last executing test programs:

8m25.933289835s ago: executing program 0 (id=957):
r0 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=0', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',allow_other,default_permissions,max_read=0x0000000000000002,blksize=0x0000000000001e00,default_permissions,allow_other,max_read=0x0000000000000401,obj_user={,'], 0x1, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x184)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000640)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRESDEC=r0], 0xb, 0x0, &(0x7f0000000000))
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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")
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'})
lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[], 0x32600)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f00000005c0)={[{@rodir}, {@utf8}, {@shortname_lower}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@shortname_winnt}, {@shortname_win95}, {@shortname_winnt}]}, 0xfc, 0x2b8, &(0x7f0000000300)="$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")
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="2c0000001500210026bd7000fedbdf250a"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)

8m20.366794865s ago: executing program 0 (id=973):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000000e0c0)=""/102400, 0x19000)
keyctl$clear(0x3, 0xfffffffffffffffd)
mkdir(&(0x7f0000000200)='./file0\x00', 0x56)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, &(0x7f0000002440)=""/4100, 0x1004)

8m15.840823207s ago: executing program 0 (id=981):
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)
userfaultfd(0x80801)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

8m14.379639454s ago: executing program 0 (id=983):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x244200, 0x50)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
linkat(r0, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0xfffffffffffffe07)
r3 = fsopen(&(0x7f0000000040)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

8m13.064675611s ago: executing program 0 (id=987):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

8m11.67737013s ago: executing program 0 (id=990):
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

7m56.379369485s ago: executing program 32 (id=990):
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

6m55.594678641s ago: executing program 3 (id=1164):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800)
socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})

6m55.3452143s ago: executing program 3 (id=1167):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4c90, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2a0, &(0x7f0000000640)="$eJzs3btuE0scx/HfrJ3EuShnczlCQlSBSFQolwZBEQnlDWioEBAbKcIKEgQJqIAa8QD0eQUegJIKUSPRpeIB3BnN7Cxe27tex8p6bfP9SHbW2fnPxTPrmXEUrQD8s+4d/jrbP7cPI1VUkXRHCiTVpKqk/3Wl9urk9Pi02agPyqjiIuzDKIo0fWmOThppoTbORXihfVXVSvJ3KEbtp96VXQeUz139KQJpwV+d7nxt7DUrxowO+qE/MU1LLb3WarHVAQBMOj//B36eX/Hr9yCQtv203z3/T/kE2iq7AgX7mnM+Mf+7NUPb2P79z53q7PfcFq6qOR90tn+eltdSTlnzikZW1wLT5O0qXV2CxafHzcato+fNeqAPOvDmOsk23XM9GrqxeE9rj98nC41+bPmDIVdLydwuZtm1Yc62YS9Z/0SSjUss0Tdv8KVpvpnv5qEJ9Vn1v+u/atvYbnI9Ffb0VFT/newcXSvn5VJltHLNFXLVlzBMKyvK2JEoHlFrPR0Y5tXTRa33REWt282J2kiN2suJ2uyN6ozm7MiimU/mgdnSb33RYWL9H9h3e1vDXJk2jUvpR8bA9lRdytCNznh8XktNGYzaIozgo57otlZfvnn77HGz2XgxvoO7fr4YU6H2Suw/ZWeQEto+IQfxIBiYeNEnmpA6T+WBff9KKT2ed0bPJ/ujg6/lZ0en0y8YyCCYFXbdZaL9X2K/suMWa/Yp7F6nLyRj23mZJ3LczdgbrLvnpewdXBfj9jfLKX9d7C9x4J7r+k3pxjAlRkJfz8lzMEqQOdQPPeL7fwAAAAAAAAAAAAAAAAAAgGlzef9yUFPWqbLbCAAAAAAAAAAAAAAAAAAAAADAtEu5/+9Cqff/va/oFff/BQr3JwAA//9NHmtZ")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
ftruncate(r1, 0x200004)

6m53.311243194s ago: executing program 3 (id=1169):
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x4685, 0x0)
timer_create(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20)

6m52.294204666s ago: executing program 3 (id=1173):
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1fd, 0x101c3c})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
close_range(r0, 0xffffffffffffffff, 0x0)

6m51.075451361s ago: executing program 3 (id=1176):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x1c, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1030a5d77370323b}, 0x0)

6m50.654550684s ago: executing program 3 (id=1179):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, <r2=>0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, <r4=>0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, <r5=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000007c0)})
r6 = shmget(0x0, 0x3000, 0x10, &(0x7f0000000000/0x3000)=nil)
shmctl$SHM_LOCK(r6, 0xb)
ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4})
ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, 0x0)
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{<r7=>r0, 0x0, 0x2080, &(0x7f00000004c0)={@_ha_fsid={[0xc, 0x2]}, {0x1, 0x8, 0xfffffffe, 0xffff}}, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0x6}, {[0x109, 0x9, 0x6, 0x6]}, 0x8, 0x7d, &(0x7f0000000580)=""/125})
unshare(0x20000480)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8}, 0x94)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, 0x0, 0x8001)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, 0x0, 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1})

6m35.16320564s ago: executing program 33 (id=1179):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, <r2=>0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, <r4=>0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, <r5=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000007c0)})
r6 = shmget(0x0, 0x3000, 0x10, &(0x7f0000000000/0x3000)=nil)
shmctl$SHM_LOCK(r6, 0xb)
ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4})
ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, 0x0)
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{<r7=>r0, 0x0, 0x2080, &(0x7f00000004c0)={@_ha_fsid={[0xc, 0x2]}, {0x1, 0x8, 0xfffffffe, 0xffff}}, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0x6}, {[0x109, 0x9, 0x6, 0x6]}, 0x8, 0x7d, &(0x7f0000000580)=""/125})
unshare(0x20000480)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8}, 0x94)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, 0x0, 0x8001)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, 0x0, 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1})

1m55.548554886s ago: executing program 4 (id=2011):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)

1m52.987007994s ago: executing program 4 (id=2017):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y")
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000100)="c2e8e071f9d6a55bf972ca6ce2c54335dda224d2c1802abffdb09e3c0094e0e9ae9ebfae1b14277866e30095cf93b58f44632e936c019fc5d8003c4a9042ca0397ae8448951563c157fc8187e8c74c589ba13ec19e3fe2c9ed187571aa8e", 0x5e}, {&(0x7f0000000b80)="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", 0x5c2}], 0x3, 0x0, 0x0, 0x2c}, 0x44004)

1m50.920907874s ago: executing program 4 (id=2024):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001a400)=""/102384, 0x18ff0)
mount(0x0, 0x0, 0x0, 0x1214040, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80)
io_setup(0x30, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002)
sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x6ea)
r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6)
io_setup(0x81, &(0x7f0000001440)=<r8=>0x0)
r9 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'dummy0\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r10})
io_submit(r8, 0x2, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, r9, &(0x7f0000000200)="c76024b0f3aba594101d6bcd948d29f514743fc9ba023deea4005e9c52592f6359b822968317a6e1a5793dc6acd44d16854f4828d364dae806bcdbd7ae6db0331a2277625b", 0x45, 0xfffffffffffffff7, 0x0, 0x0, r6}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f0000000340)="0f7a89d55108adaaca8cde929bd71b133f82a8e4e3fd10cbbdc7627077a278c8a6b5fd562889", 0x26, 0x6, 0x0, 0x2, r6}])

1m48.735492677s ago: executing program 4 (id=2030):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c0000800000000800010074000000080000002c0005801400028008000200040000000800010001000000140002800800020010000000080001"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008c50)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1m47.946186532s ago: executing program 4 (id=2033):
mkdir(0x0, 0x0)
getrandom(&(0x7f0000000100)=""/46, 0x2e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r3, r4, 0x0, 0x201f00)

1m46.875412878s ago: executing program 4 (id=2035):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y")
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000100)="c2e8e071f9d6a55bf972ca6ce2c54335dda224d2c1802abffdb09e3c0094e0e9ae9ebfae1b14277866e30095cf93b58f44632e936c019fc5d8003c4a9042ca0397ae8448951563c157fc8187e8c74c589ba13ec19e3fe2c9ed187571aa8e", 0x5e}, {&(0x7f0000000b80)="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", 0x5c2}], 0x3, 0x0, 0x0, 0x2c}, 0x44004)

1m30.003230144s ago: executing program 34 (id=2035):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000100)="c2e8e071f9d6a55bf972ca6ce2c54335dda224d2c1802abffdb09e3c0094e0e9ae9ebfae1b14277866e30095cf93b58f44632e936c019fc5d8003c4a9042ca0397ae8448951563c157fc8187e8c74c589ba13ec19e3fe2c9ed187571aa8e", 0x5e}, {&(0x7f0000000b80)="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", 0x5c2}], 0x3, 0x0, 0x0, 0x2c}, 0x44004)

19.427786192s ago: executing program 5 (id=2270):
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0)
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x36, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe)

14.906975834s ago: executing program 5 (id=2278):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, 0x0, 0x0)
unshare(0x2c020400)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000001ff0)={0x1d, r3}, 0x10)
sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, 0x0, 0x0)

14.638291826s ago: executing program 5 (id=2281):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

11.25942156s ago: executing program 5 (id=2290):
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="b8667c152066"}, 0x14)
syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xa6f6, 0x10, 0x2, 0x28b}, 0x0, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000000))
syz_io_uring_submit(0x0, r6, 0x0, &(0x7f0000000000))
connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c)
r7 = dup2(r2, r2)
socket(0x2b, 0x1, 0x1)
sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890)
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fsopen(&(0x7f0000000180)='nfsd\x00', 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
sendmmsg$inet(r9, 0x0, 0x0, 0xf5)
recvmmsg(r9, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/95, 0x5f}], 0x1}, 0xff}], 0x1, 0x2000, 0x0)
lseek(r8, 0x851, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)

8.436368975s ago: executing program 1 (id=2300):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

7.963965604s ago: executing program 6 (id=2302):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xf000, 0x863, 0x0)
read$FUSE(r0, &(0x7f0000010b80)={0x2020}, 0x2020)

7.87973038s ago: executing program 5 (id=2303):
socket(0x10, 0x803, 0x9)
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)
write(0xffffffffffffffff, &(0x7f0000000340), 0x0)
lseek(0xffffffffffffffff, 0x3, 0x0)

7.78559838s ago: executing program 6 (id=2304):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x1142}, @nested={0x8, 0x1, 0x0, 0x1, [@generic="2b11cee0"]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e)
sendfile(r2, r0, 0x0, 0x10000a007)

6.648167381s ago: executing program 2 (id=2305):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="021707080700000025bd7000fcdbdf25050007006ca000000a"], 0x38}}, 0x4000000)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000140)={0x4, 0xd, 0x6, 0x3, 0x1000, 0x1, 0x4})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c000280050021000104000805000100"], 0x4c}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6.596814856s ago: executing program 6 (id=2306):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, 0x0, 0x0)
unshare(0x2c020400)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000001ff0)={0x1d, r3}, 0x10)
sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, 0x0, 0x0)

6.329653399s ago: executing program 6 (id=2307):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001080)=ANY=[])

6.245448453s ago: executing program 2 (id=2308):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
r4 = fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)

5.236966657s ago: executing program 2 (id=2310):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)

5.164802578s ago: executing program 1 (id=2311):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}})
write$P9_RVERSION(r1, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0x65, 0x3, '9P2000'}, 0x17)

4.936284342s ago: executing program 2 (id=2312):
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000280))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xd72d90ea783d63d2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x18}}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES8=r1], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0xa)

4.374533807s ago: executing program 1 (id=2313):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x9, 0x90, 0x3, 0x2, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x10}}, 0x0)

3.714371416s ago: executing program 2 (id=2316):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000034030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
geteuid()
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0)

3.71336843s ago: executing program 1 (id=2317):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
unshare(0x2c020400)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000001ff0)={0x1d, r3}, 0x10)
sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, 0x0, 0x0)

3.414059459s ago: executing program 1 (id=2318):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="021707080700000025bd7000fcdbdf25050007006ca000000a"], 0x38}}, 0x4000000)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000140)={0x4, 0xd, 0x6, 0x3, 0x1000, 0x1, 0x4})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c000280050021000104000805000100"], 0x4c}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.721331262s ago: executing program 2 (id=2319):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
r1 = fsopen(0x0, 0x1)
fchdir(0xffffffffffffffff)
syz_open_dev$radio(0x0, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001600000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000016000000000000000000000000000000000000000000000000f533b87e94c14407be1da5fd4469f644970d71e7ce6c53c4e773f6357d3ccc6c4285046696ed70cf"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095", @ANYRES8, @ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x2e76be}], 0x1}, 0x3)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

2.631752742s ago: executing program 6 (id=2320):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
r4 = fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)

2.615699653s ago: executing program 5 (id=2321):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

2.214428411s ago: executing program 7 (id=2322):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000"], 0x44}}, 0x0)

1.454543202s ago: executing program 1 (id=2323):
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000002500)={0x21, 0x37, 0x1, {0x2, 0x2, 0x0, 0x0, 0x3, '{{%'}}, 0x21)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={<r1=>0x0, 0x400, 0x1ff}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb7}}, 0x3, 0x7, 0x8, 0x6, 0x74, 0x14, 0xe}, 0x9c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14}}, 0x9c}}, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, 0x28)
syz_open_dev$dri(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = mq_open(&(0x7f0000000040)='a\x7f\x00\xca\x06x\a\x00\x00\x00\x00\x00g\xd4\xb8\xcd\x18\xbb', 0xc3, 0x48, 0x0)
mq_timedreceive(r4, 0x0, 0xfffffffffffffee3, 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0xe7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0xffffff8c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r7 = socket(0x40000000015, 0x5, 0x0)
fchmod(r7, 0x40)

