last executing test programs:

12m52.990510903s ago: executing program 32 (id=3):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=")
mknod$loop(0x0, 0x100000000000600d, 0x1)
r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
fadvise64(r5, 0x8, 0xb098, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bind$inet(r0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)

12m51.12383808s ago: executing program 33 (id=10):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

11m37.066790966s ago: executing program 34 (id=160):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007ee4469f2ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

10m58.837993862s ago: executing program 35 (id=242):
ioperm(0x0, 0x2, 0x7e)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000"], 0x48)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x5c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001280)=@newtaction={0x850, 0x30, 0x12f, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x577f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x850}}, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
r7 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x80, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xaca80000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xec}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x54231577}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x100}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8c4}, 0x800)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
syz_clone(0x40804000, 0x0, 0x0, 0x0, 0x0, 0x0)

9m42.156991248s ago: executing program 8 (id=488):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e300000000000000000000000080004000000000034002b8008000100", @ANYRES32, @ANYBLOB="110008"], 0x8c}}, 0x0)

9m41.806922053s ago: executing program 8 (id=491):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000b00000096f5000000"], 0x18}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9m40.526994022s ago: executing program 8 (id=493):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="02"])
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100090000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4800}, 0x10)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9m38.919251146s ago: executing program 8 (id=496):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4f, 0x5, 0x8, 0x4fec, 0x4, 0x8, 0x1, 0x4, 0x2, 0x3, 0x95, 0x400, 0xfff7, 0x8, 0x6, 0xc3, [0x1, 0x9]}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x14}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]})
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

9m36.811244467s ago: executing program 8 (id=499):
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000034ed00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x9f, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4)

9m30.460774221s ago: executing program 8 (id=519):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000240)={0x0})
madvise(&(0x7f000008f000/0x4000)=nil, 0x4000, 0xa)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioprio_set$pid(0x0, r0, 0x4007)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000", @ANYBLOB], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

9m15.330775085s ago: executing program 36 (id=519):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000240)={0x0})
madvise(&(0x7f000008f000/0x4000)=nil, 0x4000, 0xa)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioprio_set$pid(0x0, r0, 0x4007)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000", @ANYBLOB], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

9m12.523298237s ago: executing program 3 (id=563):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f0000000340)='%pS    \x00'}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbf368656e065b08"], 0x0)

9m11.571329071s ago: executing program 3 (id=566):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x32, 0x1c, 0x66, 0x0, 0x2, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010100}, {0x22, 0xe, 0x0, @loopback}}}}}, 0x0)

9m10.98343574s ago: executing program 3 (id=572):
socket(0x1d, 0x5, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
munlockall()
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f0000000800)=""/163}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

9m9.472962392s ago: executing program 3 (id=575):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0, <r0=>0x0})
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = getpid()
setpriority(0x1, r6, 0x900000000000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r8, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

9m0.335127507s ago: executing program 3 (id=594):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
fremovexattr(r0, &(0x7f0000000240)=@known='system.sockprotoname\x00')
getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x13, &(0x7f00000003c0)=""/19, 0x41100, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), &(0x7f0000000dc0), 0x10, 0x3, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/shm\x00', 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r5)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

8m56.722721181s ago: executing program 3 (id=602):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe(&(0x7f0000000140))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100030000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
chdir(0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10)

8m40.840305767s ago: executing program 37 (id=602):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe(&(0x7f0000000140))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100030000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
chdir(0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10)

5m51.507060112s ago: executing program 7 (id=1011):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300)='ip6_vti0\x00', 0x10)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r5=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r5}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r0, &(0x7f0000000080), 0x10)

5m45.503158432s ago: executing program 7 (id=1018):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
userfaultfd(0x801)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10)
chdir(&(0x7f0000000000)='./file0\x00')

5m43.999606554s ago: executing program 7 (id=1022):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000880)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r6, 0x0, 0x0, 0x0, 0x0)
r7 = request_key(0x0, &(0x7f0000000bc0)={'syz', 0x2}, 0x0, 0x0)
r8 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r8, 0x0, &(0x7f0000000140)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`P3%\xfa\xbf\xef\xeb\x8e1w\xfd')
keyctl$invalidate(0x15, r7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32], 0x94}}, 0x0)

5m39.093349576s ago: executing program 7 (id=1030):
mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0xf0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
chdir(&(0x7f00000000c0)='./bus\x00')
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60)
getdents(r2, &(0x7f0000000140)=""/194, 0xc2)
socket$nl_netfilter(0x10, 0x3, 0xc)

5m37.085830646s ago: executing program 7 (id=1034):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
userfaultfd(0x801)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10)
chdir(&(0x7f0000000000)='./file0\x00')

5m35.943006413s ago: executing program 7 (id=1036):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe(&(0x7f0000000140))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100030000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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")
chdir(0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10)

5m20.787174328s ago: executing program 38 (id=1036):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe(&(0x7f0000000140))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100030000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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")
chdir(0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10)

2m56.511766213s ago: executing program 1 (id=1472):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1)
lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]})
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3]})
fcntl$getflags(r2, 0x3)
socket$key(0xf, 0x3, 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="80008f0b0a00"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x727a, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_usb_connect(0x0, 0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201000090a805406708129885400000000109022c00"], 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='io.stat\x00', 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
unshare(0x2a020400)

2m52.447351643s ago: executing program 1 (id=1485):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2m51.34557621s ago: executing program 1 (id=1489):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, &(0x7f0000000140), &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}, {0x80, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x8000, 0xa, [0x3b, 0x4, 0x13, 0x38, 0x5, 0x22, 0x23, 0x26, 0xd, 0x23, 0x9, 0x3e, 0x7, 0x36, 0x0, 0xf], 0x45b7d282eb3cfcc0, 0x2, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)

2m51.130713043s ago: executing program 1 (id=1490):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0x10000, 0x19, "88bd91aa90758062b5fffd9272e301aa98af75"})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = dup(r0)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1})
ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000480)=0x1)
fstat(0xffffffffffffffff, 0x0)

2m45.91525984s ago: executing program 1 (id=1499):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}]}]}, 0x28}}, 0x40)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x6, 0x54, 0x1a, @local, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20, 0x80, 0x3, 0xfffffff7}})

2m45.577155405s ago: executing program 1 (id=1502):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
epoll_create(0x401)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r2, 0x40044590, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="000000000007fe0000007b4d91da391d26c68af8ff0000000006a200000000000007020000f8ffbfaf2f0efc249bf00000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000d06000)=0x1, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES8=r2], 0xfc}, 0x1, 0x0, 0x0, 0x34000815}, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3)
r7 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x20)
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8)

2m29.801585619s ago: executing program 39 (id=1502):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
epoll_create(0x401)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r2, 0x40044590, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="000000000007fe0000007b4d91da391d26c68af8ff0000000006a200000000000007020000f8ffbfaf2f0efc249bf00000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000d06000)=0x1, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES8=r2], 0xfc}, 0x1, 0x0, 0x0, 0x34000815}, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3)
r7 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x20)
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8)

1m20.512975888s ago: executing program 6 (id=1697):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1m20.292448181s ago: executing program 6 (id=1698):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x800)

1m19.152384788s ago: executing program 6 (id=1701):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000840)={[{@nobarrier}, {@noblock_validity}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@acl}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@grpjquota, 0x32}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}, 0x1e, 0x4e1, &(0x7f0000000a40)="$eJzs3UFvG1kdAPD/OHGbtClJBYdSiVLRoqSC2klD24hDAQnBqRJQ7iUkThTFiaPYaZuoglR8ACSEAIkTJy5IfAAk1I+AkCrBfbW72tVqt9097GG3Xnlsd9PUbhLVsaP495Om897M2P//c+Nnv5knTwB962JEXIuI59VqtVYfbWzPNJZIImK7ftyzpw/naksS1eqdD5N0V61eO2xix3Oerj8khiLiFz+N+HXyatzy5tbybLFYWG/U85WVtXx5c+vq0srsYmGxsDo9PXVj5ubM9ZnJjrRzJCJu/fjdP/3+7z+59e/v3n/r7vsTv0ka22NHOzqt3vRs+lo0DUbE+mEE64GBRnuyvU4EAIB9aX7P/1ZEXInRGEi/zQEAAADHSfUHI/FZElFtYajl1pedbLdjaO/HAgAAAN2RSefAJplcYx7ASGQyuVx9Du/X4lSmWCpXvrNQ2lidr8+VHYtsZmGpWJhszBUei2xSq0+l5S/r13bVpyPibET8cXR4OJaKhdxcqTjf65MfAAAA0CdO7xr/fzJaH/8DAAAAx8xYrxMAAAAADp3xPwAAABx/xv8AAABwrP3s9u3aUm3e/3r+3ubGcune1flCeTm3sjGXmyutr+UWS6XF9Df7VvZ6vmKptPa9WN14kK8UypV8eXPr7kppY7Vyd+mlW2ADAAAAXXT2m4//n0TE9veH06XmRK+TArpi8CAHv3N4eQDdN9DrBICeOdDnP3CsZHudANBzyR77207e+U/ncwEAAA7H+NdbX/9P9jw3sJ3pUorAIXH+D/qX6//Qv1z/h/6VjYEwkIf+dvjX/6vVAyUEAAB03Ei6JJlcRHoeYCQymVwu4kx6W4BssrBULExGxFci4n+j2ZO1+lT6yGTPMQMAAAAAAAAAAAAAAAAAAAAAAAAAUFetJlEFAAAAjrWIzHtJ4/5f46OXR3afHziRfDqariPi/l/v/PnBbKWyPlXb/tGL7ZW/NLZf68UZDAAAAGC35ji9OY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE569vThXHPpZtwPfhQRY63iD8ZQuh6KwYg49XGSrpuSiBjoQPztRxFxrlX8pJZWjDWyaBV/uIfxMxFxugPxoZ89rvU/P2z1/svExXTd+v13I+2h3lzb/i9pHjGU9nOt+p8z+4xx/sk/823jP4o4P9i6/2n2v0mb+Jf2Gf9Xv9zaarev+reI8ZafP8lLsfKVlbV8eXPr6tLK7GJhsbA6PT11Y+bmzPWZyfzCUrHQ+HdHl3zxRekP3/jX89e1/1Sb+GN7tP/yPtv/+ZMHT79aL2ZbxZ+41Prv71yb+JnGZ9+3G+Xa/vFmebte3unCP/574XXtn6+3f/Cg//8T+2z/lZ//7u19HgoAdEF5c2t5tlgsrPd14Y1ejdrXoiPRisMsDMeRSKPDhd8ejTSOZKG3/RIAANB5r46BAQAAAAAAAAAAAAAAAAAAgG7r5q/rNW33pqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK/1RQAAAP//2jzOsg==")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x18)
utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r8, r9, 0x0, 0x20000023896)

1m17.185857757s ago: executing program 6 (id=1704):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
r0 = creat(&(0x7f0000000340)='./bus\x00', 0x11a)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r2, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000000010001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
capset(0x0, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x81, 0xfffffffb, 0x5f5})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000016c0)={<r3=>0x0}, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001740)={'\x00', 0x81, 0xa, 0x2, 0x0, 0x0, r3})

1m14.855256972s ago: executing program 6 (id=1711):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0x7, 0xd8, &(0x7f0000000180)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
preadv(r0, &(0x7f00000000c0), 0x0, 0xfffffffb, 0xa)

1m11.57440635s ago: executing program 6 (id=1717):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1)
lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]})
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3]})
fcntl$getflags(r2, 0x3)
socket$key(0xf, 0x3, 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="80008f0b0a00"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x727a, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=<r6=>0x0, 0x0)
syz_usb_connect(0x0, 0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201000090a805406708129885400000000109022c00"], 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='io.stat\x00', 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
unshare(0x2a020400)

1m10.747897143s ago: executing program 40 (id=1717):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1)
lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]})
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3]})
fcntl$getflags(r2, 0x3)
socket$key(0xf, 0x3, 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="80008f0b0a00"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x727a, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=<r6=>0x0, 0x0)
syz_usb_connect(0x0, 0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201000090a805406708129885400000000109022c00"], 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='io.stat\x00', 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
unshare(0x2a020400)

34.526807048s ago: executing program 2 (id=1787):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r3, 0x851, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x0)

30.859529143s ago: executing program 2 (id=1791):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
ftruncate(0xffffffffffffffff, 0x2)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltclass={0x40, 0x29, 0x4, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {0x6, 0xa}, {0x8, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x57, 0x7a}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x41)
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
fanotify_init(0x202, 0x0)
fanotify_mark(r0, 0x2, 0x48000014, r4, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a0000000000000000000000ff9774261525b9f33c3371e21c2119ce09ffe0000002ff02000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000ff0100000000000000000000000000013a01000000000000"], 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000203010100000000000000000000001008000100010000150800034000000008"], 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000340)=@sg0, 0x0, &(0x7f0000000380)='./file0\x00')

