last executing test programs:

12m29.844019717s ago: executing program 32 (id=72):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000070000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000))
close_range(r3, r3, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r4, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="1200"/12, @ANYRES32=0x0, @ANYBLOB="4ae20f70fe8c7a07d6b77f4b412b271bdf024590d5726ddb9987c66da377d5ad8137fc107482402f8ecd027971369f49eac9d34d8e892208df863c321fe43f6492ca98eb8063fa7a4bf878b7e63be9d0136c7617a0850000e1ff0000000000000000"], 0x20)
write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5)

12m16.807862561s ago: executing program 3 (id=96):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xa0000011})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x0)

12m15.317506723s ago: executing program 3 (id=97):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, 0x0)

12m7.476210187s ago: executing program 3 (id=102):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef)

12m6.325900429s ago: executing program 3 (id=104):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x38ad211, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000680)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@debug}, {@noquota}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x1, 0x472, &(0x7f0000000ec0)="$eJzs3EtvG1UbAOB3Jpf26+VLKOXSUiBQLhGXpEkLdMGmCKRukJBgUZYhTatSt0FNkGhVkcCiLFF/ASCxQeIXsKIbBKxAbGGPkCrUDYUFMhp7bFw7No4vdVs/jzTxnJkzM+edmWOfOcdOAENrKvuTROyIiJ8jYiIiRuozTJVfrl+7uPjntYuLSRSLr/+eZJvFH9cuLlayJvnr9jwxnVYXNVg5f+H0QqGwdC5Pz66eeWd25fyFZ0+dWTi5dHLp7Pzhw4cOzr3w/PxzPYlzZ1bWve8v79tz9M3Lry4eu/zWd19mhduRr6+No2yy62NOxVTTE/B413u/tezMX5tecG5JWV0fjYixUv2fiJFSqmwiXvlwoIUD+qpYLBa3NCyttgDWi8AdLIlBlwAYjMoHffb8W5luYvNj4K4eKT8AZXFfz6fymtFI8zxjNc+3vTYVEcfW//okm2LDfggAgN76Omv/PLNR+y+Ne2vyFdfKY0OTEXFXROyKiLsjYndE3BNRyntfRNy/yeNP1aUb2z8//q+jwNp09UgkL+ZjWze2/yqtv5gcyVM7S/GPJSdOFZYORMT/I2I6xrZk6bkWx7jy8k8fN1tX2/7Lpuz4lbZgXo7fRus66I4vrC50E3Otqx+U+gDXGuNPqiMBSUTsiYi9Hex/a0SceuqLfQ0ragaKbog/oi7+FkY7KFCd4mcRT5av/3rUxV9b1Bbjk7Nbo7B0YLZyVzT6/odLrzU7fqvr39cbP5dd/20b3v/V+CeT2vHalc0f49IvHzV9pun0/h9P3ijNj+fL3ltYXT03FzGerDcun/9320q6kj+Lf3r/xvV/V8Tfn+bbPRAR2U38YEQ8FBEP52V/JCIejYj9LeL/9qXH3u48/v7K4j++qeu/+ZmR09981ez47V3/Q6W56XxJO+9/7Rawm3MHAAAAt4u09B34JJ2pzqfpzEz5O/y7Y1taWF5ZffrE8rtnj5e/Kz8ZY2mlp2uipj90Lu8brqTn69IH877ATJaeWVwu9GtMHWjP9ib1P/PryKBLB/TdpsbR/MIL7ig9GEcHblPqPwwv9R+Gl/oPw2uj+r8WcX0ARQFuMp//MLzUfxhe6j8ML/UfhlI3v+tvNbPraL/2fDvOXImIZnlGBlrCJ7Z3unmkhT3jt8bp/c+Zsfxury5Ju9jh5/n/RepZCbdERLuZ16JxVdqXUzfIdyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+ScAAP//bl3ebg==")

11m58.539919218s ago: executing program 3 (id=113):
mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8000080}, 0x0)
syz_pidfd_open(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000380)=""/102400, 0x19000)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb770b3f6ef8f772, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00')
preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1, 0x264, 0x1)

11m56.109854143s ago: executing program 3 (id=115):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffffff, r0, 0x0, 0x0, 0x400)

11m55.760886934s ago: executing program 33 (id=115):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffffff, r0, 0x0, 0x0, 0x400)

10m15.06405545s ago: executing program 1 (id=271):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbd, 0x7ffffffe, 0x102f, 0x5, 0x1, 0x3, 0x1, 0x1, 0x7, 0xda, 0xbc, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0x2, 0x7, 0x10000000003, 0x10000, 0x900000001, 0x403, 0x7fff, 0x800000005, 0x101, 0x4003, 0xd, 0x1, 0x2000000, 0x6, 0x78b, 0x2000000000024, 0xfffffffffffffffe, 0x50f, 0x9ac2, 0x6fe5, 0xfeffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x2, 0xfffffffffffffffe, 0x0, 0xf9800000, 0xbf, 0x9, 0x1800001, 0x7, 0x82b, 0x2000000008, 0x20000000005, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x0, 0x2b, 0x1, 0x7, 0x40, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0x1, 0x5, 0x6, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x7, 0x8, 0x0, 0x5, 0x96, 0x8, 0x4, 0x2, 0x0, 0x680000000000, 0x2, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x8, 0x10000001000, 0x85, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x20000000004, 0x1, 0x7c, 0x3]})

10m14.923003123s ago: executing program 1 (id=272):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x10000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x687, &(0x7f0000000fc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xe, 0x11, r0, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)

10m13.364846921s ago: executing program 1 (id=276):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x1800801, &(0x7f0000000000)=ANY=[], 0x8, 0x1ed, &(0x7f00000003c0)="$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")
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)

10m13.069635927s ago: executing program 1 (id=277):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x10)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)

10m11.205928852s ago: executing program 1 (id=279):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000500)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)

10m9.999102929s ago: executing program 1 (id=281):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844)

10m9.374459384s ago: executing program 34 (id=281):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844)

3m28.042968482s ago: executing program 0 (id=1005):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x4d19, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)

3m26.205872545s ago: executing program 0 (id=1007):
r0 = syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000300)={[{@barrier}, {}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}, {@discard_sync}, {@nodiscard}, {@noflushoncommit}, {@discard}, {@notreelog}, {@thread_pool={'thread_pool', 0x3d, 0x1}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
open(0x0, 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f000000ac40)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000", @ANYBLOB], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'dummy0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0)
r3 = epoll_create1(0x80000)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000580)={{r3}, 0x0, 0x0, 0x5})
syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0x3, &(0x7f00000001c0)={[{@creator={'creator', 0x3d, "c5690fed"}}, {}, {@gid}, {@creator={'creator', 0x3d, "8083097f"}}, {@type={'type', 0x3d, "ab002e00"}}]}, 0x41, 0x26a, &(0x7f0000000280)="$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")

3m20.401608239s ago: executing program 0 (id=1015):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@data_ordered}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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")
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000001940)=""/4120, 0x1018)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

3m19.294291217s ago: executing program 0 (id=1018):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6026843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000f3d8e390780000"], 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x10003, @dev={0xfe, 0x80, '\x00', 0x42}, 0x9}}, 0x0, 0x0, 0x21, 0x0, "3023e519504254c1b5a34f91c57d8c79f12c8b32c21823a6be3126e5370ca14e54017a80a3d3e78f7a7b8c5895e68d01b9c347e864933b4b2dc1e00fd53b6ad9583f5dc3db99776f8d76917a816cc335"}, 0xd8)
syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0xa388}}}}}}}, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000145f405e04bd84b689010203010902240001000000000904ed0002ff5d010009050303000000050009058a03"], 0x0)

3m16.223958059s ago: executing program 0 (id=1021):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x48, 0x0, &(0x7f0000000040))
r1 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='\\\']*\x00\x05\x97\xefcY^\xd2y\xbd\xabEp\x1a\xf7\xe2\xc4X\x82\xa6[\xd8\xbfg\x10Ns\x00\xbd\xe7\xe5\x80.\xb1\xa8\xdaW\"\xe4\xc6\xb7\xbcx.%\x1a\xfe^\xda\x14.\x99wGY\x90\xa3\x04_\xc0\x83\x88u\xb2\xa6\xe8\xad\x8cTO\x15D\t\xab\xa4O\x9f\x12\xd5\xbdi\x8c\xcex\x90\x02\xd3NJ\n\xd9\xafp]\x87fg\xd8\xb2\n\x9f\xdd\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x02B\x9e\x13\xda\x1f\x8du\x10\x13\xe5\xf5\xe3\x9e\x1b\xba\xecX\x0e\xd6\xca\xc5\xd5j)A)\x14\x14\x94\xa7\x1c\x86\x82V%\xa9IWn_\xa6\x0e\x9e\xb2r\xff\xaa\x1e\xd9\x9bu1,\xa1|\x9e\xd3\xf4\xed\xbb\xef\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x83\xc4m\v\xc2\xd7`\x8c\x96\xa3^\xf7\xaf\xea\xef\x1b\xd9\x95\xaf\xc2\xd6=\x81)\xf40\xa3\x82TQ\x84\xd5\xa1P\xe0\xc9\x05\x13m\x18J\xfedv\xcc\xa4\xbb\x86\xe9\xac\xfe&\xf4\xf0\xdeq\x8fvo\x11\x86\xbc\x8c\xc3\x88\x9d\xc0\xe6\\\x87Y\xa6\x1c\x15\xb6x\x1a\x95\xb6\xe0\xc7\x91\x9c\xf97\xec\x91\t*\xc4\xd3!w\xa81\x03\x1b\x10J2sVf?@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x95\xdc\x1d\x92)*\x9f\x97\x1e\x1c\xbc\xd9\xa4\xb8\x9c\xf4dR\x91Ew\'f\v\x99\x95\xe0u', &(0x7f0000000140)='\xb0\xa2\xdb\xce\xe6[\\\x00\x00\x04\x1d\xc3\xc0\xe0\xa4\xbc\x1c\xf26\xad\xf8\xf0E\xaf\xe3A\xd9&\xb3\x91\ns\xd7\xd2\r\xb5\x8a2\xa90p\xab\xa3)\xdb\xc3\xa4\tBr\xf4\xd2xV>\x1e=\x85\x90\xc7\f\xf3\xa0\xe6!\xb4', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x12106a, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0)