1.433550506s ago: executing program 6 (id=2324):
io_setup(0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

1.321072935s ago: executing program 7 (id=2325):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=[@tclass={{0x14, 0x29, 0x43, 0x1ff}}], 0x18}}], 0x1, 0x24000084)

980.290317ms ago: executing program 7 (id=2326):
r0 = gettid()
capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000180)={0x5b6a, 0x2, 0x0, 0x0, 0x0, 0x400})
r1 = socket$inet(0x2, 0x80001, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20080)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0)

724.055083ms ago: executing program 7 (id=2327):
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000280))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xd72d90ea783d63d2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x18}}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES8=r1], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0xa)

115.766066ms ago: executing program 7 (id=2328):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
unshare(0x2c020400)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000001ff0)={0x1d, r3}, 0x10)
sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, 0x0, 0x0)

0s ago: executing program 7 (id=2329):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000180700002020702500000000002020207b1af8ff00000000bfa100000000000007010000f83b91e070e7f107c6fdffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b6129b47685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b89c0f6f76f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)='\x00!G', 0x3}], 0x1, 0xc, 0x3)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000ac0)='./file0\x00'}, 0x18)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x578, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {0x5, 0x101, 0x1}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0xfffffffd, 0x9, 0x0, 0x0, 0x7, 0x0, 0x3})
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r4)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8)
sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='  \x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf25170000000c009900ffffffff0d000000"], 0x20}, 0x1, 0x0, 0x0, 0xbd889962f572ee43}, 0x40815)
syz_genetlink_get_family_id$nl80211(0x0, r5)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)

kernel console output (not intermixed with test programs):

