] EXT4-fs: Ignoring removed mblk_io_submit option
[  841.785189][T11760] EXT4-fs (loop8): Test dummy encryption mode enabled
[  841.889176][T11760] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  842.908022][T11773] EXT4-fs error (device loop8): __ext4_new_inode:1075: comm syz.8.1321: reserved inode found cleared - inode=18
[  843.129922][T11268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  844.616579][T11784] loop7: detected capacity change from 0 to 128
[  844.720162][T11784] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  844.867408][T11784] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  848.934605][T10558] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  852.996725][T10486] hsr_slave_0: left promiscuous mode
[  853.034616][T10486] hsr_slave_1: left promiscuous mode
[  853.201675][T10486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  853.229007][T10486] batman_adv: batadv0: Removing interface: batadv_slave_0
[  853.256523][T10486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  853.308002][T10486] batman_adv: batadv0: Removing interface: batadv_slave_1
[  853.333797][T10486] bridge_slave_1: left allmulticast mode
[  854.476468][T10486] bridge_slave_1: left promiscuous mode
[  854.491808][T10486] bridge0: port 2(bridge_slave_1) entered disabled state
[  854.573532][T10486] bridge_slave_0: left allmulticast mode
[  854.587082][T10486] bridge_slave_0: left promiscuous mode
[  854.592891][T10486] bridge0: port 1(bridge_slave_0) entered disabled state
[  854.689012][T10486] veth1_macvtap: left promiscuous mode
[  854.694618][T10486] veth0_macvtap: left promiscuous mode
[  854.737182][T10486] veth1_vlan: left promiscuous mode
[  854.765324][T10486] veth0_vlan: left promiscuous mode
[  856.623328][T11850] loop5: detected capacity change from 0 to 4096
[  856.632880][T11853] tmpfs: Unknown parameter 'nr_block00000000000000000000'
[  856.642494][T11850] EXT4-fs: Ignoring removed mblk_io_submit option
[  856.687234][T11850] EXT4-fs (loop5): Test dummy encryption mode enabled
[  856.724411][T11850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  857.530382][T11858] EXT4-fs error (device loop5): __ext4_new_inode:1075: comm syz.5.1332: reserved inode found cleared - inode=18
[  857.610896][T10424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  857.782137][T11865] loop5: detected capacity change from 0 to 128
[  857.801151][T11865] EXT4-fs (loop5): Test dummy encryption mode enabled
[  857.973818][T11866] loop7: detected capacity change from 0 to 4096
[  858.211553][T11866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  858.337624][T11865] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  858.352916][T11865] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  858.680909][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  858.690993][T10424] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  864.983355][T11893] loop8: detected capacity change from 0 to 512
[  865.006154][T11893] EXT4-fs: Ignoring removed nobh option
[  865.090953][T11893] EXT4-fs error (device loop8): ext4_orphan_get:1398: inode #15: comm syz.8.1341: iget: bad i_size value: 38620345925642
[  865.173183][T11893] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.1341: couldn't read orphan inode 15 (err -117)
[  865.241049][T11893] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  865.513801][T10486] team0 (unregistering): Port device team_slave_1 removed
[  866.446215][T11268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.510250][T10486] team0 (unregistering): Port device team_slave_0 removed
[  866.859686][T10486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  867.056032][T10486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  868.695155][T11913] loop8: detected capacity change from 0 to 4096
[  869.240019][T11913] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  869.483372][T11268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  870.395744][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  870.402268][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  870.584417][T10486] bond0 (unregistering): Released all slaves
[  870.860048][T11920] loop7: detected capacity change from 0 to 16
[  870.900671][T11920] erofs: (device loop7): mounted with root inode @ nid 36.
