last executing test programs:

6m59.169781778s ago: executing program 32 (id=24):
mount(0x0, 0x0, 0x0, 0x2008, 0x0)
mkdir(0x0, 0x60)
rename(0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000380), &(0x7f00000003c0)='./bus\x00', 0x20000, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="c5f696e94671731e18caf1cecd2832578d96a9236172e08c0e1ccfae238519d201a04eeef63c92be02fae3fd5dbe269837b5194f53b8c84d4a4601a76998717a", @ANYRES8, @ANYRES32], 0x45, 0x14fd, &(0x7f0000000700)="$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")
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_INIT(r0, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
geteuid()
mount$9p_rdma(&(0x7f0000000240), 0x0, 0x0, 0x8080, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5m17.715593173s ago: executing program 33 (id=214):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200000000)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x68, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000004480)=ANY=[@ANYBLOB="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"], 0x188)
close(0xffffffffffffffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d)
r6 = fanotify_init(0x40, 0x1)
fanotify_mark(r6, 0x105, 0x2b, r5, 0x0)
write$binfmt_misc(r4, &(0x7f0000000540)="389b46", 0x3)
setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)=@v1={0x1000000, [{0x3ff, 0x6}]}, 0xc, 0x2)
fchdir(0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r7 = syz_clone(0x94006000, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x68040200)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x14, 0x0, 0x9, 0x0, 0x0, 0x1, 0x10006}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
syz_read_part_table(0x4073, &(0x7f0000000400)="$eJzszzFKA1EQBuA/iWsWWQiCVoIYLOxk7az2FuklZ7CyUHFvYikewHt4B0s9QiTKBtfYBoJ8XzHM7M/sey9st4+uKVefBkle5s/7SU6maev6O9z5Cke97foixV45TJXkev3ns6eN3h0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANg24x/9sJfcJWlfb866uVyW3WWZH6W9bXJZJeXhJHkYpWiOBzlIpud/nDFK3pIMkrwnmU029xwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D+56k3j33HVNffrq4+naZtilS4Wn+zOMQEAIAwDwYwYxCQmg4V2vzPw346zJ7lv+woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcyAAAAAML8rfNoPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcFAAD//xGEFjw=")
r8 = syz_open_procfs(r7, &(0x7f0000000240)='coredump_filter\x00')
read$msr(r8, 0x0, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0)

3m2.953553958s ago: executing program 1 (id=542):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x2, 0x3fc}]}, 0x10)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

3m2.699514974s ago: executing program 1 (id=543):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x8, "39e192", 0x1, 0x2})

3m2.094101427s ago: executing program 1 (id=546):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1100005}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000a00000800040001000000", 0x24)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
getpgrp(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000440)={0xfffffffd, 0x5, 0x68})

3m0.759383946s ago: executing program 1 (id=549):
socket$inet6(0xa, 0x80002, 0x0)
openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x721, &(0x7f0000001b80)="$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")
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0xffffffffffffff81, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)

2m57.187280254s ago: executing program 1 (id=561):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x1, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r2 = getpid()
syz_open_dev$usbfs(0x0, 0x0, 0x4025c0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpgrp(0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x80000000000003)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x20000001)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000400)={0x2000, 0x6}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x9, 0x10001}]}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000500)=0xeb54)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, "dce4f0020100000000001b347d5c00010200"})

2m54.897609564s ago: executing program 1 (id=570):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x480200, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m54.393927246s ago: executing program 34 (id=570):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x480200, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m25.125335737s ago: executing program 7 (id=571):
socket$inet6(0xa, 0x80002, 0x0)
openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x721, &(0x7f0000001b80)="$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")
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0xffffffffffffff81, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)

2m24.651222898s ago: executing program 7 (id=679):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000000c0)="e6", 0x1}, {&(0x7f0000000880)="eb42f5cdead5f1e041337b4f9fb66be8cdacd4928f46f3af0cb17ff09532a21e", 0x20}], 0x2, 0x0, 0x0, 0x7000000}}], 0x1, 0x4008880)

2m22.639467342s ago: executing program 7 (id=685):
r0 = socket(0xa, 0x2, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000000080))

2m22.209283511s ago: executing program 35 (id=685):
r0 = socket(0xa, 0x2, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000000080))

2m22.201255321s ago: executing program 6 (id=687):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xf63e, 0x20, 0xffff, 0xff00, 0x6, "0000001000"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x13)

2m21.121015605s ago: executing program 6 (id=692):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)

2m19.725354006s ago: executing program 6 (id=694):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x254, &(0x7f0000000780)="$eJzs3T1oJGUcBvBnZnc9926RUxtB/AAR0UA4O8HmbBQO5DhEBBVORGyUO+G8w+7WysZCa5VUNkHsjJYhTbBRBKuoKWIjaLAwWGixsjsJbJI1ajbZkczvB5P5nv8Mmefdbd53AzTW2STnk7SSzCXpJCnGD7i/ms5ury50Vy8ng8Ezvxaj46r1ys55Z5L0kzyWZKUs8lo7ubH0wsbva0899O71zoMfLz3fnelDbtvcWH9666OL73x24dEbX3/788Ui59Pb9VxHr5iwrV0kdxxHsf+Jol33HfBvXHrr0++Gub8zyQOj/HdSpvrnvXftlpVOHvnw7859/5dv7p7lvQJHbzDoDD8D+wOgccokvRTlfJJquSzn56vv8N+3TpevX7325tyrV69feaXulgo4Kr1k/ckvTn1+Zk/+f2pV+QdOrmH+n720+MNweatV990AM3FPNRvmf+6lmw9H/qFx5B+aS/6hueQfmkv+obnkH5pL/uEE6+ws9Cfuln9oLvmHhhnrlyn/0Fzj+QcAmmVwqu4eyEBd6m5/AAAAAAAAAAAAAAAAAACA/Ra6q5d3plnV/PKDZPOJalyy/fVbo98jTm4d/T39WzE+fFmK3cOZHcqL9015gSl9UnPv69t+PPYS3YN2fnXvsdc/0M0rSf/tJOfa7f3vX7H9/h3e7f+wv/PylAX+o2LP+uPPLe/dNFN/LtZZPbmwliwP259zk9qfMneN5pPbn974EMuH9MYfU14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmfkrAAD//4T2bpo=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

2m17.72971846s ago: executing program 6 (id=702):
socket$inet6(0xa, 0x80002, 0x0)
openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x41}, 0x18)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x721, &(0x7f0000001b80)="$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")
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)

2m15.756045343s ago: executing program 6 (id=706):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000540)=""/153}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m12.603396842s ago: executing program 6 (id=713):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xe, 0xffff}, {0x6, 0xfff4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4000050)

2m11.062350476s ago: executing program 36 (id=713):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xe, 0xffff}, {0x6, 0xfff4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4000050)

1m49.89954913s ago: executing program 3 (id=753):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000540)=""/153}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m45.525509206s ago: executing program 3 (id=762):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x8800, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2080)

1m44.126266636s ago: executing program 3 (id=766):
r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{}, {@noquota}, {@noquota}, {@nodioread_nolock}, {@auto_da_alloc}, {@grpid}]}, 0x5, 0x5a7, &(0x7f0000000200)="$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")
r1 = openat(r0, 0x0, 0x1c3042, 0x58)
fallocate(r1, 0x0, 0x9, 0x10001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r3 = fanotify_init(0xf00, 0x1)
fanotify_mark(r3, 0x105, 0x40009965, r2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
write$FUSE_POLL(r4, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x7f}}, 0x18)
pwritev2(r4, &(0x7f00000008c0)=[{&(0x7f0000000100)="aa", 0x1}], 0x1, 0x800e7b, 0x0, 0x0)
sync_file_range(r4, 0x5, 0x8, 0x6)

1m39.4177621s ago: executing program 3 (id=779):
socket$inet6(0xa, 0x80002, 0x0)
openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x41}, 0x18)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x721, &(0x7f0000001b80)="$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")
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)

1m37.894063093s ago: executing program 3 (id=783):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
read(r0, 0x0, 0x21)

1m35.282053791s ago: executing program 3 (id=791):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x8800, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2080)

1m34.722729483s ago: executing program 37 (id=791):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x8800, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2080)

1m25.862223468s ago: executing program 8 (id=810):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x101, 0x2)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x100000003, 0x410200)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
keyctl$clear(0x3, 0xfffffffffffffffd)
syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000040)={0x1, 0x1})

1m23.46946653s ago: executing program 8 (id=815):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000aadf0000181100000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x9, 0x47}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m20.115288653s ago: executing program 8 (id=820):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0xfffd, 0x5, 0x100, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x5, 0x4829d, 0x0, 0xe, 0x6, 0x4, 0x1000008000, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7, 0x0, 0xc, 0x2, 0xfffffffffffffffc, 0x4, 0x1000000080, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0xf9, 0x100000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xff, 0x0, 0x200000000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80, 0x4, 0x2, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x8000000000000000, 0x2, 0x0, 0x7ff, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x2000000000001, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x7, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4, 0x1000000000000000]})
preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000200)=""/241, 0xf1}], 0x1, 0xd9, 0xfffffffd)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffe, 0x20100)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
fsopen(&(0x7f0000000780)='ext3\x00', 0x1)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

1m18.035536069s ago: executing program 8 (id=822):
socket$inet6(0xa, 0x80002, 0x0)
openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x41}, 0x18)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x721, &(0x7f0000001b80)="$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")
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)

1m17.591298989s ago: executing program 8 (id=825):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_io_uring_setup(0x2aa8, 0x0, 0x0, 0x0, &(0x7f0000000000))
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r1, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0xfffffff9, 0x15})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0xc1105511, &(0x7f0000000040))
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

1m10.143780512s ago: executing program 8 (id=844):
socket$nl_generic(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)

1m9.79165615s ago: executing program 38 (id=844):
socket$nl_generic(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)

17.952081397s ago: executing program 2 (id=981):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

11.541184127s ago: executing program 2 (id=1009):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x8141, 0x80)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x804010, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
write$UHID_INPUT(r1, &(0x7f00000008c0)={0x8, {"5409d0b47956716a4768836c784564bc9fd8a15c98ece7defbe258e690568a00bdf2dc9a06eabd230f800456ae95d919e2ae71877b555dee7797b299ae9bf07cd12347b8d07277929a1ba9b11de281db1ee7c541af1bea3bc12494d47746d50cec497669982f970ba853e323e289201ae81a582a457789a36e93ff85298ed16cc92a6f4deb8f358fbeebe70bf64a21f2199ee0c2d1c5b00d9750f9564b88a3a38f36989d4dd818db88f78dad96d6e382d63e26d94e0b22489844852a695d09c2ee42446e1df3710cb041901603fe993b0ba8382f7e69bd36b6eb9b6294afd5bdb031241006876ddc5d232448899f9b7140500829c069a8504be568ce853c7ab6647f7be3f64368bcf7bcdda84d17c981a0a8d458fd3e896f5668e6161b5734b457e2e205e7934ba8e3c6015f2c74ac9f83e846dad9d7a224941a2322b923c0afbc45ef51ef99a2bcfd1c3909c9db5aae3569903cba5535468cca0ea5b048a03ac1ed8711c1fc285ab999a46368be5b062e89078a3fdb2a87e03e991a7c177b76e84ca62e14003db7355869f8e7d6704749880f5b32a4bade669abbf5542ba6fc1e3416530bf03b8e70ff2202840efc3b50544f9c0e7a820cf3c8165ad5600e0cfead7803a53f040ed7a6368bbea77a2649f63a8958c45d2e4f81356d251d190dfe77e4553589235b32ba30f5f1bc09ba715db3cd328564ab345a887b54c61ede5a2c39e5ae9c0b29498ebc2787ba044e3e8ec6e73f50697859627cec8cbe959a47eec287d48197dec04cab605df7549f5da87d46669e3ebba6a8cab2f1e47dfa2d2e65b8767e0f7a7ae0dff165e84cf40fcb0900e2fda345207a81eafd4e1caeb7051e09922bc07cae103786eb15053f1362491ffda8da243d127f34baf3be19f80b230e75fcff3a08e49548b055305d245ad3228471eeb54ee8f21794d752416a9040e0ceaa3755f90f4bd8d8d506c5e3e476c56ff62bfcb204d49a485a1be984c7bde7cba6862b5fd6ebf9e3f57bf62656d7bd7b2ee272a2d62c601a8f134451b84326198e531c1a368d2bb7460f33acde3ab51ae697baac2b107b7e955f99f10afa01a64b60eca3c1081f523848f51c800587f0d0e4a36dceb92684907df39083fce4dbb15c19baea797fea26f9a0437f1d41f191b84dca5caf400f33b505d082b984cdd47a9cdfcaf053528c55be4a365726221ecf5a5fe3ae642ddf9fb1748aae00434ab99b02fd22ce02c6cfbd578b5d1b481c9b16e5942752dd1fc95c22f66830b34850bdea3e72aca8679241023ee5fce6172193542b074e6b7104eca314abc3bb262decd187f1bcf3ef8588abfaccfb3503f0c41f08b4fb217810c8b26bf537c29750e59556683d58a46049728c51fdc3f52d676af9f168105f6c6442cd84ebbeb8e618cb0bcf13368bd75dcc601476cbd46db9b6d52ce1565e432e68c23246a6567507bace2d958a7ad0afed40a6097b285754b4ba1cde80604446a29583abc6f5dfbb4aa45a77cdffb7c6eacb0d55a839e0ac9bef579e9d0433f81827d452ca14edea08fa51a0fc18ee27628450ec0a327faef768464519706bb0ea831c05c22d4818e91c0a361f322ddd3f3a72ee50acc313fe7eeaaf8c976117ab1a13319ddffa5b6391f4854931be2705a03dcecef104f666b5f064902661bf7067f75b7bf5919b73341c6c36b86514b8ad148dc05f6c4d675271ee0a109d3d8dc9045f26f5809ed4568e9f1126b8242afb8bf3e09dbc8df8158b233016bd5854959bc6fac22f364b0041a1bd41bd91be16ef095cad6e3400bd2363eb89cd41ee0d41e220022966c902ae04b75d242612df88a13cd252280c8e6876efa5635577ab2871af0254b72aa0b300d4fc576a9c7953ffdaa868819276047507e143087f2df126e3fb55fae3281a0fe5ac38dfd652ddef3962ce99151875d0355cb1df315c85f6376b1e2270ff87987d62668730f00b0dd6a7d1b6e7a3428fc69c26be613c1f4ea0adc67dfd77fed5d58637a496c85b04c3552dc4b812d204b8fe368fa9bf240aa2488de3c1570842f0e6e4acf6c78e197a4a50f17e22994a4bd56ad99e66ad58d87afa6e4b8a2174b4d9cdf5c8ebe54c7bc20b6633fba96cbfda82da1a932c3e3c315aa7cc6ac1348ac258bf973a9281de1b558461534ead12c22e61a56ad9aa2f8a993fbcf27916527111793cbb0876e611c6496f7dfecf7cc725d69208174a398cb8e87f75cbc01a4feed5e1c8a9ec67dd69beb11b08c45f40609937216511b8c0c1338c618a3b00de3f106993a4bdfb50b50cd00f09716d28dba1a209988445ae6a896743aeff4a060c9f20d866011e8fbfd3dd8cde07f9c1a8081db49cd102b5621b5a411a108e7e6310896e92c7878059616c55169bd9087e50cc6b1b2619b04035bf0ab2ce1ca6259914f9ab2f3d22f7854c079c22b35b96cf3012cd5147c3633a0d8958b87d79b3a9141055fe059b8ef8ed3639ae0b15f0780fdc1c822c751e6ff82880f39d7e02887b5761fb304028c15cbccf525aec82c8278e960d7670b7c8b87dbf856578d6e60eb9f79a099bd700922ee08326f0ae9f43411a2f6b66b09ba0fd1d0ff534ec50d21dfbf7e7f51ab0fe0a98fbd7d8a8436b7c8fa3ae9613b5bef3bdc6061dd11faf272ac2be26f5c2f1b0c576c5cd1f2d1daa75c4bf25b77e0e7e14c1cf924fee802aabd45698d67717d0ba9da4ad5b834a494916047346ea74908cb204502c458270b3767a6b36f4925fb621f2d286e23e7a9575c3dc7b3c898764fb4812e855a2a95a5489e849564e34dae82bce8657f599efe29a5c456784d3a01a8419e3c6c03b1fa4f818794add50191e55a33714e6335ef5abcb198b6feb0b0e3543ba87416be0e0d8593ad681ca2c39f2d40eab479f620443bd24e91865ffc0383f987890b6a81158c76136ea51c80b5bcf51754dbc12d014040a238ab3a2955df4e5778a288d95f177cde3974a69dde9770f06e3ff5c3728429de61bbf3e22be2f983f7dfdfd6dbf041a75090da0cf89347e768989d15a4c5865b1b46bc618e7d7475ce825205cd5866f26fc0c4d9188f568e1f69874e5610e8155ece390d5ed93833c4cf435b0f46e31f8057d55ecf265e96466e8826b363c9fc3561c9bb7ff31e2f075e23891c678e94c4c93f9d22423b38a5f3b2ea002f371b199fc3424ee376ea72f5c9b0e71593022f462db99dc2c22007b5c0d22595b34d38cf760a89cb9b4c08378fbe676042c86e08586e517b49386f25c92fa90188ef9e0349948e0176d22a5f3cf9f273b4270f1b587b31ccf0fc98b5e07efd4bc016fc0420a46850f796685a2ba176ba2fcf759c362adab4e6cf553a7abb90b0fe7c50b183d075cec008a5e45fa8c785003f9a3ea12990e40f8bfce140b74dd77cdd3f3c89305475f1a8c308123dbf62459f8df95efed0896768a9d03548cc285210f241a1b43c674463bfff28f5cdb7cbe7f5f84df67ad96d6eeb9dc98e4470824f0ebc3445c09c484998b91aa41912bfe90731b9360851f5f009aeba7f8b67ef6f7cb6054c964731234b50a108439d96b8981549ad9d24abbb8f079739f81b843a4b38115dfe90972a5712ed2888e904fc6334319527a239bf33b19eebfc2f241b50d4581cff7ff0936304db11be2da6fdd2eba1dc417676f63bc95d569fb6ca3c74491d00ccdff96cf05ab0200084d06debfd96160eabc23609ae49865e2852e6ce364d297f165d5ae613487831346e5689037512fdc6a97472ac0493d4a9c3a1c5ea2aa4bd8a7b988757725633c3fadb724bbd3eed599d56748435237e00047e3ac812a4de1ee0d01b22b9946049069b8598df705bad67b2a3a5b29b89e7862da3f9ea79d9745d554ecb74a57e9627d2dfe8b93cd90873b0e235debf699f7dcb2fc3a347a38cc7c4826bb477d7e25a4f30418f2ddbecd5509cc2aef7293ba2e576c122a876d568607ad2629670db3b04922096d0744d36dd98df39a09c42d54a6e3cefa19845d1311d574aab537ac3f8d480717a6f2ab8a69725eeeb30f538c09d963de0cfc850e9ec057a447c22b8f972a1f2aac39ef00112b12ce5c5b3c2192d62081fe199e7da7d996ca0f690e0b0ff26a4ae94b84ebc80af32e189ca240c59d29803247498c3d3bf96071798c0d2bd2e655c61ae77044e77d67f9203dae6dfa2f0158fd4f005b0a025abedadcf8a1a70e2fd69b4ee460a85de5a555eb5575d1969553f1bb60d96f34e7a109a27106c45137b6de8f05a468f72c28ceb63570f59191da2dab146b904638e11bf2efbc47ec283c11ae561a4b7b480a03a035c80d1f5bb852050855fb5c86caee52398edc4c7ad81d434440e3450b716f32a49c0c666577cbc96df96a37342b35c2bec8c2762f8039e35eaefc7d6c60332ea30aee9dd07b1a05df407382e2278d7adc0e5d733db156b73eff1733f7260006d042183fff14b5ab947140fe9b5cedab0354d5f073fc22b591b9c0c8558d01aac41954743942e955bb1c16bc0e10f30b7f6f7fbbee9899b6ad49d211635bdd1c5451bca2f222c6b1b775f0e97d6f47261c6e465c8feb1521af9a3fa2673c430949db067aa6203c71fc459530e1f9eb3a54e5ac22c671be89028b99b972313e43bed0a86f9c0f5e97187b1b8d5b68677c6e5a2bc980677402125caee27e18e263d69b3e72390a2b1eb00946e4c14c9a6c598f560525168ecd2f43b025152543512c782c84ea111ef39831f82d9cf4d3ec5fa2279f33f6fe07d89056562ecd231275ba02f6f1674db62b846a44faeb86d821a723e07a8f496f0eac6a63f575e1bbd1492187fbaa07ddbfeb26419a05dab14ff24b864744e823842264da075f894151e623d009f75936c6672d6a7d8c3940380d206c1a2ced74be2d7a046f1d647f1559d25ec7ea1ea8556da0775825876cb37f71e74f2b12c6c2e388be46d8ac68b9f28ec85ba98a93c989310ab1d14b4e183b465064f2a5273a0739c3487e9b2b00f20f2d550dbb4ac63e85f92aecbe4b6e91b6fe35b6f7cedcfff882877ba516ea688a2d227db6755d1c5f09a058f5da047eaa6d48d558107f59672b891638f0e12a26ec5816d1efa79f7898c71ec7b457f0ca643ac8a02398002824556baa085c5434b97a60a1127269d68f3849c013cebda72b330216a4d076ffb24ffd8bbba12ec77e99cc9552c40908f02ee4c81b4aae959b5f19ee4c1ea23031b209377e4d5c58b1fd130e561cef5998063c224709145d525043dab7e5c3e499cbb0bbdd4b26aaf1e83431ccb432b05c2cfc98418e72cc0f101ea25ca86ca1989d592c58afccbf71fc05d6a73803e1231a3384afbd8fe201c47d5e1c4c89518698b37c0f686db07f924d47604450c347d43b8a1a9b80adfec5efc36993994fe8550808139d2b33a921fc68ae44cce976f2cea1c18430c51a19379f660f9cbfc745e4613fb60bf8508e844755561489492475518dd68e4dec5e169fd47b4059ebca05628685005f66749960b89fb38e838cbde81863881eb420ef62b36f214b55a81bac96ae0c2fe0355e21c6ad165bc1ffe96ae44af834ec95279ac595752f1e167135f494773280ad7e0d867d16d0cd2686f6962175fc8ca7fb1ae7e673458766294f97020c0a4fb99ef9063c4f07df845188dd856e06258131a43f791f95a5d20db8698baffac8ba17fb6148ceae3b9e770a7c4bfb5206b6e4285bc99cdde983a375d596e05fecf91eb324837af4ce13d2f4b41d88d9caac80c2068ebe55336539bb9f746dde74e8e39818d73410a70edd75bc920f1282d433c22a91cd", 0x1000}}, 0x1006)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0xc000, 0x973f, 0x81, 0x4})
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x21, 0x0)