1): disabling free space tree
[  613.808484][T11558] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  613.818508][T11558] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  613.831892][T11558] BTRFS info (device loop1): enabling ssd optimizations
[  613.838875][T11558] BTRFS info (device loop1): turning on async discard
[  613.845624][T11558] BTRFS info (device loop1): enabling disk space caching
[  613.852675][T11558] BTRFS info (device loop1): force clearing of disk cache
[  613.859888][T11558] BTRFS info (device loop1): use zstd compression, level 3
[  613.908963][ T5841] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  614.333737][T11568] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  614.568656][ T9665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.949448][T11604] loop4: detected capacity change from 0 to 256
[  616.052484][T11604] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e09, chksum : 0x7e84ed8f, utbl_chksum : 0xe619d30d)
[  617.116813][T11626] program syz.2.1495 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  617.205387][T11630] loop1: detected capacity change from 0 to 2048
[  617.363923][T11630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  618.469136][T11646] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1499'.
[  619.370719][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.358432][T11671] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  623.101644][T11708] loop2: detected capacity change from 0 to 2048
[  623.308981][ T5965] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  624.408148][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  624.414514][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  624.796426][T11708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  624.812379][ T5965] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  625.017208][T11717] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  625.071713][ T5965] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  625.157060][ T5965] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  625.166416][ T5965] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  625.181637][ T5965] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  625.194690][ T5965] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  625.322015][ T5965] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  625.567148][ T5965] usb 7-1: Product: syz
[  625.594603][ T5965] usb 7-1: Manufacturer: syz
[  625.770892][ T5965] cdc_wdm 7-1:1.0: skipping garbage
[  625.778014][ T5965] cdc_wdm 7-1:1.0: skipping garbage
[  625.791510][ T5965] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  625.797518][ T5965] cdc_wdm 7-1:1.0: Unknown control protocol
[  626.073785][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.686095][ T5931] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  626.997214][ T5931] usb 6-1: Using ep0 maxpacket: 8
[  627.145913][ T5931] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  627.309273][ T5931] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  627.412329][ T5931] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  627.434608][ T5931] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  627.452023][ T5931] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  627.487053][ T5931] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  627.508692][ T9775] usb 7-1: USB disconnect, device number 5
[  627.514379][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.085240][ T5931] usb 6-1: usb_control_msg returned -32
[  628.154324][ T5931] usbtmc 6-1:16.0: can't read capabilities
[  628.434955][ T5931] usb 6-1: USB disconnect, device number 4
[  628.752978][T11791] loop2: detected capacity change from 0 to 2048
[  629.267437][T11791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  629.684851][T11801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1532'.
[  629.697658][T11801] vlan2: entered promiscuous mode
[  629.702692][T11801] gretap0: entered promiscuous mode
[  632.056129][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.312031][T11827] loop2: detected capacity change from 0 to 128
[  632.424547][T11827] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  632.472720][T11827] FAT-fs (loop2): Filesystem has been set read-only
[  640.021019][T11901] loop2: detected capacity change from 0 to 512
[  640.389929][T11901] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1556: missing EA_INODE flag
[  640.527746][T11901] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  640.535149][T11901] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1556: error while reading EA inode 12 err=-117
[  640.544357][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  640.544372][    C1] EXT4-fs (loop2): initial error at time 1775079528: ext4_xattr_inode_iget:441: inode 12
[  640.544389][    C1] EXT4-fs (loop2): last error at time 1775079528: ext4_xattr_inode_iget:441: inode 12
[  641.318865][T11901] loop2: lost filesystem error report for type 5 error -117
[  641.355583][T11901] EXT4-fs (loop2): 1 orphan inode deleted
[  642.044739][T11901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  642.173769][T11913] loop6: detected capacity change from 0 to 2048
[  642.760176][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  642.770372][T11913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  643.353046][T10550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  643.360318][T11927] loop2: detected capacity change from 0 to 512
[  643.488004][T11927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  643.565970][T11927] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  644.082568][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.453977][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1565'.
[  644.495489][T11944] vlan3: entered promiscuous mode
[  644.503587][T11944] batadv0: entered promiscuous mode
[  644.828772][T11953] loop2: detected capacity change from 0 to 16
[  644.892242][T11953] erofs (device loop2): mounted with root inode @ nid 36.
[  645.715676][T11955] loop4: detected capacity change from 0 to 512
[  645.775096][T11955] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.1571: missing EA_INODE flag
[  645.786849][T11955] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  645.791211][T11955] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1571: error while reading EA inode 12 err=-117
[  645.800410][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  645.800434][    C0] EXT4-fs (loop4): initial error at time 1775079790: ext4_xattr_inode_iget:441: inode 12
[  645.800468][    C0] EXT4-fs (loop4): last error at time 1775079790: ext4_xattr_inode_iget:441: inode 12
[  645.877942][T11955] loop4: lost filesystem error report for type 5 error -117
[  645.878363][T11955] EXT4-fs (loop4): 1 orphan inode deleted
[  645.939016][T11961] loop1: detected capacity change from 0 to 2048
[  646.178077][T11955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  646.395036][T11961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  647.510405][T11920] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  648.542976][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.772523][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.910636][T11980] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1577'.
[  648.970083][T11980] netlink: 'syz.6.1577': attribute type 2 has an invalid length.
[  649.252312][T11991] loop1: detected capacity change from 0 to 16
[  649.275530][T11991] erofs (device loop1): mounted with root inode @ nid 36.
[  653.435945][T12022] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1590'.
[  653.484237][T12022] netlink: 'syz.4.1590': attribute type 2 has an invalid length.
[  654.882538][T12035] loop6: detected capacity change from 0 to 32768
[  654.909585][T12035] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  654.917900][T12035] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  655.536632][T12035] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  655.551987][  T807] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  655.572540][  T807] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  655.923823][  T807] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 351ms
[  656.478067][  T807] gfs2: fsid=syz:syz.0: jid=0: Done
[  656.485074][T12035] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  656.955519][T12035] gfs2: fsid=syz:syz.0: found 2 quota changes
[  656.967756][T12058] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1602'.
[  657.020983][T12058] netlink: 'syz.5.1602': attribute type 2 has an invalid length.
[  657.174097][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1602'.
[  658.307602][ T5965] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  658.623604][ T5965] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  658.657048][ T5965] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[  658.692343][ T5965] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  658.804315][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.947233][ T5965] usb 3-1: Product: syz
[  659.023208][ T5965] usb 3-1: Manufacturer: syz
[  659.086677][ T5965] usb 3-1: SerialNumber: syz
[  659.328611][ T5965] usb 3-1: config 0 descriptor??
[  660.107671][ T5965] gspca_main: sunplus-2.14.0 probing 055f:c630
[  661.165061][ T5965] gspca_sunplus: reg_r err -32
[  661.171034][ T5965] sunplus 3-1:0.0: probe with driver sunplus failed with error -32
[  661.347347][T12089] loop1: detected capacity change from 0 to 32768
[  661.821641][T12094] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1614'.
[  661.899824][T12091] loop6: detected capacity change from 0 to 1024
[  661.912797][T12094] netlink: 'syz.4.1614': attribute type 2 has an invalid length.
[  661.953096][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'.
[  662.296501][T12097] hfsplus: b-tree write err: -5, ino 2
[  662.526080][ T5910] usb 3-1: USB disconnect, device number 13
[  662.671662][   T35] hfsplus: b-tree write err: -5, ino 25
[  662.679860][   T35] hfsplus: b-tree write err: -5, ino 4
[  662.685551][   T35] hfsplus: b-tree write err: -5, ino 2
[  662.691230][   T35] hfsplus: b-tree write err: -5, ino 26
[  664.798166][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1622'.
[  665.061251][T12124] loop6: detected capacity change from 0 to 32768
[  665.073576][T12122] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1626'.
[  665.137197][T12122] netlink: 'syz.4.1626': attribute type 2 has an invalid length.
[  665.193911][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'.
[  665.707971][T12131] program syz.4.1628 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  665.937095][ T5965] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  666.087889][T12137] ubi: mtd0 is already attached to ubi31
[  666.624002][T12136] loop4: detected capacity change from 0 to 32768
[  666.642182][T12136] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1631 (12136)
[  666.659214][T12136] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  666.669367][T12136] BTRFS info (device loop4): using sha256 checksum algorithm
[  666.710352][ T5965] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  666.724155][ T5965] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[  666.737755][ T5965] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  666.747356][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.756502][ T5965] usb 3-1: Product: syz
[  666.761781][ T5965] usb 3-1: Manufacturer: syz
[  666.766884][ T5965] usb 3-1: SerialNumber: syz
[  666.775244][ T5965] usb 3-1: config 0 descriptor??
[  666.785869][ T5965] gspca_main: sunplus-2.14.0 probing 055f:c630
[  666.853858][T12136] BTRFS info (device loop4): enabling ssd optimizations
[  666.860939][T12136] BTRFS info (device loop4): turning on async discard
[  666.867761][T12136] BTRFS info (device loop4): enabling free space tree
[  667.128705][ T5910] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  667.509883][ T5910] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  667.530970][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  667.562122][ T5910] usb 7-1: config 0 has no interface number 0
[  667.578353][ T5910] usb 7-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  667.603727][ T5910] usb 7-1: config 0 interface 41 has no altsetting 0
[  667.622862][ T5910] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  667.629102][ T5838] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  667.638489][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.666418][ T5910] usb 7-1: Product: syz
[  667.688020][ T5910] usb 7-1: Manufacturer: syz
[  667.699528][ T5910] usb 7-1: SerialNumber: syz
[  667.739938][ T5910] usb 7-1: config 0 descriptor??
[  667.772851][ T5910] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22
[  669.460850][ T5965] gspca_sunplus: reg_r err -110
[  669.485814][ T5965] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[  669.941444][   T10] usb 3-1: USB disconnect, device number 14
[  670.301998][T12173] loop1: detected capacity change from 0 to 16
[  670.378245][T12173] erofs (device loop1): mounted with root inode @ nid 36.
[  670.575621][T12177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1637'.
[  670.970903][ T5965] usb 7-1: USB disconnect, device number 6
[  671.291147][T12189] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1639'.
[  671.303025][T12189] netlink: 'syz.1.1639': attribute type 2 has an invalid length.
[  671.361864][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'.
[  672.235661][T12193] loop2: detected capacity change from 0 to 32768
[  673.762517][T12210] ubi: mtd0 is already attached to ubi31
[  675.187032][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  675.340365][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  675.380413][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  675.402858][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  675.442621][   T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  675.461504][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.481565][   T10] usb 6-1: config 0 descriptor??
[  675.573770][T12218] program syz.4.1638 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  675.958302][ T9775] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  676.070830][T12223] loop1: detected capacity change from 0 to 16
[  676.172534][T12223] erofs (device loop1): mounted with root inode @ nid 36.
[  676.297246][ T9775] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  676.417842][ T9775] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  676.644287][   T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  676.688127][ T9775] usb 5-1: config 0 has no interface number 0
[  676.810083][ T9775] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  676.924229][ T9775] usb 5-1: config 0 interface 41 has no altsetting 0
[  676.933013][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1652'.
[  676.964630][T12231] program syz.6.1653 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  676.995041][ T9775] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  677.017423][ T9775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.025540][ T9775] usb 5-1: Product: syz
[  677.029904][ T9775] usb 5-1: Manufacturer: syz
[  677.035518][ T9775] usb 5-1: SerialNumber: syz
[  677.064943][ T9775] usb 5-1: config 0 descriptor??
[  677.081720][ T9775] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22
[  677.114464][ T9775] usb 6-1: USB disconnect, device number 5
[  677.122820][T12205] usb 6-1: string descriptor 0 read error: -19
[  677.182369][T12234] loop1: detected capacity change from 0 to 1024
[  677.213497][T12236] loop6: detected capacity change from 0 to 2048
[  677.262749][T12234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  677.278059][T12234] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  677.298218][T12234] EXT4-fs error (device loop1): ext4_map_blocks:831: inode #15: block 3: comm syz.1.1654: lblock 3 mapped to illegal pblock 3 (length 3)
[  677.312971][T12234] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  677.326388][T12234] EXT4-fs (loop1): This should not happen!! Data will be lost
[  677.326388][T12234] 
[  677.369198][T12236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  677.431922][T12244] EXT4-fs error (device loop1): ext4_map_blocks:831: inode #15: comm syz.1.1654: lblock 0 mapped to illegal pblock 0 (length 1)
[  677.481716][T12244] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  677.500887][T12244] EXT4-fs (loop1): This should not happen!! Data will be lost
[  677.500887][T12244] 
[  678.501633][T12236] xt_CT: You must specify a L4 protocol and not use inversions on it
[  678.520960][ T8335] EXT4-fs error (device loop1): ext4_map_blocks:831: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8)
[  678.560574][ T8335] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  678.601555][ T8335] EXT4-fs (loop1): This should not happen!! Data will be lost
[  678.601555][ T8335] 
[  678.652358][ T5841] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  678.674254][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  678.743555][T10550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  678.750143][ T9775] usb 5-1: USB disconnect, device number 15
[  678.973351][T12260] loop1: detected capacity change from 0 to 32768
[  679.706282][T12272] loop2: detected capacity change from 0 to 512
[  679.862043][T12272] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1663: missing EA_INODE flag
[  679.996068][T12272] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  680.006965][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  680.022652][    C1] EXT4-fs (loop2): initial error at time 1775079824: ext4_xattr_inode_iget:441: inode 12
[  680.032549][    C1] EXT4-fs (loop2): last error at time 1775079824: ext4_xattr_inode_iget:441: inode 12
[  680.083854][T12272] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1663: error while reading EA inode 12 err=-117
[  680.239734][T12272] loop2: lost filesystem error report for type 5 error -117
[  680.311283][T12272] EXT4-fs (loop2): 1 orphan inode deleted
[  680.375399][T12281] program syz.6.1666 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  680.526669][T12278] loop1: detected capacity change from 0 to 16
[  680.917573][T12278] erofs (device loop1): mounted with root inode @ nid 36.
[  680.959707][T12272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  681.838814][T12290] loop6: detected capacity change from 0 to 1024
[  682.056292][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  682.110577][T12290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  682.164040][T12290] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  682.353962][T10550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  682.380745][T12304] loop1: detected capacity change from 0 to 512
[  682.429778][T12304] EXT4-fs (loop1): Test dummy encryption mode enabled
[  682.449632][ T9775] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  682.467924][T12304] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  682.511733][T12304] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1675: bad orphan inode 131083
[  682.547454][T12304] loop1: lost filesystem error report for type 5 error -117
[  682.549572][T12304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  682.649523][ T9775] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  682.651506][T12304] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.1675: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  682.858881][T12313] loop6: detected capacity change from 0 to 2048