[  871.104369][ T9604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  871.128936][T11920] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36
[  871.147194][T11920] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36
[  871.149751][ T9604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  871.168700][ T9604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  871.204152][ T9604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  871.219040][T11920] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  871.219134][ T9604] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  871.237415][ T9604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  871.244683][T11920] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  873.322841][ T9604] Bluetooth: hci2: command tx timeout
[  873.644971][T11947] loop5: detected capacity change from 0 to 2048
[  873.753088][T11947] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  873.823612][T11947] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  873.913643][T11921] chnl_net:caif_netlink_parms(): no params data found
[  874.444645][T11921] bridge0: port 1(bridge_slave_0) entered blocking state
[  874.477444][T11921] bridge0: port 1(bridge_slave_0) entered disabled state
[  875.237638][T11921] bridge_slave_0: entered allmulticast mode
[  875.267780][T11921] bridge_slave_0: entered promiscuous mode
[  875.376749][T11921] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.405316][ T9604] Bluetooth: hci2: command tx timeout
[  875.450814][T11921] bridge0: port 2(bridge_slave_1) entered disabled state
[  875.458409][T11921] bridge_slave_1: entered allmulticast mode
[  875.468912][T11921] bridge_slave_1: entered promiscuous mode
[  876.499017][T10486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.802728][T10486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.933135][T11921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  876.980310][T11921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  877.119459][T10486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.229278][T11921] team0: Port device team_slave_0 added
[  877.361131][T10486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.450232][T11921] team0: Port device team_slave_1 added
[  877.467371][ T9604] Bluetooth: hci2: command tx timeout
[  879.574538][ T9604] Bluetooth: hci2: command tx timeout
[  879.788537][T11921] batman_adv: batadv0: Adding interface: batadv_slave_0
[  879.827381][T11921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  880.065833][T12016] loop5: detected capacity change from 0 to 4096
[  881.064612][T11921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  881.168821][T11921] batman_adv: batadv0: Adding interface: batadv_slave_1
[  881.212357][T12016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  881.217034][T11921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  881.361559][T11921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  881.527274][T10424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  881.900903][T11921] hsr_slave_0: entered promiscuous mode
[  881.975386][T11921] hsr_slave_1: entered promiscuous mode
[  882.367845][T11921] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  882.375477][T11921] Cannot create hsr debugfs directory
[  888.494780][T11921] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  888.809809][T11921] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  888.867637][T11921] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  889.803369][T11921] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  890.109437][T12084] loop5: detected capacity change from 0 to 4096
[  890.909219][T12084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  891.351395][T11921] 8021q: adding VLAN 0 to HW filter on device bond0
[  891.395312][T10424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  891.908448][T11921] 8021q: adding VLAN 0 to HW filter on device team0
[  892.943253][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state
[  892.950509][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state
[  893.014543][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state
[  893.021759][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  893.481234][T10486] hsr_slave_0: left promiscuous mode
[  893.589906][T10486] hsr_slave_1: left promiscuous mode
[  893.641279][T10486] batman_adv: batadv0: Removing interface: batadv_slave_0
[  893.662971][T10486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  894.617092][T10486] batman_adv: batadv0: Removing interface: batadv_slave_1
[  894.667849][T10486] bridge_slave_1: left allmulticast mode
[  894.673537][T10486] bridge_slave_1: left promiscuous mode
[  894.757331][T10486] bridge0: port 2(bridge_slave_1) entered disabled state
[  894.820110][T10486] bridge_slave_0: left allmulticast mode
[  894.825814][T10486] bridge_slave_0: left promiscuous mode
[  894.852022][T10486] bridge0: port 1(bridge_slave_0) entered disabled state
[  895.062408][T10486] veth1_macvtap: left promiscuous mode
[  895.098749][T10486] veth0_macvtap: left promiscuous mode
[  895.137238][T10486] veth1_vlan: left promiscuous mode
[  895.153458][T10486] veth0_vlan: left promiscuous mode
[  896.742056][T12138] loop7: detected capacity change from 0 to 2048
[  896.803428][T12138] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  898.985888][ T5085] Bluetooth: hci1: command 0x0406 tx timeout
[  899.089669][T12145] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  899.104604][T12145] EXT4-fs (loop7): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28
[  899.116774][T12145] EXT4-fs (loop7): This should not happen!! Data will be lost
[  899.116774][T12145] 
[  899.126485][T12145] EXT4-fs (loop7): Total free blocks count 0
[  899.132483][T12145] EXT4-fs (loop7): Free/Dirty block details
[  899.138396][T12145] EXT4-fs (loop7): free_blocks=2415919504
[  899.144103][T12145] EXT4-fs (loop7): dirty_blocks=46992
[  899.149508][T12145] EXT4-fs (loop7): Block reservation details
[  899.155466][T12145] EXT4-fs (loop7): i_reserved_data_blocks=2425
[  902.851496][T12155] loop5: detected capacity change from 0 to 4096
[  902.937943][T12155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  903.490715][T10424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  905.172315][T10486] team0 (unregistering): Port device team_slave_1 removed
[  905.394545][T10486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  905.647409][T10486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  905.877774][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  908.183354][T12178] loop5: detected capacity change from 0 to 2048
[  908.311399][T12178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  910.551214][T12186] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  910.565994][T12186] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28
[  910.578197][T12186] EXT4-fs (loop5): This should not happen!! Data will be lost
[  910.578197][T12186] 
[  910.587859][T12186] EXT4-fs (loop5): Total free blocks count 0
[  910.593819][T12186] EXT4-fs (loop5): Free/Dirty block details
[  910.599715][T12186] EXT4-fs (loop5): free_blocks=2415919504
[  910.605414][T12186] EXT4-fs (loop5): dirty_blocks=46976
[  910.610798][T12186] EXT4-fs (loop5): Block reservation details
[  910.616754][T12186] EXT4-fs (loop5): i_reserved_data_blocks=2424
[  910.669248][   T12] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28
[  911.648364][T12188] loop8: detected capacity change from 0 to 1024
[  911.937907][T12188] hfsplus: xattr searching failed
[  912.078730][T10486] bond0 (unregistering): Released all slaves
[  912.138448][T12188] hfsplus: xattr searching failed
[  912.144225][T12188] hfsplus: xattr searching failed
[  913.047531][T11921] 8021q: adding VLAN 0 to HW filter on device batadv0
[  913.071210][T12206] loop8: detected capacity change from 0 to 4096
[  913.319911][T12206] EXT4-fs: Ignoring removed mblk_io_submit option
[  913.659099][T12206] EXT4-fs (loop8): Test dummy encryption mode enabled
[  913.797787][T12206] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  914.566306][T12219] EXT4-fs error (device loop8): __ext4_new_inode:1075: comm syz.8.1390: reserved inode found cleared - inode=18
[  914.655010][T11268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  915.878923][T11921] veth0_vlan: entered promiscuous mode
[  915.888101][T12234] tmpfs: Unknown parameter 'nr_blocks00000000000000000000'
[  915.934782][T11921] veth1_vlan: entered promiscuous mode
[  916.081609][T11921] veth0_macvtap: entered promiscuous mode
[  916.105945][T11921] veth1_macvtap: entered promiscuous mode
[  916.219844][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  916.252488][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  916.274090][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.449290][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.551217][T11921] batman_adv: batadv0: Interface activated: batadv_slave_0
[  917.636476][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  917.682005][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.737071][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  917.766990][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.798435][T11921] batman_adv: batadv0: Interface activated: batadv_slave_1
[  917.814874][T11921] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  917.869325][T11921] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  917.897782][T11921] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  917.921995][T11921] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  918.167321][ T2891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.175187][ T2891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  918.267369][ T2891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.284539][ T2891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  921.896451][T12280] loop7: detected capacity change from 0 to 512
[  921.938462][T12280] EXT4-fs: Ignoring removed i_version option
[  921.944512][T12280] EXT4-fs: Ignoring removed bh option
[  922.122072][T12280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  922.147443][T12280] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  922.245767][T12289] loop9: detected capacity change from 0 to 128
[  922.298133][T12289] FAT-fs (loop9): Unrecognized mount option "18446744073709551615���" or missing value
[  922.366899][T12280] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1397'.