9.439294433s ago: executing program 4 (id=1010):
mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x10103)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100})

8.001383165s ago: executing program 4 (id=1013):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close(r1)
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)

7.399205198s ago: executing program 4 (id=1017):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4)
r1 = dup2(r0, r0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0xfffe, 0x200000a, 0x1, 0x8})

7.202644773s ago: executing program 2 (id=1019):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x2})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{0xeeee8000, 0x70000, 0xb, 0xad, 0x3, 0x4, 0x7c, 0x5, 0x0, 0x2b, 0x9}, {0x6000, 0x30000, 0xf, 0x2c, 0x8, 0x0, 0x7f, 0x1, 0x4, 0xf0, 0x9, 0x80}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0x22, 0x0, 0xa, 0x0, 0x5, 0xf, 0xff}, {0xdddd0000, 0xffff1000, 0x0, 0x1, 0x4, 0x2, 0xf8, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0xeeee8000, 0x8080000, 0xd, 0x3, 0x5, 0x86, 0x29, 0x7f, 0xa, 0x1, 0xf2, 0x43}, {0x30000, 0x6000, 0xb, 0x7c, 0x0, 0x24, 0x7f, 0xaf, 0x80, 0xc, 0x8, 0x3d}, {0xd000, 0x100000, 0x3, 0x5, 0x8, 0x5, 0x1, 0x3, 0x5, 0x82, 0x0, 0x28}, {0x5000, 0x3000, 0x3, 0x5, 0x9, 0xf, 0x3, 0x37, 0x0, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0xd000, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x5, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.089447484s ago: executing program 4 (id=1020):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000a00)={[{@shortname_mixed}, {@utf8}, {@fat=@errors_remount}, {@shortname_win95}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@utf8no}, {@uni_xlate}, {@rodir}, {@fat=@debug}, {@utf8no}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {}, {@shortname_lower}]}, 0x0, 0x2bc, &(0x7f0000000380)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)="4e9a43b5", 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x40008)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014280000b7030000000800008500000086000000bf090000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x20}, 0x94)