28.232973442s ago: executing program 2 (id=1798):
r0 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r4 = inotify_init1(0x80000)
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0xa4000061)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fcntl$setstatus(r6, 0x4, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
splice(r5, 0x0, r6, 0x0, 0x7, 0x9)
write$P9_RWRITE(r6, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="611568000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

24.907761601s ago: executing program 2 (id=1804):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
epoll_create(0x401)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r2, 0x40044590, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="000000000007fe0000007b4d91da391d26c68af8ff0000000006a200000000000007020000f8ffbfaf2f0efc249bf00000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000d06000)=0x1, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES8=r2], 0xfc}, 0x1, 0x0, 0x0, 0x34000815}, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3)
r8 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x20)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)

21.347166934s ago: executing program 2 (id=1814):
socket(0x10, 0x803, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000880)=""/215, 0xd7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r3, 0xffff8000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3)
r7 = landlock_create_ruleset(&(0x7f0000000280)={0x2050, 0x0, 0x1}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2000}, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2)
rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000000380))
r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00')
read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020)

16.431488566s ago: executing program 2 (id=1833):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @loopback}, {0x0, 0x17c1, 0x8}}}}}, 0x0)
close(r1)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

15.677460518s ago: executing program 5 (id=1837):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10)
socket$unix(0x1, 0x5, 0x0)
listen(0xffffffffffffffff, 0xbc)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

14.343194557s ago: executing program 5 (id=1840):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xe4, 0x0, 0x6387, 0x6}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x40810)

14.067105882s ago: executing program 5 (id=1843):
socket(0x10, 0x803, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000880)=""/215, 0xd7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r3, 0xffff8000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3)
r7 = landlock_create_ruleset(&(0x7f0000000280)={0x2050, 0x0, 0x1}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2000}, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2)
rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000000380))
r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00')
read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020)

11.548239219s ago: executing program 0 (id=1848):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0)

10.937288998s ago: executing program 0 (id=1849):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f00000003c0), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x641, 0x1c3)
io_setup(0x1, 0x0)
eventfd(0x7)
fallocate(r0, 0x10, 0x2, 0x807c27)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1f)

9.327286111s ago: executing program 0 (id=1851):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_clone(0x12002000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000008fc8d4cb3927ebe405e97559a6a544452a6b87a"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000001f0e1e64122d378ac92e69c80e9b46371dd7c97ae827914012c8c1a83723f48dc5abeb42148c6261e17cee82f3f163f49bf56193cc0f2fdc86a2ec04a6204542910e33203d96c2bbb7a0c692fd46a985d3308d3eed87fa3f73beaf2bef65cccdefe69eaa978e14bd87779b3da9638a03946dcfee77a96517"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
wait4(r1, 0x0, 0x1000000, &(0x7f0000000380))
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

8.875967678s ago: executing program 5 (id=1853):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
epoll_create(0x401)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r2, 0x40044590, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="000000000007fe0000007b4d91da391d26c68af8ff0000000006a200000000000007020000f8ffbfaf2f0efc249bf00000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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")
setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000d06000)=0x1, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES8=r2], 0xfc}, 0x1, 0x0, 0x0, 0x34000815}, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3)
r8 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x20)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)

8.820563989s ago: executing program 9 (id=1854):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r0, 0xffff, 0x1, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000)

8.403328475s ago: executing program 9 (id=1855):
syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="4a3a9f8c2aab73255ecca15a5ad5b0b10a818868cc63e509dca434325eec52c449bc0f78c4d4996b7c34f8c4027731d8084daf83fa32ac4f26093d06abe1c066b64b56d81577ccc09ee10fa7258f8c9a08a6fa6f21d52366469e697011812e7133138514e15b9fe1f64a7d3062ee9a77ca0a5d9f6af20321dc3f0f0577b860b69773048ec9a9a6d40e94d2f4aca5a132897494efd6232446f0d416f1a75c1e7e1e233ad655fc58f85c"], 0xff, 0x6de, &(0x7f0000000180)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000040)=""/40, 0x28)
getdents64(r0, 0xfffffffffffffffe, 0x29)

7.990632402s ago: executing program 9 (id=1856):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
ftruncate(0xffffffffffffffff, 0x2)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltclass={0x40, 0x29, 0x4, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {0x6, 0xa}, {0x8, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x96}}, @TCA_RATE={0x6, 0x5, {0x57, 0x7a}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x41)
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
fanotify_init(0x202, 0x0)
fanotify_mark(r0, 0x2, 0x48000014, r4, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a0000000000000000000000ff9774261525b9f33c3371e21c2119ce09ffe0000002ff02000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000ff0100000000000000000000000000013a01000000000000"], 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000203010100000000000000000000001008000100010000150800034000000008"], 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000340)=@sg0, 0x0, &(0x7f0000000380)='./file0\x00')

7.249178482s ago: executing program 4 (id=1858):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000000)=0xb, 0x4)
close(r6)
r7 = openat(0xffffffffffffff9c, 0x0, 0x641, 0x0)
flock(r7, 0x2)
flock(0xffffffffffffffff, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x10000)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000140)={0x4, 0x1})
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0x10000, 0x3, 0x0, 0x0, 0x2, 0x1c0, 0x2, 0x10000, 0x1ff, 0x0, [{0x8, 0x9, 0x4}, {0x1, 0x6, 0x4}]})

6.05752746s ago: executing program 4 (id=1859):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

4.971460836s ago: executing program 4 (id=1860):
r0 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)={0x30000000})

4.621818071s ago: executing program 4 (id=1861):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xe8, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xb8, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

4.535624013s ago: executing program 9 (id=1862):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = fanotify_init(0x0, 0x1)
unshare(0x22020600)
fanotify_mark(r0, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = creat(0x0, 0x4b)
close(r1)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'veth0_virt_wifi\x00'})

4.143186708s ago: executing program 9 (id=1863):
socket(0x10, 0x803, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000880)=""/215, 0xd7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r3, 0xffff8000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3)
r7 = landlock_create_ruleset(&(0x7f0000000280)={0x2050, 0x0, 0x1}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2000}, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2)
rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000000380))
r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00')
read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020)

2.03607335s ago: executing program 0 (id=1864):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='b *:*\t'], 0xa)

1.810989243s ago: executing program 0 (id=1865):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe)
listen(r0, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20020600)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x400000000000000, 0x0, 0xfffffffffffffffc, 0x800}, 0x0, &(0x7f0000000240)={0x21f, 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x7}, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000280)={[{@nombcache}, {@nobh}, {@norecovery}, {@commit={'commit', 0x3d, 0x7}}, {@nombcache}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$eJzs3c1vFVUbAPBnpp+07/u2kDcqLqSJMZAoLS1giDER9oTgx85VpYUghRJao0USS4IbE+PGhYkrF+J/oSRuXbh14caVISHGsBBD5Jq5nSnT23tLv+69pff3S4aeM8Odc6bw9Jl7es7cADrWSPZHGrE/Iq4mEUOlY92RHxxZ+nv3/7xxLtuSqFTe/iOJG58ki+VzJfnXwfzF/wxF8nMasa9rdbtzC9cvTc7MTF/L62Pzl6+OzS1cP3zx8uSF6QvTVyZenThx/NjxE+NHtnR9aal8+tb7Hw59dubdb79+mIx/9+uZJE7Go7xv2XXVvrZvSy1n37ORqCx5UN6ffV9PbPHcO8VfQ8X/k8eS2h3sWOcjIouwnoh4Noaiq/SvORSfvtnWzgFNVUmiyFFAx0k2Ff/9298RoMWK+4DivX2998GrpU2+KwFa4d6ppQGppdjviYgi/ruXxgajvzo2MHA/WTHOk+TjBluVtfHTj2duZVs0GIcDmmPxZjHKXZv/k2psDkd/tTZwP10R/2lpy/a/tcn2R2rq4h9aZ/FmRDyX5//e2FD8j5Ti/71Nti/+AQAAAAAAYPvcORURr9Sb/5cuz//prTP/ZzAiTm5D+0/+/V96Ny8k29AcUHLvVMTrdef/Ls/xHe7Ka/+tzgfoSc5fnJk+EhH/i4hD0dOX1cdrzlueIXz4831fNWq/PP8v27L2i7mA+ZnudtcsxJ2anJ/c6nUDEfduRjxfnf97IN+zcv5Plv+TOvk/i++r62xj30u3zzY69uT4B5ql8k3Ewbr5//HtdrL28znGqvcDY8VdwWovfPzF943aF//QPln+H1g7/vuS8vN65jZ2/t6IOLrQXWl0fLP3/73JO13F+TMfTc7PXxuP6E1Or94/sbE+w25VxEMRL1n8H3px7fG/5fv/UhzuiYjFdbb5zKPB3xodk/+hfbL4n1o7/w+vzP8bL0zcHv6hUftn15X/j1Vz+qF8j/E/KFv9PI71BmhbugsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT7k0Iv4TSTq6XE7T0dGIwYj4fwykM7Nz8y+fn/3gylR2rPr5/2nxSb9DS/Wk+Pz/4VJ9oqZ+NCL2RsSXXXuq9dFzszNT7b54AAAAAAAAAAAAAAAAAAAA2CEGq2v+K3216/8zv3e1u3dA03XnX8U7dJ7uTb+y0retHQFabvPxDzzt1h//PU3tB9B6jeP/wcNKVUu7A7SQ+3/oXJuMf78ugF1A/odOtc4xvf5m9wNoB/kfAAAAAAB2lb0H7vySRMTia3uqW6Y3P2ayP+xuabs7ALSNObzQubpn290DoF28xweS5dLfdRf7N579nzSnQwAAAAAAAAAAAADAKgf3W/8PnWrt9f/m9sNutsb6/3rB73EBsIs0/ugPuR92O+/xgSdle+v/AQAAAAAAAAAAAGAH6L9+aXJmZvra3MLTV3hjZ3RjY4XFyR3RjW0tPGrOmXsiYmdcYKsLxSM42tiNNv9cAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlv0bAAD//1VjJ6k=")
ppoll(&(0x7f00000000c0)=[{r0, 0xc204}, {0xffffffffffffffff, 0xc2}], 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x0)

1.418543069s ago: executing program 9 (id=1866):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000180)="12040e00e0ff030002004788aa96a13bb1000000000086ddffff", 0x70, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

1.37591404s ago: executing program 41 (id=1833):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @loopback}, {0x0, 0x17c1, 0x8}}}}}, 0x0)
close(r1)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

1.208628232s ago: executing program 4 (id=1868):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xffffffc0, 0xce30, 0xfffff801, 0x4, 0x1, "6e29efcae4ed690034357541de3350304205d2", 0x800, 0x9})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xd)

1.129869913s ago: executing program 5 (id=1869):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000000)=0xb, 0x4)
close(r6)
r7 = openat(0xffffffffffffff9c, 0x0, 0x641, 0x0)
flock(r7, 0x2)
flock(0xffffffffffffffff, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x10000)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0x10000, 0x3, 0x0, 0x0, 0x2, 0x1c0, 0x2, 0x10000, 0x1ff, 0x0, [{0x8, 0x9, 0x4}, {0x1, 0x6, 0x4}]})

1.052469444s ago: executing program 4 (id=1870):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000200)=ANY=[], 0x5, 0x62c, &(0x7f0000000640)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

791.004878ms ago: executing program 0 (id=1871):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000001c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000000c0), 0x3, &(0x7f00000004c0)=""/16}, 0x8}], 0x5f0, 0x2010, 0x0)
r1 = socket$inet(0x2, 0x5, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000500)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x3, 0x0, 0x2}}, {@mpls_mc}}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
socket$kcm(0x29, 0x2, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

0s ago: executing program 5 (id=1872):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
ftruncate(0xffffffffffffffff, 0x2)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltclass={0x40, 0x29, 0x4, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {0x6, 0xa}, {0x8, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x96}}, @TCA_RATE={0x6, 0x5, {0x57, 0x7a}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x41)
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
fanotify_init(0x202, 0x0)
fanotify_mark(r0, 0x2, 0x48000014, r4, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a0000000000000000000000ff9774261525b9f33c3371e21c2119ce09ffe0000002ff02000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000ff0100000000000000000000000000013a01000000000000"], 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000203010100000000000000000000001008000100010000150800034000000008"], 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000340)=@sg0, 0x0, &(0x7f0000000380)='./file0\x00')

kernel console output (not intermixed with test programs):