3m14.664137008s ago: executing program 0 (id=1022):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x48, 0x0, &(0x7f0000000040))
fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
getgroups(0x0, 0x0)

2m58.533124907s ago: executing program 35 (id=1022):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x48, 0x0, &(0x7f0000000040))
fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
getgroups(0x0, 0x0)

2m52.666147967s ago: executing program 6 (id=1044):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
setgroups(0x0, 0x0)
setregid(0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc804)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000240)=ANY=[], 0x1, 0xc42, &(0x7f0000000540)="$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")

2m51.091729967s ago: executing program 6 (id=1045):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = syz_kvm_add_vcpu$x86(0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
execve(&(0x7f0000001040)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000002500)={[&(0x7f0000002380)='cgroup.subtree_control\x00']})
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
socket$nl_xfrm(0x10, 0x3, 0x6)
setresgid(0xee00, 0x0, 0x0)
setresgid(0x0, 0x0, 0xffffffffffffffff)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
listen(0xffffffffffffffff, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRESDEC, @ANYRES32=0x41424344, @ANYBLOB="50faff0090580000"], 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0)

2m45.97973681s ago: executing program 6 (id=1050):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@data_ordered}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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")
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000001940)=""/4120, 0x1018)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

2m40.851158704s ago: executing program 6 (id=1056):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
shutdown(r0, 0x3)

2m36.172094409s ago: executing program 6 (id=1063):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x48, 0x0, &(0x7f0000000040))
r1 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='\\\']*\x00\x05\x97\xefcY^\xd2y\xbd\xabEp\x1a\xf7\xe2\xc4X\x82\xa6[\xd8\xbfg\x10Ns\x00\xbd\xe7\xe5\x80.\xb1\xa8\xdaW\"\xe4\xc6\xb7\xbcx.%\x1a\xfe^\xda\x14.\x99wGY\x90\xa3\x04_\xc0\x83\x88u\xb2\xa6\xe8\xad\x8cTO\x15D\t\xab\xa4O\x9f\x12\xd5\xbdi\x8c\xcex\x90\x02\xd3NJ\n\xd9\xafp]\x87fg\xd8\xb2\n\x9f\xdd\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x02B\x9e\x13\xda\x1f\x8du\x10\x13\xe5\xf5\xe3\x9e\x1b\xba\xecX\x0e\xd6\xca\xc5\xd5j)A)\x14\x14\x94\xa7\x1c\x86\x82V%\xa9IWn_\xa6\x0e\x9e\xb2r\xff\xaa\x1e\xd9\x9bu1,\xa1|\x9e\xd3\xf4\xed\xbb\xef\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x83\xc4m\v\xc2\xd7`\x8c\x96\xa3^\xf7\xaf\xea\xef\x1b\xd9\x95\xaf\xc2\xd6=\x81)\xf40\xa3\x82TQ\x84\xd5\xa1P\xe0\xc9\x05\x13m\x18J\xfedv\xcc\xa4\xbb\x86\xe9\xac\xfe&\xf4\xf0\xdeq\x8fvo\x11\x86\xbc\x8c\xc3\x88\x9d\xc0\xe6\\\x87Y\xa6\x1c\x15\xb6x\x1a\x95\xb6\xe0\xc7\x91\x9c\xf97\xec\x91\t*\xc4\xd3!w\xa81\x03\x1b\x10J2sVf?@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x95\xdc\x1d\x92)*\x9f\x97\x1e\x1c\xbc\xd9\xa4\xb8\x9c\xf4dR\x91Ew\'f\v\x99\x95\xe0u', &(0x7f0000000140)='\xb0\xa2\xdb\xce\xe6[\\\x00\x00\x04\x1d\xc3\xc0\xe0\xa4\xbc\x1c\xf26\xad\xf8\xf0E\xaf\xe3A\xd9&\xb3\x91\ns\xd7\xd2\r\xb5\x8a2\xa90p\xab\xa3)\xdb\xc3\xa4\tBr\xf4\xd2xV>\x1e=\x85\x90\xc7\f\xf3\xa0\xe6!\xb4', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x12106a, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0)

2m34.650315454s ago: executing program 6 (id=1065):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000001c80)={[{@grpid}, {@resuid}, {@commit={'commit', 0x3d, 0x1}}, {@dioread_nolock}, {@quota}]}, 0x0, 0x54c, &(0x7f0000000280)="$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")
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x4000418, &(0x7f0000000280)=ANY=[], 0x1, 0x1504, &(0x7f0000000740)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x3a)
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8=r2], 0x1, 0x538, &(0x7f0000003480)="$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")
mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x100)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
lseek(r5, 0x40, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file1\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003800)=@newtaction={0x18, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x4)

2m19.292419735s ago: executing program 36 (id=1065):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000001c80)={[{@grpid}, {@resuid}, {@commit={'commit', 0x3d, 0x1}}, {@dioread_nolock}, {@quota}]}, 0x0, 0x54c, &(0x7f0000000280)="$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")
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x4000418, &(0x7f0000000280)=ANY=[], 0x1, 0x1504, &(0x7f0000000740)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x3a)
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8=r2], 0x1, 0x538, &(0x7f0000003480)="$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")
mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x100)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
lseek(r5, 0x40, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file1\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003800)=@newtaction={0x18, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x4)

1m53.580306454s ago: executing program 9 (id=1087):
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
rmdir(0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'ip6_vti0\x00'})
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a0900000000000000000000000000000100ffffee9e00000000"], 0x4c}}, 0x0)

1m52.505923989s ago: executing program 9 (id=1122):
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
execveat(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r5, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

1m49.237708498s ago: executing program 9 (id=1130):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000bc0)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618360f0d20ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4b}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$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")

1m48.797246707s ago: executing program 9 (id=1131):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

1m33.100611748s ago: executing program 37 (id=1131):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

37.930774318s ago: executing program 8 (id=1250):
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
execveat(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r4, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

29.89780334s ago: executing program 8 (id=1259):
iopl(0x3)
landlock_create_ruleset(0x0, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0})
r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0x0, 0x11)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000"], 0x50)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000520001002abd7000000000000a00000008000100", @ANYRES32=r4, @ANYBLOB="8c0143715a938acc52"], 0x1c}}, 0x0)
syz_emit_ethernet(0xc1, 0x0, 0x0)
syz_io_uring_setup(0x2d0c, &(0x7f0000000040)={0x0, 0x6d2a, 0x2000, 0x1, 0x16a, 0x0, r3}, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000280)={0x5, 0xfffffffffffffffe, 0xafab})

26.712609272s ago: executing program 7 (id=1264):
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timer_gettime(0x0, &(0x7f0000000100))
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x6000000, 0x4}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_emit_ethernet(0x0, 0x0, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0)

25.400928629s ago: executing program 7 (id=1266):
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_vhci(0x0, 0x7)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
fchdir(0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x73, 0xffffffffffffffff})
fcntl$lock(r3, 0x6, &(0x7f00000002c0)={0x0, 0x0, 0xff34, 0x5})
fcntl$lock(r3, 0x24, &(0x7f0000000400)={0x2, 0x2, 0x2, 0x4})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4, 0xc000, 0x2, 0x20002f7})
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x2}, 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000180), 0x4, 0x40002)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)

24.240211271s ago: executing program 4 (id=1268):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a1, &(0x7f0000000440)="$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")
getpgrp(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
msgget$private(0x0, 0x1)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000840)='./file0\x00', 0x8)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

22.410798003s ago: executing program 7 (id=1270):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
shmget(0x3, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)

20.140097235s ago: executing program 2 (id=1275):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xa0000011})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x446000, 0x40)
ioctl$KDSKBLED(r4, 0x4b65, 0x9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x40, &(0x7f0000000140)={0x11, 0x8100, 0x0, 0x1, 0xfc}, 0x14)

19.899843916s ago: executing program 8 (id=1276):
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timer_gettime(0x0, &(0x7f0000000100))
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x6000000, 0x4}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_emit_ethernet(0x0, 0x0, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0)