[  683.044601][T12313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  683.058570][T12313] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  683.448677][ T9775] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  683.451046][T12317] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.1675: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  683.466535][ T9775] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  683.487940][ T9775] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  683.498960][ T9775] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  683.513951][ T9775] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  683.523261][ T9775] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  683.531367][ T9775] usb 6-1: Product: syz
[  683.535679][ T9775] usb 6-1: Manufacturer: syz
[  683.562890][ T9775] cdc_wdm 6-1:1.0: skipping garbage
[  683.571427][T12319] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.1675: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  683.575460][ T9775] cdc_wdm 6-1:1.0: skipping garbage
[  683.666403][ T9775] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  683.681993][ T9775] cdc_wdm 6-1:1.0: Unknown control protocol
[  683.822410][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  683.851121][T10550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.468391][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  684.500158][T12331] loop1: detected capacity change from 0 to 1024
[  684.651195][T12335] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1682'.
[  684.853129][T12341] loop6: detected capacity change from 0 to 16
[  684.923444][T12341] erofs (device loop6): mounted with root inode @ nid 36.
[  684.933284][T12342] loop4: detected capacity change from 0 to 512
[  684.986244][T12342] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  685.672750][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  685.682779][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  685.737689][T12342] EXT4-fs (loop4): 1 truncate cleaned up
[  685.745845][ T5842] usb 6-1: USB disconnect, device number 6
[  685.802190][T12342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  686.004852][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  686.068271][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'.
[  686.126561][T12357] loop6: detected capacity change from 0 to 512
[  686.140386][T12355] loop2: detected capacity change from 0 to 2048
[  686.157972][T12357] EXT4-fs (loop6): Test dummy encryption mode enabled
[  686.177605][T12352] vlan3: entered promiscuous mode
[  686.204168][T12355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  686.237042][T12357] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  686.263661][T12357] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1693: bad orphan inode 131083
[  686.283189][T12357] loop6: lost filesystem error report for type 5 error -117
[  686.494450][T12366] xt_CT: You must specify a L4 protocol and not use inversions on it
[  686.609906][T12357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  686.899914][T12357] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.1693: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  686.998369][T12357] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.1693: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  687.075075][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.110017][T12370] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.1693: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  687.310729][T10550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.430545][T12378] syzkaller1: entered promiscuous mode
[  687.436272][T12378] syzkaller1: entered allmulticast mode
[  687.445028][T12359] loop4: detected capacity change from 0 to 40427
[  687.518929][T12381] loop6: detected capacity change from 0 to 1024
[  687.804355][ T5962] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  688.085261][ T5962] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  688.169472][T12387] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1700'.
[  688.232568][ T5962] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  688.243375][ T5962] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  688.271062][ T5962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  688.310716][ T5962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  688.366982][ T5962] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  688.399787][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  688.432937][ T5962] usb 2-1: Product: syz
[  688.450039][ T5962] usb 2-1: Manufacturer: syz
[  688.452072][T12359] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  688.492625][ T5962] cdc_wdm 2-1:1.0: skipping garbage
[  688.652902][T12359] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  688.654274][ T5962] cdc_wdm 2-1:1.0: skipping garbage
[  688.678871][ T5962] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  688.694363][ T5962] cdc_wdm 2-1:1.0: Unknown control protocol
[  689.883507][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1706'.
[  689.953810][T12408] vlan2: entered promiscuous mode
[  690.800233][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  690.917836][ T9775] usb 2-1: USB disconnect, device number 12
[  690.930905][T12418] syzkaller1: entered promiscuous mode
[  690.972850][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  690.996615][T12418] syzkaller1: entered allmulticast mode
[  691.041867][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  691.099844][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  691.661572][T12424] program syz.1.1712 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  692.239400][   T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  692.267009][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.298363][   T10] usb 6-1: config 0 descriptor??
[  692.795825][   T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  693.808741][T12439] loop6: detected capacity change from 0 to 2048
[  694.150860][T12439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  694.166431][T12439] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  694.439678][T12444] loop2: detected capacity change from 0 to 1024
[  694.495301][T12414] usb 6-1: string descriptor 0 read error: -71
[  694.690934][   T10] usb 6-1: reset high-speed USB device number 7 using dummy_hcd
[  694.793335][T12444] hfsplus: b-tree write err: -5, ino 2
[  694.930741][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1719'.
[  694.940210][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1719'.
[  695.042873][   T35] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  695.073138][   T12] hfsplus: b-tree write err: -5, ino 25
[  695.114789][   T35] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  695.151032][   T12] hfsplus: b-tree write err: -5, ino 4
[  695.190465][   T35] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  695.244849][T10550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  695.261851][   T12] hfsplus: b-tree write err: -5, ino 2
[  695.267871][   T35] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  695.317357][   T12] hfsplus: b-tree write err: -5, ino 26
[  695.525971][ T5958] usb 6-1: USB disconnect, device number 7
[  696.340798][T12456] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1723'.
[  696.944661][T12462] program syz.4.1724 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  697.701410][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  697.869996][   T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  697.897528][   T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  697.958664][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  698.003582][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  698.036708][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  698.568852][   T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  698.578367][   T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  698.589044][   T10] usb 6-1: Product: syz
[  698.593264][   T10] usb 6-1: Manufacturer: syz
[  698.610414][   T10] cdc_wdm 6-1:1.0: skipping garbage
[  698.619159][ T5958] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  698.637472][   T10] cdc_wdm 6-1:1.0: skipping garbage
[  698.663514][   T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  698.676990][   T10] cdc_wdm 6-1:1.0: Unknown control protocol
[  698.789616][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  698.814907][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  698.837092][ T5958] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  698.871752][ T5958] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  698.891729][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.934714][ T5958] usb 2-1: config 0 descriptor??
[  699.311293][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1732'.
[  699.320512][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1732'.
[  699.420957][  T138] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  699.444728][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 4 bytes
[  699.489714][ T3494] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  699.534665][ T3494] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  699.617505][ T3494] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  699.674070][ T5958] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  699.836385][ T5958] usb 2-1: USB disconnect, device number 13
[  699.859488][T12490] syzkaller1: entered promiscuous mode
[  699.891897][T12490] syzkaller1: entered allmulticast mode
[  700.153067][T12491] fido_id[12491]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  701.202050][ T5958] usb 6-1: USB disconnect, device number 8
[  701.842370][T12508] program syz.6.1737 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  703.787216][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  704.167013][   T10] usb 6-1: Using ep0 maxpacket: 32
[  704.230712][T12528] netlink: 'syz.1.1745': attribute type 4 has an invalid length.
[  704.238886][T12528] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1745'.
[  704.309929][T12528] .`: renamed from bond0 (while UP)
[  704.822744][T12531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1746'.
[  704.837938][   T10] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  704.848444][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.862999][   T10] usb 6-1: Product: syz
[  704.876978][   T10] usb 6-1: Manufacturer: syz
[  704.887978][   T10] usb 6-1: SerialNumber: syz
[  704.898348][   T10] usb 6-1: config 0 descriptor??
[  705.164632][T12536] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  705.815664][   T10] airspy 6-1:0.0: Board ID: 00
[  705.820775][   T10] airspy 6-1:0.0: Firmware version: 
[  706.576225][T12546] program syz.2.1750 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  707.295447][   T10] airspy 6-1:0.0: usb_control_msg() failed -110 request 0e
[  707.323998][   T10] airspy 6-1:0.0: Registered as swradio24
[  707.329894][   T10] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  707.366584][ T5842] usb 6-1: USB disconnect, device number 9
[  707.611829][T12549] loop6: detected capacity change from 0 to 32768
[  707.681166][T12549] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1739 (12549)
[  707.714398][T12549] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  707.724595][T12549] BTRFS info (device loop6): using sha256 checksum algorithm
[  707.846526][   T29] audit: type=1800 audit(1775079852.192:66): pid=12561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1752" name="file1" dev="tmpfs" ino=2097 res=0 errno=0
[  708.086126][T12549] BTRFS info (device loop6): enabling ssd optimizations
[  708.093755][T12549] BTRFS info (device loop6): turning on async discard
[  708.100701][T12549] BTRFS info (device loop6): enabling free space tree
[  708.838014][T10550] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  709.794757][T12595] loop2: detected capacity change from 0 to 1024
[  710.446216][T12595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  710.577255][T12595] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  710.628231][T12565] loop1: detected capacity change from 0 to 32768
[  710.753625][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  710.870484][T12604] netlink: 'syz.6.1762': attribute type 12 has an invalid length.
[  711.582395][T12615] program syz.6.1764 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  712.549230][T12617] loop2: detected capacity change from 0 to 2048
[  712.737145][T12617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  712.803774][T12617] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  713.309465][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.256231][T12630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1769'.
[  714.404091][T12630] vlan2: entered promiscuous mode
[  714.467804][T12637] loop5: detected capacity change from 0 to 1024
[  714.731070][T12641] hfsplus: b-tree write err: -5, ino 2
[  715.327297][T12213] hfsplus: b-tree write err: -5, ino 25
[  715.360453][T12213] hfsplus: b-tree write err: -5, ino 4
[  715.384001][T12213] hfsplus: b-tree write err: -5, ino 2
[  715.530832][T12645] loop2: detected capacity change from 0 to 32768
[  715.545141][T12645] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1773 (12645)
[  715.564096][T12213] hfsplus: b-tree write err: -5, ino 26
[  715.573445][T12645] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  715.583644][T12645] BTRFS info (device loop2): using sha256 checksum algorithm
[  715.667393][ T9387] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  715.730636][T12645] BTRFS info (device loop2): enabling ssd optimizations
[  715.738289][T12645] BTRFS info (device loop2): turning on async discard
[  715.745303][T12645] BTRFS info (device loop2): enabling free space tree
[  716.437828][ T9387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  716.601222][T12669] loop4: detected capacity change from 0 to 32768
[  716.649493][ T9387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  716.882550][ T9387] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  717.156775][ T9387] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  717.166260][ T9387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.181844][ T9387] usb 2-1: config 0 descriptor??
[  717.301271][T12645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1773'.
[  717.580753][T12679] loop6: detected capacity change from 0 to 512
[  717.611255][T12681] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1779'.
[  717.624622][T12679] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  717.762464][T12679] EXT4-fs (loop6): 1 truncate cleaned up
[  717.786622][ T5844] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  717.875951][ T9387] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  717.942320][T12679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  718.361015][T10550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  718.947984][T12643] usb 2-1: string descriptor 0 read error: -71
[  719.030326][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1785'.
[  719.795179][T12713] loop6: detected capacity change from 0 to 32768
[  719.807268][ T9387] usb 2-1: USB disconnect, device number 14
[  719.986797][T12715] loop1: detected capacity change from 0 to 32768
[  720.009130][T12715] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1790 (12715)
[  720.275147][T12715] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  720.287901][T12715] BTRFS info (device loop1): using crc32c checksum algorithm
[  720.296578][T12715] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  720.373778][T12720] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1791'.
[  720.638324][T12715] BTRFS info (device loop1): rebuilding free space tree
[  720.662691][T12715] BTRFS info (device loop1): disabling free space tree
[  720.669745][T12715] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  720.681551][T12715] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  720.701391][T12715] BTRFS info (device loop1): enabling ssd optimizations
[  720.708393][T12715] BTRFS info (device loop1): turning on async discard
[  720.715161][T12715] BTRFS info (device loop1): enabling disk space caching
[  720.722205][T12715] BTRFS info (device loop1): force clearing of disk cache
[  720.729361][T12715] BTRFS info (device loop1): use zstd compression, level 3
[  720.988835][ T5841] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  724.547670][   T29] audit: type=1804 audit(1775079868.382:67): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1801" name="/newroot/94/file0" dev="tmpfs" ino=528 res=1 errno=0
[  724.597054][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  724.615730][T12760] uprobe: syz.6.1801:12760 failed to unregister, leaking uprobe
[  724.790553][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  724.801592][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  724.812090][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  724.831215][   T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  724.855933][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.011785][T12765] loop4: detected capacity change from 0 to 32768
[  725.068512][   T10] usb 2-1: config 0 descriptor??
[  725.547818][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  725.558372][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  725.641065][   T10] usb 2-1: USB disconnect, device number 15
[  725.839877][T12772] loop1: detected capacity change from 0 to 32768
[  725.848066][T12772] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1805 (12772)
[  725.886376][T12772] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  725.896790][T12772] BTRFS info (device loop1): using crc32c checksum algorithm
[  725.904287][T12772] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  726.033425][T12772] BTRFS info (device loop1): rebuilding free space tree
[  726.046780][T12785] loop4: detected capacity change from 0 to 512
[  726.094700][T12772] BTRFS info (device loop1): disabling free space tree
[  726.101974][T12772] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  726.111724][T12772] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  726.127179][T12772] BTRFS info (device loop1): enabling ssd optimizations
[  726.134181][T12772] BTRFS info (device loop1): turning on async discard
[  726.141035][T12772] BTRFS info (device loop1): enabling disk space caching
[  726.148162][T12772] BTRFS info (device loop1): force clearing of disk cache
[  726.155286][T12772] BTRFS info (device loop1): use zstd compression, level 3
[  726.251024][T12785] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  726.284212][ T5841] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  727.575568][T12798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1809'.
[  727.620152][T12801] program syz.1.1810 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  727.662578][T12798] vlan2: entered promiscuous mode
[  727.683308][T12798] batadv0: entered promiscuous mode
[  728.029453][   T29] audit: type=1326 audit(1775079872.382:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12804 comm="syz.1.1812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fe619c819 code=0x0