, Product=2, SerialNumber=3
[  460.125750][  T126] usb 10-1: Product: syz
[  460.156352][  T126] usb 10-1: Manufacturer: syz
[  460.163481][  T126] usb 10-1: SerialNumber: syz
[  460.186990][  T126] usb 10-1: config 0 descriptor??
[  460.223185][  T126] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244)
[  460.906961][ T8486] loop4: detected capacity change from 0 to 256
[  461.762276][  T126] radio-usb-si4713: probe of 10-1:0.0 failed with error -32
[  461.830053][  T126] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  462.668917][ T8504] loop7: detected capacity change from 0 to 512
[  465.697562][ T8504] EXT4-fs: failed to create workqueue
[  465.702971][ T8504] EXT4-fs (loop7): mount failed
[  466.507143][ T8513] kvm [8512]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  468.109422][ T4337] usb 10-1: USB disconnect, device number 6
[  470.173629][ T8561] loop2: detected capacity change from 0 to 256
[  472.965028][ T8561] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9d80cab, utbl_chksum : 0xe619d30d)
[  473.915088][ T8573] kvm [8572]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  475.397184][ T4300] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  476.397150][ T4300] usb 3-1: Using ep0 maxpacket: 8
[  476.532635][ T4300] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  476.571120][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.726317][ T4300] usb 3-1: Product: syz
[  476.777317][ T4300] usb 3-1: Manufacturer: syz
[  476.790113][ T4300] usb 3-1: SerialNumber: syz
[  476.840107][ T4300] usb 3-1: config 0 descriptor??
[  476.883342][ T4300] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244)
[  478.491171][ T4300] radio-usb-si4713: probe of 3-1:0.0 failed with error -32
[  478.531103][ T4300] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  481.027008][ T4303] usb 3-1: USB disconnect, device number 3
[  481.214119][ T8664] loop2: detected capacity change from 0 to 512
[  481.270541][ T8664] EXT4-fs: Ignoring removed mblk_io_submit option
[  481.324854][ T8664] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  481.367218][ T8664] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  481.441001][ T8664] __quota_error: 3 callbacks suppressed
[  481.441018][ T8664] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[  481.504381][ T8664] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  481.526848][ T8664] EXT4-fs (loop2): mount failed
[  483.692343][ T8701] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  483.703498][ T8701] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  484.509851][ T8705] loop9: detected capacity change from 0 to 16
[  484.560776][ T8705] erofs: (device loop9): mounted with root inode @ nid 36.
[  484.626923][ T8705] erofs: (device loop9): z_erofs_readahead: readahead error at page 2 @ nid 89
[  484.681068][ T4271] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  484.697809][ T8705] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  484.728415][   T26] audit: type=1800 audit(1749321953.234:463): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.901" name="file2" dev="loop9" ino=89 res=0 errno=0
[  488.865156][ T8746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.907'.
[  488.874274][ T8746] netlink: 'syz.1.907': attribute type 8 has an invalid length.
[  488.881955][ T8746] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  489.883222][ T8757] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  489.896089][ T8757] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  493.327100][ T1175] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  493.357226][ T4271] Bluetooth: hci1: command 0x0406 tx timeout
[  493.516828][ T1175] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  493.544350][ T1175] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  493.564788][ T1175] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  493.623171][ T1175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  493.643881][ T1175] usb 3-1: SerialNumber: syz
[  493.880504][ T1175] usb 3-1: 0:2 : does not exist
[  493.972737][ T1175] usb 3-1: USB disconnect, device number 4
[  494.197342][ T4251] udevd[4251]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  494.284265][ T8814] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  494.296189][ T8814] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  495.521259][ T8138] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  495.556819][ T8826] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  495.747104][ T8138] usb 10-1: Using ep0 maxpacket: 16
[  495.754568][ T8138] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  496.674558][ T8138] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  496.685543][ T8138] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  496.704385][ T8138] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  496.901877][ T8138] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.875245][ T8138] usb 10-1: Product: syz
[  497.885160][ T8138] usb 10-1: Manufacturer: syz
[  497.897813][ T8138] usb 10-1: SerialNumber: syz
[  498.110488][ T8849] netlink: 80 bytes leftover after parsing attributes in process `syz.7.933'.
[  498.335517][ T8138] usb 10-1: 0:2 : does not exist
[  498.520291][ T8854] xt_hashlimit: size too large, truncated to 1048576
[  498.832666][ T8861] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  498.843878][ T8861] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  499.646505][ T6166] usb 10-1: USB disconnect, device number 7
[  499.801024][ T8863] loop7: detected capacity change from 0 to 256
[  500.577539][ T8879] loop7: detected capacity change from 0 to 128
[  501.212111][ T8879] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  501.221494][ T8879] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  503.260905][ T8895] kvm [8890]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x94c5
[  503.576594][ T8895] kvm [8890]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x9aff
[  503.664740][ T5321] EXT4-fs (loop7): unmounting filesystem.
[  504.267229][ T4298] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  504.483443][ T8924] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  504.494985][ T8924] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  505.257247][ T4298] usb 3-1: Using ep0 maxpacket: 16
[  505.273993][ T4298] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  505.332834][ T4298] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  505.356233][ T4298] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  505.394804][ T4298] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  505.406231][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.414593][ T4298] usb 3-1: Product: syz
[  505.418927][ T4298] usb 3-1: Manufacturer: syz
[  505.423545][ T4298] usb 3-1: SerialNumber: syz
[  506.703386][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  506.710077][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  506.934440][ T4298] usb 3-1: 0:2 : does not exist
[  507.221005][ T8954] loop9: detected capacity change from 0 to 16
[  508.279358][ T8954] erofs: (device loop9): mounted with root inode @ nid 36.
[  509.231652][ T4298] usb 3-1: USB disconnect, device number 5
[  509.276495][ T4251] udevd[4251]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  510.081157][ T8980] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  510.092383][ T8980] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  511.047469][ T8973] kvm [8968]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x94c5
[  511.118995][ T8973] kvm [8968]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x9aff
[  511.557344][ T8989] loop9: detected capacity change from 0 to 40427
[  514.084886][ T8989] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-4)
[  516.011100][ T9018] loop2: detected capacity change from 0 to 16
[  516.018781][ T9018] erofs: (device loop2): mounted with root inode @ nid 36.
[  517.786421][ T9023] loop9: detected capacity change from 0 to 512
[  519.258880][ T9023] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  519.829767][ T9023] EXT4-fs: failed to create workqueue
[  519.835209][ T9023] EXT4-fs (loop9): mount failed
[  519.969249][ T9027] loop2: detected capacity change from 0 to 512
[  520.178159][ T9027] EXT4-fs: Ignoring removed nobh option
[  520.234193][ T9027] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  520.287165][ T9027] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  520.367101][ T9027] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.974: Corrupt directory, running e2fsck is recommended
[  520.435711][ T9027] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  520.444298][ T9027] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.974: corrupted in-inode xattr
[  520.588540][ T9027] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.974: couldn't read orphan inode 15 (err -117)
[  520.617514][ T9027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  521.410176][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  521.546363][ T9056] syz.4.979[9056] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  521.546508][ T9056] syz.4.979[9056] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  522.460386][ T9065] loop2: detected capacity change from 0 to 16
[  522.504929][ T9065] erofs: (device loop2): mounted with root inode @ nid 36.
[  522.541393][ T9065] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89
[  522.561239][ T4271] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  522.572632][ T9065] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  522.662264][   T26] audit: type=1800 audit(1749321991.164:464): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.982" name="file2" dev="loop2" ino=89 res=0 errno=0
[  523.289088][ T9082] loop9: detected capacity change from 0 to 16
[  523.531473][ T9082] erofs: (device loop9): mounted with root inode @ nid 36.
[  525.330198][ T9096] loop2: detected capacity change from 0 to 512
[  525.373611][ T9096] EXT4-fs: Ignoring removed nobh option
[  525.553572][ T9096] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  525.610518][ T9096] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  525.617304][ T9084] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  525.668816][ T9096] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.990: Corrupt directory, running e2fsck is recommended
[  525.791940][ T9096] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  525.855294][ T9096] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.990: corrupted in-inode xattr
[  525.900949][ T9096] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.990: couldn't read orphan inode 15 (err -117)
[  525.921470][ T9096] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  526.199292][ T9111] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  526.211237][ T9111] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  526.221374][ T9111] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.990: Corrupt directory, running e2fsck is recommended
[  526.420082][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  526.656372][ T9123] loop4: detected capacity change from 0 to 16
[  526.725582][ T9123] erofs: (device loop4): mounted with root inode @ nid 36.
[  526.783593][ T9123] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89
[  526.844373][ T4271] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  526.857615][ T9123] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  526.957790][   T26] audit: type=1800 audit(1749321995.464:465): pid=9123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.995" name="file2" dev="loop4" ino=89 res=0 errno=0
[  527.441430][ T9144] loop4: detected capacity change from 0 to 1024
[  527.448509][ T9144] EXT4-fs: Ignoring removed i_version option
[  527.489842][ T9144] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.998: Invalid block bitmap block 0 in block_group 0
[  527.506541][ T9144] Quota error (device loop4): write_blk: dquota write failed
[  527.514806][ T9144] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  527.524875][ T9144] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.998: Failed to acquire dquot type 0
[  527.549082][ T9142] loop9: detected capacity change from 0 to 2048
[  527.599860][ T9144] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.998: Freeing blocks not in datazone - block = 0, count = 4096
[  527.636683][ T9144] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.998: Invalid inode bitmap blk 0 in block_group 0
[  527.652033][ T9144] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[  527.662363][ T9144] EXT4-fs (loop4): 1 orphan inode deleted
[  527.668206][ T9144] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  527.746638][ T9142] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  527.770913][ T4554] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8
[  527.963526][ T4554] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:8: Failed to release dquot type 0
[  529.095780][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  529.149299][ T7065] EXT4-fs (loop9): unmounting filesystem.
[  530.706893][ T9167] loop9: detected capacity change from 0 to 128
[  530.747186][ T4303] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  530.764835][ T9167] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  530.957149][ T4303] usb 5-1: Using ep0 maxpacket: 8
[  530.971042][ T4303] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  530.987269][ T9167] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  531.000621][ T4303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.127100][ T4303] usb 5-1: Product: syz
[  531.131443][ T4303] usb 5-1: Manufacturer: syz
[  531.166588][ T4303] usb 5-1: SerialNumber: syz
[  531.182410][ T4303] usb 5-1: config 0 descriptor??
[  531.210373][ T4303] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244)
[  531.461758][ T9177] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  531.695091][ T9181] loop7: detected capacity change from 0 to 512
[  531.707624][ T9181] EXT4-fs: Ignoring removed nobh option
[  531.756649][ T9181] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  531.869152][ T9181] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  531.880792][ T9181] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1006: Corrupt directory, running e2fsck is recommended
[  531.896974][ T9181] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  531.905854][ T9181] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.1006: corrupted in-inode xattr
[  531.937574][ T9181] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1006: couldn't read orphan inode 15 (err -117)
[  531.959906][ T9181] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  532.207728][ T9186] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  532.219365][ T9186] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  532.229519][ T9186] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1006: Corrupt directory, running e2fsck is recommended
[  533.290496][ T4303] radio-usb-si4713: probe of 5-1:0.0 failed with error -32
[  533.318383][ T4303] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  533.374448][ T8138] usb 5-1: USB disconnect, device number 6
[  533.403442][ T5321] EXT4-fs (loop7): unmounting filesystem.
[  534.028914][ T9203] loop7: detected capacity change from 0 to 512
[  534.161908][ T9203] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1010: invalid indirect mapped block 256 (level 2)
[  534.214131][ T9203] EXT4-fs (loop7): Remounting filesystem read-only
[  534.260786][ T9203] EXT4-fs (loop7): 2 truncates cleaned up
[  534.296139][ T9203] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  534.496810][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.504233][ T9193] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.652894][ T5321] EXT4-fs (loop7): unmounting filesystem.
[  538.313076][ T9193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.441804][ T9193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.033040][ T9226] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  539.044993][ T9226] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  540.018882][ T9193] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.028021][ T9193] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.036905][ T9193] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.046229][ T9193] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.269630][ T9190] device pim6reg1 entered promiscuous mode
[  540.489867][ T9235] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  540.506107][ T9221] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1014'.
[  540.669695][ T9239] loop7: detected capacity change from 0 to 512
[  540.711763][ T9239] EXT4-fs: Ignoring removed nobh option
[  540.834406][ T9239] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  540.887190][ T9239] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  540.917993][ T9239] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1018: Corrupt directory, running e2fsck is recommended
[  540.982829][ T9239] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  540.995439][ T9239] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.1018: corrupted in-inode xattr
[  541.023817][ T9239] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1018: couldn't read orphan inode 15 (err -117)
[  541.047553][ T9239] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  541.268488][ T7065] EXT4-fs (loop9): unmounting filesystem.
[  541.277707][ T9250] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  541.289282][ T9250] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  541.299449][ T9250] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1018: Corrupt directory, running e2fsck is recommended
[  542.198472][ T5321] EXT4-fs (loop7): unmounting filesystem.
[  542.532254][ T9263] loop2: detected capacity change from 0 to 16
[  544.253849][ T9263] erofs: (device loop2): mounted with root inode @ nid 36.
[  546.040366][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1022'.
[  546.049495][ T9276] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1022'.
[  547.381450][ T9290] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  547.641379][ T9295] loop4: detected capacity change from 0 to 128
[  547.682084][ T9295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  547.714315][ T9295] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  549.269295][ T9312] loop7: detected capacity change from 0 to 512
[  549.290324][ T9312] EXT4-fs: Ignoring removed nobh option
[  549.361806][ T9312] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  549.379059][ T9312] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  549.482268][ T9312] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1034: Corrupt directory, running e2fsck is recommended