[  922.420421][T12023] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  922.482230][T10424] EXT4-fs: 47 callbacks suppressed
[  922.482243][T10424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  922.482320][T12289] loop9: detected capacity change from 0 to 1024
[  922.504634][T12023] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  922.515819][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  922.537781][T12023] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  922.567513][T12023] Buffer I/O error on dev loop9, logical block 0, async page read
[  922.645438][T12289] EXT4-fs warning (device loop9): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  924.109615][T12303] loop7: detected capacity change from 0 to 4096
[  924.154141][T12303] EXT4-fs: Ignoring removed mblk_io_submit option
[  924.206262][T12303] EXT4-fs (loop7): Test dummy encryption mode enabled
[  924.252375][T12303] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  925.136088][T12317] EXT4-fs error (device loop7): __ext4_new_inode:1075: comm syz.7.1398: reserved inode found cleared - inode=18
[  925.356125][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  927.775582][T12341] loop5: detected capacity change from 0 to 2048
[  927.850810][T12341]  loop5: p1 < > p4
[  927.867511][T12341] loop5: p4 size 8388608 extends beyond EOD, truncated
[  931.712340][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  931.719750][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  934.499564][T12387] loop5: detected capacity change from 0 to 4096
[  934.506889][T12387] EXT4-fs: Ignoring removed mblk_io_submit option
[  934.760909][T12387] EXT4-fs (loop5): Test dummy encryption mode enabled
[  935.445667][T12387] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  935.651835][T12387] EXT4-fs: failed to create workqueue
[  935.719907][T12387] EXT4-fs (loop5): mount failed
[  939.065658][T12420] loop8: detected capacity change from 0 to 128
[  939.719779][T12437] loop7: detected capacity change from 0 to 4096
[  940.860892][T12437] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  941.314089][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  943.799680][T12451] loop9: detected capacity change from 0 to 4096
[  943.828111][T12451] EXT4-fs: Ignoring removed mblk_io_submit option
[  943.879452][T12451] EXT4-fs (loop9): Test dummy encryption mode enabled
[  943.948259][T12451] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  944.661341][T12461] loop5: detected capacity change from 0 to 2048
[  944.690716][T12466] EXT4-fs error (device loop9): __ext4_new_inode:1075: comm syz.9.1424: reserved inode found cleared - inode=18
[  944.823933][T11921] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  945.213865][T12461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  946.437029][ T5755] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  948.670294][T12482] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  948.685107][T12482] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28
[  948.697269][T12482] EXT4-fs (loop5): This should not happen!! Data will be lost
[  948.697269][T12482] 
[  948.706897][T12482] EXT4-fs (loop5): Total free blocks count 0
[  948.712928][T12482] EXT4-fs (loop5): Free/Dirty block details
[  948.718859][T12482] EXT4-fs (loop5): free_blocks=2415919504
[  948.724564][T12482] EXT4-fs (loop5): dirty_blocks=46976
[  948.729965][T12482] EXT4-fs (loop5): Block reservation details
[  948.735923][T12482] EXT4-fs (loop5): i_reserved_data_blocks=2424
[  948.986165][ T2891] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28
[  949.087521][ T5755] usb 8-1: device not accepting address 3, error -71
[  949.314653][T12489] loop7: detected capacity change from 0 to 4096
[  949.952311][T12489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  950.260867][T10558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  950.260951][ T2891] EXT4-fs: 15 callbacks suppressed
[  950.260962][ T2891] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 2054 with max blocks 2048 with error 28
[  951.582668][ T2891] EXT4-fs (loop5): This should not happen!! Data will be lost
[  951.582668][ T2891] 
[  951.613105][ T2891] EXT4-fs (loop5): Total free blocks count 0
[  951.647245][ T2891] EXT4-fs (loop5): Free/Dirty block details
[  951.653203][ T2891] EXT4-fs (loop5): free_blocks=2415919504
[  951.716993][ T2891] EXT4-fs (loop5): dirty_blocks=42880
[  951.722431][ T2891] EXT4-fs (loop5): Block reservation details
[  951.767507][ T2891] EXT4-fs (loop5): i_reserved_data_blocks=2296
[  951.987313][ T2891] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  952.027016][ T2891] EXT4-fs (loop5): This should not happen!! Data will be lost
[  952.027016][ T2891] 
[  953.994240][T12527] loop9: detected capacity change from 0 to 4096
[  954.015615][T12527] EXT4-fs: Ignoring removed mblk_io_submit option
[  954.417156][T12527] EXT4-fs (loop9): Test dummy encryption mode enabled
[  954.588654][T12527] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  955.477915][T12538] EXT4-fs error (device loop9): __ext4_new_inode:1075: comm syz.9.1436: reserved inode found cleared - inode=18
[  955.698606][T11921] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  956.010391][T12545] loop8: detected capacity change from 0 to 2048