18.929755392s ago: executing program 2 (id=1278):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
clock_gettime(0x1, 0x0)
clock_settime(0x0, &(0x7f0000000040))

17.889763554s ago: executing program 8 (id=1279):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
setgroups(0x0, 0x0)
setregid(0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc804)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000240)=ANY=[], 0x1, 0xc42, &(0x7f0000000540)="$eJzs3U9sHNd9B/DfG+6KK7utmNhRnDQuNm2Ryorl6l9MxSrcVU2zDSDLaijmFoArcaUSpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEXQI9O6QHLxocip6IFoYSMoemCLADkFDGb2rbikqD8RRYmSPh+b+u7OvDf73rz1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xj9z9Fh62K0AAB6kc2NfPnrc/R8AnigX/P8/AAAAAAAAAAAAAADsdSmKeCZSzJ1bSxPV+67G2an6tevjI6PbV9ufqpoDVfnyp3Hs+ImTX3h5+FQvz07N3Kb+/fbpeHPswpnma7NX5+Y7Cwudyeb4zNSl2cnOXR9hp/W3OlydgObVt65NXr680Dz+0olNu68PfTT49MGh08MvHHm+V3Z8ZHR0bKNIo7987Z4b0nWrGR77oogjkeLF7/w4tSOiiJ2fi8aDHfut9ledOFx1YnxktOrI9FR7ZrHceb53IoqIZl+lVu8cbT8WUas/0D7cWitiqWx+2eDDZffG5trz7YvTneb59vzi1OLU7Mz51G1t2Z9mFHEqRSxHxOrgzYerRxG1SPGtA2vpYkQM9M7D56uJwbduR7GLfbwLZTub9Yjl4hEYsz1sMIp4I1L85P1DcSlfZ6przeci3ijzexHvlvlqRCq/GCcjPtzme8SjqRZF/EU5/qfX0mR1PehdV85+pfmlmcuzfWV715Vf8P5w05XiId0f9m/JB2OPX5saUUS7uuKvpXv/zQ4AAAAAAAAAAAAAAAAA99v+KOJTkeL1f//jal5xVPPSD5we/v2hX+6fM/7cHY5Tln0pIpaKu5uTuy9PDDyfzqf0kOcSP8kaUcSf5Pl/33jYjQEAAAAAAAAAAAAAAAAAAHiCracifhQpXvngUFqO/jXFp2auNC+0L053V4Xtrf3bWzN9fX19vZm62co5kXMp53LOlZyrOaPI9XO2ck7kXMq5nHMl52rOGMj1c7ZyTuRcyrmccyXnas6o5fo5Wzknci7lXM65knM1Z+yRtXsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nRRTxs0jxza+tpUgR0YqYiG6uDD7s1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApcFUxHcjRfMPWje21SIiVf92HSp/ORmtfWV+PFrDZb4arTM521XWWt94CO1nZ+qpiB9GisHGezcGPI9/vfvuxtcg3v36xrtP17o50Ns59NHg0wcPnB4e/bXnbvU6bdeAw2enZq5db46PjI6O9W2u5U//eN+2ofy5xf3pOhGx8PY7b7Wnpzvz9/6i/ArsoPqj8yJS7QnpqRfdF1HbE814OH3nCVDe/z+MFL/9wX/0bvjd+38jfqn77sYdPn76pxv3/1e2Huj29///7N3/a1vr5ft/eU/f7v7/TN+2V/LvRuq1iMbi1bn6wYjGwtvvHJm62r7SudKZOXn06BeHh7944mh9X0Tj8tR0p+/VfTldAAAAAAAAAAAAAAAAAA9OKuJ3I0X7h2upGRHXq/laQ6eHXzjy/EAMVPOtNs3bfnPswpnma7NX5+Y7Cwudyeb4zNSl2clOd2f9jh/XqKZ7jY+M7lqHbmv/7dt/Z3do//7Ga7Nzb89PXfmjxW33P9U4c3Fhcb59afvdsT+KiFb/lsNVg8dHRqtGT0+1Z6qq57edTP+Lq6ci/itSXDrZTJ/N2/L8/60z/DfN/1/aeqBdmv//sb5t5WemVMRPI8Vv/eVz8dmqnU/FTecsl/vbSHH41GdyudhXluu1oftcge7MwLLs/0WKf/zZ5rK9b/MzG2WP3fWJfUSU438gUnz3z78dv563bX7+w/bj/9TWA+3S+D/bt+2pTc8r2HHXyeN/JFK8+sx78Rt52+2e/9F79sahXPjG8zl2afw/0bdtKH/ub96frgMAAAAAAAAAADzS6qmIv4sU3x+tpZfztrv5+3+TWw+0S3//65N92ybvz3pFd3xRftYfDu70zAIAAADAw1dPRfwoUlxZfO/GHOrN87/75n/+zsb8z5G0ZW/153y/Uj034H7++V+/ofy5EzvvNgAAAAAAAAAAAAAAAAAAAOwpKRXxcl5PfaKazz95y/XUVyLF6//zYi6XDpbleuvAD1W/Ns7Nzhw5Mz09e6m92L443WmOzbUvdcq6z0aKtb/5TK5bVOur99ab767xvrEW+3ykGP37XtnuWuy9tcmf7ZVd6hwry34sUvz3P2wu21vH+hMbxz1elv3rSPHVf96+7MGNsifKst+OFD/4arNX9qmybO/5qJ/cKPvSpdliF0YFAAAAAAAAAAAAAAAAAACAJ009FfFnkeJ/ry7fmMuf1/+v972tvPv1vvX+t7herfM/VK3/f6vX97L+f/VcgaW0qR0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC4S1HEO5Fi7txaWhks33c1zk7NXLs+PjK6fbX9qao5UJUvfxrHjp84+YWXh0/18vb177dPxZtjF840X5u9OjffWVjoTDbHZ6YuzU527voIO62/1eHqBDSvvnVt8vLlhebxl05s2n196KPBpw8OnR5+4cjzvbLjI6OjY31lavV7/vSbpFts3xdF/FWkePE7P07fH4woYufn4g7fnd22v+rE4aoT4yOjVUemp9ozi+XO870TUUQ0+yq1eufoAYzFjrQilsrmlw0+XHZvbK4937443Vk/0C0wO3M+dVtb9qcZRZxKEcsRsTp48+HqUcRbkeJbB9bSvwxGDPTOw+fPjX356PFbt6PYrQ7enbKdzXrEcnG7Mdumw2wyGEX8U6T4yfuH4l8HI2rR/YnPRbxR5vci3o3ueKfyi3Ey4kOn9bFRiyL+vxz/02vp/cHyetC7rpz9SvNLM5dn+8r2riuP/P3hQdrj95NGFPGD6oq/lv7Nf9cAAAAAAAAAAAAAAAAAe0gRvxopXvngUKrmB9+YUzw1c6V5oX1xujutrzf3rzdnen19fb2ZutnKOZFzKedyzpWcqzmjyPVztspsrK9PFKk68lLevpxzJedqzhjI9XO2ck7kXMq5nHMl52rOqOX6OVs5J3Iu5VzOuZJzNWfskbl7AAAAAAAAAAAAAAAAAADA46Wo/knxza+tpfXBan3pgd6+FeuBPvZ+HgAA//8bKfXU")

16.23778892s ago: executing program 8 (id=1280):
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_vhci(0x0, 0x7)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
fchdir(0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x73, 0xffffffffffffffff})
fcntl$lock(r3, 0x6, &(0x7f00000002c0)={0x0, 0x0, 0xff34, 0x5})
fcntl$lock(r3, 0x24, &(0x7f0000000400)={0x2, 0x2, 0x2, 0x4})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4, 0xc000, 0x2, 0x20002f7})
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x2}, 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000180), 0x4, 0x40002)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)

14.118059429s ago: executing program 4 (id=1283):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, 0x0)
userfaultfd(0x80000)

13.020511416s ago: executing program 4 (id=1284):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80009, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_pidfd_open(r0, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000005400), 0x0, 0x1000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb)
fcntl$setstatus(r2, 0x4, 0x42800)
openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xc4})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_emit_ethernet(0x66, 0x0, 0x0)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0xfeff, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x400c6615, 0x0)

12.895495307s ago: executing program 7 (id=1285):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

12.894835977s ago: executing program 4 (id=1286):
iopl(0x3)
landlock_create_ruleset(0x0, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0})
r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0x0, 0x11)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000"], 0x50)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000520001002abd7000000000000a00000008000100", @ANYRES32=r4, @ANYBLOB="8c0143715a938acc52"], 0x1c}}, 0x0)
syz_emit_ethernet(0xc1, 0x0, 0x0)
syz_io_uring_setup(0x2d0c, &(0x7f0000000040)={0x0, 0x6d2a, 0x2000, 0x1, 0x16a, 0x0, r3}, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000280)={0x5, 0xfffffffffffffffe, 0xafab})

11.828459731s ago: executing program 2 (id=1288):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xa0000011})
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x446000, 0x40)
ioctl$KDSKBLED(r5, 0x4b65, 0x9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
sendto$packet(r6, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x40, &(0x7f0000000140)={0x11, 0x8100, 0x0, 0x1, 0xfc}, 0x14)