[  549.568105][ T9312] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  549.582237][ T9312] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.1034: corrupted in-inode xattr
[  549.623332][ T9312] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1034: couldn't read orphan inode 15 (err -117)
[  549.658061][ T9312] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  549.955296][ T9318] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  549.966874][ T9318] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  549.977024][ T9318] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1034: Corrupt directory, running e2fsck is recommended
[  550.188366][ T5321] EXT4-fs (loop7): unmounting filesystem.
[  551.480566][ T9295] device pim6reg1 entered promiscuous mode
[  552.143183][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  552.255562][ T9340] loop2: detected capacity change from 0 to 256
[  552.331341][   T26] audit: type=1800 audit(1749322020.834:466): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1040" name="file0" dev="loop2" ino=1048653 res=0 errno=0
[  552.353799][ T9343] loop7: detected capacity change from 0 to 16
[  552.367880][ T9343] erofs: (device loop7): mounted with root inode @ nid 36.
[  554.417358][ T9360] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  555.269151][ T9363] loop2: detected capacity change from 0 to 512
[  555.276374][ T9363] EXT4-fs: Ignoring removed nobh option
[  555.398051][ T9363] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  555.429236][ T9363] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  555.467128][ T9363] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1047: Corrupt directory, running e2fsck is recommended
[  555.518357][ T9363] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  555.557190][ T9363] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1047: corrupted in-inode xattr
[  555.587786][ T9363] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1047: couldn't read orphan inode 15 (err -117)
[  555.630650][ T9363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  555.890015][ T9375] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  555.901564][ T9375] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  555.911676][ T9375] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1047: Corrupt directory, running e2fsck is recommended
[  556.133670][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  557.635663][ T9390] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1051'.
[  558.234354][ T9392] loop2: detected capacity change from 0 to 16
[  558.280234][ T9392] erofs: (device loop2): mounted with root inode @ nid 36.
[  558.311810][ T9392] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89
[  558.382475][ T4271] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  558.442790][ T9392] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  558.497868][   T26] audit: type=1800 audit(1749322027.004:467): pid=9392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1053" name="file2" dev="loop2" ino=89 res=0 errno=0
[  559.920404][ T9413] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  565.581334][ T9461] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  565.590892][ T9461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  565.598441][ T9461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  566.288240][ T9464] loop9: detected capacity change from 0 to 512
[  566.458517][ T9464] EXT4-fs: Ignoring removed nobh option
[  567.228114][ T9464] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  567.344586][ T9464] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it
[  567.407848][ T9464] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1072: Corrupt directory, running e2fsck is recommended
[  567.612065][ T9464] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  568.425838][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  568.432233][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  568.445846][ T9464] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.1072: corrupted in-inode xattr
[  568.510827][ T9464] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1072: couldn't read orphan inode 15 (err -117)
[  568.532395][ T9464] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  569.100854][   T26] audit: type=1326 audit(1749322037.554:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21ed8e929 code=0x7ffc0000
[  570.492152][   T26] audit: type=1326 audit(1749322037.554:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21ed8e929 code=0x7ffc0000
[  570.639013][ T7065] EXT4-fs (loop9): unmounting filesystem.
[  570.685439][   T26] audit: type=1326 audit(1749322037.554:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7ff21ed8e929 code=0x7ffc0000
[  570.847122][   T26] audit: type=1326 audit(1749322037.554:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21ed8e929 code=0x7ffc0000
[  570.983800][   T26] audit: type=1326 audit(1749322037.554:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21ed8e929 code=0x7ffc0000
[  572.502455][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  572.583713][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  572.591800][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  572.604144][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  572.616209][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  572.631977][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  572.709130][ T9512] loop2: detected capacity change from 0 to 16
[  572.726459][ T9512] erofs: (device loop2): mounted with root inode @ nid 36.
[  572.749071][ T9512] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89
[  572.775475][ T4268] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  572.789105][ T9512] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  572.802510][   T26] audit: type=1800 audit(1749322041.304:473): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1081" name="file2" dev="loop2" ino=89 res=0 errno=0
[  574.143511][ T9523] loop9: detected capacity change from 0 to 512
[  574.197900][ T9523] EXT4-fs: Ignoring removed mblk_io_submit option
[  574.255168][ T9523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  574.267352][ T9523] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  574.422854][ T9523] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6).
[  574.499676][ T9523] EXT4-fs warning (device loop9): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  574.578135][ T9523] EXT4-fs (loop9): mount failed
[  574.727221][ T4268] Bluetooth: hci2: command 0x0409 tx timeout
[  575.624977][ T9502] chnl_net:caif_netlink_parms(): no params data found
[  577.037798][ T4268] Bluetooth: hci2: command 0x041b tx timeout
[  577.045460][ T9502] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.110625][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.164163][ T9502] device bridge_slave_0 entered promiscuous mode
[  577.241592][ T9502] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.261304][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.284133][ T9502] device bridge_slave_1 entered promiscuous mode
[  577.419152][ T9502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.520222][ T9502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  577.660342][ T9502] team0: Port device team_slave_0 added
[  577.748109][ T9502] team0: Port device team_slave_1 added
[  577.883074][ T9502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  577.899255][ T9502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.008820][ T9502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  579.155364][ T4268] Bluetooth: hci2: command 0x040f tx timeout
[  579.399602][ T9502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  579.429852][ T9502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.625487][ T9502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  579.885140][ T9588] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1096'.
[  580.238162][ T9588] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1096'.
[  581.277468][ T4268] Bluetooth: hci2: command 0x0419 tx timeout
[  584.540832][ T4932] device hsr_slave_0 left promiscuous mode
[  584.682728][ T4932] device hsr_slave_1 left promiscuous mode
[  584.888733][ T4932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  584.919241][ T4932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  584.929497][ T9616] loop4: detected capacity change from 0 to 256
[  584.955360][ T4932] device bridge_slave_1 left promiscuous mode
[  584.968348][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.034537][ T4932] device bridge_slave_0 left promiscuous mode
[  585.043856][ T9616] exfat: Deprecated parameter 'namecase'
[  585.201514][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.237196][ T9616] exfat: Deprecated parameter 'namecase'
[  585.369474][ T9616] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  589.416940][ T4932] team0 (unregistering): Port device team_slave_1 removed
[  589.514364][ T4932] team0 (unregistering): Port device team_slave_0 removed
[  589.620850][ T4932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  589.725942][ T4932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  590.718556][ T9663] loop9: detected capacity change from 0 to 512
[  590.732071][ T9663] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  590.909542][ T9663] EXT4-fs (loop9): 1 truncate cleaned up
[  590.915298][ T9663] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  592.097762][   T26] audit: type=1326 audit(1749322060.604:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  592.166549][   T26] audit: type=1326 audit(1749322060.604:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  592.214911][   T26] audit: type=1326 audit(1749322060.604:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  592.240531][   T26] audit: type=1326 audit(1749322060.624:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  592.376563][ T9678] loop2: detected capacity change from 0 to 16
[  592.413987][ T9678] erofs: (device loop2): mounted with root inode @ nid 36.
[  592.441853][ T9678] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89
[  592.477675][ T4271] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  592.493395][ T9678] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  592.536195][   T26] audit: type=1800 audit(1749322061.034:478): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1118" name="file2" dev="loop2" ino=89 res=0 errno=0
[  592.763721][ T4932] bond0 (unregistering): Released all slaves
[  592.933293][ T9611] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1102'.
[  592.974128][ T9502] device hsr_slave_0 entered promiscuous mode
[  592.984772][ T9502] device hsr_slave_1 entered promiscuous mode
[  593.012705][ T9502] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  593.021918][ T9502] Cannot create hsr debugfs directory
[  596.662842][ T9722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1125'.
[  596.671960][ T9722] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1125'.
[  596.755831][ T7065] EXT4-fs (loop9): unmounting filesystem.
[  596.976763][ T9502] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  597.026062][ T9502] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  597.097585][ T9502] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  597.206106][ T9502] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  597.527818][ T9502] 8021q: adding VLAN 0 to HW filter on device bond0
[  597.589886][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  597.610464][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  597.653228][ T9502] 8021q: adding VLAN 0 to HW filter on device team0
[  597.679903][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  597.717756][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  597.747804][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state
[  597.754929][ T4932] bridge0: port 1(bridge_slave_0) entered forwarding state
[  597.820546][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  597.843572][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  597.875319][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  597.886219][ T9739] loop4: detected capacity change from 0 to 512
[  597.905489][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state
[  597.912656][ T4932] bridge0: port 2(bridge_slave_1) entered forwarding state
[  597.924198][ T9739] EXT4-fs: Ignoring removed nobh option
[  597.953933][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  597.968700][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  597.985608][ T9739] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1131: invalid indirect mapped block 256 (level 2)
[  598.000563][ T9739] EXT4-fs (loop4): 2 truncates cleaned up
[  598.006340][ T9739] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  598.027900][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  598.037732][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  598.046894][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  598.059974][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  598.109111][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  598.171771][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  598.248021][ T9502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  598.476417][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  599.528346][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  599.541285][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  599.549819][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  599.990295][ T9730] loop9: detected capacity change from 0 to 40427
[  600.006045][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  600.034636][ T9730] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  600.066153][ T9730] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  600.178087][ T9730] F2FS-fs (loop9): invalid crc value
[  600.302918][ T9730] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-4)
[  600.502295][ T9765] xt_hashlimit: size too large, truncated to 1048576
[  602.939885][ T9785] loop4: detected capacity change from 0 to 128
[  603.492425][ T9785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  603.503490][ T9785] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  603.943393][ T9790] loop2: detected capacity change from 0 to 16
[  604.078661][ T9790] erofs: (device loop2): mounted with root inode @ nid 36.
[  604.206320][ T9790] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89
[  604.447265][ T4271] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  604.458852][ T9790] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  604.961302][   T26] audit: type=1800 audit(1749322073.464:479): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1138" name="file2" dev="loop2" ino=89 res=0 errno=0
[  605.014072][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  605.144649][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  605.157205][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  605.185824][ T9502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  605.298063][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  605.798128][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  605.908974][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  605.924359][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  605.982312][ T9502] device veth0_vlan entered promiscuous mode
[  605.996555][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  605.998089][ T9816] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  606.063369][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  606.109178][ T9502] device veth1_vlan entered promiscuous mode
[  606.178043][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  606.291136][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  606.356305][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  606.381717][ T9824] loop2: detected capacity change from 0 to 16
[  606.406235][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  606.435358][ T9824] erofs: (device loop2): mounted with root inode @ nid 36.
[  606.474598][ T9502] device veth0_macvtap entered promiscuous mode
[  606.521816][ T9502] device veth1_macvtap entered promiscuous mode
[  606.586020][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  606.615811][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  606.671022][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  606.712675][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  606.757545][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  606.798234][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  606.865593][ T9502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  606.904794][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  606.921821][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  607.145510][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  607.204945][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  607.279086][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  607.300504][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  607.328625][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  607.393402][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  607.456673][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  607.467462][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  607.479062][ T9502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  607.492542][ T9502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.501682][ T9502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.510501][ T9502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.519841][ T9502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  607.634415][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  607.652873][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  607.692442][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  607.722208][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  608.493964][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  608.780529][ T5090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.823620][ T9848] loop2: detected capacity change from 0 to 512
[  608.830416][ T5090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.873978][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  608.882766][ T9848] EXT4-fs: Ignoring removed nobh option
[  609.240759][ T9848] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1148: invalid indirect mapped block 256 (level 2)
[  609.269212][ T9848] EXT4-fs (loop2): 2 truncates cleaned up
[  609.275010][ T9848] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  612.108298][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  613.674392][ T9888] loop4: detected capacity change from 0 to 512