5.493199179s ago: executing program 4 (id=1022):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x5d, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000014a9fcff0400000038130000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x3000000}, 0x10}, 0x6b)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.340857773s ago: executing program 2 (id=1023):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340), 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x9, 0x0)
creat(&(0x7f0000000180)='./bus\x00', 0x48)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200008c6, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61736b3d309a02003030303030303030303135322c696f63686172e8ffffff69736f383835392d312c6769643d00000000000000", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRESOCT], 0x81, 0x14ff, &(0x7f0000002a80)="$eJzs3Au4jtW2OPAx5pwvi6QvyS1zzPHypYVJkuSSkEuSJEmSW0KSJEmoWOSWhCQktyT3kNxiJff7Lfck2ZIkCQlJ5v/R7hx7n/Y5nf3f+/z9z17j9zzzWXOs9x3jm3ON9azvfd/n+da3nQZXa1C9cj1mhn8I/vlLGgCkAEA/ALgKACIAKJWjVI6Lx7NoTPvHXkT8cz0w9XKvQFxO0v+MTfqfsUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+C5GRbZmW92oZGXfI8/+MTN7//4UcKjb6y3XFru38d6RI/zM26f+/nMx/z8nS/4xN+p+xSf8zNun/v75K/8Ux6X/GJv0XIiO73M+f/0dHCgBc7jX8fz4u9++fEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQoiM4Wy4xADAv80v97qEEEIIIYQQQgjxzxMyX+4VCCGEEEIIIYQQ4n8eggINBiLIBJkhBbJAVrgCssGVkB2uggRcDTngGsgJ10IuyA15IC/kg+sgP1ggcMAQQwEoCEm4HgrBDZAKhaEIFAUPxaA43Agl4CYoCTdDKbgFSsOtUAbKQjkoD7dBBbgdKkIlqAx3QBWoCtWgOtwJNeAuqAl3Qy24B2rDvVAH7oO6cD/UgwegPjwIDeAhaAgPQyNoDE2gKTT7v8p/Hl6AF6EbdIc06AE94SXoBb2hD/SFfvAy9IdXYAC8CgNhEAyG12AIvA5D4Q0YBsNhBLwJI+EtGAWjYQyMhXHwNoyHd2ACvAsTYRJMhikwFabBdHgPZsBMmAXvw2z4AObAXJgH82EBfAgLYRGkw0ewGD6GJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYt8AlshW2wHXbATtgFu+FT2AOfwV74HPbBF39n/pn/kN8ZAQEVKjRoMBNmwhRMwayYFbNhNsyO2TGBCcyBOTAn5sRcmAvzYB7Mh/kwP+ZHQkJGxgJYAJOYxEJYCFMxFYtgEfTosTgWxxJ4E5bEklgKS2FpLI1lsCyWxfJYHitgBayIFbEyVsYqWAWrYTW8E+/Eu7Am1sRaWAtrY22sg3WwLtbFelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBttgW22E7bI/tsQN2wI7YETthJ+yMXbALPo/P44v4InZHgB7YE3tiL+yFfbAv9sWXsT++gq/gqzgQB+FgfA1fw9dxKJ7GYTgcR+AIrKDewlE4GlmNxXE4DsfjeJyAE3AiTsJJOAWn4jScjtNxBs7Emfg+zsYP8AOci3NxPi7ABbgQF2E6puNiPINLcCkuw+W4AlfiClyNa3A1rsP1uA434kbcjJvxE/wEt+E23IE7cBfuwk/xU/wMP8OBuA/34X7cjwfwAB7Eg3gID+FhPIxH8AgexaN4DI/hcTyBJ/EEnsJTeBrP4Fk8i+fwHJ7HZ/N9XX9X4bUDQV1klFGZVCaVolJUVpVVZVPZVHaVXSVUQuVQOVROlVPlUrlUHpVH5VP5VH6VX5EixSpWBVQBlVRJVUgVUqkqVRVRRZRXXhVXxVUJVUKVVCVVKXWLKq1uVWVUWdXSl1flVQXVyldUlVRlVVlVUVVVNVVdVVc1VA1VU9VUtVQtVVvVVnXUfaqu6oF98AF1sTMN1CBsqAZjI9VYNVFN1ev4iGquhmIL1VK1Uo+p4TgM26jmvq16UrVTo7C9elqNxmdURzUWO6nnVGfVRXVVz6sXVAvfTXVXE7GH6qmmYC/VW/VRfdUMrKoudqyaelUNVIPUYPWamo+vq6HqDTVMDVcj1JtqpHpLjVKj1Rg1Vo1Tb6vx6h01Qb2rJqpJarKaoqaqaWq6ek/NUDPVLPW+mq0+UHPUXDVPzVcL1IdqoVqk0tVHarH6WC1RS9UytVytUCvVKrVarVFr1Tq1Xm1QG9UmtVltUZ+orWqb2q52qJ1ql9qtPlV71Gdqr/pc7VNfqP3qT+qA+lIdVF+pQ+prdVh9o46ob9VR9Z06pr5Xx9UJdVL9oE6pH9VpdUadVT+pc+pndV79oi6ooECjVlproyOdSWfWKTqLzqqv0Nn0lTq7vkon9NU6h75G59TX6lw6t86j8+p8+jqdX1tN2mnWsS6gC+qkvl4X0jfoVF1YF9FFtdfFdHF9oy6hb9Il9c26lL5Fl9a36jK6rC6ny+vbdAV9u66oK+nK+g5dRVfV1XR1faeuoe/SNfXdupa+R9fW9+o6+j5dV9+v6+kHdH39oG6gH9IN9cO6kW6sm+imupl+RDfXj+oWuqVupR/TrfXjuo1+QrfVT+p2+indXj+tO+hndEf9rO6kn9OddRfdVf+iL+igu+nuOk330D31S7qX7q376L66n35Z99ev6AH6VT1QD9KD9Wt6iH5dD9Vv6GF6uB6h39Qj9Vt6lB6tx+ixepx+W4/X7+gJ+l09UU/Sk/UUPVVP031+qzTrv5H/zt/IH/Drq2/WW/QneqveprfrHXqn3qV36916j96j9+q9ep/ep/fr/fqAPqAP6oP6kD6kD+vD+og+oo/qo/qYPqaP6xP6J/2DPqV/1Kf1GX1G/6TP6XP6/G8/AzBolNHGmMhkMplNislisporTDZzpclurjIJc7XJYa4xOc21JpfJbfKYvCafuc7kN9aQcYZNbAqYgiZprjeFzA0m1RQ2RUxR400xU9zc+A/n/9H6mplmprlpblqYFqaVaWVam9amjWlj2pq2pp1pZ9qb9qaD6WA6mo6mk+lkOpvOpqvpal4wL5hupptJM2mmp3nJ9DK9TR/T1/QzL5v+pr8ZYAaYgWagGWwGmyFmiBlqhpphZpgZYUaYkWakGWVGmTFmjBlnxpnxZryZYCaYiWaimWwmm6lmqpluppsZZoaZZWaZ2Wa2mWPmmHlmnllgFpiFZqFJN+lmsVlslpilZqlZbpablWalWW1Wm7VmrVlv1puNZqNZYraYLWar2Wq2m+1mp9lpdpvdZo/ZY/aavWaf2Wf2m/3mgDlgDpqD5pA5ZA6bw+aIOWKOmqPmmDlmjpvj5qQ5aU6ZU+a0OW3OmrPmnDlnzpvz5oK5cPGyL1KRikxkokxRpiglSomyRlmjbFG2KHuUPUpEiShHlCPKGV0b5YpyR3mivFG+6Loof2QjilzEURwViApGyej6qFB0Q5QaFY6KREUjHxWLikc3RiWim6KS0c1RqeiWqHR0a1QmKhuVi8pHt0UVotujilGlqHJ0R1QlqhpVi6pHd0Y1oruimtHdUa3onqh2dG9UJ7ovqhvdH9WLHojqRw9GDaKHoobRw1GjqHHUJGrao9k/tX4Ip3M/6rvZ7jbN9rA97Uu2l+1t+9i+tp992fa3r9gB9lU70A6yg+1rdoh93Q61b9hhdrgdYd+0I3el2FF2tB1jx9px9m073r5jJ9h37UQ7yU62U+xUO81Ot+/ZGXamnWXft7PtB3aOnWvn2fl2gf3QLrSLbLr9yC62H9sldqldZpfbFXalXWVX2zV2rV1n19sNdqPdZDfbLfYTu9Vus9vtDrvT7rK77ad2j/3M7rWf2332C7vf/skesF/ag/Yre8h+bQ/bb+wR+609ar+zx+z39rg9YU/aH+wp+6M9bc/Ys/Yne87+bM/bX+wFGy5e3F98eydDhjJRJkqhFMpKWSkbZaPslJ0SlKAclINyUk7KRbkoD+WhfJSP8lN+uoiJqQAVoCQlqRAVolRKpSJUhDx5Kk7FqQSVoJJUkkpRKSpNpakMlaFyVI5uo9vodrqdKlEluoPuoKpUlapTdapBNagm1aRaVItqU22qQ3WoLtWlelSP6lN9akANqCE1pEbUiJpQE2pGzag5NacW1IJaUStqTa2pDbWhttSW2lE7ak/tqQN1oI7UkTpRJ+pMnakrdaUX6AXqRt0ojdKoJ/WkXtSL+lAf6kf9qD/1pwE0gAbSQBpMg2kIDaGhNJSG0XAaQW/SSHqLRtFoGkNjaRyNo/E0nibQBJpIE2kyTaapNJWm03SaQTNoFs2i2TSb5tAcmkfzaAEtoIW0kNIpnRbTYlpCrWkZLaMVtIJW0SpaQ2toHa2jDbSBNtEm2kJbaCttpe20nXbSTtpNu2kP7aG9tJf20T7aT/vpAB2gg3SQDtEhOkyH6QgdoaN0lI7RMTpOx+kknaRTdIpO02k6S2fpHP1M5+kXukCBUpyCrO4Kl81d6bK7q1yKy+L+Ms7j8rp87jqX31mXy+X+q5icc6musCviijrvirni7sbfxWVcWVfOlXe3uQrudlfxd3ENd5er6e52tdw9rrq786/i2u5eV8c95Oq6h10919jVd01dA/eQa+gedo1cY9fENXWt3eOujXvCtXVPunbuqd/FC90it8atdevcerfHfebOup/cEfetO+d+dt1cd9fPvez6u1fcAPeqG+gG/S4e4d50I91bbpQb7ca4sb+LJ7spbqqb5qa799wMN/N38QL3oZvt0t0cN9fNc/N/jS+uKd195Ba7j90St9Qtc8vdCrfSrXKr/32ty91Gt8ltdrvdp26r2+a2ux1up9v1a3xxH3vd526f+8Iddt+4A+5Ld9AddYfc17/GF/d31H3njrnv3XF3wp10P7hT7kd32p35df8X9/6D+8VdcMEBIyvWbDjiTJyZUzgLZ+UrOBtfydn5Kk7w1ZyDr+GcfC3n4tych/NyPr6O87NlYsfMMRfggpzk67kQ38CpXJiLcFH2XIyL841cgm/iknwzl+JbuDTfymW4LJfj8nwbV+DbuSJX4sp8B1fhqlyNq/OdXIPv4pp8N9fie7g238t1+D6uy/dzPX6A6/OD3IAf4ob8MDfixtyEm3IzfoSb86PcgltyK36MW/Pj3Iaf4Lb8JLfjp7g9P80d+BnuyM9yJ36OO3MX7orH//zhB+7OadyDe/JL3It7cx/uy/34Ze7Pr/AAfpUH8iAezK/xEH6dh/IbPIyH8wh+k0fyWzyKR/MYHsvj+G0ez+/wBH6XJ/IknsxTeCpP4+n8Hs/gmTyL3+fZ/AHP4bk8j+fzAv6QF/IiTuePeDF/zEt4KS/j5byCV/IqXs1reC2v4/W8gTfyJt7MW/gT3srbeDvv4J28i3fzp7yHP+O9/Dnv4y94P/+JD/CXfJC/4kP8NR/mb/gIf8tH+Ts+xt/zcT7BJ/kHPsU/8mk+w2f5Jz7HP/N5/oUvcGCIMVaxjk0cxZnizHFKnCXOGl8RZ4uvjLPHV8WJ+Oo4R3xNnDO+Ns4V547zxHnjfPF1cf7YxhS7mOM4LhAXjJPx9XGh+IY4NS4cF4mLxj4uFhePb4xLxDfFJeOb41LxLXHp+Na4TFw2fuie8vFtcYX49rhiXCmuHN8RV4mrxtXi6vGdcY34rrhmfHdcK74nLhnfG9eJ74vrxvfH9eIH4vrxg3GD+KG4Yfxw3ChuHDeJm8bN4kfi5vGjcYu4ZdwqfixuHT8et4mfiNvGT8bt4qf+8Hha3CPuGb8UvxSHcLeel5yfXJD8MLkwuSiZnvwouTj5cXJJcmlyWXJ5ckVyZXJVcnVyTXJtcl1yfXJDcmNyU3JzMoTqmcGjV1574yOfyWf2KT6Lz+qv8Nn8lT67v8on/NU+h7/G5/TX+lw+t8/j8/p8/jqf31tP3nn2sS/gC/qkv94X8jf4VF/YF/FFvffFfHHf1DfzzXxz/6hv4Vv6Vv4x/5h/3D/un/BP+Cd9O/+Ub++f9h38M76jf9Y/65/znX0X39U/71/wL/puvrtP82m+p+/pe/levo/v4/v5fr6/7+8H+AF+oB/oB/vBfogf4of6oX6YH+ZH+BF+pB/pR/lRfowf48f5cX68H+8n+Al+op/oJ/vJfqqf6qf76X6Gn+Fn+Vl+dupsP8fP8fP8PL/AL/AL/UKf7tP9Yr/YL/FL/DK/zK/wK/wqv8qv8Wv8Or/Ob/Ab/Ca/yW/xW/xWv9Vv99v9Tr/T7/a7/R6/x+/1e/0+v8/v9/v9AX/AH/Rf+UP+a3/Yf+OP+G/9Uf+dP+a/98f9CX/S/+BP+R+9/u155zn/sz/vf/EXfPDjEm8nxifeSUxIvJuYmJiUmJyYkpiamJaYnngvMSMxMzEr8X5iduKDxJzE3MS8xPzEgsSHiYWJRYn0xEeJxYmPE0sSSxPLEssTKxIrEyFctzUOBULBkAzXh0LhhpAaCocioWjwoVgoHm4MJcJNoWS4OZQKt4TS4dZQJpQN5cLDoVFoHJqEpqFZeCQ0D4+GFqFlaBUeC63D46FNeCK0DU+GduGp0D48HTqEZ0LH8GzoFJ4LnUOX0DU8H14IL4ZuoXtICz1Cz/BS6BV6hz6hb+gXXg79wythQHg1DAyDwuDwWhgSXg9DwxthWBgeRoQ3w8jwVhgVRocxYWwYF94O48M7YUJ4N0wMk8LkMCVMDdPC9PBemBFmhlnh/TA7fBDmhLlhXpgfFoQPw8KwKKSHj8Li8HFYEpaGZWF5WBFWhlVhdVgT1oZ1YX3YEDaGTWFz2BI+CVvDtrA97Ag7w66wO3wa9oTPwt7wedgXvgj7w5/CgfBlOBi+CofC1+Fw+CYcCd+Go+G7cCx8H46HE+Fk+CGcCj+G0+FMOBt+CufCz+F8+CVckM+sCSGEEEL8t+g/ON7jb3xP/TYu6gkAV27Le+g/1tyQ68/z3ipf6wQAPNm90wP/NqpUSUtL++3cJRqignMBIHEpPxP8e2yWQit4HNpCSyjxN9fXW3U5x39QP3kLQNa/yEmBS/Gl+jf9J/UfeWzEwtLx2Rz/Rf25AKkFL+VkgUvxpfol/5P6uZv/wfqzfDkOoMVf5GSDS/Gl+sXhUXgK2v7VmUIIIYQQQgghxJ/1VuU6/NH988X783zmUk5muBT/0f25EEIIIYQQQgghLr9nunR94pG2bVt2kIlMZPK/dWLgj85R8HdWvtx/mYQQQgghhBD/bJcu+i/3SoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiIzr/8X/J7vcexRCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCEut/8TAAD//4W2OOk=")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
fdatasync(r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x1932, 0x4)
sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
connect$inet(r2, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x8, 0x2, [{0x5, 0x2}]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

5.227410166s ago: executing program 9 (id=1024):
mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x10103)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100})

4.230885857s ago: executing program 0 (id=1025):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000880)=[@decrefs], 0x0, 0x1000000, 0x0})

4.088917061s ago: executing program 5 (id=1026):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E'])
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0)

3.825504186s ago: executing program 5 (id=1027):
r0 = syz_usb_connect$hid(0x3, 0x6f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa0c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfb, 0xdf, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x32, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2008830000009321c2e3138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c5591"], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.65548697s ago: executing program 9 (id=1028):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)={[{@errors_remount}, {@abort}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)

3.306382947s ago: executing program 9 (id=1029):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0xffff}}, 0x14)

3.107770942s ago: executing program 9 (id=1030):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50)
r0 = creat(0x0, 0xd4)
r1 = dup2(r0, r0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0xfffe, 0x200000a, 0x1, 0x8})

3.027391553s ago: executing program 5 (id=1031):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x28, r1, 0x1, 0x70bd26, 0x25dfdc00, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4008004)

3.023781784s ago: executing program 4 (id=1032):
r0 = socket(0x10, 0x803, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
execveat(0xffffffffffffffff, &(0x7f0000002300)='./file0\x00', &(0x7f0000002480), 0xffffffffffffffff, 0x3000)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00')
read$FUSE(r2, &(0x7f00000061c0)={0x2020}, 0x2020)
link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00')
rmdir(&(0x7f00000002c0)='./cgroup/../file0\x00')
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x60, 0x3, "", [{{0x9, 0x4, 0x0, 0x36, 0x1, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xe09}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3c, 0x8f, 0x7f}}}}}]}}]}}, 0x0)
syz_clone3(&(0x7f0000000240)={0x200a04000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mlock2(&(0x7f0000492000/0x3000)=nil, 0x3000, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
lseek(r4, 0x2000, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x8, 0x73, 0x11, 0x23}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000100)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)

2.874116557s ago: executing program 9 (id=1033):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000a00)={[{@shortname_mixed}, {@utf8}, {@fat=@errors_remount}, {@shortname_win95}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@utf8no}, {@uni_xlate}, {@rodir}, {@fat=@debug}, {@utf8no}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {}, {@shortname_lower}]}, 0x0, 0x2bc, &(0x7f0000000380)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'})
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x40008)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014280000b7030000000800008500000086000000bf090000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x20}, 0x94)

2.807416549s ago: executing program 0 (id=1034):
r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100)
r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000100))
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0xa, 0x5, 0x0, 0x0, 0xe, 0x11, "fee8a2ab78fc179fd1f809000006aca7ca64c6a4b4e00d9683dda1af01000000deff12001000000000000000000000000008000000000100", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0, 0x1]}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791c0000000000006200faff080000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23)

2.780851159s ago: executing program 5 (id=1035):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000019c0), 0x3, 0x42f, &(0x7f0000000940)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000200)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xee01, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, 0x0, 0xc044)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_procfs(0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000)
syz_open_procfs(0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x456c4997c6f4bb71, 0x0)
close(r4)
openat$ppp(0xffffffffffffff9c, 0x0, 0xa8640, 0x0)
preadv(r3, 0x0, 0x0, 0x9, 0x0)
io_setup(0x2, &(0x7f00000005c0)=<r5=>0x0)
io_submit(r5, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}])

2.720654961s ago: executing program 0 (id=1036):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000f2, 0x0, 0x2}]})

1.289563232s ago: executing program 9 (id=1037):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E'])
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)=ANY=[])

1.201894824s ago: executing program 2 (id=1038):
mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x10103)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100})

910.71059ms ago: executing program 5 (id=1039):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x1, 0x1c3, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0xc4)

803.408162ms ago: executing program 0 (id=1040):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_open_dev$mouse(&(0x7f0000000000), 0x529e000000000, 0x2002)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074492e942e94fb70190c190c75a854ff048fa800b6c3f9", 0x3f}], 0x1, 0x39, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x5}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

505.684719ms ago: executing program 5 (id=1041):
syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r4 = dup(r3)
bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x18)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x2000})
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f00000006c0)='.\x00', 0x40001a2)
r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0)
capset(0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendfile(r6, r6, &(0x7f0000000100)=0x4, 0x8112)
creat(0x0, 0x155)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

364.124512ms ago: executing program 2 (id=1042):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@data_err_ignore}]}, 0x22, 0x4a2, &(0x7f0000000980)="$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")
socket(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)

299.444244ms ago: executing program 0 (id=1043):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50)
r0 = creat(0x0, 0xd4)
r1 = dup2(r0, r0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0xfffe, 0x200000a, 0x1, 0x8})

0s ago: executing program 0 (id=1044):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB])
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000063c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)

kernel console output (not intermixed with test programs):