[  956.095553][T12545] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  959.548815][T12556] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  959.563667][T12556] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28
[  959.575840][T12556] EXT4-fs (loop8): This should not happen!! Data will be lost
[  959.575840][T12556] 
[  959.585472][T12556] EXT4-fs (loop8): Total free blocks count 0
[  959.591459][T12556] EXT4-fs (loop8): Free/Dirty block details
[  959.597896][T12556] EXT4-fs (loop8): free_blocks=2415919504
[  959.603597][T12556] EXT4-fs (loop8): dirty_blocks=46976
[  959.608992][T12556] EXT4-fs (loop8): Block reservation details
[  959.614947][T12556] EXT4-fs (loop8): i_reserved_data_blocks=2424
[  959.710100][T10486] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28
[  962.646304][T12580] loop9: detected capacity change from 0 to 4096
[  962.756253][T12580] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  963.360097][T11921] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  963.608597][T12591] loop9: detected capacity change from 0 to 8
[  963.970532][T12591] futex_wake_op: syz.9.1445 tries to shift op by 32; fix this program
[  965.810139][T10424] EXT4-fs: 6 callbacks suppressed
[  965.810153][T10424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  967.622364][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  967.634519][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  967.668306][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  967.682152][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  967.691905][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  967.700899][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  968.231829][T10788] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  969.309947][T10788] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.164339][ T5085] Bluetooth: hci3: command tx timeout
[  970.203398][T11268] EXT4-fs: 31 callbacks suppressed
[  970.203414][T11268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  970.398671][T10788] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.635478][T12644] loop7: detected capacity change from 0 to 2048
[  971.134692][T12644] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  971.451228][T10788] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.198790][ T5085] Bluetooth: hci3: command tx timeout
[  973.121823][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1455'.
[  973.219553][T12659] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  973.327176][T12616] chnl_net:caif_netlink_parms(): no params data found
[  973.583935][T12670] loop8: detected capacity change from 0 to 512
[  973.663002][T12670] ext2: Unknown parameter 'fsuuid'
[  974.287027][ T5085] Bluetooth: hci3: command tx timeout
[  974.651222][T12666] loop9: detected capacity change from 0 to 40427
[  974.691385][T12666] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  974.706365][T12666] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  974.728759][T12666] F2FS-fs (loop9): invalid crc value
[  974.770981][T12666] F2FS-fs (loop9): Found nat_bits in checkpoint
[  974.786068][T12616] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.797749][T12616] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.804997][T12616] bridge_slave_0: entered allmulticast mode
[  974.841579][T12616] bridge_slave_0: entered promiscuous mode
[  974.865420][T12616] bridge0: port 2(bridge_slave_1) entered blocking state
[  974.881619][T12616] bridge0: port 2(bridge_slave_1) entered disabled state
[  974.899519][T12616] bridge_slave_1: entered allmulticast mode
[  974.914868][T12616] bridge_slave_1: entered promiscuous mode
[  974.932194][T12666] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  974.952715][T12666] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  975.249563][T12616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  975.955138][T12616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  977.021721][T12705] loop8: detected capacity change from 0 to 256
[  977.038077][ T5085] Bluetooth: hci3: command tx timeout
[  977.070585][T12616] team0: Port device team_slave_0 added
[  977.080898][T12616] team0: Port device team_slave_1 added
[  977.143003][T12616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  977.194591][T12616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  977.297991][T12616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  977.437639][T12616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  977.444634][T12616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  977.514964][T12616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  977.556100][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1464'.
[  977.853866][T12616] hsr_slave_0: entered promiscuous mode
[  977.888223][T12616] hsr_slave_1: entered promiscuous mode
[  977.902466][T12616] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  977.917595][T12616] Cannot create hsr debugfs directory
[  979.737408][  T787] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  979.948016][  T787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  980.000888][  T787] usb 8-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  980.041553][  T787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.084719][  T787] usb 8-1: config 0 descriptor??