[  614.974165][ T9888] EXT4-fs (loop4): 1 orphan inode deleted
[  614.980208][ T9888] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  615.000279][ T9888] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  615.665553][ T4303] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  615.669045][ T4317] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  615.817540][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'.
[  616.496080][ T4317] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:6: Failed to release dquot type 1
[  616.524229][ T9888] EXT4-fs (loop4): unmounting filesystem.
[  616.678887][ T4303] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.709520][ T4303] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.740096][ T4303] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  616.772640][ T4303] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  616.805227][ T4303] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.844901][ T4303] usb 10-1: config 0 descriptor??
[  617.516025][ T4303] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x2
[  617.527368][ T4303] plantronics 0003:047F:FFFF.0004: item fetching failed at offset 11/15
[  617.536258][ T4303] plantronics 0003:047F:FFFF.0004: parse failed
[  617.545353][ T4303] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22
[  617.741074][ T9922] loop2: detected capacity change from 0 to 512
[  617.749820][ T4298] usb 10-1: USB disconnect, device number 8
[  617.819872][ T9922] EXT4-fs: Ignoring removed nobh option
[  617.869790][ T9922] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1164: invalid indirect mapped block 256 (level 2)
[  617.937712][ T9922] EXT4-fs (loop2): 2 truncates cleaned up
[  617.943494][ T9922] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  618.029713][ T9929] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  620.248604][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  621.382721][ T9969] loop9: detected capacity change from 0 to 512
[  621.457774][ T9969] EXT4-fs: Ignoring removed nobh option
[  621.513643][ T9969] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1168: invalid indirect mapped block 256 (level 2)
[  621.585753][ T9969] EXT4-fs (loop9): 2 truncates cleaned up
[  621.591808][ T9969] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  622.097274][ T9973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1165'.
[  623.627385][ T9973] netlink: 'syz.2.1165': attribute type 8 has an invalid length.
[  623.638699][ T9973] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  624.349425][ T7065] EXT4-fs (loop9): unmounting filesystem.
[  624.816858][ T9983] loop9: detected capacity change from 0 to 128
[  624.922823][ T9983] EXT4-fs: Ignoring removed nobh option
[  625.114618][ T9983] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  625.158906][ T9983] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  625.625370][ T7065] EXT4-fs (loop9): unmounting filesystem.
[  628.658235][T10040] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  629.250959][T10081] netlink: 108 bytes leftover after parsing attributes in process `syz.9.1186'.
[  629.522205][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  629.528603][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  630.372735][T10104] loop9: detected capacity change from 0 to 2048
[  630.463198][T10104]  loop9: p1 < > p3
[  630.477810][T10104] loop9: p3 size 134217728 extends beyond EOD, truncated
[  630.769433][T10109] kvm: emulating exchange as write
[  631.147182][   T26] audit: type=1326 audit(1749322099.644:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  631.276248][   T26] audit: type=1326 audit(1749322099.644:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  632.146424][   T26] audit: type=1326 audit(1749322099.644:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  633.499622][T10133] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1197'.
[  633.542086][   T26] audit: type=1326 audit(1749322099.644:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  633.566614][   T26] audit: type=1326 audit(1749322099.644:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  633.597232][   T26] audit: type=1326 audit(1749322099.644:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  633.696251][   T26] audit: type=1326 audit(1749322099.644:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  633.837940][   T26] audit: type=1326 audit(1749322099.644:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  633.901901][   T26] audit: type=1326 audit(1749322099.704:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  634.048330][   T26] audit: type=1326 audit(1749322099.704:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b4f8e929 code=0x7ffc0000
[  635.104761][T10167] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  638.786432][T10187] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1212'.
[  643.962882][T10217] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  645.295864][T10233] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1223'.
[  645.528197][T10241] syz.2.1227[10241] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  645.528296][T10241] syz.2.1227[10241] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  648.173072][T10255] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  652.096798][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  652.105512][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  652.113368][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  652.465950][T10295] device wg2 entered promiscuous mode
[  654.040900][T10318] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  654.284513][T10322] loop2: detected capacity change from 0 to 512
[  654.355688][T10322] EXT4-fs: Ignoring removed nobh option
[  654.501232][T10322] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1245: invalid indirect mapped block 256 (level 2)
[  654.571038][T10322] EXT4-fs (loop2): 2 truncates cleaned up
[  654.600280][T10322] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  654.785161][T10332] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  654.794607][T10332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  654.802455][T10332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  654.819358][T10332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  656.374672][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  656.554720][T10347] loop2: detected capacity change from 0 to 512
[  656.592013][T10347] EXT4-fs: Ignoring removed mblk_io_submit option
[  656.623111][T10347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  656.635707][T10347] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  656.743540][T10347] __quota_error: 25 callbacks suppressed
[  656.743557][T10347] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[  656.769926][T10347] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  656.867866][T10347] EXT4-fs (loop2): mount failed
[  658.715216][T10384] loop2: detected capacity change from 0 to 512
[  658.756109][T10384] EXT4-fs: Ignoring removed nobh option
[  658.820142][T10384] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1260: invalid indirect mapped block 256 (level 2)
[  658.837257][T10384] EXT4-fs (loop2): 2 truncates cleaned up
[  658.864680][T10384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  661.269430][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  661.885411][T10403] loop9: detected capacity change from 0 to 512
[  661.921190][T10403] EXT4-fs: Ignoring removed mblk_io_submit option
[  661.959733][T10403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  661.988844][T10403] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  662.072779][T10403] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6).
[  662.087208][T10403] EXT4-fs warning (device loop9): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  662.145986][T10403] EXT4-fs (loop9): mount failed
[  664.104259][T10432] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  668.356793][T10472] device wg2 entered promiscuous mode
[  672.676374][T10548] loop2: detected capacity change from 0 to 512
[  672.708481][T10548] EXT4-fs: Ignoring removed mblk_io_submit option
[  672.766157][T10548] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  672.818181][T10548] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  673.081769][T10554] loop4: detected capacity change from 0 to 512
[  673.095564][T10554] EXT4-fs: Ignoring removed nobh option
[  673.102369][T10548] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[  673.117312][T10548] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  673.192347][T10548] EXT4-fs (loop2): mount failed
[  673.206111][T10554] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  673.249678][T10554] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  673.294803][T10554] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1307: Corrupt directory, running e2fsck is recommended
[  673.523953][T10554] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  673.607577][T10554] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1307: corrupted in-inode xattr
[  673.654523][T10554] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1307: couldn't read orphan inode 15 (err -117)
[  673.729370][T10554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  674.030252][T10578] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  674.041923][T10578] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  674.052089][T10578] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1307: Corrupt directory, running e2fsck is recommended
[  675.243434][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  677.465998][T10636] loop9: detected capacity change from 0 to 512
[  677.531942][T10636] EXT4-fs: Ignoring removed nobh option
[  677.669236][T10636] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  677.707208][T10636] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it
[  677.747033][T10636] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1329: Corrupt directory, running e2fsck is recommended
[  677.858473][T10636] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  677.875786][T10636] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.1329: corrupted in-inode xattr
[  677.903700][T10636] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1329: couldn't read orphan inode 15 (err -117)
[  677.947144][T10636] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  678.225254][T10656] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  678.237153][T10656] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it
[  678.247316][T10656] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1329: Corrupt directory, running e2fsck is recommended
[  678.469678][ T7065] EXT4-fs (loop9): unmounting filesystem.
[  679.781928][T10683] netlink: 'syz.0.1346': attribute type 29 has an invalid length.
[  679.852610][T10683] netlink: 'syz.0.1346': attribute type 29 has an invalid length.
[  679.887458][T10688] netlink: 'syz.0.1346': attribute type 29 has an invalid length.
[  680.794864][T10714] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  681.858396][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1358'.
[  681.867567][T10734] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1358'.
[  683.327765][T10758] netlink: 'syz.4.1368': attribute type 9 has an invalid length.
[  683.350665][T10758] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1368'.
[  683.999958][T10779] loop2: detected capacity change from 0 to 512
[  684.037800][T10779] EXT4-fs: Ignoring removed mblk_io_submit option
[  684.077201][T10779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  684.103449][T10779] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  684.176403][T10786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  684.242091][T10779] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[  684.257579][T10779] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  684.313031][T10779] EXT4-fs (loop2): mount failed
[  684.950057][T10804] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1378'.
[  685.430832][T10815] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1382'.
[  685.503244][T10821] tipc: Started in network mode
[  685.521970][T10821] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  685.562906][T10821] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  686.676725][T10834] loop2: detected capacity change from 0 to 512
[  686.688635][ T1175] tipc: Node number set to 10136234
[  686.767964][T10837] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  686.793985][T10834] EXT4-fs: Ignoring removed nobh option
[  686.866531][T10834] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  686.957154][T10834] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  687.040478][T10834] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1387: Corrupt directory, running e2fsck is recommended
[  687.073512][T10834] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  687.082002][T10834] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1387: corrupted in-inode xattr
[  687.100509][T10834] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1387: couldn't read orphan inode 15 (err -117)
[  687.121913][T10834] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  687.396269][T10846] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  687.408317][T10846] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  687.418476][T10846] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1387: Corrupt directory, running e2fsck is recommended
[  687.644318][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  690.631904][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x4300000800
[  690.644235][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x5f00000800
[  690.664945][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x12a00000000
[  690.681348][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x13900000800
[  690.691902][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x14000000000
[  690.703264][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x15500000800
[  690.714753][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x17600000000
[  690.734631][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x1b700000800
[  690.748617][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x1ee00000000
[  690.761521][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x22f00000800
[  690.777278][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x2ad00000800
[  690.804983][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x32500000800
[  690.826926][T10883] kvm [10882]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x33200000000
[  690.962613][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  690.969600][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  691.847216][T10894] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  694.125166][T10923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1413'.
[  694.455596][T10925] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  696.346661][T10951] loop2: detected capacity change from 0 to 512
[  696.382746][T10951] EXT4-fs: Ignoring removed nobh option
[  696.619988][T10951] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  696.637648][T10951] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  696.719150][T10951] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1421: Corrupt directory, running e2fsck is recommended
[  697.314539][T10951] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  697.368919][T10951] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1421: corrupted in-inode xattr
[  697.408592][T10951] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1421: couldn't read orphan inode 15 (err -117)
[  697.467987][T10951] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  697.779231][T10978] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  697.790987][T10978] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  697.801185][T10978] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1421: Corrupt directory, running e2fsck is recommended
[  698.045316][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  702.412729][T11031] loop4: detected capacity change from 0 to 512
[  702.437708][T11031] EXT4-fs: Ignoring removed mblk_io_submit option
[  702.457118][T11031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  702.503522][T11031] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  702.574763][T11031] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[  702.620866][T11031] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  702.703349][T11031] EXT4-fs (loop4): mount failed
[  704.637942][T11071] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  708.326153][T11112] loop9: detected capacity change from 0 to 512
[  708.418247][T11112] EXT4-fs: Ignoring removed mblk_io_submit option
[  708.477861][T11112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  708.486345][T11112] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  708.813462][T11112] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6).
[  708.857166][T11112] EXT4-fs warning (device loop9): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  708.920536][T11112] EXT4-fs (loop9): mount failed
[  708.961175][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  708.977239][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  708.985412][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  713.990420][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  714.008624][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  714.016849][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  714.067367][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  714.710245][T11188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  714.839476][T11188] device syzkaller0 entered promiscuous mode
[  714.846134][T11188] tipc: Resetting bearer <eth:syzkaller0>
[  715.079353][ T4956] tipc: Resetting bearer <eth:syzkaller0>
[  715.097160][T11187] tipc: Resetting bearer <eth:syzkaller0>
[  718.882723][ T4302] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  719.687916][ T4302] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  719.698264][ T4302] usb 3-1: config 0 has no interfaces?
[  719.703775][ T4302] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85
[  719.713071][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.739329][ T4302] usb 3-1: config 0 descriptor??
[  720.073547][T11187] tipc: Disabling bearer <eth:syzkaller0>
[  720.573958][ T4356] usb 3-1: USB disconnect, device number 6
[  724.397146][ T4337] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  724.766061][ T4337] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  724.930715][ T4337] usb 10-1: config 0 has no interfaces?