11.267298481s ago: executing program 7 (id=1290):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x80002, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

9.000759232s ago: executing program 5 (id=1291):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@data_ordered}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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")
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000001940)=""/4120, 0x1018)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

8.994593683s ago: executing program 7 (id=1292):
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
execveat(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r4, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

7.342048329s ago: executing program 8 (id=1293):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a1, &(0x7f0000000440)="$eJzs0L9rE2Ecx/H397knPyq0EhWHCjZg8bxQTO6qDk7BKUIOHFwEg4Y0NmKippdBpYUuUpBq/wWd6qiCTiIKzsVBcNBz6SbNUBzEQSJ3eSr4N/R5Dfe57wfuni9PJ+pHOeDP7nKLKimHKT4haGBGxp1S43xj5h8mN8bBBTOvm3xucjq6/+BWs9ttLxXPFyn8VwA/0+5fFb3kqGIoVJEvu8utplwPGVXpqYWQQp3SY5wGfe8J03qSI9dwGLnrXFT0xa3DwfKgd7ccJbv2movtxfbtIJg/VzlTqZwNyjdudtuV14j3SBRPWcELyYVMeCtkGjzc0geYE8TrqNiR0pBsg40t59SJuSHK22HEFO/dIblvulNUlzlJ/mqyfI3DwjOckNk6EwpNelANuaReia8/618ZRX7VcU637nQX1q4o+Z3drMpOXvxtMq5PUPKZT66GQ3xgLWY2phazGbP9nRl5m5yyd696NXm+MNMxjkOWe83BYMnPwkfRIYEbEhRgMv2dSvcqwDvzjQm+7r1YlmVZlmVZlmVZ+8DfAAAA//861GJ7")
getpgrp(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
msgget$private(0x0, 0x1)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000840)='./file0\x00', 0x8)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

7.10198673s ago: executing program 5 (id=1294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, 0x0)
userfaultfd(0x80000)

6.160294274s ago: executing program 5 (id=1295):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
shmget(0x3, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)

5.725920462s ago: executing program 4 (id=1296):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
setgroups(0x0, 0x0)
setregid(0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc804)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000240)=ANY=[], 0x1, 0xc42, &(0x7f0000000540)="$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")

3.925929781s ago: executing program 5 (id=1297):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80009, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_pidfd_open(r0, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000005400), 0x0, 0x1000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb)
fcntl$setstatus(r2, 0x4, 0x42800)
openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xc4})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_emit_ethernet(0x66, 0x0, 0x0)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0xfeff, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x400c6615, 0x0)

3.892992195s ago: executing program 5 (id=1298):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
clock_gettime(0x1, 0x0)
clock_settime(0x0, &(0x7f0000000040))

3.798530843s ago: executing program 4 (id=1299):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
lseek(0xffffffffffffffff, 0x4, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl'])
request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='![\'[\'^-.-]{$5#\x00', 0x0)
userfaultfd(0x80000)
socket$nl_route(0x10, 0x3, 0x0)

2.866649596s ago: executing program 5 (id=1300):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

2.36599024s ago: executing program 2 (id=1301):
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timer_gettime(0x0, &(0x7f0000000100))
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x6000000, 0x4}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_emit_ethernet(0x0, 0x0, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0)

1.397752046s ago: executing program 2 (id=1302):
syz_usb_connect$uac1(0x2, 0x9c, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
read(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

0s ago: executing program 2 (id=1303):
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_vhci(0x0, 0x7)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
fchdir(0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x73, 0xffffffffffffffff})
fcntl$lock(r3, 0x6, &(0x7f00000002c0)={0x0, 0x0, 0xff34, 0x5})
fcntl$lock(r3, 0x24, &(0x7f0000000400)={0x2, 0x2, 0x2, 0x4})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4, 0xc000, 0x2, 0x20002f7})
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x2}, 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000180), 0x4, 0x40002)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)

kernel console output (not intermixed with test programs):