[  982.281996][  T787] usbhid 8-1:0.0: can't add hid device: -71
[  982.325118][  T787] usbhid: probe of 8-1:0.0 failed with error -71
[  982.370604][  T787] usb 8-1: USB disconnect, device number 5
[  982.560510][T10788] hsr_slave_0: left promiscuous mode
[  982.585629][T10788] hsr_slave_1: left promiscuous mode
[  982.666026][T10788] veth1_macvtap: left promiscuous mode
[  982.688950][T10788] veth0_macvtap: left promiscuous mode
[  982.712570][T10788] veth1_vlan: left promiscuous mode
[  982.723854][T10788] veth0_vlan: left promiscuous mode
[  990.670931][T12788] loop8: detected capacity change from 0 to 16
[  990.693876][T12788] erofs: (device loop8): mounted with root inode @ nid 36.
[  990.764320][T12788] syz.8.1480: attempt to access beyond end of device
[  990.764320][T12788] loop8: rw=524288, sector=1342177272, nr_sectors = 32 limit=16
[  990.785230][T12788] syz.8.1480: attempt to access beyond end of device
[  990.785230][T12788] loop8: rw=0, sector=1342177272, nr_sectors = 32 limit=16
[  990.874020][   T27] audit: type=1800 audit(1771504983.582:31): pid=12788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1480" name="file1" dev="loop8" ino=86 res=0 errno=0
[  991.292222][T12791] loop8: detected capacity change from 0 to 1024
[  991.347782][T12791] EXT4-fs: Ignoring removed orlov option
[  991.415005][T12793] loop7: detected capacity change from 0 to 128
[  991.448454][T12793] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  991.475563][T12791] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  991.580156][T12793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  991.591354][T12791] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4047: comm syz.8.1482: Allocating blocks 497-513 which overlap fs metadata
[  991.615221][T12791] EXT4-fs (loop8): pa ffff88805cb1d9f8: logic 131104, phys. 177, len 21
[  991.633089][T12791] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1
[  991.907667][T11268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  991.956593][T10788] bond0 (unregistering): Released all slaves
[  991.967319][ T5770] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  992.169258][ T5770] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  992.197435][ T5770] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  992.261038][ T5770] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  992.271530][ T5770] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  992.297008][ T5770] usb 8-1: Manufacturer: ᷅辽≺븂餒꾅쏇㎲濝ᑟ壴뻃ᾗ⹆ꃹ㥽៓痲ⳋ몡깧┕뵜绋ꛂṌ᲍菱䝙瓗׋螞⋄욻늡岭ᔽ댸蓯㫚劘嵬韣辸밅꭭ﾤ磽ꌅ튠좦$ꗴ㩂뎎瞇㤞䪃뼯팖
[  992.336970][ T5770] usb 8-1: SerialNumber: ࠄ
[  992.396576][T12768] netlink: 'syz.9.1477': attribute type 12 has an invalid length.
[  992.557310][ T5770] cdc_ncm 8-1:1.0: bind() failure
[  992.594253][ T5770] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  992.616628][ T5770] cdc_ncm 8-1:1.1: bind() failure
[  992.672803][ T5770] usb 8-1: USB disconnect, device number 6
[  992.683701][T12810] Bluetooth: MGMT ver 1.22
[  993.057211][T11926] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  993.152745][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  993.160561][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  993.297315][T11926] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  993.421627][T11926] usb 10-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  994.167035][T11926] usb 10-1: config 0 interface 0 has no altsetting 0
[  994.197070][T11926] usb 10-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00
[  994.216740][T11926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  994.318315][T11926] usb 10-1: config 0 descriptor??
[  995.234220][ T5085] Bluetooth: hci2: command 0x0406 tx timeout
[  995.942926][T12834] loop9: detected capacity change from 0 to 1024
[  995.958952][T11926] sony 0003:1430:474C.000D: unknown main item tag 0x3
[  995.965795][T11926] sony 0003:1430:474C.000D: unknown main item tag 0x0
[  996.012089][T12616] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  996.016871][T11926] sony 0003:1430:474C.000D: unknown main item tag 0x0
[  996.048601][T11926] sony 0003:1430:474C.000D: hidraw0: USB HID v0.00 Device [HID 1430:474c] on usb-dummy_hcd.9-1/input0
[  996.061832][T12834] EXT4-fs (loop9): bad geometry: first data block is 0 with a 1k block and cluster size
[  996.123159][T11926] sony 0003:1430:474C.000D: failed to claim input
[  996.154988][T12616] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  996.258681][T11926] usb 10-1: USB disconnect, device number 2
[  996.275535][T12616] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  996.378212][T12840] fido_id[12840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  996.426782][T12616] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  997.272213][T12616] 8021q: adding VLAN 0 to HW filter on device bond0
[  997.390061][T12616] 8021q: adding VLAN 0 to HW filter on device team0
[  997.444061][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state
[  997.451302][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state
[  997.494750][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state
[  997.501927][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state
[  997.516464][T12878] loop8: detected capacity change from 0 to 1024
[  997.655585][T12023] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  997.764855][T12878] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1490'.