[  725.036342][ T4337] usb 10-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85
[  725.291149][ T4337] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.332301][ T4337] usb 10-1: config 0 descriptor??
[  726.684135][ T4300] usb 10-1: USB disconnect, device number 9
[  726.833087][T11340] loop4: detected capacity change from 0 to 512
[  726.912914][T11340] EXT4-fs: Ignoring removed mblk_io_submit option
[  726.997175][T11340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  727.027151][T11340] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  727.149892][T11340] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[  727.187351][T11340] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  727.218252][T11340] EXT4-fs (loop4): mount failed
[  727.297181][T11330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1520'.
[  727.306191][T11330] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1520'.
[  732.107082][ T4300] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  732.319099][ T4300] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  732.377320][ T4300] usb 3-1: config 0 has no interfaces?
[  732.397722][T11392] netlink: 755 bytes leftover after parsing attributes in process `syz.4.1538'.
[  732.411162][ T4300] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85
[  732.457041][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.504969][ T4300] usb 3-1: config 0 descriptor??
[  733.772165][ T4303] usb 3-1: USB disconnect, device number 7
[  735.337353][T11436] loop9: detected capacity change from 0 to 512
[  735.398374][T11438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1550'.
[  735.407408][T11438] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1550'.
[  735.789223][T11436] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  735.883714][T11436] EXT4-fs (loop9): 1 truncate cleaned up
[  735.889676][T11436] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  737.319837][ T7065] EXT4-fs (loop9): unmounting filesystem.
[  737.354194][T11459] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  737.364853][T11459] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  737.374951][T11459] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  737.383563][T11459] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  737.391414][T11459] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  737.400101][T11459] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  739.284189][T11455] chnl_net:caif_netlink_parms(): no params data found
[  739.437132][ T4271] Bluetooth: hci4: command 0x0409 tx timeout
[  739.722803][ T4932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.733952][T11508] loop9: detected capacity change from 0 to 512
[  739.791054][T11508] EXT4-fs: Ignoring removed mblk_io_submit option
[  739.800321][T11508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  739.809559][T11508] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  740.111197][T11508] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6).
[  740.157458][T11508] EXT4-fs warning (device loop9): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  740.199267][ T4932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.252793][T11525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1564'.
[  740.262324][T11525] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1564'.
[  740.272864][T11455] bridge0: port 1(bridge_slave_0) entered blocking state
[  740.284567][T11455] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.285699][T11508] EXT4-fs (loop9): mount failed
[  740.308545][T11455] device bridge_slave_0 entered promiscuous mode
[  740.402605][ T4932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.446575][T11455] bridge0: port 2(bridge_slave_1) entered blocking state
[  740.475332][T11455] bridge0: port 2(bridge_slave_1) entered disabled state
[  740.520569][T11455] device bridge_slave_1 entered promiscuous mode
[  740.605810][ T4932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.732360][T11455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  740.759916][T11455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  740.983070][T11455] team0: Port device team_slave_0 added
[  741.073759][T11455] team0: Port device team_slave_1 added
[  741.167124][T11455] batman_adv: batadv0: Adding interface: batadv_slave_0
[  741.179928][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  741.358978][T11455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  741.517036][ T4271] Bluetooth: hci4: command 0x041b tx timeout
[  741.623963][T11536] loop9: detected capacity change from 0 to 512
[  741.647121][T11536] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  742.674047][T11536] EXT4-fs (loop9): 1 truncate cleaned up
[  742.679898][T11536] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  743.638392][ T4271] Bluetooth: hci4: command 0x040f tx timeout
[  743.745402][ T7065] EXT4-fs (loop9): unmounting filesystem.
[  743.816727][T11455] batman_adv: batadv0: Adding interface: batadv_slave_1
[  743.852541][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  743.895375][T11455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  745.220215][T11455] device hsr_slave_0 entered promiscuous mode
[  745.239247][T11455] device hsr_slave_1 entered promiscuous mode
[  745.250694][T11455] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  745.279653][T11455] Cannot create hsr debugfs directory
[  745.677140][ T4271] Bluetooth: hci4: command 0x0419 tx timeout
[  745.795578][T11567] loop9: detected capacity change from 0 to 512
[  745.857699][T11567] EXT4-fs: Ignoring removed mblk_io_submit option
[  745.892599][T11567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  745.950064][T11567] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  746.156837][T11567] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6).
[  746.587771][T11567] EXT4-fs warning (device loop9): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  747.628923][T11567] EXT4-fs (loop9): mount failed
[  748.323645][T11579] device wg2 left promiscuous mode
[  749.619994][T11587] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1582'.
[  750.973351][T11606] loop9: detected capacity change from 0 to 512
[  751.037937][T11606] EXT4-fs: Ignoring removed mblk_io_submit option
[  751.088715][T11606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  751.143091][T11606] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  751.396177][T11606] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6).
[  751.447187][T11613] loop2: detected capacity change from 0 to 512
[  752.608354][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  752.614652][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  752.655317][T11613] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  752.862106][T11606] EXT4-fs warning (device loop9): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  752.893942][T11613] EXT4-fs (loop2): 1 truncate cleaned up
[  752.899967][T11613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  753.458282][T11606] EXT4-fs (loop9): mount failed
[  754.005511][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  754.267780][T11618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  754.332715][T11617] tipc: Disabling bearer <eth:syzkaller0>
[  754.631877][ T4932] device hsr_slave_0 left promiscuous mode
[  755.355288][ T4932] device hsr_slave_1 left promiscuous mode
[  755.396401][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  755.628888][ T4932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  755.697855][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  755.735898][ T4932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  755.788470][ T4932] device bridge_slave_1 left promiscuous mode
[  755.794728][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.835423][ T4932] device bridge_slave_0 left promiscuous mode
[  755.871068][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.919217][ T4932] device veth1_macvtap left promiscuous mode
[  755.925289][ T4932] device veth0_macvtap left promiscuous mode
[  755.931888][ T4932] device veth1_vlan left promiscuous mode
[  755.958409][T11634] loop2: detected capacity change from 0 to 512
[  755.975676][T11634] EXT4-fs: Ignoring removed mblk_io_submit option
[  755.983160][T11635] loop4: detected capacity change from 0 to 2048
[  756.000080][T11634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  756.008713][T11634] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  756.084658][T11635] Alternate GPT is invalid, using primary GPT.
[  756.103075][T11635]  loop4: p2 p3 p7
[  756.152920][T11634] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[  756.175825][T11634] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  756.205575][T11634] EXT4-fs (loop2): mount failed
[  757.985093][T11654] loop4: detected capacity change from 0 to 512
[  758.037871][T11654] EXT4-fs: Ignoring removed mblk_io_submit option
[  758.064861][T11654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  758.097207][T11654] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  758.148713][T11654] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[  758.167164][T11654] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  758.188269][T11654] EXT4-fs (loop4): mount failed
[  759.947616][ T4932] team0 (unregistering): Port device team_slave_1 removed
[  760.044409][ T4932] team0 (unregistering): Port device team_slave_0 removed
[  760.134315][ T4932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  760.267506][ T4932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  761.297419][ T4932] bond0 (unregistering): Released all slaves
[  761.462879][T11625] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  761.472247][T11625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  761.479753][T11625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  761.497825][T11625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  761.601985][T11675] netlink: 'syz.2.1606': attribute type 4 has an invalid length.
[  761.682669][T11682] loop4: detected capacity change from 0 to 512
[  761.744354][T11682] EXT4-fs: Mount option(s) incompatible with ext3
[  761.912903][T11682] loop4: detected capacity change from 0 to 128
[  761.947868][T11690] loop2: detected capacity change from 0 to 512
[  761.978004][T11690] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  762.039267][T11682] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  762.134101][T11690] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  762.269152][T11455] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  762.316062][T11690] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  762.545155][T11690] EXT4-fs (loop2): 1 truncate cleaned up
[  762.681986][T11690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  762.830712][T11455] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  762.906894][T11455] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  762.953913][T11697] loop9: detected capacity change from 0 to 512
[  762.982664][T11455] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  763.187498][T11697] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.1612: casefold flag without casefold feature
[  763.213401][T11700] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  763.227154][T11700] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  763.718092][T10528] udevd[10528]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  763.731615][T11528] udevd[11528]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  763.752148][T11697] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1612: couldn't read orphan inode 15 (err -117)
[  763.831977][T10219] udevd[10219]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  763.864856][T11697] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  763.866782][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  763.937728][T11704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1613'.
[  763.946764][T11704] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1613'.
[  764.108481][ T7065] EXT4-fs (loop9): unmounting filesystem.
[  764.182054][T11455] 8021q: adding VLAN 0 to HW filter on device bond0
[  764.270977][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  764.315000][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  764.321171][T11709] loop2: detected capacity change from 0 to 2048
[  764.366644][T11455] 8021q: adding VLAN 0 to HW filter on device team0
[  764.398710][T11709] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[  764.459606][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  764.498868][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  764.516895][T11709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  764.551312][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.558529][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  764.609831][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  764.652887][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  764.692280][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.699473][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  764.758184][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  764.811221][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  764.859236][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  764.904965][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  765.228805][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  765.273717][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  765.488053][T11455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  765.525454][T11455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  765.582069][   T26] audit: type=1800 audit(1749322234.084:515): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1615" name="file1" dev="loop2" ino=1346 res=0 errno=0
[  765.602262][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  765.648509][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  765.667964][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  765.702344][   T26] audit: type=1800 audit(1749322234.114:516): pid=11720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1615" name="file1" dev="loop2" ino=1346 res=0 errno=0
[  765.717502][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  765.768014][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  765.793473][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  765.812297][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  766.100312][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  766.109817][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  766.117363][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  766.125771][T11741] device wg2 left promiscuous mode
[  768.845488][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  768.900452][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  768.963029][T11455] 8021q: adding VLAN 0 to HW filter on device batadv0
[  769.247209][T11771] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  771.086208][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  771.107732][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  771.149862][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  771.160587][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  771.319487][T11455] device veth0_vlan entered promiscuous mode
[  771.336384][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  771.409079][T11804] loop4: detected capacity change from 0 to 512
[  772.630381][T11804] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  772.793243][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  773.038702][T11455] device veth1_vlan entered promiscuous mode
[  774.103823][T11804] EXT4-fs: error -4 creating inode table initialization thread
[  774.111762][T11804] EXT4-fs (loop4): mount failed
[  774.564830][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  774.574750][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  774.625184][T11455] device veth0_macvtap entered promiscuous mode
[  774.668063][T11455] device veth1_macvtap entered promiscuous mode
[  774.752133][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  774.817108][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.857182][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  774.917042][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  775.136102][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  775.386992][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  775.406046][T11455] batman_adv: batadv0: Interface activated: batadv_slave_0
[  775.434367][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  775.446593][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  775.458642][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  775.470753][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  775.957208][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  776.003467][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  776.039507][T11455] batman_adv: batadv0: Interface activated: batadv_slave_1
[  776.063135][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  776.093994][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  776.118287][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  776.137788][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  776.165830][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  776.203107][T11455] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  776.216891][T11455] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  776.244400][T11455] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  776.264371][T11455] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  776.446153][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.493526][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.535787][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  776.548566][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.580492][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.638863][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  777.045632][T11833] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  778.895262][T11861] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  780.117083][ T4356] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  780.917026][ T4356] usb 5-1: Using ep0 maxpacket: 8
[  780.935590][ T4356] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  780.964606][ T4356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.987096][ T4356] usb 5-1: Product: syz
[  781.003236][ T4356] usb 5-1: Manufacturer: syz
[  781.149807][ T4356] usb 5-1: SerialNumber: syz
[  781.165494][ T4356] usb 5-1: config 0 descriptor??