ctor 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  293.894973][ T6491] loop1: detected capacity change from 0 to 512
[  293.965920][ T6491] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  294.002685][ T6491] EXT4-fs (loop1): 1 truncate cleaned up
[  294.026229][ T6491] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  294.135943][ T6497] loop3: detected capacity change from 0 to 1024
[  294.909864][ T4346] hfsplus: b-tree write err: -5, ino 25
[  294.915613][ T4346] hfsplus: b-tree write err: -5, ino 4
[  294.970645][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  294.986273][ T4346] hfsplus: b-tree write err: -5, ino 2
[  294.994735][ T4346] hfsplus: b-tree write err: -5, ino 17
[  295.114305][ T6509] loop3: detected capacity change from 0 to 256
[  295.163589][ T6509] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  295.206523][ T6509] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  295.254173][ T6509] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xbf691aaa, utbl_chksum : 0xe619d30d)
[  297.063654][ T6525] loop6: detected capacity change from 0 to 8
[  297.070307][ T6525] squashfs: Unknown parameter 'fowner'
[  297.146947][ T4352] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  298.761549][ T6537] loop4: detected capacity change from 0 to 512
[  298.842085][ T6537] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  298.894897][ T6539] loop3: detected capacity change from 0 to 512
[  298.903680][ T6537] EXT4-fs (loop4): 1 truncate cleaned up
[  298.911700][ T6539] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  299.008020][ T6537] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  299.808191][ T6553] loop3: detected capacity change from 0 to 512
[  299.823209][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  299.843046][ T6553] EXT4-fs: Ignoring removed bh option
[  300.138270][ T6553] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  300.429166][ T6553] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.487: corrupted in-inode xattr
[  300.443001][ T6553] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.487: couldn't read orphan inode 15 (err -117)
[  300.474745][ T6561] loop6: detected capacity change from 0 to 1024
[  300.482131][ T6553] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  300.630866][ T6561] hfsplus: invalid catalog max_key_len 0
[  300.685722][ T6561] hfsplus: failed to load catalog file
[  300.923023][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  300.992735][ T6574] xt_hashlimit: size too large, truncated to 1048576
[  301.117585][ T6578] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  301.221971][ T6580] xt_CT: You must specify a L4 protocol and not use inversions on it
[  301.720672][ T6588] loop6: detected capacity change from 0 to 8
[  301.727395][ T6588] squashfs: Unknown parameter 'fowner'
[  301.767021][ T4353] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  306.119125][ T6615] input: syz1 as /devices/virtual/input/input6
[  306.695831][ T6617] loop1: detected capacity change from 0 to 2048
[  306.804339][ T6617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  307.318795][ T6625] netlink: 68 bytes leftover after parsing attributes in process `syz.3.495'.
[  307.736232][   T22] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  307.987734][   T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.016185][   T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.025964][   T22] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  308.083820][ T6645] loop3: detected capacity change from 0 to 512
[  308.086118][   T26] audit: type=1800 audit(1784427465.040:13): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.498" name="file1" dev="loop1" ino=1415 res=0 errno=0
[  308.100973][   T22] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  308.167449][   T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.175643][ T6645] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  308.220638][ T6645] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 1803188595: comm syz.3.503: lblock 0 mapped to illegal pblock 1803188595 (length 1)
[  308.221947][   T22] usb 7-1: config 0 descriptor??
[  308.372981][ T6645] EXT4-fs (loop3): mount failed
[  308.644425][ T6645] loop3: detected capacity change from 0 to 2048
[  308.671157][   T22] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  308.731273][ T6645] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  308.762317][ T6645] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376)
[  308.795661][ T6645] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has too big (32808) entry at pos 0
[  308.801650][   T22] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  308.975444][ T4316] usb 7-1: USB disconnect, device number 3
[  309.318305][ T6660] fido_id[6660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  310.287009][ T6685] loop4: detected capacity change from 0 to 2048
[  310.425692][ T6685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  310.453326][ T6685] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.557005][ T6685] EXT4-fs (loop4): unmounting filesystem.
[  310.945379][ T6702] loop6: detected capacity change from 0 to 1024
[  310.952586][ T6701] netlink: 68 bytes leftover after parsing attributes in process `syz.1.513'.
[  311.059124][ T6704] loop4: detected capacity change from 0 to 256
[  311.511155][ T6704] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  311.854140][ T6708] loop1: detected capacity change from 0 to 8
[  311.860890][ T6708] squashfs: Unknown parameter 'fowner'
[  311.899289][ T6661] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  312.815898][ T4448] hfsplus: b-tree write err: -5, ino 8
[  312.989540][ T6715] loop6: detected capacity change from 0 to 2048
[  313.124955][ T6715] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  313.142653][ T6715] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.240986][   T26] audit: type=1800 audit(1784427470.200:14): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.518" name="file1" dev="loop6" ino=15 res=0 errno=0
[  313.287573][ T6715] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.518: bg 0: block 345: padding at end of block bitmap is not set
[  313.461157][ T5349] EXT4-fs (loop6): unmounting filesystem.
[  315.223484][ T6738] loop3: detected capacity change from 0 to 2048
[  315.372696][ T6738] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  315.382000][ T6738] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.399941][ T6738] EXT4-fs (loop3): unmounting filesystem.
[  317.127018][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  317.142528][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  319.233508][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.524'.
[  319.325879][ T6777] loop4: detected capacity change from 0 to 512
[  319.379925][ T6777] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  322.164756][ T6802] loop6: detected capacity change from 0 to 2048
[  322.273277][ T6802] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  322.306548][ T6802] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.396671][ T6802] EXT4-fs (loop6): unmounting filesystem.
[  322.431732][ T6814] loop4: detected capacity change from 0 to 256
[  324.299255][ T4288] Bluetooth: hci1: command 0x0401 tx timeout
[  324.315393][ T6802] loop6: detected capacity change from 0 to 1024
[  325.553626][ T6802] hfsplus: b-tree write err: -5, ino 26
[  325.799214][ T5419] hfsplus: b-tree write err: -5, ino 25
[  325.804937][ T5419] hfsplus: b-tree write err: -5, ino 4
[  325.821758][ T5419] hfsplus: b-tree write err: -5, ino 2
[  326.937747][ T6846] loop1: detected capacity change from 0 to 1024
[  327.026987][ T6853] binder: 6852:6853 ioctl c0306201 2000000004c0 returned -22
[  327.206584][ T4272] hfsplus: bad catalog entry type
[  327.295665][ T6865] loop4: detected capacity change from 0 to 256
[  329.070205][ T4277] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[  329.261518][ T4448] hfsplus: bad catalog file entry
[  329.293203][ T4448] hfsplus: b-tree write err: -5, ino 3
[  329.505021][ T5417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.734799][ T5417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.961791][ T5417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.137892][ T5417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.519756][ T6893] loop6: detected capacity change from 0 to 1024
[  330.661985][ T6893] hfsplus: b-tree write err: -5, ino 26
[  330.745728][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  330.788224][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  330.798227][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  330.816872][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  330.824479][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  330.837124][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  330.881132][ T4635] hfsplus: b-tree write err: -5, ino 25
[  330.895270][ T4635] hfsplus: b-tree write err: -5, ino 4
[  330.932079][ T4635] hfsplus: b-tree write err: -5, ino 2
[  331.281471][ T6910] loop4: detected capacity change from 0 to 16
[  331.326564][ T6910] erofs: (device loop4): mounted with root inode @ nid 36.
[  332.320952][ T6920] loop6: detected capacity change from 0 to 128
[  332.431176][ T6920] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  332.511443][ T6920] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  332.980067][ T4277] Bluetooth: hci1: command 0x0409 tx timeout
[  333.215192][ T6932] loop4: detected capacity change from 0 to 8
[  333.262836][ T6896] chnl_net:caif_netlink_parms(): no params data found
[  333.292912][ T6932] SQUASHFS error: Unable to read inode 0x11f
[  333.333365][ T5349] EXT4-fs (loop6): unmounting filesystem.
[  333.427376][ T6661] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  333.482846][ T6936] loop3: detected capacity change from 0 to 1024
[  333.547570][ T6939] Bluetooth: MGMT ver 1.22
[  333.807757][ T5441] hfsplus: b-tree write err: -5, ino 25
[  333.813509][ T5441] hfsplus: b-tree write err: -5, ino 4
[  333.843738][ T5441] hfsplus: b-tree write err: -5, ino 2
[  333.905920][ T5441] hfsplus: b-tree write err: -5, ino 26
[  334.052090][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.059414][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.067663][ T6896] device bridge_slave_0 entered promiscuous mode
[  334.134262][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.156276][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.164559][ T6896] device bridge_slave_1 entered promiscuous mode
[  334.337211][ T6958] loop6: detected capacity change from 0 to 8
[  334.343996][ T6958] squashfs: Unknown parameter 'fowner'
[  334.367660][ T6957] loop3: detected capacity change from 0 to 1024
[  334.406974][ T6661] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  335.606130][ T4277] Bluetooth: hci1: command 0x041b tx timeout
[  336.148253][ T6957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  336.371121][ T6957] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.432058][ T6957] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.593: lblock 0 mapped to illegal pblock 0 (length 1)
[  336.520316][ T6957] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  336.572815][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.596464][ T6957] EXT4-fs (loop3): This should not happen!! Data will be lost
[  336.596464][ T6957] 
[  336.621083][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.635195][ T6970] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.593: bg 0: block 112: padding at end of block bitmap is not set
[  336.674767][ T6972] loop4: detected capacity change from 0 to 2048
[  336.725838][ T5417] device hsr_slave_0 left promiscuous mode
[  336.744287][ T6972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  336.761616][ T5417] device hsr_slave_1 left promiscuous mode
[  336.782663][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.867051][ T6970] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8195 with max blocks 1 with error 28
[  336.913975][ T6970] EXT4-fs (loop3): This should not happen!! Data will be lost
[  336.913975][ T6970] 
[  336.943727][ T6970] EXT4-fs (loop3): Total free blocks count 0
[  336.944721][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.950302][ T6970] EXT4-fs (loop3): Free/Dirty block details
[  336.963082][ T6970] EXT4-fs (loop3): free_blocks=0
[  336.968204][ T6970] EXT4-fs (loop3): dirty_blocks=16
[  336.973339][ T6970] EXT4-fs (loop3): Block reservation details
[  337.388965][ T5417] device bridge_slave_1 left promiscuous mode
[  337.551423][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.640943][ T4277] Bluetooth: hci1: command 0x040f tx timeout
[  337.655058][ T5417] device bridge_slave_0 left promiscuous mode
[  337.711810][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.815086][ T5417] device veth1_macvtap left promiscuous mode
[  337.834916][ T5417] device veth0_macvtap left promiscuous mode
[  337.848014][ T5417] device veth1_vlan left promiscuous mode
[  337.853862][ T5417] device veth0_vlan left promiscuous mode
[  337.918049][ T6981] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  337.924921][ T6981] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  337.927729][ T6989] loop6: detected capacity change from 0 to 256
[  337.966047][ T6981] vhci_hcd vhci_hcd.0: Device attached
[  339.954899][ T4277] Bluetooth: hci1: command 0x0419 tx timeout
[  339.997764][ T6986] vhci_hcd: connection closed
[  340.001541][    T9] vhci_hcd: stop threads
[  340.027225][    T9] vhci_hcd: release socket
[  340.041368][    T9] vhci_hcd: disconnect device
[  340.056516][ T4318] vhci_hcd: vhci_device speed not set
[  340.931724][ T7002] loop4: detected capacity change from 0 to 8
[  340.938784][ T7002] squashfs: Unknown parameter 'fowner'
[  341.781790][ T6661] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  342.275342][ T7011] loop3: detected capacity change from 0 to 1024
[  342.346863][ T7011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  342.385303][ T7011] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.474858][ T7011] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.606: lblock 0 mapped to illegal pblock 0 (length 1)
[  342.519695][ T7011] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  342.551855][ T7016] loop6: detected capacity change from 0 to 8
[  342.553443][ T7011] EXT4-fs (loop3): This should not happen!! Data will be lost
[  342.553443][ T7011] 
[  342.629673][ T7018] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.606: bg 0: block 112: padding at end of block bitmap is not set
[  342.672462][ T7018] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8195 with max blocks 1 with error 28
[  342.696291][ T7018] EXT4-fs (loop3): This should not happen!! Data will be lost
[  342.696291][ T7018] 
[  342.732929][ T7018] EXT4-fs (loop3): Total free blocks count 0
[  342.748070][ T7018] EXT4-fs (loop3): Free/Dirty block details
[  342.756054][ T7018] EXT4-fs (loop3): free_blocks=0
[  342.762311][ T7018] EXT4-fs (loop3): dirty_blocks=16
[  342.788516][ T7018] EXT4-fs (loop3): Block reservation details
[  342.796700][ T5417] team0 (unregistering): Port device team_slave_1 removed
[  342.859439][ T7020] loop6: detected capacity change from 0 to 1024
[  342.951755][ T5417] team0 (unregistering): Port device team_slave_0 removed
[  343.007055][ T5432] hfsplus: b-tree write err: -5, ino 25
[  343.012792][ T5432] hfsplus: b-tree write err: -5, ino 4
[  343.034632][ T5432] hfsplus: b-tree write err: -5, ino 2
[  343.042124][ T7022] loop3: detected capacity change from 0 to 8
[  343.049096][ T5432] hfsplus: b-tree write err: -5, ino 26
[  343.082695][ T7022] SQUASHFS error: Failed to read block 0xfff01e8: -5
[  343.090894][ T7022] unable to read xattr id index table
[  343.103020][ T5417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  343.222734][ T7024] loop6: detected capacity change from 0 to 256
[  343.347041][ T5417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.436644][ T6661] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  344.114882][ T7030] loop4: detected capacity change from 0 to 2048
[  344.222706][ T7030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  344.364009][   T26] audit: type=1800 audit(1784427501.320:15): pid=7030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.608" name="file1" dev="loop4" ino=1410 res=0 errno=0
[  344.863711][ T7038] netlink: 68 bytes leftover after parsing attributes in process `syz.4.615'.
[  344.930451][ T5417] bond0 (unregistering): Released all slaves
[  345.094903][ T6896] team0: Port device team_slave_0 added
[  345.165579][ T6896] team0: Port device team_slave_1 added
[  345.231338][ T7048] loop3: detected capacity change from 0 to 512
[  345.247370][ T7048] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  346.044826][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.063010][ T7048] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5
[  346.072450][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.107433][ T7057] loop4: detected capacity change from 0 to 16
[  346.161088][ T7048] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  346.197827][ T7057] erofs: (device loop4): mounted with root inode @ nid 36.
[  346.228384][ T7048] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.619: Failed to acquire dquot type 1
[  346.286334][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.349637][ T7048] EXT4-fs (loop3): 1 truncate cleaned up
[  346.365118][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.373271][ T7048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  346.409008][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.484034][ T7048] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5
[  346.565646][ T7048] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  346.581974][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.595506][ T7061] loop4: detected capacity change from 0 to 128
[  346.610310][ T7048] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.619: Failed to acquire dquot type 1
[  346.701998][ T7061] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  346.800886][ T6896] device hsr_slave_0 entered promiscuous mode
[  346.805180][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  346.902406][ T6896] device hsr_slave_1 entered promiscuous mode
[  346.927456][ T6896] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.946966][ T6896] Cannot create hsr debugfs directory
[  347.047347][ T7069] loop3: detected capacity change from 0 to 1024
[  347.072118][ T7069] EXT4-fs: Ignoring removed orlov option
[  347.166635][ T7069] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  347.331285][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  347.603912][ T6896] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  347.672097][ T6896] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  347.708460][ T6896] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  347.739926][ T6896] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  348.017498][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.137326][ T7073] loop6: detected capacity change from 0 to 128
[  348.754662][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  348.781810][ T7073] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  348.791949][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  348.816587][ T7073] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  348.864956][ T6896] 8021q: adding VLAN 0 to HW filter on device team0
[  348.970253][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  349.000853][ T7099] netlink: 68 bytes leftover after parsing attributes in process `syz.3.629'.
[  349.017439][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  349.058860][ T7101] loop4: detected capacity change from 0 to 16
[  349.071639][ T5417] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.078823][ T5417] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.079274][ T7101] erofs: (device loop4): mounted with root inode @ nid 36.
[  349.110825][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  349.119508][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  349.172943][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  349.198416][ T5417] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.205576][ T5417] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.229621][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  350.228466][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  350.237528][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  350.248814][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  350.272577][ T7110] loop4: detected capacity change from 0 to 512
[  350.292420][ T7112] loop3: detected capacity change from 0 to 512
[  350.311513][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  350.342758][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  350.362753][ T7112] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  350.387041][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  350.403421][ T5349] EXT4-fs (loop6): unmounting filesystem.
[  350.406730][ T7110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  350.450608][ T7112] EXT4-fs (loop3): 1 truncate cleaned up
[  350.456638][ T7112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  350.674061][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  350.712465][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  350.778946][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  350.813657][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  350.848621][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  350.911672][ T6896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  351.025416][ T7128] loop4: detected capacity change from 0 to 1024
[  351.073760][ T7128] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  351.103125][ T7128] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.195309][ T7128] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.637: lblock 0 mapped to illegal pblock 0 (length 1)
[  351.269246][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  351.275577][ T7128] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  351.393626][ T7128] EXT4-fs (loop4): This should not happen!! Data will be lost
[  351.393626][ T7128] 
[  351.410011][ T7140] loop6: detected capacity change from 0 to 16
[  351.461679][ T7140] erofs: (device loop6): mounted with root inode @ nid 36.
[  351.471410][ T7141] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.637: bg 0: block 112: padding at end of block bitmap is not set
[  351.518294][ T7141] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8195 with max blocks 1 with error 28
[  351.586366][ T7141] EXT4-fs (loop4): This should not happen!! Data will be lost
[  351.586366][ T7141] 
[  351.621411][ T7141] EXT4-fs (loop4): Total free blocks count 0
[  351.634773][ T7141] EXT4-fs (loop4): Free/Dirty block details
[  351.653947][ T7141] EXT4-fs (loop4): free_blocks=0
[  351.693947][ T7141] EXT4-fs (loop4): dirty_blocks=16
[  351.699485][ T7141] EXT4-fs (loop4): Block reservation details