[  728.093524][T12811] netlink: 'syz.2.1813': attribute type 4 has an invalid length.
[  728.102197][T12811] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1813'.
[  728.174477][T12811] .`: renamed from bond0 (while UP)
[  729.147100][T12819] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1803'.
[  729.332513][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'.
[  729.341567][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1816'.
[  729.387380][ T5958] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  730.144004][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  730.186433][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  730.216770][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  730.261405][ T5958] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  730.303742][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.359038][ T5958] usb 3-1: config 0 descriptor??
[  730.384030][T12827] loop1: detected capacity change from 0 to 512
[  730.404567][T12827] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  730.665416][T12829] loop6: detected capacity change from 0 to 32768
[  730.680375][T12829] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1818 (12829)
[  730.700266][T12829] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  730.712743][T12829] BTRFS info (device loop6): using crc32c checksum algorithm
[  730.720233][T12829] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  730.981472][T12829] BTRFS info (device loop6): rebuilding free space tree
[  731.001815][T12829] BTRFS info (device loop6): disabling free space tree
[  731.008943][T12829] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  731.020044][T12829] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  731.039698][T12829] BTRFS info (device loop6): enabling ssd optimizations
[  731.046683][T12829] BTRFS info (device loop6): turning on async discard
[  731.053537][T12829] BTRFS info (device loop6): enabling disk space caching
[  731.060608][T12829] BTRFS info (device loop6): force clearing of disk cache
[  731.067753][T12829] BTRFS info (device loop6): use zstd compression, level 3
[  731.141706][T10550] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  731.198279][ T5958] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  731.926524][T12857] program syz.4.1822 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  731.992592][T12854] loop1: detected capacity change from 0 to 2048
[  732.262320][T12818] usb 3-1: string descriptor 0 read error: -32
[  732.373801][ T5958] usb 3-1: reset high-speed USB device number 15 using dummy_hcd
[  732.763077][T12854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  732.817046][ T5958] usb 3-1: device descriptor read/64, error -32
[  733.651431][T12876] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1827'.
[  733.690366][   T29] audit: type=1326 audit(1775079878.042:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.2.1826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0802d9c819 code=0x0
[  734.287680][T12883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1830'.
[  734.296885][T12883] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  734.428758][ T9387] usb 3-1: USB disconnect, device number 15
[  734.442332][T12887] program syz.6.1829 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  734.944348][T12889] loop4: detected capacity change from 0 to 32768
[  734.969007][T12889] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1831 (12889)
[  734.995080][T12889] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  735.005586][T12889] BTRFS info (device loop4): using sha256 checksum algorithm
[  735.101020][T12889] BTRFS info (device loop4): enabling ssd optimizations
[  735.108075][T12889] BTRFS info (device loop4): turning on async discard
[  735.116005][T12889] BTRFS info (device loop4): enabling free space tree
[  735.902221][ T5838] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  736.124118][T12916] program syz.5.1835 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  736.466541][T12923] loop2: detected capacity change from 0 to 512
[  736.594348][T12924] loop5: detected capacity change from 0 to 16
[  736.625357][T12924] erofs (device loop5): mounted with root inode @ nid 36.
[  736.666322][T12925] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1839'.
[  736.713712][T12866] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  736.744836][T12923] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1837: missing EA_INODE flag
[  736.828790][ T5910] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  736.882787][T12923] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  736.886957][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  736.902608][    C1] EXT4-fs (loop2): initial error at time 1775079881: ext4_xattr_inode_iget:441: inode 12
[  736.912469][    C1] EXT4-fs (loop2): last error at time 1775079881: ext4_xattr_inode_iget:441: inode 12
[  736.976472][T12923] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1837: error while reading EA inode 12 err=-117
[  737.190210][T12923] loop2: lost filesystem error report for type 5 error -117
[  737.194429][T12923] EXT4-fs (loop2): 1 orphan inode deleted
[  737.855095][T12923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  738.402681][ T5910] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  738.733347][ T5910] usb 5-1: config 0 has no interface number 0
[  738.740045][ T5910] usb 5-1: config 0 interface 41 has no altsetting 0
[  738.758512][ T5910] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  738.768070][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.776812][ T5910] usb 5-1: Product: syz
[  738.782927][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  738.997049][ T5910] usb 5-1: Manufacturer: syz
[  739.027079][ T5910] usb 5-1: SerialNumber: syz
[  739.054475][ T5910] usb 5-1: config 0 descriptor??
[  739.530577][T12935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1841'.
[  739.539608][T12935] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  739.594448][ T5910] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  739.666078][ T5910] usb 5-1: USB disconnect, device number 16
[  739.723392][T12940] program syz.4.1843 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  739.759771][   T29] audit: type=1326 audit(1775079884.112:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.6.1842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22f639c819 code=0x0
[  739.860699][T12943] loop2: detected capacity change from 0 to 512
[  739.969597][T12943] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1844: missing EA_INODE flag
[  739.985689][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  740.205269][T12943] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  740.207665][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  740.223248][    C1] EXT4-fs (loop2): initial error at time 1775079884: ext4_xattr_inode_iget:441: inode 12
[  740.233085][    C1] EXT4-fs (loop2): last error at time 1775079884: ext4_xattr_inode_iget:441: inode 12
[  740.563889][T12943] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1844: error while reading EA inode 12 err=-117
[  740.594027][T12943] loop2: lost filesystem error report for type 5 error -117
[  740.595719][T12943] EXT4-fs (loop2): 1 orphan inode deleted
[  740.680655][T12954] program syz.4.1848 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  740.710951][T12943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  742.607557][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  743.791916][   T29] audit: type=1804 audit(1775079887.632:71): pid=12971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1850" name="/newroot/411/file0" dev="tmpfs" ino=2201 res=1 errno=0
[  743.830760][T12969] uprobe: syz.4.1850:12969 failed to unregister, leaking uprobe
[  743.853487][T12973] loop2: detected capacity change from 0 to 512
[  744.410823][T12973] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1851: missing EA_INODE flag
[  744.478747][T12973] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  744.482030][T12973] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1851: error while reading EA inode 12 err=-117
[  744.491248][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  744.491273][    C1] EXT4-fs (loop2): initial error at time 1775079888: ext4_xattr_inode_iget:441: inode 12
[  744.491306][    C1] EXT4-fs (loop2): last error at time 1775079888: ext4_xattr_inode_iget:441: inode 12
[  744.550429][T12973] loop2: lost filesystem error report for type 5 error -117
[  744.558559][T12973] EXT4-fs (loop2): 1 orphan inode deleted
[  744.629269][T12973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  744.817923][T12985] loop6: detected capacity change from 0 to 2048
[  745.047027][ T5965] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  745.057005][ T5931] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  745.108428][T12985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  745.125652][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  745.243705][ T5965] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  745.409664][ T5931] usb 2-1: Using ep0 maxpacket: 8
[  745.428801][ T5965] usb 6-1: config 0 has no interface number 0
[  745.436746][ T5931] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  745.465735][ T5965] usb 6-1: config 0 interface 41 has no altsetting 0
[  745.472895][ T5931] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  745.521253][ T5931] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  745.540323][ T5965] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  745.567405][ T5931] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  745.580269][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.602981][ T5931] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  745.617372][ T5965] usb 6-1: Product: syz
[  745.626212][ T5965] usb 6-1: Manufacturer: syz
[  745.639963][ T5965] usb 6-1: SerialNumber: syz
[  745.647297][ T5931] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  745.662038][ T5965] usb 6-1: config 0 descriptor??
[  745.679367][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.923745][ T5931] usb 2-1: usb_control_msg returned -32
[  745.939782][ T5931] usbtmc 2-1:16.0: can't read capabilities
[  746.244503][ T5958] usb 2-1: USB disconnect, device number 16
[  746.253106][T12982] usbtmc 2-1:16.0: usb_control_msg returned -71
[  746.290246][ T5965] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -32
[  746.462392][T13004] loop4: detected capacity change from 0 to 16
[  746.482356][T13004] erofs (device loop4): mounted with root inode @ nid 36.
[  746.923250][T12976] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  747.100698][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  747.116149][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  747.383153][T12999] loop2: detected capacity change from 0 to 32768
[  747.505668][T12999] Duplicate index:1 in stbl in dtroot
[  747.505668][T12999] 
[  747.541375][T12999] ERROR: (device loop2): copy_from_dinode: Corrupt dtroot
[  747.541375][T12999] 
[  747.638036][T12999] ERROR: (device loop2): remounting filesystem as read-only
[  747.654890][ T5931] usb 6-1: USB disconnect, device number 10
[  748.249038][T13018] zonefs (nullb0) ERROR: Not a zoned block device
[  749.933441][T10550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  750.003821][T13043] program syz.2.1872 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  750.086376][T13047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1875'.
[  750.132634][T13049] loop2: detected capacity change from 0 to 8
[  750.187568][ T5910] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  750.268457][ T5931] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  750.279767][T13049] netlink: 'syz.2.1876': attribute type 10 has an invalid length.
[  750.289339][T13049] wlan1: mtu less than device minimum
[  750.294768][T13049] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  750.511827][ T5910] usb 2-1: Using ep0 maxpacket: 8
[  750.799130][ T5931] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  750.800475][ T5910] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  750.810794][ T5931] usb 7-1: config 0 has no interface number 0
[  750.827228][ T5931] usb 7-1: config 0 interface 41 has no altsetting 0
[  750.836988][ T5910] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  750.839722][ T5931] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  750.864736][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.907139][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  750.923643][ T5931] usb 7-1: Product: syz
[  750.936678][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  750.942397][ T5931] usb 7-1: Manufacturer: syz
[  750.963133][ T5931] usb 7-1: SerialNumber: syz
[  750.978976][ T5910] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  751.022752][ T5910] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  751.051893][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.604624][T13064] fuse: Bad value for 'group_id'
[  751.609979][T13064] fuse: Bad value for 'group_id'
[  751.642073][   T29] audit: type=1800 audit(1775079895.972:72): pid=13064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1881" name="file1" dev="tmpfs" ino=2081 res=0 errno=0
[  752.076429][T13068] netlink: 'syz.5.1883': attribute type 12 has an invalid length.
[  752.212048][T13072] loop5: detected capacity change from 0 to 2048
[  752.236322][ T5931] usb 7-1: config 0 descriptor??
[  752.335575][T13072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  752.405502][T13078] program syz.2.1885 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  752.447735][ T5910] usb 2-1: usb_control_msg returned -32
[  752.493587][ T5910] usbtmc 2-1:16.0: can't read capabilities
[  752.781990][T13041] usbtmc 2-1:16.0: usb_control_msg returned -71
[  752.830498][ T5910] usb 2-1: USB disconnect, device number 17
[  752.857405][T13086] loop2: detected capacity change from 0 to 2048
[  752.874503][ T5931] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -32
[  752.900858][T13086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  752.913051][T13086] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  753.084552][ T9665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  753.309397][T13092] loop5: detected capacity change from 0 to 16
[  753.332849][T13092] erofs (device loop5): mounted with root inode @ nid 36.
[  754.194680][ T5958] usb 7-1: USB disconnect, device number 7
[  755.156460][T13100] loop5: detected capacity change from 0 to 24
[  755.161445][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  755.166594][T13100] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  755.629336][T13100] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  756.492972][T13112] netlink: 'syz.4.1894': attribute type 12 has an invalid length.
[  756.826739][   T29] audit: type=1800 audit(1775079901.172:73): pid=13116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1895" name="file1" dev="tmpfs" ino=623 res=0 errno=0
[  757.314453][T13118] loop1: detected capacity change from 0 to 2048
[  757.351501][T13124] program syz.4.1899 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  757.455212][T13118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  757.512347][T13128] loop2: detected capacity change from 0 to 2048
[  757.545874][T13128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  757.558041][T13128] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  757.730058][ T5958] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  758.411089][T13132] loop6: detected capacity change from 0 to 16
[  758.420405][T13132] erofs (device loop6): mounted with root inode @ nid 36.
[  758.509805][ T5910] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  758.541317][ T5958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  758.560324][ T5958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  758.573732][ T5958] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  758.624556][ T5958] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  758.662728][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.679596][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  758.701445][ T5958] usb 6-1: config 0 descriptor??
[  758.742278][ T5910] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  758.755199][ T5910] usb 5-1: config 0 has no interface number 0
[  758.799294][ T5910] usb 5-1: config 0 interface 41 has no altsetting 0
[  758.819162][ T5910] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  758.851689][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.972589][ T5910] usb 5-1: Product: syz
[  759.020466][ T5910] usb 5-1: Manufacturer: syz
[  759.045828][ T5910] usb 5-1: SerialNumber: syz
[  759.236068][ T5910] usb 5-1: config 0 descriptor??
[  759.271524][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  759.850540][ T5958] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  759.963290][ T5958] usb 6-1: USB disconnect, device number 11
[  760.322205][ T5910] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32
[  760.326011][T13148] fido_id[13148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  761.997863][T13164] netlink: 'syz.5.1909': attribute type 12 has an invalid length.
[  762.058109][  T807] usb 5-1: USB disconnect, device number 17
[  762.065289][T13170] program syz.6.1910 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  762.308190][T13175] loop1: detected capacity change from 0 to 16
[  762.797054][   T29] audit: type=1800 audit(1775079906.702:74): pid=13176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1911" name="file1" dev="tmpfs" ino=2120 res=0 errno=0
[  763.061217][T13175] erofs (device loop1): mounted with root inode @ nid 36.
[  763.694886][T13179] netlink: 'syz.4.1913': attribute type 4 has an invalid length.
[  763.701775][T13181] loop5: detected capacity change from 0 to 2048
[  763.769562][T13179] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1913'.
[  763.816447][T13181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  763.836501][T13179] .`: renamed from bond0 (while UP)
[  763.859845][T13183] loop2: detected capacity change from 0 to 256
[  764.301577][T13199] loop6: detected capacity change from 0 to 32768
[  764.319156][T13199] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1919 (13199)
[  764.340248][T13199] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  764.350422][T13199] BTRFS info (device loop6): using sha256 checksum algorithm
[  764.437724][ T5931] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  764.465980][T13199] BTRFS info (device loop6): enabling ssd optimizations
[  764.473168][T13199] BTRFS info (device loop6): turning on async discard
[  764.479979][T13199] BTRFS info (device loop6): enabling free space tree
[  764.903287][   T29] audit: type=1804 audit(1775079909.252:75): pid=13219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1920" name="/newroot/424/file0" dev="tmpfs" ino=2268 res=1 errno=0
[  765.007346][ T5931] usb 3-1: Using ep0 maxpacket: 16
[  765.015176][T13199] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1919'.
[  765.043280][ T5931] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  765.063937][ T5931] usb 3-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config
[  765.103427][ T5931] usb 3-1: config 0 has no interface number 0