[  781.280054][ T4356] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244)
[  783.044793][ T4356] radio-usb-si4713: probe of 5-1:0.0 failed with error -32
[  783.065985][ T4356] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  783.368167][T11902] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  785.298808][T11921] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  785.783364][ T1175] usb 5-1: USB disconnect, device number 7
[  786.287096][ T4337] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  786.490500][ T4337] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  786.506969][ T4337] usb 10-1: config 0 has no interfaces?
[  786.562165][ T4337] usb 10-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85
[  786.587685][ T4337] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.705740][T11937] loop2: detected capacity change from 0 to 512
[  786.767539][ T4337] usb 10-1: config 0 descriptor??
[  786.821620][T11937] EXT4-fs: Ignoring removed nobh option
[  787.688012][T11937] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  787.756360][T11937] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  787.836998][T11937] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1653: Corrupt directory, running e2fsck is recommended
[  787.861721][T11937] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  787.913311][T11937] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1653: corrupted in-inode xattr
[  787.946399][T11937] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1653: couldn't read orphan inode 15 (err -117)
[  788.012770][T11937] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  788.252194][T11953] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  788.263763][T11953] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  788.273965][T11953] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1653: Corrupt directory, running e2fsck is recommended
[  788.346578][ T4337] usb 10-1: USB disconnect, device number 10
[  788.532520][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  788.965677][T11969] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  790.181174][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1660'.
[  790.193728][T11977] netlink: 'syz.0.1660': attribute type 8 has an invalid length.
[  790.201551][T11977] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  790.887106][ T2164] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  791.087009][ T2164] usb 3-1: Using ep0 maxpacket: 8
[  791.126098][ T2164] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  791.164521][ T2164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.265770][ T2164] usb 3-1: Product: syz
[  791.390069][ T2164] usb 3-1: Manufacturer: syz
[  791.394727][ T2164] usb 3-1: SerialNumber: syz
[  791.709902][ T2164] usb 3-1: config 0 descriptor??
[  791.836885][ T2164] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244)
[  793.094986][T12020] loop6: detected capacity change from 0 to 164
[  793.442882][ T2164] radio-usb-si4713: probe of 3-1:0.0 failed with error -32
[  793.489738][ T2164] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  793.497630][T12020] iso9660: Corrupted directory entry in block 4 of inode 1792
[  794.217100][ T2164] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  794.341401][T12037] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  794.428680][ T2164] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  794.462755][ T2164] usb 7-1: config 0 has no interfaces?
[  794.483085][ T2164] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85
[  794.526419][ T2164] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.577835][ T2164] usb 7-1: config 0 descriptor??
[  794.645447][ T2164] usb 3-1: USB disconnect, device number 8
[  794.768096][T12043] loop2: detected capacity change from 0 to 512
[  794.804873][T12043] EXT4-fs: Ignoring removed nobh option
[  794.851548][T12043] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  794.913952][T12043] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  794.973546][T12043] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1668: Corrupt directory, running e2fsck is recommended
[  795.049448][T12043] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  795.077321][T12043] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1668: corrupted in-inode xattr
[  795.117635][T12043] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1668: couldn't read orphan inode 15 (err -117)
[  795.133269][T12043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  795.358760][T12057] loop9: detected capacity change from 0 to 512
[  795.365877][T12057] EXT4-fs: Ignoring removed mblk_io_submit option
[  795.454769][T12058] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  795.520858][T12057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  795.540371][T12059] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  795.552024][T12059] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  795.562687][T12059] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1668: Corrupt directory, running e2fsck is recommended
[  796.166471][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  796.213725][T12057] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  796.278888][T12057] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6).
[  796.302179][ T1175] usb 7-1: USB disconnect, device number 2
[  796.357190][T12057] EXT4-fs warning (device loop9): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  796.408313][T12057] EXT4-fs (loop9): mount failed
[  796.548519][T12066] loop2: detected capacity change from 0 to 2048
[  796.626629][T12066] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  796.738980][T12066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  798.796980][ T2164] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  798.997031][ T2164] usb 5-1: Using ep0 maxpacket: 8
[  799.052715][ T2164] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  799.139450][ T2164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.212077][ T2164] usb 5-1: Product: syz
[  799.216270][ T2164] usb 5-1: Manufacturer: syz
[  799.305410][ T2164] usb 5-1: SerialNumber: syz
[  799.392550][ T2164] usb 5-1: config 0 descriptor??
[  799.465860][ T2164] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244)
[  800.419835][T12112] loop6: detected capacity change from 0 to 2048
[  800.550949][T12112] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  800.780441][T12112] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  801.042831][ T2164] radio-usb-si4713: probe of 5-1:0.0 failed with error -32
[  801.081082][ T2164] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  801.176292][T11455] EXT4-fs (loop6): unmounting filesystem.
[  802.067980][ T5205] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  802.278394][ T5205] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  802.332536][ T5205] usb 7-1: config 0 has no interfaces?
[  802.343463][ T5205] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85
[  802.357557][T12141] loop9: detected capacity change from 0 to 512
[  802.386260][T12141] EXT4-fs: Ignoring removed mblk_io_submit option
[  802.415133][ T5205] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  802.431738][T12141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  802.457891][T12141] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  802.510446][ T5205] usb 7-1: config 0 descriptor??
[  802.590732][T12141] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6).
[  802.611155][T12141] EXT4-fs warning (device loop9): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  802.647648][T12141] EXT4-fs (loop9): mount failed
[  804.003557][ T5205] usb 7-1: USB disconnect, device number 3
[  804.217381][ T4337] usb 5-1: USB disconnect, device number 8
[  804.373123][T12166] loop4: detected capacity change from 0 to 1024
[  804.401142][T12167] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  805.758073][T12181] loop4: detected capacity change from 0 to 512
[  805.774182][T12181] EXT4-fs: Ignoring removed nobh option
[  805.863434][T12181] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  805.890226][T12181] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  805.922440][T12181] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1696: Corrupt directory, running e2fsck is recommended
[  805.953394][T12181] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  805.973614][T12181] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1696: corrupted in-inode xattr
[  806.104070][T12181] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1696: couldn't read orphan inode 15 (err -117)
[  806.189481][T12181] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  806.512727][T12194] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  806.524451][T12194] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  806.534942][T12194] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1696: Corrupt directory, running e2fsck is recommended
[  806.752030][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  807.993037][T12212] loop6: detected capacity change from 0 to 512
[  808.007939][T12212] EXT4-fs: Ignoring removed mblk_io_submit option
[  808.063133][T12212] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  808.102544][T12212] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  808.219566][T12212] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6).
[  808.290621][T12212] EXT4-fs warning (device loop6): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  808.316225][T12212] EXT4-fs (loop6): mount failed
[  808.504581][ T5205] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  808.688392][ T5205] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  808.831661][ T5205] usb 5-1: config 0 has no interfaces?
[  808.848216][ T5205] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85
[  808.947668][ T5205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.021465][ T5205] usb 5-1: config 0 descriptor??
[  809.049983][T12228] loop6: detected capacity change from 0 to 512
[  809.071692][T12228] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  809.168625][T12228] EXT4-fs (loop6): 1 truncate cleaned up
[  809.216989][T12228] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  809.928608][ T4356] usb 5-1: USB disconnect, device number 9
[  811.204064][T11455] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  811.278548][T12255] loop4: detected capacity change from 0 to 1024
[  812.307491][T11455] EXT4-fs (loop6): unmounting filesystem.
[  812.503900][T12268] loop9: detected capacity change from 0 to 2048
[  814.013255][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  814.019604][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  814.147833][T12268]  loop9: p1 < > p3
[  814.173233][T12268] loop9: p3 size 134217728 extends beyond EOD, truncated
[  814.463357][T12276] loop2: detected capacity change from 0 to 512
[  814.481094][T12276] EXT4-fs: Ignoring removed mblk_io_submit option
[  814.582122][T12276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  814.685626][T12276] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  814.724790][ T5082] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.861400][T12276] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[  814.911066][T11705] udevd[11705]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  814.927160][T12276] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  814.952576][T10220] udevd[10220]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  815.007918][T12276] EXT4-fs (loop2): mount failed
[  815.150347][ T5082] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.441151][ T5082] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.519989][ T5082] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.541140][T11459] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  819.579325][T11459] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  819.590833][T11459] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  819.601254][T11459] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  819.616043][T11459] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  819.623795][T11459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  822.189258][ T4271] Bluetooth: hci0: command 0x0409 tx timeout
[  823.322809][T12327] chnl_net:caif_netlink_parms(): no params data found
[  823.877719][T12359] loop4: detected capacity change from 0 to 1024
[  824.237095][T11459] Bluetooth: hci0: command 0x041b tx timeout
[  824.808967][T12359] hfsplus: xattr searching failed
[  825.669636][T12327] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.820874][T12327] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.829605][T12327] device bridge_slave_0 entered promiscuous mode
[  826.348280][ T4271] Bluetooth: hci0: command 0x040f tx timeout
[  826.996227][T12327] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.007098][T12327] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.035653][T12327] device bridge_slave_1 entered promiscuous mode
[  827.927153][ T5082] device hsr_slave_0 left promiscuous mode
[  828.063790][ T5082] device hsr_slave_1 left promiscuous mode
[  828.107304][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  828.114746][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_0
[  828.157726][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  828.183091][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_1
[  828.217647][ T5082] device bridge_slave_1 left promiscuous mode
[  828.225365][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.314283][ T5082] device bridge_slave_0 left promiscuous mode
[  828.337695][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.397091][ T4271] Bluetooth: hci0: command 0x0419 tx timeout
[  828.534990][ T5082] device veth1_macvtap left promiscuous mode
[  828.551614][ T5082] device veth0_macvtap left promiscuous mode
[  828.571917][ T5082] device veth1_vlan left promiscuous mode
[  828.601718][ T5082] device veth0_vlan left promiscuous mode
[  831.276978][ T4271] Bluetooth: hci2: command 0x0406 tx timeout
[  834.115179][ T5082] team0 (unregistering): Port device team_slave_1 removed
[  834.157136][ T5205] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  834.286205][ T5082] team0 (unregistering): Port device team_slave_0 removed
[  834.347215][ T5205] usb 3-1: Using ep0 maxpacket: 8
[  834.361054][ T5205] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  834.387092][ T5205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.406067][ T5082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  834.406083][ T5205] usb 3-1: Product: syz
[  834.433390][ T5205] usb 3-1: Manufacturer: syz
[  834.444946][ T5205] usb 3-1: SerialNumber: syz
[  834.472679][ T5082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  834.480439][ T5205] usb 3-1: config 0 descriptor??
[  834.504022][ T5205] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244)
[  835.746070][T12458] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  836.005192][ T5205] radio-usb-si4713: probe of 3-1:0.0 failed with error -32
[  836.015547][ T5205] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  836.381319][T12463] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  837.265652][ T5082] bond0 (unregistering): Released all slaves
[  837.939603][T12327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  838.155109][T12327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  838.405129][ T4356] usb 3-1: USB disconnect, device number 9
[  838.470661][T12327] team0: Port device team_slave_0 added
[  838.533204][T12327] team0: Port device team_slave_1 added
[  838.661966][T12327] batman_adv: batadv0: Adding interface: batadv_slave_0
[  838.703969][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  839.208082][T12327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  839.238674][T12327] batman_adv: batadv0: Adding interface: batadv_slave_1
[  839.284906][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  839.325753][T12327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  839.715123][T12327] device hsr_slave_0 entered promiscuous mode
[  839.778190][T12327] device hsr_slave_1 entered promiscuous mode
[  843.527135][ T4300] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  843.727051][ T4300] usb 10-1: Using ep0 maxpacket: 8
[  844.038356][ T4300] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  844.069953][ T4300] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.736944][ T4300] usb 10-1: Product: syz
[  844.741323][ T4300] usb 10-1: Manufacturer: syz
[  844.751097][ T4300] usb 10-1: SerialNumber: syz
[  844.758284][ T4300] usb 10-1: config 0 descriptor??
[  844.766546][ T4300] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244)
[  845.085399][T12552] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  845.479633][T12327] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  845.531957][T12327] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  845.594744][T12327] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  845.645450][T12327] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  845.709933][T12568] loop2: detected capacity change from 0 to 512
[  845.753927][T12568] EXT4-fs: Ignoring removed mblk_io_submit option
[  845.805390][T12568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  845.857253][T12568] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  846.022920][T12327] 8021q: adding VLAN 0 to HW filter on device bond0
[  846.051517][T12568] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[  846.073031][T12568] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  846.148280][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  846.163723][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  846.189991][T12327] 8021q: adding VLAN 0 to HW filter on device team0
[  846.225596][T12568] EXT4-fs (loop2): mount failed
[  846.236110][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  846.251183][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  846.280150][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.287418][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  846.360396][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  846.380838][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  846.412105][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  846.490148][ T4300] radio-usb-si4713: probe of 10-1:0.0 failed with error -32