0): udf_read_tagged: read failed, block=256, location=256
[  275.934997][ T5800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  276.565888][ T5792] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.312: corrupted xattr entries
[  277.011584][ T5808] overlayfs: missing 'lowerdir'
[  278.062275][ T5695] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  278.145099][ T5695] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  278.190012][ T5695] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  278.297806][ T5695] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  281.407987][ T5695] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.489559][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  281.508918][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  281.566849][ T5695] 8021q: adding VLAN 0 to HW filter on device team0
[  281.629325][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  281.678273][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  281.733575][ T4634] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.741181][ T4634] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.877749][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  281.927984][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  281.958481][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  281.988441][ T4634] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.995649][ T4634] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.206781][ T5832] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  282.254550][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  282.390284][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  282.528471][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  282.623860][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  282.806497][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  282.879588][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  282.892907][ T5834] loop6: detected capacity change from 0 to 512
[  282.932984][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  282.961284][ T5834] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  283.011060][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  283.053312][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  283.062616][ T5834] EXT4-fs (loop6): 1 truncate cleaned up
[  283.068513][ T5834] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  283.245605][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  283.387723][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  283.437688][ T4230] Bluetooth: hci2: command 0x0406 tx timeout
[  283.922755][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  286.017001][ T5864] loop4: detected capacity change from 0 to 512
[  286.109773][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  286.117440][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  286.242061][ T5864] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  286.258059][ T5695] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.359418][ T5864] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.050052][ T5892] loop6: detected capacity change from 0 to 256
[  289.310581][ T5897] loop4: detected capacity change from 0 to 2048
[  289.369356][ T5892] exfat: Deprecated parameter 'namecase'
[  289.446387][ T5892] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[  289.504166][ T5897] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  289.648185][ T5906] loop5: detected capacity change from 0 to 512
[  289.688404][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  289.699013][ T5897] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  289.760237][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  289.778275][ T5906] EXT4-fs (loop5): inline encryption not supported
[  289.820704][ T5906] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  289.865080][ T5897] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  289.926153][ T5897] EXT4-fs (loop4): This should not happen!! Data will be lost
[  289.926153][ T5897] 
[  289.934604][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  289.946446][ T5906] EXT4-fs (loop5): 1 truncate cleaned up
[  289.993438][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  290.046391][ T5897] EXT4-fs (loop4): Total free blocks count 0
[  290.066568][ T5906] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  290.132097][ T5897] EXT4-fs (loop4): Free/Dirty block details
[  290.141611][ T5695] device veth0_vlan entered promiscuous mode
[  290.160623][ T5897] EXT4-fs (loop4): free_blocks=2415919504
[  290.166488][ T5897] EXT4-fs (loop4): dirty_blocks=48
[  290.179081][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  290.198075][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  290.223446][ T5897] EXT4-fs (loop4): Block reservation details
[  290.284860][ T5695] device veth1_vlan entered promiscuous mode
[  290.306224][ T5897] EXT4-fs (loop4): i_reserved_data_blocks=3
[  290.524654][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  290.550288][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  290.601422][ T4547] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  290.623504][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  291.568350][ T4547] EXT4-fs (loop4): This should not happen!! Data will be lost
[  291.568350][ T4547] 
[  291.681716][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  291.756040][ T5695] device veth0_macvtap entered promiscuous mode
[  291.826743][ T5695] device veth1_macvtap entered promiscuous mode
[  292.022263][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.273496][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.960999][   T26] audit: type=1326 audit(1771587554.708:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  292.974741][ T5931] loop0: detected capacity change from 0 to 256
[  293.040691][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.069589][ T5931] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  293.106474][   T26] audit: type=1326 audit(1771587554.708:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  293.147239][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.189055][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.222512][   T26] audit: type=1326 audit(1771587554.708:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  293.228998][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.314209][ T5933] loop4: detected capacity change from 0 to 512
[  293.360264][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.371049][   T26] audit: type=1326 audit(1771587554.708:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  293.371096][   T26] audit: type=1326 audit(1771587554.708:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9506523392 code=0x7ffc0000
[  293.371132][   T26] audit: type=1326 audit(1771587554.708:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f95064e3ece code=0x7ffc0000
[  293.371167][   T26] audit: type=1326 audit(1771587554.708:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9506523457 code=0x7ffc0000
[  293.371202][   T26] audit: type=1326 audit(1771587554.708:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95064e3ece code=0x7ffc0000
[  293.371237][   T26] audit: type=1326 audit(1771587554.708:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f95065232bb code=0x7ffc0000
[  293.371271][   T26] audit: type=1326 audit(1771587554.778:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f95064e3ece code=0x7ffc0000
[  293.423146][ T5933] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  293.545191][ T5933] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.569039][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.584345][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.603160][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.648587][ T5933] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.336: corrupted xattr block 33
[  293.688908][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.561069][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.627592][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.637483][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.663151][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.679926][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.693223][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.777666][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.785103][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  294.798034][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  294.809190][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  294.829111][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  294.880383][ T5695] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.910778][ T5695] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.957605][ T5695] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.966379][ T5695] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.192565][ T5958] loop4: detected capacity change from 0 to 256
[  295.231907][ T5960] loop0: detected capacity change from 0 to 8
[  295.268144][ T5958] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  295.326894][ T5960] SQUASHFS error: zlib decompression failed, data probably corrupt
[  295.359969][ T5960] SQUASHFS error: Failed to read block 0x9b: -5
[  295.397704][ T4497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.405574][ T4497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.426893][ T5960] SQUASHFS error: Unable to read metadata cache entry [99]
[  295.481868][ T5960] SQUASHFS error: Unable to read inode 0x127
[  295.520999][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  295.625246][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.645441][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.683345][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  300.017777][   T26] kauditd_printk_skb: 35 callbacks suppressed
[  300.017792][   T26] audit: type=1326 audit(1771587561.768:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.7.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba2676629 code=0x7ffc0000
[  300.068798][ T6006] loop0: detected capacity change from 0 to 1024
[  300.247717][   T26] audit: type=1326 audit(1771587561.798:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.7.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba2676629 code=0x7ffc0000
[  300.293951][   T26] audit: type=1326 audit(1771587561.798:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.7.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba2676629 code=0x7ffc0000
[  300.683778][   T26] audit: type=1326 audit(1771587561.798:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.7.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba2676629 code=0x7ffc0000
[  301.077706][   T26] audit: type=1326 audit(1771587561.798:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.7.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fdba2676629 code=0x7ffc0000
[  301.101773][   T26] audit: type=1326 audit(1771587561.798:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.7.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba2676629 code=0x7ffc0000
[  301.125225][   T26] audit: type=1326 audit(1771587561.798:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.7.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdba2676629 code=0x7ffc0000
[  301.153113][ T6006] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  301.164632][   T26] audit: type=1326 audit(1771587561.798:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.7.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdba2676629 code=0x7ffc0000
[  303.742547][ T6049] loop5: detected capacity change from 0 to 256
[  303.878840][ T6049] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  303.944170][ T6049] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  304.724503][   T26] audit: type=1326 audit(1771587566.468:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  304.860397][   T26] audit: type=1326 audit(1771587566.468:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  305.581945][ T1111] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  305.703831][   T26] audit: type=1326 audit(1771587566.508:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  305.907010][   T26] audit: type=1326 audit(1771587566.508:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  306.113862][   T26] audit: type=1326 audit(1771587566.508:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  306.223465][ T6079] loop5: detected capacity change from 0 to 1024
[  306.257763][ T6079] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  306.265148][ T6079] EXT4-fs (loop5): Unrecognized mount option "measure" or missing value
[  306.287842][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.317654][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.359813][ T1111] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  306.398395][ T1111] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  306.424241][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.468815][ T1111] usb 5-1: config 0 descriptor??