[  998.787588][T12891] loop8: detected capacity change from 0 to 16
[  999.073243][T12023] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  999.149764][T12616] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1000.262255][T12616] veth0_vlan: entered promiscuous mode
[ 1000.342746][T12616] veth1_vlan: entered promiscuous mode
[ 1000.464082][T12616] veth0_macvtap: entered promiscuous mode
[ 1000.491331][T12616] veth1_macvtap: entered promiscuous mode
[ 1001.803127][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1001.847000][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1001.859317][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1001.877636][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1001.906947][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1001.938640][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1001.980133][T12616] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1002.023791][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1002.066924][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.076797][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1002.134329][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.174640][T12616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1002.217201][T12616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.248368][T12616] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1002.286129][T12616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1002.331828][T12616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1002.349013][T12616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1002.382845][T12616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1002.632286][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1002.655542][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1002.793172][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1002.809926][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1003.276571][T12930] loop1: detected capacity change from 0 to 4096
[ 1003.351676][T12930] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1004.111179][T12930] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1005.358923][T12930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1006.282299][T12962] EXT4-fs error (device loop1): __ext4_new_inode:1075: comm syz.1.1447: reserved inode found cleared - inode=18
[ 1006.603423][T12616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1010.035363][T12994] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1010.428948][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1505'.
[ 1010.438686][T13000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1011.059846][T13000] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1011.533236][T13015] loop1: detected capacity change from 0 to 256
[ 1011.566451][T13012] netlink: 'syz.9.1506': attribute type 16 has an invalid length.
[ 1011.657239][T13012] netlink: 'syz.9.1506': attribute type 17 has an invalid length.
[ 1013.216998][T11926] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1013.430144][T11926] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1013.456934][T11926] usb 9-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1013.489757][T13011] loop7: detected capacity change from 0 to 32768
[ 1013.503656][T11926] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1013.531169][T11926] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1013.559447][T11926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.599314][T13011] 
[ 1013.599314][T13011]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1013.599314][T13011] 
[ 1013.612874][T11926] usb 9-1: config 0 descriptor??
[ 1013.708296][T13011] read_mapping_page failed!
[ 1013.713741][T13011] ERROR: (device loop7): txCommit: 
[ 1013.713741][T13011] 
[ 1013.766693][T13023] read_mapping_page failed!
[ 1013.784750][T13023] ERROR: (device loop7): txCommit: 
[ 1013.784750][T13023] 
[ 1013.825874][T13012] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1013.833790][T13012] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1013.842088][T13011] ==================================================================
[ 1013.850170][T13011] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0xe8b/0x13e0
[ 1013.857729][T13011] Read of size 4 at addr ffff88805cbb404c by task syz.7.1507/13011
[ 1013.865627][T13011] 
[ 1013.867961][T13011] CPU: 0 PID: 13011 Comm: syz.7.1507 Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1013.875430][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1013.885510][T13011] Call Trace:
[ 1013.888808][T13011]  <TASK>
[ 1013.891743][T13011]  dump_stack_lvl+0x18c/0x250
[ 1013.896564][T13011]  ? __lock_acquire+0x7d40/0x7d40
[ 1013.901638][T13011]  ? show_regs_print_info+0x20/0x20
[ 1013.906858][T13011]  ? load_image+0x400/0x400