[  351.756786][ T7152] netlink: 68 bytes leftover after parsing attributes in process `syz.5.642'.
[  351.878395][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  351.891687][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  351.924560][ T6896] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.959908][ T4277] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[  352.198530][ T7168] loop4: detected capacity change from 0 to 2048
[  352.257459][ T7168] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  352.328612][ T7168] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.555307][ T7182] loop3: detected capacity change from 0 to 512
[  352.603868][ T7182] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  352.662415][ T7182] EXT4-fs (loop3): 1 truncate cleaned up
[  352.672600][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  352.733137][ T7182] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  353.707432][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  355.420517][ T7217] loop6: detected capacity change from 0 to 16
[  355.458727][ T7216] netlink: 68 bytes leftover after parsing attributes in process `syz.4.660'.
[  355.491040][ T7217] erofs: (device loop6): mounted with root inode @ nid 36.
[  355.530581][ T4277] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  355.549758][ T7217] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  355.604445][   T26] audit: type=1800 audit(1784427512.560:16): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.662" name="file2" dev="loop6" ino=89 res=0 errno=0
[  355.694735][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  355.713409][ T7226] loop6: detected capacity change from 0 to 164
[  355.722764][ T7226] isofs_fill_super: get root inode failed
[  355.731364][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  355.782743][ T6896] device veth0_vlan entered promiscuous mode
[  355.795792][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  355.818093][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  355.840746][ T7226] Bluetooth: MGMT ver 1.22
[  355.888035][ T6896] device veth1_vlan entered promiscuous mode
[  355.934353][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  355.938264][ T7226] loop6: detected capacity change from 0 to 512
[  355.960379][ T7226] EXT4-fs (loop6): bad s_want_extra_isize: 1568
[  355.965349][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  355.991496][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  356.049716][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  356.242079][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  356.305975][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  356.588190][ T6896] device veth0_macvtap entered promiscuous mode
[  356.654370][ T6896] device veth1_macvtap entered promiscuous mode
[  356.659286][ T7240] loop4: detected capacity change from 0 to 1024
[  356.720793][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  356.730362][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  356.763419][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'.
[  356.764216][ T7240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  356.786486][ T7240] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.853114][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.116945][ T7240] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.667: lblock 0 mapped to illegal pblock 0 (length 1)
[  358.126381][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.140643][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.151461][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.169165][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.204192][ T7240] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  358.218087][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.228171][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.238935][ T7240] EXT4-fs (loop4): This should not happen!! Data will be lost
[  358.238935][ T7240] 
[  358.248936][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.259799][ T7256] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.667: bg 0: block 112: padding at end of block bitmap is not set
[  358.275845][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.300212][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  358.323472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  358.329764][ T7256] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8195 with max blocks 1 with error 28
[  358.367074][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.401323][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.416303][ T7256] EXT4-fs (loop4): This should not happen!! Data will be lost
[  358.416303][ T7256] 
[  358.446390][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.463220][ T7256] EXT4-fs (loop4): Total free blocks count 0
[  358.479567][ T7256] EXT4-fs (loop4): Free/Dirty block details
[  358.481096][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.485507][ T7256] EXT4-fs (loop4): free_blocks=0
[  358.520510][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.528017][ T7256] EXT4-fs (loop4): dirty_blocks=16
[  358.553699][ T7256] EXT4-fs (loop4): Block reservation details
[  358.556143][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.579584][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.602276][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.625659][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.644285][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  358.670040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  358.712541][ T6896] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.734954][ T6896] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.765139][ T6896] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.786436][ T6896] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.890024][ T7268] loop4: detected capacity change from 0 to 2048
[  358.949964][ T5432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.985830][ T5432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.049648][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  359.084438][ T4635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.102724][ T4635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.137575][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  359.178012][ T7268]  loop4: unable to read partition table
[  359.205309][ T7268] loop4: partition table beyond EOD, truncated
[  359.236962][ T7268] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[  359.510871][ T7277] loop7: detected capacity change from 0 to 1024
[  359.605649][ T7284] netlink: 68 bytes leftover after parsing attributes in process `syz.5.676'.
[  359.693913][ T3637]  loop4: unable to read partition table
[  359.702448][ T7290] loop6: detected capacity change from 0 to 512
[  359.715170][ T3637] loop4: partition table beyond EOD, truncated
[  359.729332][ T6896] hfsplus: bad catalog entry type
[  359.737636][ T7290] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  360.273327][ T7290] EXT4-fs (loop6): 1 truncate cleaned up
[  360.283392][ T7290] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  361.284552][ T7301] loop3: detected capacity change from 0 to 1024
[  361.540821][ T5349] EXT4-fs (loop6): unmounting filesystem.
[  361.577096][ T5432] hfsplus: bad catalog file entry
[  361.586258][ T7301] hfsplus: xattr searching failed
[  361.586625][ T5432] hfsplus: b-tree write err: -5, ino 3
[  361.647288][ T7301] hfsplus: xattr searching failed
[  361.698018][ T7301] hfsplus: xattr searching failed
[  361.727898][ T7301] hfsplus: bad catalog file entry
[  361.754728][ T5417] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.902949][ T4346] hfsplus: b-tree write err: -5, ino 3
[  361.909878][ T4346] hfsplus: bad catalog file entry
[  361.938586][ T5417] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.098174][ T5417] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.269670][ T5417] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.366669][ T7318] loop3: detected capacity change from 0 to 4096
[  362.396381][ T7318] EXT4-fs: Ignoring removed orlov option
[  362.441952][ T7318] EXT4-fs (loop3): Test dummy encryption mode enabled
[  362.494047][ T7318] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  362.965505][ T7318] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  363.103369][ T7335] loop4: detected capacity change from 0 to 1024
[  363.145502][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  363.335448][ T7335] hfsplus: invalid extended attribute record
[  363.351990][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.362368][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.371073][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.386805][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.401336][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  363.409538][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  364.596463][ T7341] process 'syz.3.691' launched './file0' with NULL argv: empty string added
[  364.667215][ T5419] hfsplus: b-tree write err: -5, ino 8
[  364.812504][ T7351] loop4: detected capacity change from 0 to 512
[  364.871216][ T7351] EXT4-fs: Ignoring removed nomblk_io_submit option
[  364.975562][ T7351] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  365.016392][ T7351] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.211462][ T7351] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  365.250856][ T7363] loop3: detected capacity change from 0 to 1024
[  365.293613][ T7351] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  365.417776][ T7351] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.695: Failed to acquire dquot type 1
[  365.496356][ T4277] Bluetooth: hci1: command 0x0409 tx timeout
[  365.526303][ T7360] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  365.593559][ T7360] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  365.627237][ T7370] netlink: 68 bytes leftover after parsing attributes in process `syz.5.693'.
[  365.629026][ T7360] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.695: Failed to acquire dquot type 1
[  365.946957][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  365.994735][ T7339] chnl_net:caif_netlink_parms(): no params data found
[  366.100110][ T7376] loop6: detected capacity change from 0 to 128
[  366.308219][ T7376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  366.359074][ T7376] System zones: 1-3, 19-19, 35-36
[  366.376848][ T7376] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  366.434399][ T7376] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.542127][ T7376] EXT4-fs error (device loop6): swap_inode_boot_loader:378: inode #5: comm syz.6.694: iget: checksum invalid
[  366.607122][ T5349] EXT4-fs (loop6): unmounting filesystem.
[  366.979298][ T5417] device hsr_slave_0 left promiscuous mode
[  366.994375][ T5417] device hsr_slave_1 left promiscuous mode
[  367.013071][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  367.028463][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  367.041212][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  367.055394][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  367.070191][ T5417] device bridge_slave_1 left promiscuous mode
[  367.081100][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.095178][ T5417] device bridge_slave_0 left promiscuous mode
[  367.110370][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.138958][ T7393] loop6: detected capacity change from 0 to 1024
[  367.175946][ T5417] device veth1_macvtap left promiscuous mode
[  367.227637][ T5417] device veth0_macvtap left promiscuous mode
[  367.262197][ T5417] device veth1_vlan left promiscuous mode
[  367.278876][ T5417] device veth0_vlan left promiscuous mode
[  368.537662][ T4277] Bluetooth: hci1: command 0x041b tx timeout
[  368.633725][ T5349] hfsplus: bad catalog entry type
[  369.146219][ T4321] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  369.346251][ T4321] usb 4-1: Using ep0 maxpacket: 32
[  369.375668][ T4321] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  369.421917][ T4321] usb 4-1: config 0 has no interface number 0
[  369.439573][ T4321] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  369.466248][ T4321] usb 4-1: config 0 interface 85 has no altsetting 0
[  369.485467][ T4321] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  369.512769][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.536292][ T4321] usb 4-1: Product: syz
[  369.540493][ T4321] usb 4-1: Manufacturer: syz
[  369.576393][ T4321] usb 4-1: SerialNumber: syz
[  369.629412][ T4321] usb 4-1: config 0 descriptor??
[  370.292645][ T4321] appletouch 4-1:0.85: Geyser mode initialized.
[  370.335622][ T4321] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input8
[  370.512389][ T4321] usb 4-1: USB disconnect, device number 7
[  370.552149][ T4321] appletouch 4-1:0.85: input: appletouch disconnected
[  370.602316][ T4277] Bluetooth: hci1: command 0x040f tx timeout
[  370.669998][ T5417] team0 (unregistering): Port device team_slave_1 removed
[  370.759048][ T5417] team0 (unregistering): Port device team_slave_0 removed
[  370.823785][ T5417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  370.863528][ T5417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  371.140372][ T7412] loop3: detected capacity change from 0 to 128
[  371.141338][ T5417] bond0 (unregistering): Released all slaves
[  371.172246][ T7412] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  371.383976][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.403479][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.426561][ T7339] device bridge_slave_0 entered promiscuous mode
[  371.449224][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.496873][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.505007][ T7339] device bridge_slave_1 entered promiscuous mode
[  371.659958][ T4448] hfsplus: bad catalog file entry
[  371.665383][ T4448] hfsplus: b-tree write err: -5, ino 3
[  371.779445][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.858339][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.053715][ T7339] team0: Port device team_slave_0 added
[  372.179858][ T7339] team0: Port device team_slave_1 added
[  372.332391][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.339455][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.366276][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.387961][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.394926][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.186171][ T4277] Bluetooth: hci1: command 0x0419 tx timeout
[  373.402034][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.426435][ T7434] loop3: detected capacity change from 0 to 1024
[  373.535005][ T7434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  373.592416][ T7434] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  373.666527][ T7339] device hsr_slave_0 entered promiscuous mode
[  373.747167][ T7339] device hsr_slave_1 entered promiscuous mode
[  373.754536][ T7339] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  373.796417][ T7339] Cannot create hsr debugfs directory
[  373.827313][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  375.557834][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  375.649143][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  375.657215][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  375.665004][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  375.672928][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  375.680264][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  375.772078][ T7455] loop3: detected capacity change from 0 to 512
[  375.932565][ T7339] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  376.004143][ T7339] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  376.057973][ T7339] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  376.119283][ T7339] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  377.142444][ T7478] loop3: detected capacity change from 0 to 1024
[  377.163416][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.185175][ T7449] chnl_net:caif_netlink_parms(): no params data found
[  377.230806][ T7339] 8021q: adding VLAN 0 to HW filter on device team0
[  377.261719][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  377.276856][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  377.356156][ T4316] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  377.374980][ T7478] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  377.392837][ T7478] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  377.503542][ T7478] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.727: lblock 0 mapped to illegal pblock 0 (length 1)
[  377.571906][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  377.599677][ T4316] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  377.608209][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  377.616352][ T7478] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  377.621693][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  377.646235][ T4316] usb 5-1: config 0 has no interface number 0
[  377.652391][ T4316] usb 5-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  377.657158][ T7478] EXT4-fs (loop3): This should not happen!! Data will be lost
[  377.657158][ T7478] 
[  377.681320][ T4316] usb 5-1: config 0 interface 52 has no altsetting 0
[  377.686764][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.695111][ T5422] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.706184][ T4316] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  377.716356][ T4277] Bluetooth: hci2: command 0x0409 tx timeout
[  377.726182][ T4316] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  377.742640][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  377.746392][ T4316] usb 5-1: Manufacturer: syz
[  377.764582][ T4316] usb 5-1: config 0 descriptor??
[  377.773273][ T4316] hub 5-1:0.52: bad descriptor, ignoring hub
[  377.779662][ T4316] hub: probe of 5-1:0.52 failed with error -5
[  377.790323][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  377.806375][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.813498][ T5422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.822165][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  377.831564][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  377.861922][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  377.875462][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  377.907770][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  377.916959][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  377.926682][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  377.979870][ T4316] usb 5-1: Can not set alternate setting to 1, error: -71
[  377.989154][ T7339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  378.006281][ T4316] synaptics_usb: probe of 5-1:0.52 failed with error -71
[  378.046887][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  378.057743][ T4316] usb 5-1: USB disconnect, device number 4
[  378.078194][ T7339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  378.118556][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  378.156908][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  378.177027][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  378.210349][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  378.228766][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  378.255420][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  378.374762][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.400230][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.461113][ T7449] device bridge_slave_0 entered promiscuous mode
[  378.497664][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.524702][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.534586][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  378.541289][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  378.598870][ T7449] device bridge_slave_1 entered promiscuous mode
[  378.738057][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  378.797519][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  378.992025][ T7449] team0: Port device team_slave_0 added
[  379.104417][ T7449] team0: Port device team_slave_1 added
[  379.380066][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.422190][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.489516][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.573259][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.669375][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.762935][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.797112][ T4288] Bluetooth: hci2: command 0x041b tx timeout
[  379.859240][ T7520] loop3: detected capacity change from 0 to 8
[  379.864171][ T7449] device hsr_slave_0 entered promiscuous mode
[  379.891476][ T7449] device hsr_slave_1 entered promiscuous mode
[  379.903451][ T7449] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  379.922702][ T7449] Cannot create hsr debugfs directory
[  379.940567][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  379.978724][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  380.028369][ T7339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.700939][ T7520] SQUASHFS error: Unable to read directory block [1d0:62]
[  381.033085][ T7529] loop3: detected capacity change from 0 to 1024
[  382.260069][ T4288] Bluetooth: hci2: command 0x040f tx timeout
[  382.337942][ T7529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  382.376387][ T7529] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  382.526409][ T7529] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.736: bg 0: block 112: padding at end of block bitmap is not set
[  382.565406][ T7449] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  382.629901][ T7449] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  382.636925][ T7529] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8195 with max blocks 1 with error 117
[  382.673814][ T7449] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  382.700618][ T7529] EXT4-fs (loop3): This should not happen!! Data will be lost
[  382.700618][ T7529] 
[  382.743386][ T7449] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  382.902766][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  383.055036][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  383.207177][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  383.454320][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  383.476941][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  383.535746][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.549964][ T7339] device veth0_vlan entered promiscuous mode
[  383.559277][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  383.592920][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  383.647119][ T7449] 8021q: adding VLAN 0 to HW filter on device team0
[  383.658118][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  383.676835][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  383.761707][ T7339] device veth1_vlan entered promiscuous mode