[  307.443832][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  307.486484][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  307.579169][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  307.634104][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  307.695203][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  307.751293][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  307.799708][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  307.856435][ T1111] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  308.095366][ T1111] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  308.277989][ T1111] usb 5-1: USB disconnect, device number 5
[  308.462464][ T6111] fido_id[6111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  308.518897][ T6114] loop2: detected capacity change from 0 to 7
[  308.634088][ T6114] Dev loop2: unable to read RDB block 7
[  308.699364][ T6114]  loop2: unable to read partition table
[  308.766588][ T6114] loop2: partition table beyond EOD, truncated
[  308.816107][ T6114] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  309.074340][ T6123] devtmpfs: Unknown parameter '\']*'
[  310.764174][ T6146] loop4: detected capacity change from 0 to 2048
[  310.821774][ T6146] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  310.865777][ T6146] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  311.655660][ T6153] loop4: detected capacity change from 0 to 1024
[  311.757645][ T6153] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  311.805923][ T6153] EXT4-fs (loop4): Unrecognized mount option "measure" or missing value
[  314.885050][ T6185] loop7: detected capacity change from 0 to 512
[  314.954889][ T6185] EXT4-fs (loop7): Ignoring removed oldalloc option
[  316.548804][ T6185] EXT4-fs (loop7): mounted filesystem without journal. Opts: acl,nodiscard,oldalloc,,errors=continue. Quota mode: none.
[  316.678430][ T6196] loop5: detected capacity change from 0 to 128
[  317.768664][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  317.775066][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  323.050862][ T6246] loop4: detected capacity change from 0 to 16
[  323.195031][ T6246] erofs: (device loop4): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  323.248596][ T6242] loop7: detected capacity change from 0 to 764
[  323.266834][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.412'.
[  323.924271][ T6273] loop7: detected capacity change from 0 to 512
[  324.113672][ T6280] loop5: detected capacity change from 0 to 256
[  324.126790][ T6273] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  324.166858][ T6281] loop0: detected capacity change from 0 to 1764
[  324.177125][ T6273] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.198727][ T6280] exfat: Deprecated parameter 'utf8'
[  324.204247][ T6280] exfat: Deprecated parameter 'utf8'
[  324.215088][ T6280] exfat: Bad value for 'uid'
[  328.688037][ T6306] kernel profiling enabled (shift: 5)
[  329.100853][ T6324] loop5: detected capacity change from 0 to 764
[  329.905357][ T6330] futex_wake_op: syz.0.426 tries to shift op by -1; fix this program
[  333.081185][ T6351] loop4: detected capacity change from 0 to 512
[  333.170410][ T6351] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  333.249324][ T6351] EXT4-fs (loop4): 1 truncate cleaned up
[  333.275437][ T6351] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  337.085386][ T6398] loop4: detected capacity change from 0 to 256
[  337.880911][ T6398] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  338.196854][ T6412] loop6: detected capacity change from 0 to 512
[  338.438282][ T6412] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  339.428051][ T6424] fuse: Unknown parameter '&
[  339.428051][ T6424] ’'
[  339.463765][ T6412] EXT4-fs (loop6): 1 truncate cleaned up
[  339.505155][ T6412] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  340.429116][ T6424] loop4: detected capacity change from 0 to 1024
[  340.513504][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.447'.
[  342.004096][ T6458] futex_wake_op: syz.4.452 tries to shift op by -1; fix this program
[  342.618988][ T6465] loop6: detected capacity change from 0 to 8
[  342.813442][   T26] audit: type=1800 audit(1771587604.558:71): pid=6465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.455" name="file1" dev="loop6" ino=5 res=0 errno=0
[  344.594811][ T6484] loop7: detected capacity change from 0 to 764
[  346.871895][ T6505] loop7: detected capacity change from 0 to 512
[  347.602080][ T6516] futex_wake_op: syz.0.466 tries to shift op by -1; fix this program
[  348.082815][ T6505] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  348.170079][ T6505] EXT4-fs (loop7): 1 truncate cleaned up
[  348.237789][ T6505] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  348.352587][ T6534] loop6: detected capacity change from 0 to 512
[  348.653819][ T6534] EXT4-fs (loop6): Test dummy encryption mode enabled
[  348.709944][ T6534] EXT4-fs (loop6): Invalid journal IO priority (must be 0-7)
[  348.862467][ T6539] loop4: detected capacity change from 0 to 1764
[  352.014673][ T6559] loop4: detected capacity change from 0 to 8
[  352.185067][ T6559] SQUASHFS error: Unable to read inode 0x11f
[  355.470596][ T6581] loop5: detected capacity change from 0 to 512
[  355.524155][ T6581] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  356.273245][ T6589] futex_wake_op: syz.6.478 tries to shift op by -1; fix this program
[  357.232644][ T6591] binder_alloc: 6579: binder_alloc_buf, no vma
[  357.261962][ T6591] binder: 6579:6591 ioctl c0306201 0 returned -14
[  358.861246][ T6598] loop7: detected capacity change from 0 to 1764
[  363.803146][ T6642] loop4: detected capacity change from 0 to 764
[  363.842628][ T6652] netlink: 32 bytes leftover after parsing attributes in process `syz.5.490'.
[  364.574936][ T6656] futex_wake_op: syz.7.489 tries to shift op by -1; fix this program
[  365.247467][ T6661] devtmpfs: Unknown parameter '\']*'
[  368.154760][ T6675] loop4: detected capacity change from 0 to 736
[  369.771785][ T6707] TCP: TCP_TX_DELAY enabled
[  371.433029][ T6719] futex_wake_op: syz.4.501 tries to shift op by -1; fix this program
[  371.868246][ T6721] mmap: syz.6.502 (6721) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  372.128710][ T6726] devtmpfs: Unknown parameter '\']*'
[  373.326827][ T6731] binder: 6729:6731 ioctl c0306201 0 returned -14
[  376.135931][ T6757] loop5: detected capacity change from 0 to 764
[  378.544887][ T6788] futex_wake_op: syz.5.514 tries to shift op by -1; fix this program
[  378.797750][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  378.873703][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  379.033313][ T6790] loop0: detected capacity change from 0 to 8
[  379.792303][ T6795] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  381.999209][ T6817] devtmpfs: Unknown parameter '\']*'
[  383.465246][ T6825] loop0: detected capacity change from 0 to 764
[  383.662178][ T6834] binder: 6833:6834 ioctl c0306201 0 returned -14
[  383.838980][   T26] audit: type=1326 audit(1771587645.488:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  383.921355][   T26] audit: type=1326 audit(1771587645.488:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  383.944576][   T26] audit: type=1326 audit(1771587645.488:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  384.736876][   T26] audit: type=1326 audit(1771587645.508:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  384.765823][   T26] audit: type=1326 audit(1771587645.508:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  384.809890][   T26] audit: type=1326 audit(1771587645.518:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  384.838236][   T26] audit: type=1326 audit(1771587645.518:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9506523629 code=0x7ffc0000
[  384.968665][ T6856] loop6: detected capacity change from 0 to 164
[  385.036301][ T6856] iso9660: Corrupted directory entry in block 2 of inode 1792
[  385.104102][ T6830] loop5: detected capacity change from 0 to 32768
[  386.127538][ T6830] JBD2: Ignoring recovery information on journal
[  386.792073][ T6830] JBD2: recovery failed
[  386.796768][ T6830] (syz.5.517,6830,1):ocfs2_journal_load:1105 ERROR: Failed to load journal!
[  386.839758][ T6830] (syz.5.517,6830,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5
[  388.302953][ T6830] (syz.5.517,6830,0):ocfs2_check_volume:2493 ERROR: status = -5
[  388.387609][ T6830] (syz.5.517,6830,1):ocfs2_mount_volume:1824 ERROR: status = -5
[  388.474245][ T6830] (syz.5.517,6830,1):ocfs2_fill_super:1177 ERROR: status = -5
[  388.681640][ T6905] devtmpfs: Unknown parameter '\']*'
[  388.748722][ T6907] binder: 6900:6907 ioctl c0306201 0 returned -14
[  391.309898][ T6923] loop4: detected capacity change from 0 to 128
[  391.347783][ T6927] loop5: detected capacity change from 0 to 128
[  391.457091][ T6923] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  392.974070][ T6923] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  393.333163][ T6947] loop5: detected capacity change from 0 to 512
[  393.446618][ T6947] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  396.432966][ T6963] binder_alloc: 6946: binder_alloc_buf, no vma
[  402.785240][ T6990] loop7: detected capacity change from 0 to 32768
[  405.365576][ T7024] loop5: detected capacity change from 0 to 512
[  405.477685][ T7019] loop7: detected capacity change from 0 to 764
[  405.526760][ T7024] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  407.264905][ T7033] loop7: detected capacity change from 0 to 8
[  407.407406][ T7033] SQUASHFS error: zlib decompression failed, data probably corrupt
[  407.431149][ T7033] SQUASHFS error: Failed to read block 0x4de: -5
[  407.491405][ T7033] SQUASHFS error: Failed to read block 0x4e2: -5
[  407.532176][ T7033] SQUASHFS error: Failed to read block 0x9ca: -5
[  407.583659][ T7033] SQUASHFS error: Failed to read block 0x2cf2: -5
[  407.636415][ T7033] SQUASHFS error: Failed to read block 0x52cf2: -5
[  407.695486][ T7033] SQUASHFS error: Failed to read block 0x535f2: -5
[  407.746321][   T26] audit: type=1800 audit(1771587669.488:79): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.567" name="file1" dev="loop7" ino=5 res=0 errno=0
[  409.502744][ T7063] 9pnet: Could not find request transport: fdk;†ano=ôö1\úws{�9hÙH{Né»û”8®™)-ª}**¤™¶ðË­ ¨ÓÀ÷­F²Oä
[  410.555901][ T7080] loop4: detected capacity change from 0 to 512
[  410.667678][ T7082] loop7: detected capacity change from 0 to 512
[  410.725139][ T7082] EXT4-fs (loop7): Test dummy encryption mode enabled
[  410.742976][ T7082] EXT4-fs (loop7): Invalid journal IO priority (must be 0-7)
[  411.569451][ T7080] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  413.396108][ T7105] loop5: detected capacity change from 0 to 512
[  415.063274][ T7120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.579'.
[  415.109128][ T7121] loop6: detected capacity change from 0 to 512
[  415.349728][ T7121] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  415.391378][ T7121] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  417.006905][ T7142] loop4: detected capacity change from 0 to 1764
[  419.307098][ T7156] loop6: detected capacity change from 0 to 1024
[  419.402927][ T7156] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  419.458797][ T7156] EXT4-fs (loop6): Unrecognized mount option "measure" or missing value
[  419.679692][ T7156] loop6: detected capacity change from 0 to 256
[  419.765745][ T7165] loop0: detected capacity change from 0 to 764
[  419.783168][ T7156] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  421.088209][ T7174] loop0: detected capacity change from 0 to 512
[  421.167420][ T7174] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  425.731719][ T7198] devtmpfs: Unknown parameter '\']*'
[  427.256781][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.589'.
[  427.495433][ T7207] loop4: detected capacity change from 0 to 1764
[  429.505769][ T7221] loop4: detected capacity change from 0 to 1024
[  429.712180][ T7221] hfsplus: xattr searching failed
[  429.816991][ T7221] hfsplus: xattr searching failed
[  430.606147][ T7237] loop6: detected capacity change from 0 to 764
[  434.583823][ T7263] loop7: detected capacity change from 0 to 1024
[  434.660618][ T7267] loop0: detected capacity change from 0 to 512
[  434.686532][ T7263] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  434.726013][ T7263] EXT4-fs (loop7): Unrecognized mount option "measure" or missing value
[  434.796249][ T7267] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.0.608: corrupted xattr block 95
[  435.098144][ T7267] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.608: bg 0: block 7: invalid block bitmap
[  435.668510][ T7267] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  435.757826][ T7267] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2923: inode #11: comm syz.0.608: corrupted xattr block 95
[  435.781489][ T7279] loop7: detected capacity change from 0 to 1764
[  435.964464][ T7267] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117)
[  435.992216][ T7267] EXT4-fs (loop0): 1 orphan inode deleted
[  436.090452][ T7283] usb usb8: usbfs: process 7283 (syz.7.610) did not claim interface 0 before use