[ 1013.911415][T13011]  ? __virt_addr_valid+0x469/0x540
[ 1013.916566][T13011]  print_report+0xa8/0x210
[ 1013.921004][T13011]  ? dtInsertEntry+0xe8b/0x13e0
[ 1013.925863][T13011]  kasan_report+0x117/0x150
[ 1013.930418][T13011]  ? dtInsertEntry+0xe8b/0x13e0
[ 1013.935264][T13011]  dtInsertEntry+0xe8b/0x13e0
[ 1013.939935][T13011]  ? release_metapage+0x703/0x870
[ 1013.944950][T13011]  dtSplitPage+0x2925/0x37d0
[ 1013.949547][T13011]  dtInsert+0x1072/0x5de0
[ 1013.953870][T13011]  ? kasan_quarantine_put+0xd8/0x220
[ 1013.959161][T13011]  ? UniStrupr+0x2e0/0x2e0
[ 1013.963620][T13011]  ? dtSearch+0x1d20/0x21b0
[ 1013.968122][T13011]  jfs_symlink+0x8b5/0xfa0
[ 1013.972537][T13011]  ? jfs_unlink+0xa10/0xa10
[ 1013.977053][T13011]  ? make_vfsuid+0x51/0xb0
[ 1013.981491][T13011]  ? inode_permission+0xf3/0x480
[ 1013.986420][T13011]  ? bpf_lsm_inode_symlink+0x9/0x10
[ 1013.991626][T13011]  ? security_inode_symlink+0xb6/0x100
[ 1013.997095][T13011]  vfs_symlink+0x138/0x2b0
[ 1014.001508][T13011]  do_symlinkat+0x1ba/0x400
[ 1014.005999][T13011]  ? vfs_symlink+0x2b0/0x2b0
[ 1014.010579][T13011]  ? getname_flags+0x20a/0x500
[ 1014.015336][T13011]  __x64_sys_symlink+0x7e/0x90
[ 1014.020100][T13011]  do_syscall_64+0x55/0xa0
[ 1014.024507][T13011]  ? clear_bhb_loop+0x40/0x90
[ 1014.029265][T13011]  ? clear_bhb_loop+0x40/0x90
[ 1014.033933][T13011]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1014.039810][T13011] RIP: 0033:0x7f5626f9c629
[ 1014.044220][T13011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1014.064001][T13011] RSP: 002b:00007f5627e2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[ 1014.072412][T13011] RAX: ffffffffffffffda RBX: 00007f5627215fa0 RCX: 00007f5626f9c629
[ 1014.080387][T13011] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000100
[ 1014.088349][T13011] RBP: 00007f5627032b39 R08: 0000000000000000 R09: 0000000000000000
[ 1014.096307][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1014.104267][T13011] R13: 00007f5627216038 R14: 00007f5627215fa0 R15: 00007ffeef09b0c8
[ 1014.112242][T13011]  </TASK>
[ 1014.115249][T13011] 
[ 1014.117557][T13011] Allocated by task 13011:
[ 1014.121949][T13011]  kasan_set_track+0x4e/0x70
[ 1014.126533][T13011]  __kasan_slab_alloc+0x6c/0x80
[ 1014.131369][T13011]  slab_post_alloc_hook+0x6e/0x4b0
[ 1014.136469][T13011]  kmem_cache_alloc_lru+0x111/0x2d0
[ 1014.141651][T13011]  jfs_alloc_inode+0x28/0x60
[ 1014.146226][T13011]  iget_locked+0x1ad/0x840
[ 1014.150632][T13011]  jfs_iget+0x24/0x440
[ 1014.154688][T13011]  jfs_lookup+0x221/0x420
[ 1014.159001][T13011]  __lookup_slow+0x2a1/0x400
[ 1014.163580][T13011]  lookup_slow+0x53/0x70
[ 1014.167814][T13011]  walk_component+0x2be/0x3f0
[ 1014.172477][T13011]  path_lookupat+0x169/0x440
[ 1014.177068][T13011]  filename_lookup+0x228/0x560
[ 1014.181823][T13011]  user_path_at_empty+0x42/0x60
[ 1014.186666][T13011]  __se_sys_chdir+0x9c/0x280
[ 1014.191248][T13011]  do_syscall_64+0x55/0xa0
[ 1014.195654][T13011]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1014.201545][T13011] 
[ 1014.203859][T13011] The buggy address belongs to the object at ffff88805cbb3780
[ 1014.203859][T13011]  which belongs to the cache jfs_ip of size 2240
[ 1014.217555][T13011] The buggy address is located 12 bytes to the right of
[ 1014.217555][T13011]  allocated 2240-byte region [ffff88805cbb3780, ffff88805cbb4040)
[ 1014.232207][T13011] 
[ 1014.234515][T13011] The buggy address belongs to the physical page:
[ 1014.240917][T13011] page:ffffea000172ec00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cbb0
[ 1014.251051][T13011] head:ffffea000172ec00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1014.260071][T13011] memcg:ffff8880264f0d01
[ 1014.264292][T13011] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1014.272257][T13011] page_type: 0xffffffff()
[ 1014.276569][T13011] raw: 00fff00000000840 ffff888019777a00 dead000000000122 0000000000000000
[ 1014.285139][T13011] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff8880264f0d01
[ 1014.293706][T13011] page dumped because: kasan: bad access detected
[ 1014.300110][T13011] page_owner tracks the page as allocated
[ 1014.305804][T13011] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 13011, tgid 13009 (syz.7.1507), ts 1013514065109, free_ts 973206686037
[ 1014.329756][T13011]  post_alloc_hook+0x1c1/0x200
[ 1014.334538][T13011]  get_page_from_freelist+0x1951/0x19e0
[ 1014.340155][T13011]  __alloc_pages+0x1f0/0x460
[ 1014.344725][T13011]  alloc_slab_page+0x5d/0x160
[ 1014.349385][T13011]  new_slab+0x87/0x2d0
[ 1014.353440][T13011]  ___slab_alloc+0xc5d/0x12f0
[ 1014.358108][T13011]  kmem_cache_alloc_lru+0x1aa/0x2d0
[ 1014.363294][T13011]  jfs_alloc_inode+0x28/0x60
[ 1014.367869][T13011]  new_inode_pseudo+0x63/0x1d0
[ 1014.372617][T13011]  new_inode+0x22/0x1b0