[  765.137085][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  765.176162][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.232245][ T5931] usb 3-1: Product: syz
[  765.246738][ T5931] usb 3-1: Manufacturer: syz
[  765.252232][ T5931] usb 3-1: SerialNumber: syz
[  765.654919][ T5931] usb 3-1: config 0 descriptor??
[  765.692527][ T5931] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  765.715579][ T5931] uvcvideo 3-1:0.105: No valid video chain found.
[  765.723388][ T9665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  765.767410][ T5842] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  765.863853][T10550] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  765.922796][ T5931] usb 3-1: USB disconnect, device number 16
[  765.963286][ T5842] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  765.985367][ T5842] usb 5-1: config 0 has no interface number 0
[  766.015018][ T5842] usb 5-1: config 0 interface 41 has no altsetting 0
[  766.035238][ T5842] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  766.059188][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.026713][   T29] audit: type=1800 audit(1775079910.602:76): pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1924" name="file1" dev="tmpfs" ino=902 res=0 errno=0
[  767.065662][ T5842] usb 5-1: Product: syz
[  767.074609][ T5842] usb 5-1: Manufacturer: syz
[  767.143554][ T5842] usb 5-1: SerialNumber: syz
[  767.158303][ T5842] usb 5-1: config 0 descriptor??
[  767.789796][T13248] xt_CT: You must specify a L4 protocol and not use inversions on it
[  768.136401][ T5842] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32
[  768.255512][T13253] netlink: 'syz.1.1931': attribute type 4 has an invalid length.
[  768.324222][T13253] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1931'.
[  769.217219][ T5842] usb 5-1: USB disconnect, device number 18
[  769.842488][T13270] loop1: detected capacity change from 0 to 32768
[  769.856869][T13270] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1936 (13270)
[  769.876520][T13270] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  769.886668][T13270] BTRFS info (device loop1): using sha256 checksum algorithm
[  769.962342][T13270] BTRFS info (device loop1): enabling ssd optimizations
[  769.969381][T13270] BTRFS info (device loop1): turning on async discard
[  769.976133][T13270] BTRFS info (device loop1): enabling free space tree
[  770.160760][T13291] program syz.2.1939 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  770.250559][   T29] audit: type=1800 audit(1775079914.592:77): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1938" name="file1" dev="tmpfs" ino=2279 res=0 errno=0
[  771.305043][T13297] loop6: detected capacity change from 0 to 2048
[  771.342860][T13297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  771.355182][T13297] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  771.460920][T13294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1936'.
[  771.578264][T13310] netlink: 'syz.2.1944': attribute type 4 has an invalid length.
[  771.586128][T13310] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1944'.
[  773.013292][T10550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  773.479513][T13319] loop2: detected capacity change from 0 to 131072
[  773.498919][T13319] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  773.505671][T13319] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  773.515519][T13319] F2FS-fs (loop2): invalid crc value
[  773.533120][ T5841] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  773.574550][T13319] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  773.616071][T13319] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  773.623200][T13319] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  774.772483][T13336] mmap: syz.5.1949 (13336) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  775.029770][ T5931] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  775.200310][ T5931] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  775.248780][ T5931] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253
[  775.309835][ T5931] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  775.404653][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.445022][ T5931] usb 7-1: Product: syz
[  775.496259][ T5931] usb 7-1: Manufacturer: syz
[  775.525835][ T5931] usb 7-1: SerialNumber: syz
[  775.563575][ T5931] usb 7-1: config 0 descriptor??
[  775.623051][ T5931] gspca_main: sunplus-2.14.0 probing 055f:c630
[  776.052197][T13339] loop4: detected capacity change from 0 to 131072
[  776.064335][T13339] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  776.071121][T13339] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  776.082254][T13339] F2FS-fs (loop4): invalid crc value
[  776.215377][T13339] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  776.234303][T13339] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  776.241436][T13339] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  777.021549][ T5931] gspca_sunplus: reg_r err -32
[  777.037197][ T5931] sunplus 7-1:0.0: probe with driver sunplus failed with error -32
[  777.070459][ T5931] usb 7-1: USB disconnect, device number 8
[  777.491594][T13357] loop5: detected capacity change from 0 to 128
[  777.931604][T13358] loop1: detected capacity change from 0 to 16
[  778.006653][T13357] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  778.043824][T13358] erofs (device loop1): mounted with root inode @ nid 36.
[  778.085002][T13357] hpfs: hpfs_map_sector(): read error
[  778.755059][T13363] loop5: detected capacity change from 0 to 2048
[  778.781949][T13363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  778.794153][T13363] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  779.531145][T13371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1959'.
[  779.561783][T13371] 8021q: VLANs not supported on caif0
[  779.573391][ T9665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  779.601144][T13373] program syz.2.1951 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  779.909280][T11117] Bluetooth: hci5: command 0x0406 tx timeout
[  781.113499][T13385] program syz.2.1963 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  781.841690][T13383] loop5: detected capacity change from 0 to 1024
[  782.206190][T13383] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (6144 > 256).
[  782.247611][T13383] EXT4-fs warning (device loop5): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  782.287373][T13383] EXT4-fs (loop5): mount failed
[  783.795865][   T29] audit: type=1800 audit(1775079927.632:78): pid=13403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1953" name="file1" dev="tmpfs" ino=2306 res=0 errno=0
[  783.825329][T13383] xt_CT: You must specify a L4 protocol and not use inversions on it
[  784.140596][   T29] audit: type=1804 audit(1775079928.492:79): pid=13399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1967" name="/newroot/392/file0" dev="tmpfs" ino=2126 res=1 errno=0
[  784.333841][T13411] loop4: detected capacity change from 0 to 16
[  784.380150][  T807] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  784.712764][T13411] erofs (device loop4): mounted with root inode @ nid 36.
[  785.265949][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1972'.
[  785.287353][T13416] 8021q: VLANs not supported on caif0
[  785.339262][  T807] usb 7-1: Using ep0 maxpacket: 32
[  785.355631][  T807] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  785.380736][  T807] usb 7-1: config 0 has no interface number 0
[  785.412592][  T807] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  785.447016][  T807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.491008][  T807] usb 7-1: Product: syz
[  785.508945][  T807] usb 7-1: Manufacturer: syz
[  785.524338][  T807] usb 7-1: SerialNumber: syz
[  785.670493][  T807] usb 7-1: config 0 descriptor??
[  785.915034][T13427] loop1: detected capacity change from 0 to 16
[  785.932969][T13427] erofs (device loop1): mounted with root inode @ nid 36.
[  786.958436][T13434] program syz.4.1975 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  787.765881][  T807] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  787.788659][  T807] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  788.214815][  T807] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  788.283483][  T807] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  789.251675][   T29] audit: type=1800 audit(1775079932.882:80): pid=13446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1979" name="file1" dev="tmpfs" ino=728 res=0 errno=0
[  789.408700][  T807] usb 7-1: USB disconnect, device number 9
[  790.254200][T13454] loop2: detected capacity change from 0 to 2048
[  790.413125][T13454] EXT4-fs: Ignoring removed bh option
[  790.494052][T13454] EXT4-fs: Ignoring removed mblk_io_submit option
[  790.615495][T13454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  790.693084][T13454] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  790.730138][   T29] audit: type=1800 audit(1775079935.082:81): pid=13454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1985" name="file1" dev="loop2" ino=15 res=0 errno=0
[  790.924701][T13464] program syz.1.1986 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  790.980506][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  791.474499][T13475] loop1: detected capacity change from 0 to 1024
[  791.545564][T13475] EXT4-fs: Ignoring removed bh option
[  791.621629][T13475] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  791.686375][T13475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  792.508611][T13486] netlink: 'syz.4.1980': attribute type 12 has an invalid length.
[  792.684729][ T5841] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /396/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  792.722968][T13491] loop2: detected capacity change from 0 to 512
[  792.760170][T13491] EXT4-fs (loop2): Test dummy encryption mode enabled
[  792.803130][T13491] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  792.863569][T13491] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1994: bad orphan inode 131083
[  792.909570][T13491] loop2: lost filesystem error report for type 5 error -117
[  792.914864][T13491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  792.927065][ T5965] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  792.984589][ T5841] EXT4-fs (loop1): Remounting filesystem read-only
[  793.190492][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  793.732662][ T5965] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  793.741729][ T5965] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253
[  793.753290][ T5965] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  793.762774][ T5965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.771072][ T5965] usb 7-1: Product: syz
[  793.775262][ T5965] usb 7-1: Manufacturer: syz
[  793.780276][ T5965] usb 7-1: SerialNumber: syz
[  793.799687][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  793.816511][ T5965] usb 7-1: config 0 descriptor??
[  793.836416][ T5965] gspca_main: sunplus-2.14.0 probing 055f:c630
[  795.486275][T13511] program syz.1.2000 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  796.442049][ T5965] gspca_sunplus: reg_r err -110
[  796.689912][ T5965] sunplus 7-1:0.0: probe with driver sunplus failed with error -110
[  796.743872][ T5965] usb 7-1: USB disconnect, device number 10
[  796.804583][T13526] netlink: 'syz.2.2006': attribute type 12 has an invalid length.
[  798.047140][T13538] loop4: detected capacity change from 0 to 1024
[  799.219680][T13553] hfsplus: b-tree write err: -5, ino 2
[  799.298849][T13556] program syz.6.2014 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  799.977754][ T3573] hfsplus: b-tree write err: -5, ino 25
[  799.989729][ T3573] hfsplus: b-tree write err: -5, ino 4
[  800.001558][ T3573] hfsplus: b-tree write err: -5, ino 2
[  800.018735][ T3573] hfsplus: b-tree write err: -5, ino 26
[  800.354953][T13564] loop4: detected capacity change from 0 to 2048
[  801.054781][T13564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  801.085979][T13569] netlink: 'syz.6.2020': attribute type 12 has an invalid length.
[  801.577519][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  802.674909][T13591] loop2: detected capacity change from 0 to 1024
[  802.931779][T13594] hfsplus: b-tree write err: -5, ino 2
[  803.142701][ T1160] hfsplus: b-tree write err: -5, ino 25
[  803.150233][ T1160] hfsplus: b-tree write err: -5, ino 4
[  803.696801][ T1160] hfsplus: b-tree write err: -5, ino 2
[  803.725491][ T1160] hfsplus: b-tree write err: -5, ino 26
[  804.654245][ T5962] libceph: connect (1)[c::]:6789 error -101
[  804.684056][ T5962] libceph: mon0 (1)[c::]:6789 connect error
[  804.748493][ T5962] libceph: connect (1)[c::]:6789 error -101
[  804.772325][ T5962] libceph: mon0 (1)[c::]:6789 connect error
[  804.924115][T13604] ceph: No mds server is up or the cluster is laggy
[  805.497726][ T5962] libceph: connect (1)[c::]:6789 error -101
[  805.501094][T13615] loop5: detected capacity change from 0 to 512
[  805.533325][ T5962] libceph: mon0 (1)[c::]:6789 connect error
[  805.647028][T13615] EXT4-fs (loop5): Test dummy encryption mode enabled
[  805.680604][T13615] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  805.736117][T13615] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2034: bad orphan inode 131083
[  805.784679][T13619] loop2: detected capacity change from 0 to 128
[  805.829494][T13619] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  805.859152][T13615] loop5: lost filesystem error report for type 5 error -117
[  805.895477][T13615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  806.020817][T13621] loop4: detected capacity change from 0 to 2048
[  806.418857][T13621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  806.437834][ T9665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  806.554762][T13619] hpfs: hpfs_map_sector(): read error
[  807.164430][T13634] loop1: detected capacity change from 0 to 1024
[  807.184231][T13641] program syz.6.2042 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  808.033767][T13643] hfsplus: b-tree write err: -5, ino 2
[  808.379798][ T3573] hfsplus: b-tree write err: -5, ino 25
[  808.416598][ T3573] hfsplus: b-tree write err: -5, ino 4
[  808.649833][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  808.656465][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  808.707989][T13571] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  808.968343][ T3573] hfsplus: b-tree write err: -5, ino 2
[  809.007835][ T3573] hfsplus: b-tree write err: -5, ino 26
[  809.254781][T13656] loop5: detected capacity change from 0 to 512
[  809.291694][T13656] EXT4-fs (loop5): Test dummy encryption mode enabled
[  809.319436][T13656] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  809.355009][T13656] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2048: bad orphan inode 131083
[  809.394115][T13656] loop5: lost filesystem error report for type 5 error -117
[  809.397282][T13656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  809.937955][ T9665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  810.717032][ T5931] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  810.743649][  T807] libceph: connect (1)[c::]:6789 error -101
[  810.756574][  T807] libceph: mon0 (1)[c::]:6789 connect error
[  810.784180][T13660] ceph: No mds server is up or the cluster is laggy
[  810.958175][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  811.555128][T13673] loop1: detected capacity change from 0 to 131072
[  811.582605][T13673] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  811.589829][T13673] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  811.607197][T13673] F2FS-fs (loop1): invalid crc value
[  811.615307][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  811.657040][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  811.703787][T13673] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  811.741558][T13673] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  811.748672][T13673] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  811.782153][ T5931] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  811.853974][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.914704][ T5931] usb 6-1: config 0 descriptor??
[  812.847372][T13671] loop6: detected capacity change from 0 to 32768
[  813.379116][T13671] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2051 (13671)
[  813.404326][T13671] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  813.414734][T13671] BTRFS info (device loop6): using crc32c checksum algorithm
[  813.440622][ T5931] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  813.631977][T13671] BTRFS info (device loop6): enabling ssd optimizations
[  813.639307][T13671] BTRFS info (device loop6): turning on flush-on-commit
[  813.649050][ T5931] usb 6-1: USB disconnect, device number 12
[  813.649657][T13671] BTRFS info (device loop6): enabling free space tree
[  813.691997][T13671] BTRFS info (device loop6): enabling auto defrag
[  813.712925][T13671] BTRFS info (device loop6): use lzo compression, level 1
[  813.748734][T13671] BTRFS info (device loop6): max_inline set to 4096
[  813.938594][T10550] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  814.821442][T13717] netlink: 'syz.5.2062': attribute type 12 has an invalid length.
[  815.061957][T13722] loop2: detected capacity change from 0 to 512
[  815.232443][T13722] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  815.788641][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2066'.
[  816.218783][   T51] Bluetooth: hci5: ACL packet for unknown connection handle 201
[  816.533342][ T5958] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  816.823819][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  816.823996][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  816.824060][ T5958] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  816.824220][ T5958] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  816.824287][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.154502][ T5958] usb 7-1: config 0 descriptor??
[  818.426572][ T5958] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  818.729964][ T5958] usb 7-1: USB disconnect, device number 11
[  819.444157][T13759] netlink: 'syz.6.2076': attribute type 12 has an invalid length.
[  819.816549][T13763] loop2: detected capacity change from 0 to 512
[  819.871586][T13769] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2080'.
[  819.907478][T13766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  819.984587][T13763] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  820.035929][T13766] xt_hashlimit: size too large, truncated to 1048576
[  822.515215][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2082'.
[  822.585252][T13778] 8021q: VLANs not supported on caif0
[  822.861808][T13788] fuse: Unknown parameter 'group_i00000000000000000000'
[  822.914011][T11117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  823.299631][T11117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  823.302771][   T29] audit: type=1800 audit(1775079967.232:82): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2085" name="file1" dev="tmpfs" ino=2338 res=0 errno=0