[  383.830672][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  383.866810][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  383.894554][ T5441] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.901681][ T5441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.963218][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  384.044217][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  384.090802][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  384.109330][ T7560] loop3: detected capacity change from 0 to 512
[  384.122887][ T5441] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.130080][ T5441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.181981][ T7560] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  384.236820][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  384.287065][ T4288] Bluetooth: hci2: command 0x0419 tx timeout
[  384.331403][ T7567] futex_wake_op: syz.4.737 tries to shift op by 144; fix this program
[  384.989607][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  385.012166][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  385.092586][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  385.108857][ T7339] device veth0_macvtap entered promiscuous mode
[  385.128534][ T7560] EXT4-fs (loop3): 1 truncate cleaned up
[  385.139803][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  385.169811][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  385.198824][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  386.386320][ T7560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  386.417863][ T7339] device veth1_macvtap entered promiscuous mode
[  386.439097][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  386.477214][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  386.557301][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  386.583253][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.619220][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  386.660074][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.696470][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  386.736133][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.756228][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  386.796245][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.859680][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.869934][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  386.896649][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  386.926471][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  386.957004][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  387.026587][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  387.040782][ T7449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  387.103129][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  387.125971][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.147233][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.169542][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.190573][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.236013][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.253572][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.277666][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.312194][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.713926][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.967590][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  387.987959][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  388.036506][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  388.056734][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  388.072247][ T7588] loop3: detected capacity change from 0 to 512
[  388.108610][ T7339] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.159169][ T7588] EXT4-fs: Ignoring removed mblk_io_submit option
[  388.160197][ T7339] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.195318][ T7339] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.215585][ T7339] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.286453][ T7588] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  388.396716][ T7588] EXT4-fs (loop3): 1 truncate cleaned up
[  388.481877][ T7588] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  388.481927][ T5414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.540096][ T5414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.589718][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  388.703819][ T5441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.722039][ T5441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.784448][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  390.513933][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  390.575472][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  390.684183][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  390.726339][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.675715][ T7618] loop8: detected capacity change from 0 to 512
[  391.816464][ T7618] EXT4-fs: Ignoring removed bh option
[  391.821894][ T7618] EXT4-fs: inline encryption not supported
[  392.479249][ T7618] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  393.011421][ T7618] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  393.873695][ T7618] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.749: bg 0: block 248: padding at end of block bitmap is not set
[  393.997105][ T7618] Quota error (device loop8): write_blk: dquota write failed
[  394.034086][ T7618] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  394.101814][ T7618] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.749: Failed to acquire dquot type 1
[  394.148599][ T7618] EXT4-fs (loop8): 1 truncate cleaned up
[  394.154307][ T7618] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  394.458287][ T7339] EXT4-fs (loop8): unmounting filesystem.
[  394.483277][ T4430] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-5
[  394.529013][ T4430] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1
[  395.121341][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  395.407634][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  395.452706][ T7449] device veth0_vlan entered promiscuous mode
[  395.497268][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  395.516863][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  395.541722][ T7650] loop8: detected capacity change from 0 to 512
[  395.612041][ T7449] device veth1_vlan entered promiscuous mode
[  395.649773][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  395.685118][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  395.702731][ T7650] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.754: bg 0: block 5: invalid block bitmap
[  395.776690][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  395.827902][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  395.836811][ T7650] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  395.938620][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  395.946952][ T7650] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.754: invalid indirect mapped block 3 (level 2)
[  395.987752][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  395.994188][ T7650] EXT4-fs (loop8): 1 orphan inode deleted
[  396.030344][ T7650] EXT4-fs (loop8): 1 truncate cleaned up
[  396.043451][ T7449] device veth0_macvtap entered promiscuous mode
[  396.065931][ T7650] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  396.087831][ T7449] device veth1_macvtap entered promiscuous mode
[  396.134080][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  396.170357][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  396.238105][ T7650] netlink: 'syz.8.754': attribute type 12 has an invalid length.
[  396.249662][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.296179][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.337343][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.538729][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.606132][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.676239][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.735643][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.776111][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.808715][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.885079][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.949727][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.993631][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  397.011385][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  397.118495][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.146161][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.156007][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.180715][ T7339] EXT4-fs (loop8): unmounting filesystem.
[  397.217919][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.285015][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.325454][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.351368][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.374060][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.394351][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.415226][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.594029][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  397.684404][ T7678] Cannot find add_set index 1 as target
[  398.310472][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  398.322576][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  398.393974][ T4320] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  398.397100][ T7449] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.491389][ T7449] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.521354][ T7449] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.550753][ T7449] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.580166][ T4320] usb 9-1: Using ep0 maxpacket: 32
[  398.588621][ T4320] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  398.647891][ T4320] usb 9-1: config 0 has no interfaces?
[  398.691196][ T4320] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  398.836323][ T4320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.882766][ T4320] usb 9-1: Product: syz
[  398.896278][ T4320] usb 9-1: Manufacturer: syz
[  398.901022][ T4320] usb 9-1: SerialNumber: syz
[  398.922427][ T4320] usb 9-1: config 0 descriptor??
[  399.036307][ T5240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.067436][ T5240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.119544][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  399.236190][ T4288] Bluetooth: hci2: command 0x0405 tx timeout
[  399.758831][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.851165][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.058307][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  400.407484][ T7709] loop9: detected capacity change from 0 to 1024
[  400.513113][ T4447] usb 9-1: USB disconnect, device number 2
[  400.664682][ T7712] loop3: detected capacity change from 0 to 1024
[  401.076027][ T7712] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  401.185608][ T7712] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  401.268030][ T5441] hfsplus: bad catalog file entry
[  401.309088][ T5441] hfsplus: b-tree write err: -5, ino 3
[  401.360437][ T7712] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.766: lblock 0 mapped to illegal pblock 0 (length 1)
[  401.518538][ T7712] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  401.592606][ T7739] loop9: detected capacity change from 0 to 128
[  401.735915][ T7739] EXT4-fs (loop9): Test dummy encryption mode enabled
[  401.767432][ T7712] EXT4-fs (loop3): This should not happen!! Data will be lost
[  401.767432][ T7712] 
[  401.780487][ T7739] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  401.855154][ T7744] loop8: detected capacity change from 0 to 8
[  402.465149][ T7733] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.766: bg 0: block 112: padding at end of block bitmap is not set
[  402.496317][ T7739] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  402.530405][ T7744] SQUASHFS error: lzo decompression failed, data probably corrupt
[  402.538353][ T7744] SQUASHFS error: Failed to read block 0x91: -5
[  402.544617][ T7744] SQUASHFS error: Unable to read metadata cache entry [8f]
[  402.551897][ T7744] SQUASHFS error: Unable to read inode 0x11f
[  403.524713][ T7733] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8195 with max blocks 1 with error 28
[  403.727304][ T7739] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  404.098715][ T7733] EXT4-fs (loop3): This should not happen!! Data will be lost
[  404.098715][ T7733] 
[  404.237504][ T7733] EXT4-fs (loop3): Total free blocks count 0
[  404.531977][ T7449] EXT4-fs (loop9): unmounting filesystem.
[  404.576107][ T7733] EXT4-fs (loop3): Free/Dirty block details
[  404.582058][ T7733] EXT4-fs (loop3): free_blocks=0
[  404.716939][ T7733] EXT4-fs (loop3): dirty_blocks=16
[  404.722101][ T7733] EXT4-fs (loop3): Block reservation details
[  404.761558][ T7772] loop4: detected capacity change from 0 to 512
[  404.852325][ T7775] loop9: detected capacity change from 0 to 16
[  404.964549][ T7775] erofs: (device loop9): mounted with root inode @ nid 36.
[  405.234465][ T7772] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.778: bg 0: block 5: invalid block bitmap
[  405.438030][ T7772] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  405.450844][ T7782] loop3: detected capacity change from 0 to 1024
[  405.517356][ T7783] loop9: detected capacity change from 0 to 1024
[  405.619045][ T7772] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.778: invalid indirect mapped block 3 (level 2)
[  405.705558][ T7783] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  405.777427][ T7772] EXT4-fs (loop4): 1 orphan inode deleted
[  405.783232][ T7772] EXT4-fs (loop4): 1 truncate cleaned up
[  405.806423][ T7783] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  405.914601][ T7783] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: comm syz.9.780: lblock 0 mapped to illegal pblock 0 (length 1)
[  406.038974][ T7783] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  406.082538][ T7783] EXT4-fs (loop9): This should not happen!! Data will be lost
[  406.082538][ T7783] 
[  406.112138][ T7772] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  406.221340][ T7791] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.780: bg 0: block 112: padding at end of block bitmap is not set
[  406.402667][ T7791] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8195 with max blocks 1 with error 28
[  406.456679][ T7791] EXT4-fs (loop9): This should not happen!! Data will be lost
[  406.456679][ T7791] 
[  406.477432][ T4276] hfsplus: bad catalog entry type
[  406.558657][ T7791] EXT4-fs (loop9): Total free blocks count 0
[  406.564688][ T7791] EXT4-fs (loop9): Free/Dirty block details
[  406.609345][ T7791] EXT4-fs (loop9): free_blocks=0
[  406.614347][ T7791] EXT4-fs (loop9): dirty_blocks=16
[  406.656578][ T7791] EXT4-fs (loop9): Block reservation details
[  407.062857][ T7802] loop9: detected capacity change from 0 to 512
[  407.148595][ T7802] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.784: iget: bad i_size value: 38620345925642
[  407.176688][ T7802] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.784: couldn't read orphan inode 15 (err -117)
[  407.188034][ T5441] hfsplus: bad catalog file entry
[  407.213378][ T7802] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  407.224368][ T5441] hfsplus: b-tree write err: -5, ino 3
[  407.391879][ T7802] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.784: bg 0: block 5: invalid block bitmap
[  407.465327][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  407.510677][ T7802] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1428 with error 28
[  407.546128][ T7802] EXT4-fs (loop9): This should not happen!! Data will be lost
[  407.546128][ T7802] 
[  407.582690][ T7802] EXT4-fs (loop9): Total free blocks count 0
[  407.666166][ T7802] EXT4-fs (loop9): Free/Dirty block details
[  407.672112][ T7802] EXT4-fs (loop9): free_blocks=0
[  407.746100][ T7802] EXT4-fs (loop9): dirty_blocks=1432
[  407.751431][ T7802] EXT4-fs (loop9): Block reservation details
[  407.788546][ T7808] loop8: detected capacity change from 0 to 8192
[  407.836165][ T7802] EXT4-fs (loop9): i_reserved_data_blocks=1432
[  407.895377][ T7808] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  408.146356][    T7] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  408.429642][    T7] usb 10-1: device descriptor read/64, error -71
[  408.716204][    T7] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  408.876120][    T7] usb 10-1: device descriptor read/64, error -71
[  409.006307][    T7] usb usb10-port1: attempt power cycle
[  409.284440][ T5414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.426377][    T7] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  409.496630][    T7] usb 10-1: device descriptor read/8, error -71
[  409.537941][ T5414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.766190][    T7] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  409.808696][    T7] usb 10-1: device descriptor read/8, error -71
[  409.926729][    T7] usb usb10-port1: unable to enumerate USB device
[  409.957353][ T5414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.138761][ T7842] loop4: detected capacity change from 0 to 2048
[  410.150398][ T7449] EXT4-fs (loop9): unmounting filesystem.
[  410.304867][ T7848] loop8: detected capacity change from 0 to 128
[  410.352185][ T7842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  410.447747][ T7850] loop9: detected capacity change from 0 to 512
[  411.109855][ T7848] EXT4-fs (loop8): Test dummy encryption mode enabled
[  411.159619][ T7850] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.796: bg 0: block 5: invalid block bitmap
[  411.242371][ T7850] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  411.263763][ T7848] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  411.275050][ T5414] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.285781][ T7850] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.796: invalid indirect mapped block 3 (level 2)
[  411.361517][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  411.372357][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  411.386602][ T7850] EXT4-fs (loop9): 1 orphan inode deleted
[  411.391600][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  411.392451][ T7850] EXT4-fs (loop9): 1 truncate cleaned up
[  411.407739][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  411.415153][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  411.422703][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  411.486248][ T7848] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  411.582930][ T7850] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  411.948952][ T7847] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  412.081764][ T7449] EXT4-fs (loop9): unmounting filesystem.
[  413.476559][ T4277] Bluetooth: hci4: command 0x0409 tx timeout
[  413.600058][ T7859] chnl_net:caif_netlink_parms(): no params data found
[  413.722666][ T7339] EXT4-fs (loop8): unmounting filesystem.
[  415.556432][ T4277] Bluetooth: hci4: command 0x041b tx timeout
[  415.824716][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.896282][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.929667][ T7859] device bridge_slave_0 entered promiscuous mode
[  416.109783][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.136245][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.175699][ T7859] device bridge_slave_1 entered promiscuous mode
[  416.259346][ T7902] loop8: detected capacity change from 0 to 2048
[  416.338068][ T7902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  416.441181][ T7859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.516601][ T7859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.573923][ T7911] loop9: detected capacity change from 0 to 1024
[  417.636629][ T4277] Bluetooth: hci4: command 0x040f tx timeout
[  417.666431][ T7911] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  417.753593][ T7911] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  417.773015][ T7911] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: comm syz.9.803: lblock 0 mapped to illegal pblock 0 (length 1)
[  417.794005][ T7911] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  417.832195][ T7920] loop8: detected capacity change from 0 to 512
[  417.850894][ T7911] EXT4-fs (loop9): This should not happen!! Data will be lost
[  417.850894][ T7911] 
[  417.928829][ T7859] team0: Port device team_slave_0 added
[  417.937897][ T7921] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.803: bg 0: block 112: padding at end of block bitmap is not set
[  418.036903][ T7920] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.808: bg 0: block 5: invalid block bitmap
[  418.050329][ T7921] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8195 with max blocks 1 with error 28
[  418.066574][ T7920] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  418.076269][ T7859] team0: Port device team_slave_1 added
[  418.123048][ T7920] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.808: invalid indirect mapped block 3 (level 2)
[  418.132051][ T7921] EXT4-fs (loop9): This should not happen!! Data will be lost
[  418.132051][ T7921] 
[  418.148711][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.155675][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.180505][ T7920] EXT4-fs (loop8): 1 orphan inode deleted
[  418.212925][ T7920] EXT4-fs (loop8): 1 truncate cleaned up
[  418.237273][ T7921] EXT4-fs (loop9): Total free blocks count 0
[  418.238503][ T7920] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  418.260784][ T7921] EXT4-fs (loop9): Free/Dirty block details
[  418.281498][ T7921] EXT4-fs (loop9): free_blocks=0
[  418.297284][ T7859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.312771][ T7921] EXT4-fs (loop9): dirty_blocks=16
[  418.354184][ T7921] EXT4-fs (loop9): Block reservation details
[  418.365915][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.426111][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.514634][ T7859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.675043][ T7339] EXT4-fs (loop8): unmounting filesystem.
[  419.812115][ T4277] Bluetooth: hci4: command 0x0419 tx timeout
[  420.197823][ T7945] usb usb8: usbfs: process 7945 (syz.8.810) did not claim interface 0 before use
[  420.210203][ T7944] futex_wake_op: syz.8.810 tries to shift op by 144; fix this program
[  420.954239][ T7947] loop4: detected capacity change from 0 to 1024
[  421.134788][ T7859] device hsr_slave_0 entered promiscuous mode
[  421.177598][ T7947] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  421.197923][ T7859] device hsr_slave_1 entered promiscuous mode