[ 1014.376754][T13011]  jfs_fill_super+0x39c/0xad0
[ 1014.381422][T13011]  mount_bdev+0x221/0x2d0
[ 1014.385738][T13011]  legacy_get_tree+0xea/0x180
[ 1014.390403][T13011]  vfs_get_tree+0x8c/0x280
[ 1014.394802][T13011]  do_new_mount+0x24b/0xa40
[ 1014.399289][T13011]  __se_sys_mount+0x2e7/0x3d0
[ 1014.403952][T13011] page last free stack trace:
[ 1014.408606][T13011]  free_unref_page_prepare+0x7b2/0x8c0
[ 1014.414053][T13011]  free_unref_page+0x32/0x2e0
[ 1014.418717][T13011]  __slab_free+0x35a/0x400
[ 1014.423117][T13011]  qlist_free_all+0x75/0xd0
[ 1014.427605][T13011]  kasan_quarantine_reduce+0x143/0x160
[ 1014.433075][T13011]  __kasan_slab_alloc+0x22/0x80
[ 1014.437930][T13011]  slab_post_alloc_hook+0x6e/0x4b0
[ 1014.443047][T13011]  kmem_cache_alloc+0x11a/0x2d0
[ 1014.447891][T13011]  __pmd_alloc+0x111/0x8b0
[ 1014.452292][T13011]  move_page_tables+0x17a9/0x1980
[ 1014.457308][T13011]  setup_arg_pages+0xae6/0x1010
[ 1014.462147][T13011]  load_elf_binary+0xb9e/0x2860
[ 1014.466986][T13011]  bprm_execve+0xb08/0x1700
[ 1014.471474][T13011]  do_execveat_common+0x51b/0x6c0
[ 1014.476482][T13011]  __x64_sys_execve+0x92/0xa0
[ 1014.481145][T13011]  do_syscall_64+0x55/0xa0
[ 1014.485556][T13011] 
[ 1014.487866][T13011] Memory state around the buggy address:
[ 1014.493483][T13011]  ffff88805cbb3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1014.501526][T13011]  ffff88805cbb3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1014.509588][T13011] >ffff88805cbb4000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 1014.517639][T13011]                                               ^
[ 1014.524043][T13011]  ffff88805cbb4080: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 1014.532089][T13011]  ffff88805cbb4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1014.540135][T13011] ==================================================================
[ 1014.600608][T13011] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1014.607846][T13011] CPU: 1 PID: 13011 Comm: syz.7.1507 Not tainted syzkaller #0
[ 1014.615319][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1014.625387][T13011] Call Trace:
[ 1014.628676][T13011]  <TASK>
[ 1014.631612][T13011]  dump_stack_lvl+0x18c/0x250
[ 1014.636306][T13011]  ? show_regs_print_info+0x20/0x20
[ 1014.641521][T13011]  ? load_image+0x400/0x400
[ 1014.646036][T13011]  panic+0x2dc/0x730
[ 1014.649945][T13011]  ? bpf_jit_dump+0xd0/0xd0
[ 1014.654461][T13011]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[ 1014.660552][T13011]  ? _raw_spin_unlock+0x40/0x40
[ 1014.665410][T13011]  ? print_memory_metadata+0x314/0x400
[ 1014.670891][T13011]  ? dtInsertEntry+0xe8b/0x13e0
[ 1014.675756][T13011]  check_panic_on_warn+0x84/0xa0
[ 1014.680734][T13011]  ? dtInsertEntry+0xe8b/0x13e0
[ 1014.685592][T13011]  end_report+0x6f/0x130
[ 1014.689844][T13011]  kasan_report+0x128/0x150
[ 1014.694380][T13011]  ? dtInsertEntry+0xe8b/0x13e0
[ 1014.699247][T13011]  dtInsertEntry+0xe8b/0x13e0
[ 1014.703944][T13011]  ? release_metapage+0x703/0x870
[ 1014.708982][T13011]  dtSplitPage+0x2925/0x37d0
[ 1014.713609][T13011]  dtInsert+0x1072/0x5de0
[ 1014.717954][T13011]  ? kasan_quarantine_put+0xd8/0x220
[ 1014.723266][T13011]  ? UniStrupr+0x2e0/0x2e0
[ 1014.727699][T13011]  ? dtSearch+0x1d20/0x21b0
[ 1014.732230][T13011]  jfs_symlink+0x8b5/0xfa0
[ 1014.736671][T13011]  ? jfs_unlink+0xa10/0xa10
[ 1014.741202][T13011]  ? make_vfsuid+0x51/0xb0
[ 1014.745643][T13011]  ? inode_permission+0xf3/0x480
[ 1014.750606][T13011]  ? bpf_lsm_inode_symlink+0x9/0x10
[ 1014.755814][T13011]  ? security_inode_symlink+0xb6/0x100
[ 1014.761300][T13011]  vfs_symlink+0x138/0x2b0
[ 1014.765733][T13011]  do_symlinkat+0x1ba/0x400
[ 1014.770254][T13011]  ? vfs_symlink+0x2b0/0x2b0
[ 1014.774860][T13011]  ? getname_flags+0x20a/0x500
[ 1014.779640][T13011]  __x64_sys_symlink+0x7e/0x90
[ 1014.784412][T13011]  do_syscall_64+0x55/0xa0
[ 1014.788861][T13011]  ? clear_bhb_loop+0x40/0x90
[ 1014.793553][T13011]  ? clear_bhb_loop+0x40/0x90
[ 1014.798240][T13011]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1014.804142][T13011] RIP: 0033:0x7f5626f9c629
[ 1014.808565][T13011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1014.828190][T13011] RSP: 002b:00007f5627e2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[ 1014.836617][T13011] RAX: ffffffffffffffda RBX: 00007f5627215fa0 RCX: 00007f5626f9c629
[ 1014.844598][T13011] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000100
[ 1014.852578][T13011] RBP: 00007f5627032b39 R08: 0000000000000000 R09: 0000000000000000
[ 1014.860558][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1014.868543][T13011] R13: 00007f5627216038 R14: 00007f5627215fa0 R15: 00007ffeef09b0c8
[ 1014.876550][T13011]  </TASK>
[ 1014.879917][T13011] Kernel Offset: disabled
[ 1014.884234][T13011] Rebooting in 86400 seconds..