[  846.612933][ T4300] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  846.672518][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.679919][ T5094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  846.808892][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  846.989209][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  847.048420][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  847.096996][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  847.137913][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  847.320852][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  848.217924][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  848.289539][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  848.328344][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  848.374328][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  848.407620][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  848.463603][T12327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  848.472888][ T2164] usb 10-1: USB disconnect, device number 11
[  849.353896][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  849.372218][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  849.433838][T12327] 8021q: adding VLAN 0 to HW filter on device batadv0
[  850.623951][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  850.648775][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  850.785858][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  850.803413][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  850.828973][T12327] device veth0_vlan entered promiscuous mode
[  850.843723][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  850.871899][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  850.907330][T12327] device veth1_vlan entered promiscuous mode
[  850.995556][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  851.010796][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  851.047598][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  851.093518][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  851.139980][T12327] device veth0_macvtap entered promiscuous mode
[  851.171092][T12327] device veth1_macvtap entered promiscuous mode
[  851.252469][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.307106][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.341834][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.380785][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.424453][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.435302][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.473258][T12327] batman_adv: batadv0: Interface activated: batadv_slave_0
[  851.494423][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  851.513679][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  851.543160][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  851.610507][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  851.766730][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  851.977435][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  852.280185][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  852.553654][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  852.600912][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  854.197193][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  854.317512][T12327] batman_adv: batadv0: Interface activated: batadv_slave_1
[  854.388893][T12327] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  854.404016][T12327] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  854.424373][T12327] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  854.441900][T12327] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  854.510539][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  854.523676][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  855.581203][ T5094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  855.630404][ T5094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  855.651295][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  855.671374][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  855.685816][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  855.724696][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  855.827101][ T1175] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  856.027349][ T1175] usb 5-1: Using ep0 maxpacket: 8
[  856.390011][ T1175] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  856.412627][ T1175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.465453][ T1175] usb 5-1: Product: syz
[  856.481935][ T1175] usb 5-1: Manufacturer: syz
[  856.520758][ T1175] usb 5-1: SerialNumber: syz
[  856.657440][ T1175] usb 5-1: config 0 descriptor??
[  856.744950][ T1175] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244)
[  858.972916][ T1175] radio-usb-si4713: probe of 5-1:0.0 failed with error -32
[  858.984760][ T1175] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  860.635311][T12722] loop9: detected capacity change from 0 to 512
[  860.697947][T12722] EXT4-fs: Ignoring removed mblk_io_submit option
[  860.775745][T12722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  860.819143][T12722] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  860.942343][T12722] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6).
[  861.017237][T12722] EXT4-fs warning (device loop9): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  861.033570][T12722] EXT4-fs (loop9): mount failed
[  861.278027][ T2164] usb 5-1: USB disconnect, device number 10
[  861.388079][T12734] loop2: detected capacity change from 0 to 512
[  861.411943][T12734] EXT4-fs: Ignoring removed nobh option
[  861.485040][T12734] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1804: invalid indirect mapped block 256 (level 2)
[  861.513598][T12734] EXT4-fs (loop2): 2 truncates cleaned up
[  861.535354][T12734] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  864.721032][ T7432] EXT4-fs (loop2): unmounting filesystem.
[  865.170559][T12782] loop4: detected capacity change from 0 to 512
[  865.265517][T12782] EXT4-fs: Ignoring removed mblk_io_submit option
[  865.414938][T12782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  865.509585][T12782] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  865.701832][T12782] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[  865.747310][T12782] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  865.773955][T12782] EXT4-fs (loop4): mount failed
[  867.483517][T12815] loop4: detected capacity change from 0 to 1024
[  868.075529][   T26] audit: type=1800 audit(1749322336.574:517): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1823" name="file1" dev="loop4" ino=20 res=0 errno=0
[  870.021988][T12852] loop5: detected capacity change from 0 to 2048
[  870.076399][T12856] netlink: 'syz.0.1835': attribute type 32 has an invalid length.
[  870.111030][T12852] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  870.119977][T12856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1835'.
[  870.353768][T12861] loop4: detected capacity change from 0 to 1024
[  870.378428][T12327] EXT4-fs (loop5): unmounting filesystem.
[  870.509014][T12867] capability: warning: `syz.4.1836' uses deprecated v2 capabilities in a way that may be insecure
[  870.667087][ T4317] hfsplus: b-tree write err: -5, ino 8
[  873.117116][ T2164] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  873.357102][ T2164] usb 5-1: Using ep0 maxpacket: 8
[  873.455742][ T2164] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  873.470531][ T2164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.489959][ T2164] usb 5-1: Product: syz
[  873.499794][ T2164] usb 5-1: Manufacturer: syz
[  873.511273][ T2164] usb 5-1: SerialNumber: syz
[  873.534765][ T2164] usb 5-1: config 0 descriptor??
[  873.789732][ T2164] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244)
[  875.281699][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  875.288996][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  875.679631][ T2164] radio-usb-si4713: probe of 5-1:0.0 failed with error -32
[  875.757303][ T2164] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  877.543554][T12941] loop5: detected capacity change from 0 to 512
[  877.594271][T12941] EXT4-fs: Ignoring removed nobh option
[  877.690540][T12941] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1853: invalid indirect mapped block 256 (level 2)
[  877.810348][T12941] EXT4-fs (loop5): 2 truncates cleaned up
[  877.862483][T12941] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  877.896499][T12945] loop9: detected capacity change from 0 to 1024
[  878.076395][ T1175] usb 5-1: USB disconnect, device number 11
[  878.305808][T12948] loop4: detected capacity change from 0 to 1024
[  878.363452][T12948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  878.462582][T12948] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  878.883615][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  881.438967][T12943] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  884.927802][T12327] EXT4-fs (loop5): unmounting filesystem.
[  885.841330][T12996] loop4: detected capacity change from 0 to 1024
[  886.157915][ T3624] udevd[3624]: worker [11705] terminated by signal 33 (Unknown signal 33)
[  886.167065][ T3624] udevd[3624]: worker [11705] failed while handling '/devices/virtual/block/loop4'
[  887.400881][ T4932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.536815][ T4932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.632429][ T4932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.691604][ T4932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.316995][    C1] ------------[ cut here ]------------
[  888.322830][    C1] refcount_t: addition on 0; use-after-free.
[  888.329271][    C1] WARNING: CPU: 1 PID: 0 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0
[  888.338344][    C1] Modules linked in:
[  888.342243][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.141-syzkaller #0
[  888.349999][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  888.360180][    C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0
[  888.366255][    C1] Code: 09 01 48 c7 c7 a0 d2 be 8a e8 ad 30 45 fd 0f 0b eb e0 e8 f4 1d 79 fd c6 05 fa 72 e2 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd <0f> 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be
[  888.385900][    C1] RSP: 0018:ffffc900001e0828 EFLAGS: 00010246
[  888.392016][    C1] RAX: a57dc68649da3400 RBX: 0000000000000002 RCX: ffff88813fee1dc0
[  888.400025][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  888.408030][    C1] RBP: ffffc900001e0990 R08: dffffc0000000000 R09: fffff5200003c095
[  888.416000][    C1] R10: fffff5200003c095 R11: 1ffff9200003c094 R12: ffff88802fa454c0
[  888.424004][    C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88807402b448
[  888.432033][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  888.441032][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  888.447656][    C1] CR2: 00002000003ee030 CR3: 000000000c68e000 CR4: 00000000003506e0
[  888.455629][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  888.463628][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  888.471632][    C1] Call Trace:
[  888.474907][    C1]  <IRQ>
[  888.477785][    C1]  tipc_crypto_xmit+0x17a9/0x2300
[  888.482857][    C1]  ? tipc_crypto_do_cmd+0xde0/0xde0
[  888.488108][    C1]  tipc_bearer_xmit_skb+0x242/0x3f0
[  888.493336][    C1]  ? tipc_bearer_xmit_skb+0xa6/0x3f0
[  888.498667][    C1]  ? tipc_bearer_min_mtu+0x1c0/0x1c0
[  888.503992][    C1]  tipc_disc_timeout+0x568/0x6b0
[  888.508974][    C1]  ? tipc_disc_init_msg+0x570/0x570
[  888.514203][    C1]  call_timer_fn+0x1a0/0x670
[  888.518839][    C1]  ? tipc_disc_init_msg+0x570/0x570
[  888.524062][    C1]  ? call_timer_fn+0xc1/0x670
[  888.528787][    C1]  ? __run_timers+0x7c0/0x7c0
[  888.533488][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  888.538730][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  888.543950][    C1]  ? tipc_disc_init_msg+0x570/0x570
[  888.549192][    C1]  __run_timers+0x525/0x7c0
[  888.553720][    C1]  ? detach_timer+0x350/0x350
[  888.558425][    C1]  ? lock_chain_count+0x20/0x20
[  888.563321][    C1]  run_timer_softirq+0x63/0xf0
[  888.568132][    C1]  handle_softirqs+0x2a1/0x920
[  888.572937][    C1]  ? __irq_exit_rcu+0x12f/0x220
[  888.577840][    C1]  ? do_softirq+0x200/0x200
[  888.582377][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  888.587618][    C1]  __irq_exit_rcu+0x12f/0x220
[  888.592331][    C1]  ? irq_exit_rcu+0x20/0x20
[  888.596846][    C1]  irq_exit_rcu+0x5/0x20
[  888.601151][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  888.606790][    C1]  </IRQ>
[  888.609751][    C1]  <TASK>
[  888.612704][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  888.618719][    C1] RIP: 0010:default_idle+0xb/0x10
[  888.623795][    C1] Code: 48 89 df e8 47 d4 b8 f7 e9 4c ff ff ff e8 bd 15 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 17 24 4d 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[  888.643521][    C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6
[  888.649645][    C1] RAX: a57dc68649da3400 RBX: ffffffff8a197f77 RCX: a57dc68649da3400
[  888.657659][    C1] RDX: 0000000000000001 RSI: ffffffff8a6bffe0 RDI: ffffffff8abf1360
[  888.665650][    C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6af6
[  888.673649][    C1] R10: ffffed10171e6af6 R11: 1ffff110171e6af5 R12: 0000000000000001
[  888.681656][    C1] R13: dffffc0000000000 R14: ffff88813fee1dc0 R15: 1ffffffff1bfd0f6
[  888.689663][    C1]  ? default_idle_call+0x77/0xc0
[  888.694636][    C1]  default_idle_call+0x84/0xc0
[  888.699438][    C1]  do_idle+0x1fc/0x570
[  888.703539][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  888.708795][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  888.714027][    C1]  ? asm_sysvec_call_function_single+0x16/0x20
[  888.720226][    C1]  ? schedule_idle+0x57/0x90
[  888.724841][    C1]  cpu_startup_entry+0x3f/0x60
[  888.729653][    C1]  start_secondary+0xe4/0xf0
[  888.734268][    C1]  secondary_startup_64_no_verify+0xcf/0xdb
[  888.740217][    C1]  </TASK>
[  888.743268][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  888.750541][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.141-syzkaller #0
[  888.758251][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  888.768304][    C1] Call Trace:
[  888.771604][    C1]  <IRQ>
[  888.774445][    C1]  dump_stack_lvl+0x168/0x22e
[  888.779125][    C1]  ? memcpy+0x3c/0x60
[  888.783105][    C1]  ? show_regs_print_info+0x12/0x12
[  888.788302][    C1]  ? load_image+0x3b0/0x3b0
[  888.792811][    C1]  panic+0x2c9/0x710
[  888.796712][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  888.801215][    C1]  ? secondary_startup_64_no_verify+0xcf/0xdb
[  888.807283][    C1]  __warn+0x2f8/0x4f0
[  888.811262][    C1]  ? refcount_warn_saturate+0xff/0x1a0
[  888.816721][    C1]  ? refcount_warn_saturate+0xff/0x1a0
[  888.822174][    C1]  report_bug+0x2ba/0x4f0
[  888.826508][    C1]  ? refcount_warn_saturate+0xff/0x1a0
[  888.831981][    C1]  handle_bug+0x3a/0x70
[  888.836136][    C1]  exc_invalid_op+0x16/0x40
[  888.840639][    C1]  asm_exc_invalid_op+0x16/0x20
[  888.845505][    C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0
[  888.851573][    C1] Code: 09 01 48 c7 c7 a0 d2 be 8a e8 ad 30 45 fd 0f 0b eb e0 e8 f4 1d 79 fd c6 05 fa 72 e2 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd <0f> 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be
[  888.871171][    C1] RSP: 0018:ffffc900001e0828 EFLAGS: 00010246
[  888.877234][    C1] RAX: a57dc68649da3400 RBX: 0000000000000002 RCX: ffff88813fee1dc0
[  888.885200][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  888.893164][    C1] RBP: ffffc900001e0990 R08: dffffc0000000000 R09: fffff5200003c095
[  888.901263][    C1] R10: fffff5200003c095 R11: 1ffff9200003c094 R12: ffff88802fa454c0
[  888.909255][    C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88807402b448
[  888.917257][    C1]  ? refcount_warn_saturate+0xff/0x1a0
[  888.922722][    C1]  tipc_crypto_xmit+0x17a9/0x2300
[  888.927769][    C1]  ? tipc_crypto_do_cmd+0xde0/0xde0
[  888.932982][    C1]  tipc_bearer_xmit_skb+0x242/0x3f0
[  888.938181][    C1]  ? tipc_bearer_xmit_skb+0xa6/0x3f0
[  888.943467][    C1]  ? tipc_bearer_min_mtu+0x1c0/0x1c0
[  888.948784][    C1]  tipc_disc_timeout+0x568/0x6b0
[  888.953729][    C1]  ? tipc_disc_init_msg+0x570/0x570
[  888.958936][    C1]  call_timer_fn+0x1a0/0x670
[  888.963528][    C1]  ? tipc_disc_init_msg+0x570/0x570
[  888.968746][    C1]  ? call_timer_fn+0xc1/0x670
[  888.973449][    C1]  ? __run_timers+0x7c0/0x7c0
[  888.978132][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  888.983336][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  888.988535][    C1]  ? tipc_disc_init_msg+0x570/0x570
[  888.993738][    C1]  __run_timers+0x525/0x7c0
[  888.998248][    C1]  ? detach_timer+0x350/0x350
[  889.002937][    C1]  ? lock_chain_count+0x20/0x20
[  889.007804][    C1]  run_timer_softirq+0x63/0xf0
[  889.012573][    C1]  handle_softirqs+0x2a1/0x920
[  889.017351][    C1]  ? __irq_exit_rcu+0x12f/0x220
[  889.022213][    C1]  ? do_softirq+0x200/0x200
[  889.026725][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  889.031934][    C1]  __irq_exit_rcu+0x12f/0x220
[  889.036617][    C1]  ? irq_exit_rcu+0x20/0x20
[  889.041132][    C1]  irq_exit_rcu+0x5/0x20
[  889.045376][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  889.051009][    C1]  </IRQ>
[  889.053935][    C1]  <TASK>
[  889.056875][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  889.062867][    C1] RIP: 0010:default_idle+0xb/0x10
[  889.067904][    C1] Code: 48 89 df e8 47 d4 b8 f7 e9 4c ff ff ff e8 bd 15 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 17 24 4d 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[  889.087505][    C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6
[  889.093571][    C1] RAX: a57dc68649da3400 RBX: ffffffff8a197f77 RCX: a57dc68649da3400
[  889.101540][    C1] RDX: 0000000000000001 RSI: ffffffff8a6bffe0 RDI: ffffffff8abf1360
[  889.109509][    C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6af6
[  889.117479][    C1] R10: ffffed10171e6af6 R11: 1ffff110171e6af5 R12: 0000000000000001
[  889.125454][    C1] R13: dffffc0000000000 R14: ffff88813fee1dc0 R15: 1ffffffff1bfd0f6
[  889.133427][    C1]  ? default_idle_call+0x77/0xc0
[  889.138380][    C1]  default_idle_call+0x84/0xc0
[  889.143147][    C1]  do_idle+0x1fc/0x570
[  889.147222][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  889.152423][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  889.157718][    C1]  ? asm_sysvec_call_function_single+0x16/0x20
[  889.163882][    C1]  ? schedule_idle+0x57/0x90
[  889.168479][    C1]  cpu_startup_entry+0x3f/0x60
[  889.173250][    C1]  start_secondary+0xe4/0xf0
[  889.177843][    C1]  secondary_startup_64_no_verify+0xcf/0xdb
[  889.183746][    C1]  </TASK>
[  889.187113][    C1] Kernel Offset: disabled
[  889.191541][    C1] Rebooting in 86400 seconds..