[  421.239632][ T7947] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  421.284682][ T7859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  421.328958][ T7859] Cannot create hsr debugfs directory
[  421.336560][ T4396] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  421.350235][   T26] audit: type=1800 audit(1784427578.310:17): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.814" name="file1" dev="loop4" ino=15 res=0 errno=0
[  421.463963][   T26] audit: type=1800 audit(1784427578.420:18): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.814" name="file1" dev="loop4" ino=15 res=0 errno=0
[  421.513805][ T7946] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.814: lblock 0 mapped to illegal pblock 0 (length 1)
[  422.669504][ T4396] usb 9-1: Using ep0 maxpacket: 32
[  422.687481][ T4396] usb 9-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  422.707399][ T4396] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.736247][ T4396] usb 9-1: Product: syz
[  422.750650][ T4396] usb 9-1: Manufacturer: syz
[  422.755641][ T4396] usb 9-1: SerialNumber: syz
[  422.760844][ T7946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.814: lblock 0 mapped to illegal pblock 0 (length 1)
[  422.819939][ T7946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.814: lblock 0 mapped to illegal pblock 0 (length 1)
[  422.881609][ T7946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.814: lblock 0 mapped to illegal pblock 0 (length 1)
[  422.905597][ T7946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.814: lblock 0 mapped to illegal pblock 0 (length 1)
[  422.976174][ T7946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.814: lblock 0 mapped to illegal pblock 0 (length 1)
[  423.044205][ T7947] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.814: lblock 0 mapped to illegal pblock 0 (length 1)
[  423.090755][ T7947] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.814: lblock 0 mapped to illegal pblock 0 (length 1)
[  423.145434][ T4396] usb 9-1: failed waiting for Axe-Fx III to boot: -71
[  423.174676][ T4396] snd-usb-audio: probe of 9-1:1.0 failed with error -71
[  423.217859][ T4396] usb 9-1: USB disconnect, device number 3
[  423.303673][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  424.277051][ T7983] xt_hashlimit: size too large, truncated to 1048576
[  426.382480][ T8002] loop8: detected capacity change from 0 to 1024
[  426.740662][ T7339] hfsplus: bad catalog folder thread
[  426.746312][ T5414] device hsr_slave_0 left promiscuous mode
[  426.752757][ T5414] device hsr_slave_1 left promiscuous mode
[  426.796474][ T7339] hfsplus: bad catalog folder thread
[  426.828364][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.835847][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.928800][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  426.963388][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.045192][ T5414] device bridge_slave_1 left promiscuous mode
[  427.087212][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.140438][ T5414] device bridge_slave_0 left promiscuous mode
[  427.152906][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.231900][ T8011] futex_wake_op: syz.5.824 tries to shift op by 144; fix this program
[  427.890992][ T5414] device veth1_macvtap left promiscuous mode
[  427.916238][ T5414] device veth0_macvtap left promiscuous mode
[  427.922382][ T5414] device veth1_vlan left promiscuous mode
[  427.976241][ T5414] device veth0_vlan left promiscuous mode
[  428.399719][ T8021] loop9: detected capacity change from 0 to 8
[  428.436054][ T8021] SQUASHFS error: lzo decompression failed, data probably corrupt
[  428.444013][ T8021] SQUASHFS error: Failed to read block 0x91: -5
[  428.463711][ T8021] SQUASHFS error: Unable to read metadata cache entry [8f]
[  428.475365][ T8021] SQUASHFS error: Unable to read inode 0x11f
[  428.679042][ T8023] loop9: detected capacity change from 0 to 128
[  429.024364][ T8025] loop9: detected capacity change from 0 to 1024
[  429.167474][ T8025] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  429.179605][ T8025] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  429.294404][ T7449] EXT4-fs (loop9): unmounting filesystem.
[  429.431955][ T4277] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[  431.341332][ T5414] team0 (unregistering): Port device team_slave_1 removed
[  431.547013][ T5414] team0 (unregistering): Port device team_slave_0 removed
[  431.567081][ T8038] loop4: detected capacity change from 0 to 256
[  431.574530][ T8038] exfat: Deprecated parameter 'namecase'
[  431.605726][ T8038] exfat: Bad value for 'fmask'
[  431.624136][ T8039] loop9: detected capacity change from 0 to 2048
[  431.690762][ T8039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  431.785957][ T5414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.944922][ T8042] loop4: detected capacity change from 0 to 1024
[  432.211244][ T5414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  432.238865][ T8042] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  432.318316][ T8042] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  432.486415][ T8042] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869)
[  432.532999][ T8042] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #17: comm syz.4.836: iget: bad i_size value: 4398046511204
[  432.562243][ T8042] EXT4-fs (loop4): no journal found
[  432.945296][ T5414] bond0 (unregistering): Released all slaves
[  433.205155][ T8053] loop4: detected capacity change from 0 to 1024
[  433.222495][ T8015] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  433.276242][ T8015] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  433.324006][ T8015] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  433.326183][   T26] audit: type=1800 audit(1784427590.280:19): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.840" name="file1" dev="loop4" ino=20 res=0 errno=0
[  434.204746][   T26] audit: type=1800 audit(1784427590.280:20): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.840" name="file1" dev="loop4" ino=20 res=0 errno=0
[  434.244747][   T26] audit: type=1800 audit(1784427590.320:21): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.840" name="file1" dev="loop4" ino=20 res=0 errno=0
[  434.305669][ T4277] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[  434.326673][ T5240] hfsplus: b-tree write err: -5, ino 25
[  434.332401][ T5240] hfsplus: b-tree write err: -5, ino 4
[  434.364105][ T5240] hfsplus: b-tree write err: -5, ino 2
[  434.402294][ T5240] hfsplus: b-tree write err: -5, ino 20
[  435.095652][ T7859] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  435.146585][ T7859] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  435.187810][ T8072] loop9: detected capacity change from 0 to 2048
[  435.241630][ T7859] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  435.256522][ T8072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  435.295921][ T7859] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  436.189101][ T5414] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.210680][ T8086] loop4: detected capacity change from 0 to 512
[  436.244649][ T8086] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  436.335034][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  436.348498][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  436.356810][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  436.365303][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  436.373679][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  436.382646][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  436.444706][ T8086] EXT4-fs (loop4): 1 truncate cleaned up
[  436.509638][ T8086] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  436.566281][ T5414] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.808207][ T7859] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.999064][ T5414] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.497832][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  438.512933][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  438.530542][ T7859] 8021q: adding VLAN 0 to HW filter on device team0
[  438.623039][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  438.626860][ T4277] Bluetooth: hci1: command 0x0409 tx timeout
[  438.656752][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  438.665300][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.672438][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state
[  438.681269][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  438.690289][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  438.698830][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.705954][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state
[  438.717059][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  438.755737][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  438.811747][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  438.821212][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  438.830676][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  438.842887][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  438.851824][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  438.882080][ T8118] loop4: detected capacity change from 0 to 512
[  438.955336][ T5414] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.010025][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  439.022412][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  439.051280][ T8118] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  439.104426][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  439.196812][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  439.246667][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  439.284055][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  439.293061][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  439.309665][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  439.332578][ T8079] chnl_net:caif_netlink_parms(): no params data found
[  440.306005][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  440.312335][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  440.517756][ T5414] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.452276][ T4277] Bluetooth: hci1: command 0x041b tx timeout
[  441.737414][ T5414] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.782743][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.813397][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.837333][ T8079] device bridge_slave_0 entered promiscuous mode
[  441.853103][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  441.886467][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  441.918715][ T5414] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.949683][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.960334][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.997138][ T8079] device bridge_slave_1 entered promiscuous mode
[  442.078211][ T5414] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.120836][ T7859] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.187774][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  442.201281][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  442.229391][ T8079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  442.292373][ T8079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  442.374275][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  442.395656][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  442.584759][ T7859] device veth0_vlan entered promiscuous mode
[  442.597262][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  442.615400][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  442.640076][ T8079] team0: Port device team_slave_0 added
[  442.717831][ T8079] team0: Port device team_slave_1 added
[  443.875018][ T4277] Bluetooth: hci1: command 0x040f tx timeout
[  443.944021][ T7859] device veth1_vlan entered promiscuous mode
[  443.974187][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.982811][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.011229][ T8079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.057778][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.064762][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.206240][ T8079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.275203][ T8079] device hsr_slave_0 entered promiscuous mode
[  444.306968][ T8079] device hsr_slave_1 entered promiscuous mode
[  445.413169][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  445.454257][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  445.576332][ T4277] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[  445.609216][ T7859] device veth0_macvtap entered promiscuous mode
[  445.643318][ T8187] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  445.844350][ T8192] futex_wake_op: syz.4.879 tries to shift op by 144; fix this program
[  445.859868][ T8192] usb usb8: usbfs: process 8192 (syz.4.879) did not claim interface 0 before use
[  445.885117][ T7859] device veth1_macvtap entered promiscuous mode
[  445.966926][ T4277] Bluetooth: hci1: command 0x0419 tx timeout
[  446.633741][ T8194] loop4: detected capacity change from 0 to 1024
[  446.670294][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  446.679410][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  446.744574][ T8194] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  446.778474][ T8194] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.780403][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.796546][ T8194] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.880: lblock 0 mapped to illegal pblock 0 (length 1)
[  446.818688][ T8194] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  446.831145][ T8194] EXT4-fs (loop4): This should not happen!! Data will be lost
[  446.831145][ T8194] 
[  446.844121][ T8194] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.880: bg 0: block 112: padding at end of block bitmap is not set
[  446.865769][ T8194] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8195 with max blocks 1 with error 28
[  446.878576][ T8194] EXT4-fs (loop4): This should not happen!! Data will be lost
[  446.878576][ T8194] 
[  446.885034][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.888682][ T8194] EXT4-fs (loop4): Total free blocks count 0
[  446.906455][ T8194] EXT4-fs (loop4): Free/Dirty block details
[  446.912391][ T8194] EXT4-fs (loop4): free_blocks=0
[  446.918423][ T8194] EXT4-fs (loop4): dirty_blocks=16
[  446.923625][ T8194] EXT4-fs (loop4): Block reservation details
[  446.931746][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.973160][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.995746][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  447.020212][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.038923][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  447.066158][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.076010][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  447.098665][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.519661][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.894673][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  449.927816][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  449.947342][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.965279][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.985799][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.016140][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.036167][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.066107][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.086094][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.118032][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.138313][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.166092][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.187560][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.672918][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  450.691057][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  450.718159][ T7859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.738641][ T7859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.776171][ T7859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.785738][ T7859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.281789][ T8229] usb usb8: usbfs: process 8229 (syz.4.889) did not claim interface 0 before use
[  451.292327][ T8228] futex_wake_op: syz.4.889 tries to shift op by 144; fix this program
[  452.653712][ T8222] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  452.684230][ T8222] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  452.714383][ T8222] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  454.416444][ T5274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.424295][ T5274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.474074][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  454.679173][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.726414][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.738480][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  454.758547][ T8079] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  455.074059][ T8254] futex_wake_op: syz.4.898 tries to shift op by 144; fix this program
[  455.088659][ T8254] usb usb8: usbfs: process 8254 (syz.4.898) did not claim interface 0 before use
[  455.779908][ T8079] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  456.098536][ T8079] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  456.124049][ T8079] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  456.420449][ T8264] loop4: detected capacity change from 0 to 4096
[  456.587094][ T8264] EXT4-fs: Ignoring removed mblk_io_submit option
[  456.605897][ T8264] EXT4-fs (loop4): Test dummy encryption mode enabled
[  457.406495][ T8264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  457.693888][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  457.917332][ T5414] device hsr_slave_0 left promiscuous mode
[  457.951775][ T5414] device hsr_slave_1 left promiscuous mode
[  457.982597][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  458.017407][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  458.044843][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  458.084983][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  458.141806][ T5414] device bridge_slave_1 left promiscuous mode
[  458.156389][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.235234][ T8289] futex_wake_op: syz.4.909 tries to shift op by 144; fix this program
[  458.252341][ T8289] usb usb8: usbfs: process 8289 (syz.4.909) did not claim interface 0 before use
[  458.450506][ T5414] device bridge_slave_0 left promiscuous mode
[  458.599651][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.875090][ T5414] device hsr_slave_0 left promiscuous mode
[  459.147497][ T5414] device hsr_slave_1 left promiscuous mode
[  459.198182][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.210862][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.235064][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.235093][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.235610][ T5414] device bridge_slave_1 left promiscuous mode
[  459.301570][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.305812][ T5414] device bridge_slave_0 left promiscuous mode
[  459.305928][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.320423][ T8298] loop2: detected capacity change from 0 to 1024
[  459.408306][ T8298] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  459.408401][ T8298] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  459.696683][ T5414] device veth1_macvtap left promiscuous mode
[  459.933704][ T5414] device veth0_macvtap left promiscuous mode
[  459.963959][ T5414] device veth1_vlan left promiscuous mode
[  460.000524][ T5414] device veth0_vlan left promiscuous mode
[  460.706557][ T5274] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm kworker/u4:18: lblock 0 mapped to illegal pblock 0 (length 6)
[  460.864984][ T5274] EXT4-fs (loop2): Remounting filesystem read-only
[  460.885086][ T5414] device veth1_macvtap left promiscuous mode
[  460.902739][ T5414] device veth0_macvtap left promiscuous mode
[  460.994027][ T5414] device veth1_vlan left promiscuous mode
[  461.000424][ T7859] EXT4-fs (loop2): unmounting filesystem.
[  461.486266][ T5414] device veth0_vlan left promiscuous mode
[  463.959520][ T8340] binder_alloc: 8330: binder_alloc_buf, no vma
[  466.630664][ T8371] loop2: detected capacity change from 0 to 512
[  466.646627][ T5414] team0 (unregistering): Port device team_slave_1 removed
[  466.740030][ T8371] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  466.935559][ T8371] EXT4-fs (loop2): 1 truncate cleaned up
[  467.005066][ T5414] team0 (unregistering): Port device team_slave_0 removed
[  467.065052][ T8371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  467.164184][ T5414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  467.400752][ T5414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  468.494579][ T5414] bond0 (unregistering): Released all slaves
[  468.903054][ T7859] EXT4-fs (loop2): unmounting filesystem.
[  469.051544][ T8392] loop2: detected capacity change from 0 to 512
[  469.131797][ T8392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  469.153368][ T8392] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  469.272435][ T7859] EXT4-fs (loop2): unmounting filesystem.
[  469.870262][ T5414] team0 (unregistering): Port device team_slave_1 removed
[  469.935163][ T5414] team0 (unregistering): Port device team_slave_0 removed
[  469.993280][ T5414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  470.091261][ T5414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  470.569415][ T5414] bond0 (unregistering): Released all slaves
[  470.733408][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.880067][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  470.906477][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  470.936752][ T8079] 8021q: adding VLAN 0 to HW filter on device team0
[  471.009442][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  471.027362][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  471.050062][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.057217][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state
[  471.111212][ T8401] loop2: detected capacity change from 0 to 2048
[  471.118578][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  471.143115][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  471.199190][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  471.216881][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.224083][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  471.285760][ T8401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  471.295194][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  471.327665][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  472.056574][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  472.085400][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  472.109498][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  472.197411][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  472.265689][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  472.316803][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  472.349661][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  472.395940][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  473.100184][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  473.117523][ T8419] loop2: detected capacity change from 0 to 1024