[  823.308277][T11117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  823.341013][T11117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  823.351239][T11117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  823.495854][T13785] lo speed is unknown, defaulting to 1000
[  824.074064][T13785] chnl_net:caif_netlink_parms(): no params data found
[  825.341728][T13785] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.356203][T13785] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.372058][T13785] bridge_slave_0: entered allmulticast mode
[  825.380345][T13785] bridge_slave_0: entered promiscuous mode
[  825.391191][T13785] bridge0: port 2(bridge_slave_1) entered blocking state
[  825.400667][T13785] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.409333][T13785] bridge_slave_1: entered allmulticast mode
[  825.417395][T11117] Bluetooth: hci2: command tx timeout
[  825.434975][T13785] bridge_slave_1: entered promiscuous mode
[  825.580327][T13785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  825.612125][T13785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  825.740903][T13785] team0: Port device team_slave_0 added
[  825.764228][T13785] team0: Port device team_slave_1 added
[  826.106991][T13842] xt_hashlimit: size too large, truncated to 1048576
[  826.403755][T13838] siw: device registration error -23
[  827.503890][T11117] Bluetooth: hci2: command tx timeout
[  828.332055][T13621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  828.420120][T13785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  828.502408][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  828.577038][T13860] netlink: 'syz.1.2104': attribute type 72 has an invalid length.
[  828.618881][T13785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  828.631011][T13860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2104'.
[  828.668573][T13785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  828.820733][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  829.577946][T11117] Bluetooth: hci2: command tx timeout
[  829.585716][T13785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  829.885507][T13785] hsr_slave_0: entered promiscuous mode
[  829.916549][T13785] hsr_slave_1: entered promiscuous mode
[  829.943692][T13785] debugfs: 'hsr0' already exists in 'hsr'
[  829.967830][T13785] Cannot create hsr debugfs directory
[  831.667106][T11117] Bluetooth: hci2: command tx timeout
[  832.059930][T13902] netlink: 'syz.1.2118': attribute type 72 has an invalid length.
[  832.098347][T13902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2118'.
[  832.743405][T13907] loop6: detected capacity change from 0 to 2048
[  832.763663][T13907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  832.777210][T13907] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  833.093431][T13919] fuse: Unknown parameter 'group_id00000000000000000000'
[  833.561553][   T29] audit: type=1800 audit(1775079977.462:83): pid=13919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2121" name="file1" dev="tmpfs" ino=2380 res=0 errno=0
[  833.846684][T13922] loop5: detected capacity change from 0 to 1024
[  833.950358][T10550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  834.675969][T13929] loop1: detected capacity change from 0 to 131072
[  835.768985][   T29] audit: type=1804 audit(1775079979.602:84): pid=13935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2127" name="/newroot/439/file0" dev="tmpfs" ino=2392 res=1 errno=0
[  835.792954][T13929] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  835.799759][T13929] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  835.811031][T13929] F2FS-fs (loop1): invalid crc value
[  835.887476][T13929] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  835.913137][T13929] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  835.913166][T13929] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  835.914112][T13933] uprobe: syz.2.2127:13933 failed to unregister, leaking uprobe
[  836.103975][  T138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.242418][T13932] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2123'.
[  836.243756][T13945] loop6: detected capacity change from 0 to 4096
[  836.297853][T13945] EXT4-fs: inline encryption not supported
[  836.340593][T13945] EXT4-fs (loop6): Test dummy encryption mode enabled
[  836.402183][T13945] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c09d, mo2=0003]
[  836.417111][T13945] System zones: 0-5
[  836.422965][  T138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.445274][T13945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  836.606432][  T138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.788640][T10550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  836.958979][  T138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.425212][T13785] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  837.448132][T13785] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  837.490736][T13785] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  837.524025][T13785] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  837.682868][T13964] netlink: 'syz.2.2129': attribute type 72 has an invalid length.
[  837.700288][T13964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2129'.
[  838.065542][T13968] fuse: Unknown parameter 'group_id00000000000000000000'
[  838.101443][   T29] audit: type=1800 audit(1775080238.434:85): pid=13968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2135" name="file1" dev="tmpfs" ino=1173 res=0 errno=0
[  838.657945][T13785] 8021q: adding VLAN 0 to HW filter on device bond0
[  838.676635][T13785] 8021q: adding VLAN 0 to HW filter on device team0
[  838.695144][  T138] bridge_slave_1: left allmulticast mode
[  838.731837][  T138] bridge_slave_1: left promiscuous mode
[  838.741227][  T138] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.860955][  T138] bridge_slave_0: left allmulticast mode
[  839.038873][  T138] bridge_slave_0: left promiscuous mode
[  839.048285][  T138] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.933357][T13982] loop2: detected capacity change from 0 to 131072
[  839.987001][T13982] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  839.993723][T13982] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  840.006720][T13982] F2FS-fs (loop2): invalid crc value
[  840.117511][T13982] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  840.158792][T13982] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  840.165881][T13982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  840.283671][T13990] loop5: detected capacity change from 0 to 1024
[  841.428245][T14001] loop6: detected capacity change from 0 to 128
[  841.454084][T14001] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  841.508118][T14001] hpfs: hpfs_map_sector(): read error
[  841.543394][  T138] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  841.572832][  T138] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  841.598081][  T138] .` (unregistering): Released all slaves
[  841.653926][T13995] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2141'.
[  841.656901][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  841.670075][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  841.750474][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  841.757655][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  841.824694][  T138] !: left promiscuous mode
[  842.705349][T14023] loop6: detected capacity change from 0 to 2048
[  842.740815][T14023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  842.753471][T14023] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  842.916019][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2148'.
[  843.030987][T14029] 8021q: VLANs not supported on caif0
[  843.540082][T13785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  843.691037][T10550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  844.693859][T14043] loop5: detected capacity change from 0 to 131072
[  844.737836][T14043] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[  844.773180][T14043] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  844.807127][T14043] F2FS-fs (loop5): invalid crc value
[  844.957871][T14043] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  844.976005][T14043] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  844.983295][T14043] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  846.630383][T14067] loop6: detected capacity change from 0 to 128
[  846.869623][T14067] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  846.952066][T14067] hpfs: hpfs_map_sector(): read error
[  847.430451][T14074] loop2: detected capacity change from 0 to 4096
[  847.431828][T14078] loop6: detected capacity change from 0 to 1764
[  847.484208][T14074] EXT4-fs: inline encryption not supported
[  847.487486][T14080] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2154'.
[  847.537820][T14074] EXT4-fs (loop2): Test dummy encryption mode enabled
[  847.570757][T14074] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c09d, mo2=0003]
[  847.602190][T14074] System zones: 0-5
[  847.630651][T14074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  848.257927][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  848.594001][T14094] loop5: detected capacity change from 0 to 32768
[  848.606654][T14094] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2159 (14094)
[  848.631642][  T138] hsr_slave_0: left promiscuous mode
[  848.642080][T14094] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  848.652286][T14094] BTRFS info (device loop5): using crc32c checksum algorithm
[  848.660137][T14094] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  848.682169][  T138] hsr_slave_1: left promiscuous mode
[  848.725813][  T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  848.746999][  T138] batman_adv: batadv0: Removing interface: batadv_slave_0
[  848.762539][T14094] BTRFS info (device loop5): rebuilding free space tree
[  848.787820][  T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  848.798435][  T138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  848.957975][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2160'.
[  849.074476][T14094] BTRFS info (device loop5): disabling free space tree
[  849.081503][T14094] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  849.092740][T14094] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  849.124769][T14094] BTRFS info (device loop5): enabling ssd optimizations
[  849.131880][T14094] BTRFS info (device loop5): turning on async discard
[  849.138820][T14094] BTRFS info (device loop5): enabling disk space caching
[  849.145851][T14094] BTRFS info (device loop5): force clearing of disk cache
[  849.153019][T14094] BTRFS info (device loop5): use zstd compression, level 3
[  849.481852][   T29] audit: type=1800 audit(1775080761.814:86): pid=14094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2159" name="file2" dev="loop5" ino=261 res=0 errno=0
[  849.505840][  T138] veth1_macvtap: left promiscuous mode
[  849.522672][  T138] veth0_macvtap: left promiscuous mode
[  849.532917][  T138] veth1_vlan: left promiscuous mode
[  849.544415][  T138] veth0_vlan: left promiscuous mode
[  849.593694][ T9665] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  849.748908][T14120] loop6: detected capacity change from 0 to 16
[  849.787801][T14120] erofs (device loop6): mounted with root inode @ nid 36.
[  850.899749][T14133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  851.065520][T14133] xt_hashlimit: size too large, truncated to 1048576
[  852.377009][T14140] loop5: detected capacity change from 0 to 131072
[  852.400047][T14140] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[  852.406994][T14140] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  852.419086][T14140] F2FS-fs (loop5): invalid crc value
[  852.477081][T14140] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  852.491010][T14140] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  852.498089][T14140] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  852.846471][  T138] team0 (unregistering): Port device team_slave_1 removed
[  852.895939][  T138] team0 (unregistering): Port device team_slave_0 removed
[  853.071175][T14150] loop5: detected capacity change from 0 to 1024
[  853.153592][T13785] veth0_vlan: entered promiscuous mode
[  853.166753][T14098] 8021q: VLANs not supported on caif0
[  853.216649][T14152] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2168'.
[  853.292909][T13785] veth1_vlan: entered promiscuous mode
[  853.468200][T13785] veth0_macvtap: entered promiscuous mode
[  853.486427][T14159] loop2: detected capacity change from 0 to 512
[  853.528874][T13785] veth1_macvtap: entered promiscuous mode
[  853.557083][T14159] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.2170: missing EA_INODE flag
[  853.831202][T14159] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  853.836896][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  853.852554][    C1] EXT4-fs (loop2): initial error at time 1775080766: ext4_xattr_inode_iget:441: inode 12
[  853.862445][    C1] EXT4-fs (loop2): last error at time 1775080766: ext4_xattr_inode_iget:441: inode 12
[  853.872466][T14159] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2170: error while reading EA inode 12 err=-117
[  853.897636][T13785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  854.506344][T14159] loop2: lost filesystem error report for type 5 error -117
[  854.525635][T13785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  854.542242][T14159] EXT4-fs (loop2): 1 orphan inode deleted
[  854.572980][T14159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  854.697273][   T35] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  854.877098][   T35] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  854.994986][   T35] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  855.030995][ T3535] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  855.411794][ T3573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  855.437247][ T3573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  855.658837][T14190] loop1: detected capacity change from 0 to 32768
[  855.861721][T12213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  855.898586][T12213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  856.236041][T14199] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2178'.
[  856.643491][T14206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2179'.
[  856.705322][T14206] 8021q: VLANs not supported on caif0
[  857.262347][T14214] xt_hashlimit: size too large, truncated to 1048576
[  857.552383][T14211] siw: device registration error -23
[  858.988842][T14217] loop5: detected capacity change from 0 to 4096
[  859.052468][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  860.068568][   T29] audit: type=1800 audit(1775080772.424:87): pid=14217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2181" name="file1" dev="loop5" ino=0 res=0 errno=0
[  860.363560][T14242] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2189'.
[  860.918038][T14253] loop5: detected capacity change from 0 to 2048
[  861.916546][T14253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  861.930251][T14253] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  863.142190][T14262] fuse: Bad value for 'fd'
[  864.860332][   T29] audit: type=1800 audit(1775080775.504:88): pid=14262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2182" name="file1" dev="tmpfs" ino=2398 res=0 errno=0
[  865.216803][T14272] siw: device registration error -23
[  865.259059][T14271] xt_hashlimit: size too large, truncated to 1048576
[  866.175541][ T9665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.774412][T14282] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2196'.
[  868.416828][T14300] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2202'.
[  868.583787][T14302] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2203'.
[  868.599090][T14298] loop6: detected capacity change from 0 to 4096
[  868.759053][T14305] loop1: detected capacity change from 0 to 8192
[  868.838116][T14305] vfat: Unknown parameter '0000000000000000000000001777777777777777777777ÿÿÿÿÿÿÿÿ'
[  868.979554][ T5910] libceph: connect (1)[c::]:6789 error -101
[  869.003730][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  869.249894][T14322] siw: device registration error -23
[  869.271432][T14321] xt_hashlimit: size too large, truncated to 1048576
[  869.622166][T14311] ceph: No mds server is up or the cluster is laggy
[  869.982733][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  870.102537][   T10] libceph: connect (1)[c::]:6789 error -101
[  870.184044][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  870.384362][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  871.809315][T14339] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2215'.
[  871.999132][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2217'.
[  872.931549][T14353] program syz.1.2220 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  874.038718][T14364] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2214'.
[  874.054697][T14341] loop2: detected capacity change from 0 to 32768
[  874.143192][T14341] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  874.187928][T14341] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  874.360012][ T5910] libceph: connect (1)[c::]:6789 error -101
[  874.385177][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  874.472259][T14341] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  874.501214][ T5965] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  874.513362][ T5965] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  874.614690][ T5965] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 101ms
[  874.622729][ T5965] gfs2: fsid=syz:syz.0: jid=0: Done
[  874.634822][T14341] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  874.671795][ T5910] libceph: connect (1)[c::]:6789 error -101
[  874.695900][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  875.590031][T14368] ceph: No mds server is up or the cluster is laggy
[  875.645042][ T5910] libceph: connect (1)[c::]:6789 error -101
[  875.651315][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  875.857171][ T5931] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  876.077181][ T5931] usb 6-1: device descriptor read/64, error -71
[  876.325665][T14384] netlink: 'syz.7.2227': attribute type 4 has an invalid length.
[  876.333445][T14384] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2227'.
[  876.345378][T14384] .`: renamed from bond0 (while UP)
[  876.515189][T14387] loop1: detected capacity change from 0 to 128
[  876.555134][T14387] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  876.558321][T14389] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2228'.
[  876.599421][T14387] hpfs: filesystem error: improperly stopped
[  876.609254][ T5931] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  876.647288][T14387] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  876.680927][T14387] hpfs: You really don't want any checks? You are crazy...
[  876.720628][T14387] hpfs: Code page index out of array
[  876.735412][T14387] hpfs: code page support is disabled
[  876.756986][T14387] hpfs: hpfs_map_4sectors(): unaligned read
[  876.767528][ T5931] usb 6-1: device descriptor read/64, error -71
[  876.778265][T14387] hpfs: hpfs_map_4sectors(): unaligned read
[  876.812275][T14387] hpfs: filesystem error: unable to find root dir