[  436.469816][ T7267] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  437.776485][ T7289] loop5: detected capacity change from 0 to 8192
[  437.967678][ T7289] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  440.048736][ T7308] xt_time: unknown flags 0xc
[  440.178323][ T7308] loop6: detected capacity change from 0 to 2048
[  440.980722][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  440.987545][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  441.083602][ T5699] Alternate GPT is invalid, using primary GPT.
[  441.090098][ T5699]  loop6: p1 p2 p3
[  441.249041][ T7308] Alternate GPT is invalid, using primary GPT.
[  441.255611][ T7308]  loop6: p1 p2 p3
[  441.363596][ T7314] loop4: detected capacity change from 0 to 512
[  441.426065][ T7310] loop0: detected capacity change from 0 to 764
[  441.487842][ T7314] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  442.126263][ T7336] loop4: detected capacity change from 0 to 1024
[  442.174988][ T7339] loop0: detected capacity change from 0 to 1764
[  442.236877][ T7336] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  442.277705][ T7336] EXT4-fs (loop4): Unrecognized mount option "measure" or missing value
[  442.640329][ T7345] usb usb8: usbfs: process 7345 (syz.0.621) did not claim interface 0 before use
[  444.148453][ T7344] loop4: detected capacity change from 0 to 256
[  444.213319][ T7344] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  446.681852][ T7365] loop7: detected capacity change from 0 to 128
[  448.385826][ T7381] loop7: detected capacity change from 0 to 512
[  448.456119][ T7381] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal
[  449.002231][ T7387] binder_alloc: 7378: binder_alloc_buf, no vma
[  450.064830][ T7391] loop4: detected capacity change from 0 to 256
[  451.092951][ T7403] loop6: detected capacity change from 0 to 1024
[  451.209820][ T7403] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  451.217113][ T7403] EXT4-fs (loop6): Unrecognized mount option "measure" or missing value
[  451.393692][ T7403] loop6: detected capacity change from 0 to 256
[  451.467148][ T7403] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  460.201149][ T7459] loop7: detected capacity change from 0 to 512
[  460.301323][ T7459] EXT4-fs (loop7): Ignoring removed nobh option
[  460.325294][ T7459] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  460.447532][ T7459] EXT4-fs (loop7): 1 truncate cleaned up
[  460.453245][ T7459] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nodiscard,nobh,lazytime,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  461.633267][ T7481] loop6: detected capacity change from 0 to 512
[  461.663898][ T7480] loop4: detected capacity change from 0 to 1764
[  462.675069][ T7476] loop5: detected capacity change from 0 to 764
[  462.683231][ T7481] EXT4-fs (loop6): Ignoring removed bh option
[  462.713637][ T7481] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  462.744264][ T7481] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  463.430064][ T7492] loop0: detected capacity change from 0 to 512
[  463.487637][ T7492] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  464.047821][ T7492] binder_alloc: 7491: binder_alloc_buf, no vma
[  464.447175][ T7481] EXT4-fs (loop6): mounted filesystem without journal. Opts: bh,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback.
[  464.466000][ T7481] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  464.602217][ T7500] loop4: detected capacity change from 0 to 256
[  464.658937][ T7500] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  469.141223][ T7537] loop4: detected capacity change from 0 to 1764
[  479.332037][ T7581] loop4: detected capacity change from 0 to 1764
[  479.589376][ T7585] loop0: detected capacity change from 0 to 764
[  481.259150][ T7598] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.674' sets config #6
[  484.340644][ T7616] loop7: detected capacity change from 0 to 1024
[  486.102268][ T7616] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  486.112218][ T7616] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  486.125477][ T7616] EXT4-fs error (device loop7): ext4_get_journal_inode:5185: inode #5: comm syz.7.667: unexpected bad inode w/o EXT4_IGET_BAD
[  486.139531][ T7616] EXT4-fs (loop7): no journal found
[  486.144808][ T7616] EXT4-fs (loop7): can't get journal size
[  486.169935][ T7616] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[  486.718037][ T7628] binder: BINDER_SET_CONTEXT_MGR already set
[  486.747137][ T7628] binder: 7627:7628 ioctl 4018620d 2000000002c0 returned -16
[  486.934530][ T7631] loop5: detected capacity change from 0 to 1764
[  486.978696][ T7633] loop0: detected capacity change from 0 to 1764
[  491.037988][ T7650] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7)
[  491.044818][ T7650] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  492.006222][ T7650] vhci_hcd vhci_hcd.0: Device attached
[  492.267599][   T21] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[  492.749029][ T7651] vhci_hcd: connection reset by peer
[  492.755401][ T4494] vhci_hcd: stop threads
[  492.769079][ T4494] vhci_hcd: release socket
[  494.415867][ T4494] vhci_hcd: disconnect device
[  495.055906][ T7672] loop4: detected capacity change from 0 to 1764
[  498.187835][   T21] vhci_hcd: vhci_device speed not set
[  498.190622][ T7689] loop0: detected capacity change from 0 to 1024
[  498.247906][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.5.698'.
[  498.321787][ T7689] hfsplus: catalog name length corrupted
[  501.034860][ T7710] netlink: 'syz.0.706': attribute type 1 has an invalid length.
[  501.522466][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  501.532124][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  501.815100][ T7715] loop0: detected capacity change from 0 to 764
[  503.711109][ T7724] loop7: detected capacity change from 0 to 1764
[  505.983286][ T7751] loop7: detected capacity change from 0 to 736
[  509.516240][ T4235] Bluetooth: hci2: command 0x0405 tx timeout
[  509.663556][ T7785] loop6: detected capacity change from 0 to 1764
[  520.394720][ T7846] loop4: detected capacity change from 0 to 512
[  520.457593][ T7846] EXT4-fs (loop4): Ignoring removed oldalloc option
[  520.553949][ T7846] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none.
[  522.994434][ T7872] loop4: detected capacity change from 0 to 764
[  524.215950][ T7876] loop7: detected capacity change from 0 to 1024
[  524.554990][ T7876] EXT4-fs (loop7): Ignoring removed orlov option
[  524.688583][ T7876] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,quota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  526.784101][ T7899] loop6: detected capacity change from 0 to 1764
[  528.571724][ T7905] loop4: detected capacity change from 0 to 1024
[  528.835001][ T7905] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  528.913453][ T7905] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  529.281873][ T7905] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm syz.4.754: lblock 0 mapped to illegal pblock 0 (length 1)
[  530.265898][ T7905] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  531.516997][ T7905] EXT4-fs (loop4): This should not happen!! Data will be lost
[  531.516997][ T7905] 
[  531.609584][ T4564] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 3)
[  531.672512][ T4564] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117
[  531.733191][ T4564] EXT4-fs (loop4): This should not happen!! Data will be lost
[  531.733191][ T4564] 
[  531.848292][ T7928] loop0: detected capacity change from 0 to 512
[  531.944207][ T7928] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  533.408013][ T7933] binder_alloc: 7927: binder_alloc_buf, no vma
[  533.507827][ T7933] binder: 7927:7933 ioctl c0306201 0 returned -14
[  535.646090][ T7938] loop6: detected capacity change from 0 to 2048
[  535.691591][ T7938] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  535.749789][ T7938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  536.091325][ T7947] xt_TCPMSS: Only works on TCP SYN packets
[  536.805454][ T7956] loop6: detected capacity change from 0 to 1764
[  536.836435][ T7958] loop7: detected capacity change from 0 to 4096
[  537.728807][ T7958] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  537.777218][ T7958] UDF-fs: Scanning with blocksize 512 failed
[  537.862364][ T7958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  539.054003][ T7972] loop7: detected capacity change from 0 to 512
[  539.124521][ T7972] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal
[  539.622173][ T7974] binder_alloc: 7971: binder_alloc_buf, no vma
[  539.632629][ T7974] binder: 7971:7974 ioctl c0306201 0 returned -14
[  543.166166][ T7992] loop7: detected capacity change from 0 to 1024
[  543.676372][   T26] audit: type=1804 audit(1771587805.368:80): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.777" name="bus" dev="ramfs" ino=45154 res=1 errno=0
[  544.031216][   T26] audit: type=1804 audit(1771587805.388:81): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.777" name="bus" dev="ramfs" ino=45154 res=1 errno=0
[  548.005495][ T8034] loop4: detected capacity change from 0 to 512
[  548.133774][ T8034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002]
[  548.194498][ T8034] System zones: 1-20
[  548.265306][ T8034] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,debug,lazytime,,errors=continue. Quota mode: writeback.
[  548.855041][ T8048] loop4: detected capacity change from 0 to 1024
[  548.943121][ T8050] loop6: detected capacity change from 0 to 1764
[  549.093603][ T8048] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  552.012098][ T8067] xt_time: unknown flags 0xc
[  553.447538][   T21] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  553.678639][   T26] audit: type=1326 audit(1771587815.428:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.4.798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x0
[  553.828660][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  553.857583][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.901301][   T21] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  553.936147][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.982966][   T21] usb 1-1: config 0 descriptor??
[  554.039191][   T21] hub 1-1:0.0: USB hub found
[  554.247820][   T21] hub 1-1:0.0: 1 port detected
[  554.457883][   T21] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  554.476502][   T21] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  556.825424][   T21] usbhid 1-1:0.0: can't add hid device: -71
[  556.845481][   T21] usbhid: probe of 1-1:0.0 failed with error -71
[  556.958224][   T21] usb 1-1: USB disconnect, device number 3
[  557.362349][ T8095] loop0: detected capacity change from 0 to 1764
[  558.391125][ T8105] loop0: detected capacity change from 0 to 512
[  558.650642][ T8105] EXT4-fs (loop0): Test dummy encryption mode enabled
[  558.704802][ T8105] EXT4-fs (loop0): Invalid journal IO priority (must be 0-7)
[  560.929985][ T8118] loop6: detected capacity change from 0 to 512
[  561.081131][ T8118] EXT4-fs (loop6): Ignoring removed nobh option
[  561.117685][ T8118] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  562.740894][ T8118] EXT4-fs (loop6): 1 truncate cleaned up
[  562.760544][ T8118] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nodiscard,nobh,lazytime,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  562.971830][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  562.980409][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  563.581361][ T8146] loop6: detected capacity change from 0 to 512
[  563.615325][ T8146] EXT4-fs (loop6): Test dummy encryption mode enabled
[  563.634623][ T8146] EXT4-fs (loop6): Invalid journal IO priority (must be 0-7)
[  566.296901][   T26] audit: type=1326 audit(1771587828.038:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  566.335010][ T8162] loop4: detected capacity change from 0 to 256
[  566.442984][   T26] audit: type=1326 audit(1771587828.038:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  566.541658][ T8162] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  567.602057][   T26] audit: type=1326 audit(1771587828.068:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  567.625594][   T26] audit: type=1326 audit(1771587828.068:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  567.651769][   T26] audit: type=1326 audit(1771587828.078:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  567.785442][   T26] audit: type=1326 audit(1771587828.078:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9413935392 code=0x7ffc0000
[  567.843018][ T8168] loop6: detected capacity change from 0 to 2048
[  567.977578][   T26] audit: type=1326 audit(1771587828.078:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f94138f5ece code=0x7ffc0000
[  568.090676][ T8168] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  568.204228][   T26] audit: type=1326 audit(1771587828.078:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9413935457 code=0x7ffc0000
[  568.308927][   T26] audit: type=1326 audit(1771587828.078:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94138f5ece code=0x7ffc0000