[  473.327806][ T8419] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  473.351233][ T8419] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.622945][ T8409] binder_alloc: 8406: binder_alloc_buf, no vma
[  473.817016][ T7859] EXT4-fs (loop2): unmounting filesystem.
[  475.741660][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  475.751782][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  475.794761][ T8079] 8021q: adding VLAN 0 to HW filter on device batadv0
[  475.877524][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  475.901448][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  475.975629][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  475.993207][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  476.070050][ T8079] device veth0_vlan entered promiscuous mode
[  476.109821][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  476.135034][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  476.154804][ T8467] loop4: detected capacity change from 0 to 512
[  476.205662][ T8467] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  476.249337][ T8467] EXT4-fs (loop4): 1 truncate cleaned up
[  476.255026][ T8467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  476.312109][ T8079] device veth1_vlan entered promiscuous mode
[  476.793495][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  476.914729][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  477.001426][   T26] audit: type=1800 audit(1784427633.960:22): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.958" name="file2" dev="loop4" ino=16 res=0 errno=0
[  477.058229][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  477.067942][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  477.078748][ T8079] device veth0_macvtap entered promiscuous mode
[  477.095479][ T8079] device veth1_macvtap entered promiscuous mode
[  477.125496][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  477.141483][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.164672][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  477.206136][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.215987][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  477.266247][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.296151][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  477.336051][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.362962][ T8079] batman_adv: batadv0: Interface activated: batadv_slave_0
[  477.400166][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  477.992650][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.002977][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.029030][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.074965][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.096262][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.116381][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.146158][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.169004][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  478.175694][ T8079] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.212219][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  478.483140][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  478.550631][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  478.570108][ T8496] loop4: detected capacity change from 0 to 256
[  479.383443][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  479.393220][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  479.404255][ T6661] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  480.846457][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  480.907844][ T8079] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.926417][ T8079] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.935148][ T8079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.002293][ T8079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.259448][ T5422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.306227][ T5422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.328134][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  481.371858][ T5422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.397184][ T5422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.428383][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  482.185843][ T8512] binder_alloc: 8511: binder_alloc_buf, no vma
[  482.441436][   T41] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  482.648894][   T41] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[  482.677655][   T41] usb 1-1: config 0 has no interface number 0
[  482.683808][   T41] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  482.744922][   T41] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  482.772695][   T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.799286][   T41] usb 1-1: config 0 descriptor??
[  482.878930][   T41] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input9
[  483.064247][ T4316] usb 1-1: USB disconnect, device number 5
[  486.649375][ T8574] loop4: detected capacity change from 0 to 4096
[  486.724093][ T8574] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  487.101463][ T8586] syz.4.982 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  488.474203][ T8597] binder: 8596:8597 ioctl c0306201 2000000003c0 returned -14
[  488.501461][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.989'.
[  488.532846][ T8602] binder_alloc: 8596: binder_alloc_buf, no vma
[  488.819225][ T8618] loop9: detected capacity change from 0 to 2048
[  488.855950][ T8618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  489.846510][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  490.092130][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'.
[  490.948977][ T8643] loop9: detected capacity change from 0 to 512
[  491.007860][ T8643] EXT4-fs: inline encryption not supported
[  491.050101][ T8643] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  491.064328][ T8648] loop4: detected capacity change from 0 to 512
[  491.856791][ T8643] EXT4-fs (loop9): 1 truncate cleaned up
[  491.915488][ T8657] loop0: detected capacity change from 0 to 512
[  491.920943][ T8648] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.4.1001: corrupted xattr block 95
[  491.923486][ T8657] EXT4-fs: Ignoring removed oldalloc option
[  491.955400][ T8643] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  491.972698][ T8657] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  492.067175][ T8657] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  492.086271][ T8657] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  492.098147][ T8648] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1001: bg 0: block 7: invalid block bitmap
[  492.221645][ T8648] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  492.247317][ T8648] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #11: comm syz.4.1001: corrupted xattr block 95
[  492.287729][   T26] audit: type=1800 audit(1784427649.250:23): pid=8657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1004" name="file1" dev="loop0" ino=15 res=0 errno=0
[  492.329805][ T7449] EXT4-fs (loop9): unmounting filesystem.
[  492.369542][ T8648] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117)
[  492.454038][ T8648] EXT4-fs (loop4): 1 orphan inode deleted
[  492.477280][ T8648] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  492.531790][ T8079] EXT4-fs (loop0): unmounting filesystem.
[  492.577770][ T8648] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.1001: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[  492.761303][ T8666] loop0: detected capacity change from 0 to 512
[  492.795144][ T8666] EXT4-fs: Ignoring removed nobh option
[  492.827918][ T8666] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  492.849362][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  492.910725][ T8666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002]
[  492.935808][ T8666] EXT4-fs (loop0): orphan cleanup on readonly fs
[  493.120462][ T8666] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.1006: attempt to clear invalid blocks 1024 len 1
[  493.145850][ T8666] EXT4-fs (loop0): Remounting filesystem read-only
[  493.147317][ T8666] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1006: bg 0: block 361: padding at end of block bitmap is not set
[  493.147665][ T8666] EXT4-fs (loop0): Remounting filesystem read-only
[  493.147685][ T8666] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  493.147972][ T8666] EXT4-fs (loop0): Remounting filesystem read-only
[  493.149437][ T8666] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1006: invalid indirect mapped block 1811939328 (level 0)
[  493.149754][ T8666] EXT4-fs (loop0): Remounting filesystem read-only
[  493.149790][ T8666] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1006: invalid indirect mapped block 2185560079 (level 1)
[  493.150098][ T8666] EXT4-fs (loop0): Remounting filesystem read-only
[  493.150526][ T8666] EXT4-fs (loop0): 1 truncate cleaned up
[  493.150555][ T8666] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  493.957419][ T8682] loop9: detected capacity change from 0 to 512
[  493.959478][ T8682] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  494.046798][ T8677] loop4: detected capacity change from 0 to 2048
[  494.055481][ T8682] EXT4-fs (loop9): 1 truncate cleaned up
[  494.055509][ T8682] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  494.087649][ T8677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  494.946170][ T8678] loop2: detected capacity change from 0 to 512
[  494.969701][ T8678] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  494.969788][ T8079] EXT4-fs (loop0): unmounting filesystem.
[  496.743293][ T7449] EXT4-fs (loop9): unmounting filesystem.
[  497.055211][ T8675] tty tty2: ldisc open failed (-12), clearing slot 1
[  497.172790][ T7859] EXT4-fs (loop2): unmounting filesystem.
[  497.369723][ T8728] loop4: detected capacity change from 0 to 256
[  497.441820][ T6661] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  498.860546][ T4288] Bluetooth: hci2: command 0x0406 tx timeout
[  498.938102][ T8736] loop9: detected capacity change from 0 to 16
[  498.960538][ T8736] erofs: (device loop9): mounted with root inode @ nid 36.
[  499.179539][ T8739] loop2: detected capacity change from 0 to 512
[  499.617258][ T8739] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1023: iget: bad i_size value: 38620345925642
[  499.726406][ T8739] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1023: couldn't read orphan inode 15 (err -117)
[  499.890969][ T8739] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  500.239101][ T8749] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1023: bg 0: block 5: invalid block bitmap
[  500.351950][ T8749] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 584 with error 28
[  500.456303][ T8749] EXT4-fs (loop2): This should not happen!! Data will be lost
[  500.456303][ T8749] 
[  500.496688][ T8749] EXT4-fs (loop2): Total free blocks count 0
[  500.572661][ T8749] EXT4-fs (loop2): Free/Dirty block details
[  500.646121][ T8749] EXT4-fs (loop2): free_blocks=0
[  500.651193][ T8749] EXT4-fs (loop2): dirty_blocks=584
[  500.695797][ T8749] EXT4-fs (loop2): Block reservation details
[  500.705904][ T8749] EXT4-fs (loop2): i_reserved_data_blocks=584
[  500.842889][ T8765] loop9: detected capacity change from 0 to 512
[  500.870888][ T8765] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  500.895583][ T8765] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  500.907863][ T8765] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  500.924148][ T8765] EXT4-fs warning (device loop9): dx_probe:869: inode #2: comm syz.9.1028: Unimplemented hash flags: 0x0001
[  500.938850][ T8765] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1028: Corrupt directory, running e2fsck is recommended
[  501.072582][ T7449] EXT4-fs (loop9): unmounting filesystem.
[  501.156301][   T41] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  501.326608][   T41] usb 3-1: device descriptor read/64, error -71
[  501.398669][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  501.405303][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  501.444237][ T8779] netlink: 'syz.5.1031': attribute type 1 has an invalid length.
[  501.577229][ T8785] loop9: detected capacity change from 0 to 256
[  501.611050][   T41] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  503.146134][ T4317] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  503.153800][   T41] usb 3-1: device descriptor read/64, error -71
[  503.168673][ T7859] EXT4-fs (loop2): unmounting filesystem.
[  503.276255][   T41] usb usb3-port1: attempt power cycle
[  503.403891][ T4317] usb 5-1: Using ep0 maxpacket: 16
[  504.183948][ T8821] loop2: detected capacity change from 0 to 512
[  504.449398][ T8821] EXT4-fs: Ignoring removed nobh option
[  504.674229][ T8821] ------------[ cut here ]------------
[  504.680279][ T8821] EA inode 11 i_nlink=1026
[  504.737610][ T8821] WARNING: CPU: 0 PID: 8821 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4fe/0x560
[  504.753072][ T8821] Modules linked in:
[  504.757231][ T8821] CPU: 0 PID: 8821 Comm: syz.2.1042 Not tainted syzkaller #0
[  504.764648][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  504.774766][ T8821] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560
[  504.781484][ T8821] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 65 e6 9b ff 49 8b 34 24 48 c7 c7 00 9d a0 8a 44 89 fa e8 52 57 16 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10
[  504.801214][ T8821] RSP: 0018:ffffc9000c9d7380 EFLAGS: 00010246
[  504.807416][ T8821] RAX: 7e6899c90c873500 RBX: ffff888055c77300 RCX: 0000000000080000
[  504.815418][ T8821] RDX: ffffc9000db6b000 RSI: 0000000000019977 RDI: 0000000000019978
[  504.823446][ T8821] RBP: ffffc9000c9d7470 R08: ffff8880b8e279db R09: 1ffff110171c4f3b
[  504.831484][ T8821] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff888055c77148
[  504.839530][ T8821] R13: dffffc0000000000 R14: ffff888055c77108 R15: 0000000000000402
[  504.847560][ T8821] FS:  00007f8b33ff66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  504.856550][ T8821] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  504.863156][ T8821] CR2: 000000110c336d22 CR3: 00000000553e0000 CR4: 00000000003506f0
[  504.871184][ T8821] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  504.880170][ T8821] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  504.887655][ T4317] usb 5-1: unable to get BOS descriptor or descriptor too short
[  504.888173][ T8821] Call Trace:
[  504.899117][ T8821]  <TASK>
[  504.902177][ T8821]  ? ext4_xattr_block_csum+0x560/0x560
[  504.907766][ T8821]  ? __ext4_journal_ensure_credits+0x2c/0x450
[  504.913939][ T8821]  ext4_xattr_inode_dec_ref_all+0xadc/0x1050
[  504.915675][ T4317] usb 5-1: unable to read config index 0 descriptor/start: -71
[  504.920010][ T8821]  ? errseq_check+0x3c/0x70
[  504.920115][ T8821]  ? ext4_xattr_delete_inode+0xca0/0xca0
[  504.920142][ T8821]  ? __ext4_journal_ensure_credits+0x450/0x450
[  504.939809][ T4317] usb 5-1: can't read configurations, error -71
[  504.944134][ T8821]  ext4_xattr_delete_inode+0xada/0xca0
[  504.944174][ T8821]  ? rcu_is_watching+0x11/0xa0
[  504.960824][ T8821]  ? ext4_truncate+0xd41/0x12a0
[  504.965791][ T8821]  ? ext4_expand_extra_isize_ea+0x1d40/0x1d40
[  504.971942][ T8821]  ? __ext4_mark_inode_dirty+0x4e8/0x760
[  504.977651][ T8821]  ext4_evict_inode+0xc1e/0x10e0
[  504.982645][ T8821]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  504.988664][ T8821]  ? do_raw_spin_unlock+0x11d/0x230
[  504.993916][ T8821]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  504.999906][ T8821]  evict+0x4b6/0x8b0
[  505.003865][ T8821]  ? proc_nr_inodes+0x2f0/0x2f0
[  505.008810][ T8821]  ? do_raw_spin_unlock+0x11d/0x230
[  505.014029][ T8821]  ? _raw_spin_unlock+0x24/0x40
[  505.019176][ T8821]  ? iput+0x79f/0x9c0
[  505.023189][ T8821]  ext4_orphan_cleanup+0xc32/0x1470
[  505.028476][ T8821]  ? ext4_orphan_del+0xc90/0xc90
[  505.033442][ T8821]  ? ext4_register_sysfs+0x27e/0x2c0
[  505.038812][ T8821]  ? errseq_check_and_advance+0x62/0x120
[  505.044471][ T8821]  ext4_fill_super+0x6f0c/0x78f0
[  505.049509][ T8821]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  505.055902][ T8821]  ? set_blocksize+0x1d0/0x470
[  505.060824][ T8821]  ? sb_set_blocksize+0xa5/0xe0
[  505.065768][ T8821]  get_tree_bdev+0x3e6/0x610
[  505.070493][ T8821]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  505.076795][ T8821]  vfs_get_tree+0x88/0x270
[  505.081233][ T8821]  do_new_mount+0x247/0xa40
[  505.085826][ T8821]  __se_sys_mount+0x2e3/0x3d0
[  505.090601][ T8821]  ? __x64_sys_mount+0xc0/0xc0
[  505.095396][ T8821]  ? lockdep_hardirqs_on+0x94/0x140
[  505.100762][ T8821]  ? __x64_sys_mount+0x1c/0xc0
[  505.105554][ T8821]  do_syscall_64+0x4c/0xa0
[  505.110031][ T8821]  ? clear_bhb_loop+0x60/0xb0
[  505.114736][ T8821]  ? clear_bhb_loop+0x60/0xb0
[  505.119490][ T8821]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  505.125413][ T8821] RIP: 0033:0x7f8b35d9f10a
[  505.129903][ T8821] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  505.149592][ T8821] RSP: 002b:00007f8b33ff5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  505.158079][ T8821] RAX: ffffffffffffffda RBX: 00007f8b33ff5ee0 RCX: 00007f8b35d9f10a
[  505.166111][ T8821] RDX: 0000200000000580 RSI: 0000200000000140 RDI: 00007f8b33ff5ea0
[  505.174113][ T8821] RBP: 0000200000000580 R08: 00007f8b33ff5ee0 R09: 0000000000800718
[  505.182181][ T8821] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140
[  505.190229][ T8821] R13: 00007f8b33ff5ea0 R14: 00000000000004a2 R15: 00002000000003c0
[  505.198273][ T8821]  </TASK>
[  505.201318][ T8821] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  505.208606][ T8821] CPU: 0 PID: 8821 Comm: syz.2.1042 Not tainted syzkaller #0
[  505.215987][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  505.226048][ T8821] Call Trace:
[  505.229335][ T8821]  <TASK>
[  505.232275][ T8821]  dump_stack_lvl+0x188/0x24e
[  505.236977][ T8821]  ? memcpy+0x3c/0x60
[  505.241041][ T8821]  ? show_regs_print_info+0x12/0x12
[  505.246256][ T8821]  ? load_image+0x410/0x410
[  505.250809][ T8821]  panic+0x2d3/0x710
[  505.254725][ T8821]  ? bpf_jit_dump+0xd0/0xd0
[  505.259257][ T8821]  __warn+0x2f8/0x4f0
[  505.263251][ T8821]  ? ext4_xattr_inode_update_ref+0x4fe/0x560
[  505.269255][ T8821]  ? ext4_xattr_inode_update_ref+0x4fe/0x560
[  505.275255][ T8821]  report_bug+0x2ba/0x4f0
[  505.279698][ T8821]  ? ext4_xattr_inode_update_ref+0x4fe/0x560
[  505.285701][ T8821]  handle_bug+0x3a/0x70
[  505.289876][ T8821]  exc_invalid_op+0x16/0x40
[  505.294398][ T8821]  asm_exc_invalid_op+0x16/0x20
[  505.299267][ T8821] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560
[  505.305875][ T8821] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 65 e6 9b ff 49 8b 34 24 48 c7 c7 00 9d a0 8a 44 89 fa e8 52 57 16 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10
[  505.325511][ T8821] RSP: 0018:ffffc9000c9d7380 EFLAGS: 00010246
[  505.331599][ T8821] RAX: 7e6899c90c873500 RBX: ffff888055c77300 RCX: 0000000000080000
[  505.339586][ T8821] RDX: ffffc9000db6b000 RSI: 0000000000019977 RDI: 0000000000019978
[  505.347568][ T8821] RBP: ffffc9000c9d7470 R08: ffff8880b8e279db R09: 1ffff110171c4f3b
[  505.355553][ T8821] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff888055c77148
[  505.363541][ T8821] R13: dffffc0000000000 R14: ffff888055c77108 R15: 0000000000000402
[  505.371549][ T8821]  ? ext4_xattr_block_csum+0x560/0x560
[  505.377037][ T8821]  ? __ext4_journal_ensure_credits+0x2c/0x450
[  505.383122][ T8821]  ext4_xattr_inode_dec_ref_all+0xadc/0x1050
[  505.389131][ T8821]  ? errseq_check+0x3c/0x70
[  505.393647][ T8821]  ? ext4_xattr_delete_inode+0xca0/0xca0
[  505.399305][ T8821]  ? __ext4_journal_ensure_credits+0x450/0x450
[  505.405480][ T8821]  ext4_xattr_delete_inode+0xada/0xca0
[  505.410968][ T8821]  ? rcu_is_watching+0x11/0xa0
[  505.415754][ T8821]  ? ext4_truncate+0xd41/0x12a0
[  505.420623][ T8821]  ? ext4_expand_extra_isize_ea+0x1d40/0x1d40
[  505.426711][ T8821]  ? __ext4_mark_inode_dirty+0x4e8/0x760
[  505.432370][ T8821]  ext4_evict_inode+0xc1e/0x10e0
[  505.437341][ T8821]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  505.443256][ T8821]  ? do_raw_spin_unlock+0x11d/0x230
[  505.448485][ T8821]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  505.454398][ T8821]  evict+0x4b6/0x8b0
[  505.458316][ T8821]  ? proc_nr_inodes+0x2f0/0x2f0
[  505.463179][ T8821]  ? do_raw_spin_unlock+0x11d/0x230
[  505.468394][ T8821]  ? _raw_spin_unlock+0x24/0x40
[  505.473265][ T8821]  ? iput+0x79f/0x9c0
[  505.477272][ T8821]  ext4_orphan_cleanup+0xc32/0x1470
[  505.482499][ T8821]  ? ext4_orphan_del+0xc90/0xc90
[  505.487468][ T8821]  ? ext4_register_sysfs+0x27e/0x2c0
[  505.492775][ T8821]  ? errseq_check_and_advance+0x62/0x120
[  505.498438][ T8821]  ext4_fill_super+0x6f0c/0x78f0
[  505.503426][ T8821]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  505.509707][ T8821]  ? set_blocksize+0x1d0/0x470
[  505.514495][ T8821]  ? sb_set_blocksize+0xa5/0xe0
[  505.519361][ T8821]  get_tree_bdev+0x3e6/0x610
[  505.523967][ T8821]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  505.530223][ T8821]  vfs_get_tree+0x88/0x270
[  505.534655][ T8821]  do_new_mount+0x247/0xa40
[  505.539180][ T8821]  __se_sys_mount+0x2e3/0x3d0
[  505.543874][ T8821]  ? __x64_sys_mount+0xc0/0xc0
[  505.548653][ T8821]  ? lockdep_hardirqs_on+0x94/0x140
[  505.553861][ T8821]  ? __x64_sys_mount+0x1c/0xc0
[  505.558637][ T8821]  do_syscall_64+0x4c/0xa0
[  505.563063][ T8821]  ? clear_bhb_loop+0x60/0xb0
[  505.567749][ T8821]  ? clear_bhb_loop+0x60/0xb0
[  505.572443][ T8821]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  505.578349][ T8821] RIP: 0033:0x7f8b35d9f10a
[  505.582780][ T8821] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  505.602407][ T8821] RSP: 002b:00007f8b33ff5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  505.610841][ T8821] RAX: ffffffffffffffda RBX: 00007f8b33ff5ee0 RCX: 00007f8b35d9f10a
[  505.618831][ T8821] RDX: 0000200000000580 RSI: 0000200000000140 RDI: 00007f8b33ff5ea0
[  505.626814][ T8821] RBP: 0000200000000580 R08: 00007f8b33ff5ee0 R09: 0000000000800718
[  505.634798][ T8821] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140
[  505.642782][ T8821] R13: 00007f8b33ff5ea0 R14: 00000000000004a2 R15: 00002000000003c0
[  505.650784][ T8821]  </TASK>
[  505.654077][ T8821] Kernel Offset: disabled
[  505.658464][ T8821] Rebooting in 86400 seconds..