[  876.876228][T14387] hpfs: hpfs_map_4sectors(): unaligned read
[  876.899122][ T5931] usb usb6-port1: attempt power cycle
[  876.903245][T14387] hpfs: hpfs_map_sector(): read error
[  877.257841][ T5931] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  877.333265][ T5931] usb 6-1: device descriptor read/8, error -71
[  877.792216][ T5931] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  878.409044][ T5931] usb 6-1: device descriptor read/8, error -71
[  878.568744][ T5931] usb usb6-port1: unable to enumerate USB device
[  878.592498][T14409] loop7: detected capacity change from 0 to 2048
[  880.137344][T14417] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  880.306312][T14424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2233'.
[  880.652887][T14432] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2240'.
[  881.587708][T14441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2242'.
[  885.433561][   T29] audit: type=1804 audit(1775080797.264:89): pid=14471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2248" name="/newroot/457/file0" dev="tmpfs" ino=2488 res=1 errno=0
[  885.718668][T14475] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2251'.
[  886.144141][ T5958] libceph: connect (1)[c::]:6789 error -101
[  886.184601][ T5958] libceph: mon0 (1)[c::]:6789 connect error
[  886.400369][T14480] ceph: No mds server is up or the cluster is laggy
[  886.622585][ T5910] libceph: connect (1)[c::]:6789 error -101
[  886.644681][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  887.060733][T14485] loop5: detected capacity change from 0 to 32768
[  887.090048][T14485] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2238 (14485)
[  887.254997][T14485] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  887.303260][T14485] BTRFS info (device loop5): using sha256 checksum algorithm
[  887.552930][T14485] BTRFS info (device loop5): enabling ssd optimizations
[  887.603934][T14485] BTRFS info (device loop5): turning on async discard
[  887.636954][T14485] BTRFS info (device loop5): enabling free space tree
[  887.915654][ T9665] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  888.326564][T14522] loop6: detected capacity change from 0 to 32768
[  888.356192][T14522] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2255 (14522)
[  888.496682][T14522] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  888.578352][T14522] BTRFS info (device loop6): using crc32c checksum algorithm
[  889.355422][T14522] BTRFS info (device loop6): setting nodatasum
[  889.361904][T14522] BTRFS info (device loop6): setting nodatacow
[  889.368622][T14522] BTRFS info (device loop6): turning on async discard
[  889.375463][T14522] BTRFS info (device loop6): enabling free space tree
[  889.382793][T14522] BTRFS info (device loop6): enabling auto defrag
[  889.417098][T14522] BTRFS info (device loop6): max_inline set to 0
[  891.253532][T10550] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  891.274105][T14573] loop5: detected capacity change from 0 to 1024
[  891.560012][T14573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  891.822034][T14583] binder: 14574:14583 ioctl c0306201 0 returned -14
[  891.866326][T14573] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  892.178488][T14581] xt_CT: No such helper "pptp"
[  892.384997][T14589] EXT4-fs error (device loop5): ext4_map_blocks:831: inode #15: comm syz.5.2261: lblock 0 mapped to illegal pblock 0 (length 1)
[  892.590768][T14589] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  892.628178][T14589] EXT4-fs (loop5): This should not happen!! Data will be lost
[  892.628178][T14589] 
[  893.539631][ T3535] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 112: padding at end of block bitmap is not set
[  893.540066][T14611] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2269'.
[  893.588426][ T3535] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  893.620647][ T3535] EXT4-fs (loop5): This should not happen!! Data will be lost
[  893.620647][ T3535] 
[  893.666706][ T3535] EXT4-fs (loop5): Total free blocks count 0
[  893.694233][ T3535] EXT4-fs (loop5): Free/Dirty block details
[  893.725672][ T3535] EXT4-fs (loop5): free_blocks=0
[  893.772335][ T3535] EXT4-fs (loop5): dirty_blocks=64
[  893.804888][ T3535] EXT4-fs (loop5): Block reservation details
[  893.817819][T14613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2262'.
[  893.861114][ T9665] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  897.254832][T14641] loop1: detected capacity change from 0 to 128
[  897.395408][T14641] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  897.478156][T14641] hpfs: hpfs_map_sector(): read error
[  898.187006][ T5965] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  898.350356][ T5965] usb 6-1: Using ep0 maxpacket: 8
[  898.420268][ T5965] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  898.515526][ T5965] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  898.769849][ T5965] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  898.786622][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.969527][T14657] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2284'.
[  900.418538][T14668] loop2: detected capacity change from 0 to 131072
[  900.455970][T14668] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  900.462755][T14668] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  900.472875][T14668] F2FS-fs (loop2): invalid crc value
[  900.537625][T14668] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  900.644952][T14668] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  900.652051][T14668] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  900.994157][   T10] usb 6-1: USB disconnect, device number 17
[  901.258715][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2289'.
[  901.420717][T14682] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  901.538817][T14682] bond0 (unregistering): Released all slaves
[  901.881214][T14700] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2295'.
[  903.779281][T14708] loop1: detected capacity change from 0 to 8192
[  903.809694][T14708] vfat: Unknown parameter '0000000000000000000000001777777777777777777777ÿÿÿÿÿÿÿÿ'
[  903.982548][T14712] 9p: Bad value for 'wfdno'
[  904.367421][ T5965] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  904.537371][ T5965] usb 2-1: Using ep0 maxpacket: 8
[  904.561302][ T5965] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  904.605411][ T5965] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  904.634323][ T5965] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  904.662628][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.837465][T14725] netlink: 'syz.5.2303': attribute type 4 has an invalid length.
[  904.865759][T14725] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2303'.
[  905.034906][T14725] .`: renamed from bond0 (while UP)
[  905.683024][T14727] openvswitch: netlink: Message has 4 unknown bytes.
[  905.704881][T14727] openvswitch: netlink: Message has 4 unknown bytes.
[  905.718868][T14727] openvswitch: netlink: Message has 4 unknown bytes.
[  905.748662][T14727] openvswitch: netlink: Message has 4 unknown bytes.
[  905.756065][T14727] openvswitch: netlink: Message has 4 unknown bytes.
[  905.763820][T14727] openvswitch: netlink: Message has 4 unknown bytes.
[  905.771476][T14727] openvswitch: netlink: Message has 4 unknown bytes.
[  905.779378][T14727] openvswitch: netlink: Message has 4 unknown bytes.
[  905.786756][T14727] openvswitch: netlink: Message has 4 unknown bytes.
[  905.794429][T14727] openvswitch: netlink: Message has 4 unknown bytes.
[  905.925572][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'.
[  906.010142][T14734] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  906.028563][T14734] bond0 (unregistering): Released all slaves
[  907.167948][ T5931] usb 2-1: USB disconnect, device number 18
[  907.412483][T14740] loop6: detected capacity change from 0 to 32768
[  907.443671][T14740] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2307 (14740)
[  907.472896][T14750] 9p: Bad value for 'wfdno'
[  908.684174][T14740] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  908.720088][T14740] BTRFS info (device loop6): using crc32c checksum algorithm
[  908.968898][T14740] BTRFS info (device loop6): enabling ssd optimizations
[  909.055915][T14740] BTRFS info (device loop6): turning on flush-on-commit
[  909.077013][T14740] BTRFS info (device loop6): enabling free space tree
[  909.624834][T14740] BTRFS info (device loop6): enabling auto defrag
[  909.660854][T14740] BTRFS info (device loop6): use lzo compression, level 1
[  909.669653][T14740] BTRFS info (device loop6): max_inline set to 4096
[  909.817139][T10550] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  909.829276][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'.
[  909.908012][T14784] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  909.938528][T14784] bond0 (unregistering): Released all slaves
[  910.243913][ T5931] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  911.024191][T14799] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2322'.
[  911.050408][ T5931] usb 6-1: Using ep0 maxpacket: 8
[  911.110117][ T5931] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  911.129567][ T5931] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  911.164661][ T5931] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  911.354832][ T5931] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  911.410268][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.447724][ T5931] usbtmc 6-1:16.0: bulk endpoints not found
[  912.722245][T14810] ------------[ cut here ]------------
[  912.727874][T14810] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)
[  912.747828][T14810] WARNING: kernel/bpf/verifier.c:2850 at reg_bounds_sanity_check+0x201/0xc30, CPU#1: syz.6.2324/14810
[  912.758877][T14810] Modules linked in:
[  912.762824][T14810] CPU: 1 UID: 0 PID: 14810 Comm: syz.6.2324 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  912.773852][T14810] Tainted: [L]=SOFTLOCKUP
[  912.778483][T14810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  912.788812][T14810] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30
[  912.795389][T14810] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84
[  912.815436][T14810] RSP: 0018:ffffc900052eef30 EFLAGS: 00010246
[  912.821696][T14810] RAX: dffffc0000000000 RBX: 1ffff1100f63c004 RCX: 0000000000000000
[  912.829745][T14810] RDX: ffffffff8bd479e0 RSI: ffffffff8bd501c0 RDI: ffffffff9035b220
[  912.837779][T14810] RBP: 00000000ffffffff R08: 0000007800000000 R09: 0000000000000000
[  912.845789][T14810] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88807b1e0020
[  912.853854][T14810] R13: 0000000000000000 R14: 1ffff1100f63c003 R15: 0000000000000000
[  912.861930][T14810] FS:  00007f22f722e6c0(0000) GS:ffff88812535c000(0000) knlGS:0000000000000000
[  912.871086][T14810] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  912.877794][T14810] CR2: 000020000000e000 CR3: 00000000217ae000 CR4: 00000000003526f0
[  912.885920][T14810] Call Trace:
[  912.889349][T14810]  <TASK>
[  912.892305][T14810]  reg_set_min_max+0x28c/0x340
[  912.897126][T14810]  check_cond_jmp_op+0x1db1/0x3270
[  912.902272][T14810]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  912.907827][T14810]  ? bpf_reset_stack_write_marks+0x1eb/0x260
[  912.913863][T14810]  do_check+0x7938/0x105f0
[  912.918355][T14810]  ? __pfx_do_check+0x10/0x10
[  912.923062][T14810]  ? init_func_state+0x1ad5/0x2910
[  912.928233][T14810]  do_check_common+0x1a21/0x2600
[  912.933202][T14810]  bpf_check+0x23b2/0x1ccc0
[  912.937938][T14810]  ? rcu_is_watching+0x15/0xb0
[  912.942731][T14810]  ? __schedule+0x1672/0x5520
[  912.947531][T14810]  ? __lock_acquire+0x6b5/0x2cf0
[  912.952518][T14810]  ? css_rstat_updated+0x23a/0x530
[  912.957665][T14810]  ? __pfx_css_rstat_updated+0x10/0x10
[  912.963145][T14810]  ? __lock_acquire+0x6b5/0x2cf0
[  912.968142][T14810]  ? pcpu_memcg_post_alloc_hook+0x2a4/0x630
[  912.974073][T14810]  ? pcpu_memcg_post_alloc_hook+0x2a4/0x630
[  912.980030][T14810]  ? ktime_get_with_offset+0x93/0x2d0
[  912.985591][T14810]  ? __pfx_bpf_check+0x10/0x10
[  912.990529][T14810]  ? ktime_get_with_offset+0x93/0x2d0
[  912.995929][T14810]  ? ktime_get_with_offset+0x93/0x2d0
[  913.001408][T14810]  ? __asan_memset+0x22/0x50
[  913.006032][T14810]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  913.011291][T14810]  ? security_bpf_prog_load+0x125/0x3c0
[  913.017067][T14810]  bpf_prog_load+0x1484/0x1ae0
[  913.021892][T14810]  ? try_to_wake_up+0x828/0x1380
[  913.026931][T14810]  ? __pfx_bpf_prog_load+0x10/0x10
[  913.032100][T14810]  ? rcu_is_watching+0x15/0xb0
[  913.036968][T14810]  ? __sanitizer_cov_trace_pc+0x45/0x70
[  913.042552][T14810]  ? security_bpf+0x7e/0x2d0
[  913.047196][T14810]  __sys_bpf+0x618/0x950
[  913.051477][T14810]  ? __pfx___sys_bpf+0x10/0x10
[  913.056259][T14810]  ? rcu_is_watching+0x15/0xb0
[  913.061078][T14810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.067202][T14810]  __x64_sys_bpf+0x7c/0x90
[  913.071660][T14810]  do_syscall_64+0x15f/0xf80
[  913.076356][T14810]  ? trace_irq_disable+0x3b/0x140
[  913.081476][T14810]  ? clear_bhb_loop+0x40/0x90
[  913.086300][T14810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.092353][T14810] RIP: 0033:0x7f22f639c819
[  913.096839][T14810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  913.116677][T14810] RSP: 002b:00007f22f722e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  913.125144][T14810] RAX: ffffffffffffffda RBX: 00007f22f6616180 RCX: 00007f22f639c819
[  913.133215][T14810] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  913.141241][T14810] RBP: 00007f22f6432c91 R08: 0000000000000000 R09: 0000000000000000
[  913.149282][T14810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  913.157303][T14810] R13: 00007f22f6616218 R14: 00007f22f6616180 R15: 00007ffefd6b2038
[  913.165334][T14810]  </TASK>
[  913.168418][T14810] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  913.175686][T14810] CPU: 1 UID: 0 PID: 14810 Comm: syz.6.2324 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  913.186614][T14810] Tainted: [L]=SOFTLOCKUP
[  913.190936][T14810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  913.200985][T14810] Call Trace:
[  913.204257][T14810]  <TASK>
[  913.207191][T14810]  vpanic+0x56c/0xa60
[  913.211254][T14810]  ? __pfx__printk+0x10/0x10
[  913.215840][T14810]  ? __pfx_vpanic+0x10/0x10
[  913.220327][T14810]  ? is_bpf_text_address+0x292/0x2b0
[  913.225598][T14810]  ? is_bpf_text_address+0x26/0x2b0
[  913.230786][T14810]  panic+0xc5/0xd0
[  913.234495][T14810]  ? __pfx_panic+0x10/0x10
[  913.238906][T14810]  __warn+0x315/0x4c0
[  913.242877][T14810]  ? reg_bounds_sanity_check+0x201/0xc30
[  913.248496][T14810]  ? reg_bounds_sanity_check+0x201/0xc30
[  913.254124][T14810]  __report_bug+0x29a/0x540
[  913.258696][T14810]  ? __pfx_stack_trace_save+0x10/0x10
[  913.264076][T14810]  ? reg_bounds_sanity_check+0x201/0xc30
[  913.269803][T14810]  ? __pfx___report_bug+0x10/0x10
[  913.274824][T14810]  ? check_cond_jmp_op+0x1c51/0x3270
[  913.280103][T14810]  ? do_check+0x7938/0x105f0
[  913.284681][T14810]  ? do_check_common+0x1a21/0x2600
[  913.289781][T14810]  ? bpf_check+0x23b2/0x1ccc0
[  913.294445][T14810]  ? bpf_prog_load+0x1484/0x1ae0
[  913.299369][T14810]  ? __sys_bpf+0x618/0x950
[  913.303770][T14810]  ? __x64_sys_bpf+0x7c/0x90
[  913.308345][T14810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.314401][T14810]  report_bug_entry+0x19a/0x290
[  913.319242][T14810]  ? reg_bounds_sanity_check+0x3e6/0xc30
[  913.324889][T14810]  ? reg_bounds_sanity_check+0x3eb/0xc30
[  913.330508][T14810]  handle_bug+0xce/0x200
[  913.334805][T14810]  exc_invalid_op+0x1a/0x50
[  913.339297][T14810]  asm_exc_invalid_op+0x1a/0x20
[  913.344131][T14810] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30
[  913.350369][T14810] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84
[  913.369961][T14810] RSP: 0018:ffffc900052eef30 EFLAGS: 00010246
[  913.376019][T14810] RAX: dffffc0000000000 RBX: 1ffff1100f63c004 RCX: 0000000000000000
[  913.383973][T14810] RDX: ffffffff8bd479e0 RSI: ffffffff8bd501c0 RDI: ffffffff9035b220
[  913.391939][T14810] RBP: 00000000ffffffff R08: 0000007800000000 R09: 0000000000000000
[  913.399909][T14810] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88807b1e0020
[  913.407874][T14810] R13: 0000000000000000 R14: 1ffff1100f63c003 R15: 0000000000000000
[  913.415856][T14810]  reg_set_min_max+0x28c/0x340
[  913.420622][T14810]  check_cond_jmp_op+0x1db1/0x3270
[  913.425735][T14810]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  913.431184][T14810]  ? bpf_reset_stack_write_marks+0x1eb/0x260
[  913.437186][T14810]  do_check+0x7938/0x105f0
[  913.441631][T14810]  ? __pfx_do_check+0x10/0x10
[  913.446292][T14810]  ? init_func_state+0x1ad5/0x2910
[  913.451394][T14810]  do_check_common+0x1a21/0x2600
[  913.456341][T14810]  bpf_check+0x23b2/0x1ccc0
[  913.460838][T14810]  ? rcu_is_watching+0x15/0xb0
[  913.465584][T14810]  ? __schedule+0x1672/0x5520
[  913.470250][T14810]  ? __lock_acquire+0x6b5/0x2cf0
[  913.475195][T14810]  ? css_rstat_updated+0x23a/0x530
[  913.480296][T14810]  ? __pfx_css_rstat_updated+0x10/0x10
[  913.485743][T14810]  ? __lock_acquire+0x6b5/0x2cf0
[  913.490674][T14810]  ? pcpu_memcg_post_alloc_hook+0x2a4/0x630
[  913.496557][T14810]  ? pcpu_memcg_post_alloc_hook+0x2a4/0x630
[  913.502447][T14810]  ? ktime_get_with_offset+0x93/0x2d0
[  913.507813][T14810]  ? __pfx_bpf_check+0x10/0x10
[  913.512559][T14810]  ? ktime_get_with_offset+0x93/0x2d0
[  913.517928][T14810]  ? ktime_get_with_offset+0x93/0x2d0
[  913.523315][T14810]  ? __asan_memset+0x22/0x50
[  913.527889][T14810]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  913.533069][T14810]  ? security_bpf_prog_load+0x125/0x3c0
[  913.538604][T14810]  bpf_prog_load+0x1484/0x1ae0
[  913.543355][T14810]  ? try_to_wake_up+0x828/0x1380
[  913.548279][T14810]  ? __pfx_bpf_prog_load+0x10/0x10
[  913.553372][T14810]  ? rcu_is_watching+0x15/0xb0
[  913.558126][T14810]  ? __sanitizer_cov_trace_pc+0x45/0x70
[  913.563672][T14810]  ? security_bpf+0x7e/0x2d0
[  913.568249][T14810]  __sys_bpf+0x618/0x950
[  913.572478][T14810]  ? __pfx___sys_bpf+0x10/0x10
[  913.577242][T14810]  ? rcu_is_watching+0x15/0xb0
[  913.582005][T14810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.588054][T14810]  __x64_sys_bpf+0x7c/0x90
[  913.592455][T14810]  do_syscall_64+0x15f/0xf80
[  913.597033][T14810]  ? trace_irq_disable+0x3b/0x140
[  913.602047][T14810]  ? clear_bhb_loop+0x40/0x90
[  913.606704][T14810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.612601][T14810] RIP: 0033:0x7f22f639c819
[  913.617005][T14810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  913.636607][T14810] RSP: 002b:00007f22f722e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  913.645020][T14810] RAX: ffffffffffffffda RBX: 00007f22f6616180 RCX: 00007f22f639c819
[  913.652978][T14810] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  913.660937][T14810] RBP: 00007f22f6432c91 R08: 0000000000000000 R09: 0000000000000000
[  913.668942][T14810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  913.676912][T14810] R13: 00007f22f6616218 R14: 00007f22f6616180 R15: 00007ffefd6b2038
[  913.684907][T14810]  </TASK>
[  913.688424][T14810] Kernel Offset: disabled
[  913.692740][T14810] Rebooting in 86400 seconds..