[  568.389659][ T8179] loop0: detected capacity change from 0 to 512
[  568.503271][ T8179] EXT4-fs (loop0): Ignoring removed nobh option
[  568.521144][ T8180] loop4: detected capacity change from 0 to 2048
[  568.544594][ T8179] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  568.554994][   T26] audit: type=1326 audit(1771587828.078:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94139352bb code=0x7ffc0000
[  568.622308][ T8179] EXT4-fs (loop0): 1 truncate cleaned up
[  568.638482][ T8179] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nodiscard,nobh,lazytime,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  568.708096][ T8180] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  570.997518][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  572.287750][ T4230] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  572.296952][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.395463][ T4230] usb 1-1: config 0 descriptor??
[  572.671931][ T8196] loop0: detected capacity change from 0 to 256
[  572.797641][ T4230] usb 1-1: Cannot read MAC address
[  572.804478][ T4230] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71
[  572.880379][ T4230] usb 1-1: USB disconnect, device number 4
[  574.665591][ T8224] loop4: detected capacity change from 0 to 764
[  574.811792][ T8228] loop0: detected capacity change from 0 to 256
[  574.862766][ T8228] exfat: Deprecated parameter 'utf8'
[  574.876435][ T8228] exfat: Deprecated parameter 'utf8'
[  574.958725][ T8228] exfat: Unknown parameter 'sys_tz'
[  575.187928][ T8234] loop4: detected capacity change from 0 to 512
[  575.263922][ T8234] EXT4-fs (loop4): Ignoring removed nobh option
[  575.300736][ T8234] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  575.578485][ T8234] EXT4-fs (loop4): 1 truncate cleaned up
[  575.585608][ T8234] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodiscard,nobh,lazytime,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  577.123516][ T8259] loop4: detected capacity change from 0 to 1024
[  577.289436][ T8259] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  577.393453][ T8264] loop0: detected capacity change from 0 to 128
[  577.536800][ T8264] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  577.578312][ T8264] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  578.539923][ T7880] udevd[7880]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  579.821368][ T8282] loop7: detected capacity change from 0 to 1764
[  580.008240][ T8284] loop4: detected capacity change from 0 to 512
[  580.185924][ T8284] EXT4-fs (loop4): Ignoring removed nobh option
[  580.577068][ T8284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  580.859378][ T8284] EXT4-fs (loop4): 1 truncate cleaned up
[  580.865764][ T8284] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodiscard,nobh,lazytime,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  583.523915][ T7842] udevd[7842]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  583.541397][ T8299] loop4: detected capacity change from 0 to 256
[  583.594881][ T7842] udevd[7842]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  583.635009][ T8299] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  583.674237][ T8299] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  583.734221][ T8299] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  583.928087][ T1326] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  584.357797][ T1326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  584.520924][ T1326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  584.601289][ T1326] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  584.622378][ T8321] Option '    ' to dns_resolver key: bad/missing value
[  584.642467][ T8320] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  584.707586][ T1326] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  584.762285][ T1326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.961638][ T1326] usb 1-1: config 0 descriptor??
[  585.093359][ T8324] loop7: detected capacity change from 0 to 512
[  585.155418][ T8324] EXT4-fs (loop7): Ignoring removed nobh option
[  585.224137][ T8324] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  585.442141][ T4268] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  585.479684][ T1326] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  586.269437][ T1326] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  586.278881][ T8324] EXT4-fs (loop7): 1 truncate cleaned up
[  586.287212][ T8324] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nodiscard,nobh,lazytime,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  586.355880][ T1326] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  586.407584][ T1326] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  586.477549][ T4268] usb 5-1: Using ep0 maxpacket: 16
[  586.637856][ T4268] usb 5-1: unable to get BOS descriptor or descriptor too short
[  586.696007][ T1326] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  586.751557][ T1326] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  586.781128][ T1326] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  586.797849][ T4268] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  586.807298][ T1326] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  586.815989][ T4268] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  586.828968][ T4268] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  586.840410][ T1326] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  586.857688][ T4268] usb 5-1: config 1 interface 0 has no altsetting 0
[  586.897604][ T1326] usb 1-1: USB disconnect, device number 5
[  587.137918][ T4268] usb 5-1: string descriptor 0 read error: -22
[  587.147976][ T4268] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  587.158489][ T4268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15
[  587.312985][ T4268] usb 5-1: skipping empty audio interface (v1)
[  588.065150][ T4268] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  589.244571][ T7842] udevd[7842]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  589.371600][ T8346] fido_id[8346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  591.535509][ T4233] usb 5-1: USB disconnect, device number 6
[  591.783146][ T8374] loop7: detected capacity change from 0 to 1024
[  593.046183][ T8374] EXT4-fs (loop7): Ignoring removed nobh option
[  593.074618][ T8374] EXT4-fs (loop7): Ignoring removed orlov option
[  593.166632][ T8374] EXT4-fs (loop7): bad geometry: first data block 0 is beyond end of filesystem (0)
[  594.147575][   T26] kauditd_printk_skb: 33 callbacks suppressed
[  594.147596][   T26] audit: type=1326 audit(1771587855.168:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.6.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  594.187363][ T8384] loop4: detected capacity change from 0 to 512
[  594.308132][ T8384] EXT4-fs (loop4): Ignoring removed nobh option
[  594.314465][ T8384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  594.383816][   T26] audit: type=1326 audit(1771587855.168:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.6.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  595.574870][   T26] audit: type=1326 audit(1771587855.198:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.6.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  595.597378][   T26] audit: type=1326 audit(1771587855.198:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.6.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  595.620235][ T8384] EXT4-fs (loop4): 1 truncate cleaned up
[  595.625926][ T8384] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodiscard,nobh,lazytime,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  595.652327][   T26] audit: type=1326 audit(1771587855.198:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.6.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  595.787536][   T26] audit: type=1326 audit(1771587855.198:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.6.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  595.909530][   T26] audit: type=1326 audit(593.410:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.6.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  596.126616][ T8396] loop4: detected capacity change from 0 to 764
[  596.418271][   T26] audit: type=1326 audit(593.410:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.6.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  597.915797][ T8410] Option '    ' to dns_resolver key: bad/missing value
[  598.641041][ T8414] binder_alloc: 8413: binder_alloc_buf, no vma
[  598.647803][ T8414] binder: 8413:8414 ioctl c0306201 0 returned -14
[  599.694448][   T26] audit: type=1326 audit(599.640:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  599.867529][   T26] audit: type=1326 audit(599.660:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  602.342544][ T8457] binder: BINDER_SET_CONTEXT_MGR already set
[  602.392605][ T8457] binder: 8456:8457 ioctl 4018620d 200000000100 returned -16
[  603.236591][ T8457] binder: BINDER_SET_CONTEXT_MGR already set
[  603.243459][ T8458] binder: 8456:8458 ioctl c0306201 0 returned -14
[  603.250126][ T8457] binder: 8456:8457 ioctl 4018620d 2000000002c0 returned -16
[  603.764261][ T8449] loop6: detected capacity change from 0 to 32768
[  603.994452][ T8449] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  604.137604][ T8449] BTRFS info (device loop6): allowing degraded mounts
[  604.144488][ T8449] BTRFS info (device loop6): metadata ratio 4
[  604.227581][ T8449] BTRFS info (device loop6): turning on sync discard
[  604.234366][ T8449] BTRFS info (device loop6): turning off discard
[  604.297467][ T8449] BTRFS info (device loop6): turning on sync discard
[  604.304226][ T8449] BTRFS info (device loop6): disabling tree log
[  604.377702][ T8449] BTRFS info (device loop6): using free space tree
[  604.384284][ T8449] BTRFS info (device loop6): has skinny extents
[  605.969545][ T8449] BTRFS error (device loop6): open_ctree failed: -12
[  607.690997][   T26] audit: type=1326 audit(607.648:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8500 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  607.807743][   T26] audit: type=1326 audit(607.648:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8500 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  607.820049][ T8506] loop7: detected capacity change from 0 to 764
[  607.992627][   T26] audit: type=1326 audit(607.678:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8500 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  608.061108][ T8510] loop4: detected capacity change from 0 to 512
[  608.084839][ T8511] loop6: detected capacity change from 0 to 512
[  608.117945][   T26] audit: type=1326 audit(607.678:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8500 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  608.256087][ T8511] EXT4-fs (loop6): Ignoring removed nobh option
[  608.264809][ T8510] EXT4-fs (loop4): Test dummy encryption mode enabled
[  608.277656][   T26] audit: type=1326 audit(607.678:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8500 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  608.312049][ T8511] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  608.324339][ T8510] EXT4-fs (loop4): Test dummy encryption mode enabled
[  608.389305][ T8510] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback.
[  608.395263][ T8511] EXT4-fs (loop6): 1 truncate cleaned up
[  608.449977][   T26] audit: type=1326 audit(607.678:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8500 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  608.585137][   T26] audit: type=1326 audit(607.681:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8500 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  608.617743][ T8513] loop7: detected capacity change from 0 to 512
[  608.793224][ T8511] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nodiscard,nobh,lazytime,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  608.853907][ T8513] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal
[  608.867494][ T8510] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  609.637770][ T8513] binder_alloc: 8512: binder_alloc_buf, no vma
[  609.732330][ T8513] binder: 8512:8513 ioctl c0306201 0 returned -14
[  609.827774][   T26] audit: type=1326 audit(607.681:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8500 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9413935629 code=0x7ffc0000
[  609.869500][ T8530] Option '    ' to dns_resolver key: bad/missing value
[  610.157478][ T1326] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  610.667533][ T1326] usb 1-1: Using ep0 maxpacket: 16
[  611.528294][ T1326] usb 1-1: unable to get BOS descriptor or descriptor too short
[  611.593143][ T8532] loop6: detected capacity change from 0 to 512
[  611.618916][ T8532] EXT4-fs (loop6): Test dummy encryption mode enabled
[  611.687915][ T8532] EXT4-fs (loop6): Invalid journal IO priority (must be 0-7)
[  613.609196][ T8548] loop6: detected capacity change from 0 to 2048
[  613.932679][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.926'.
[  614.587188][ T8538] loop4: detected capacity change from 0 to 32768
[  615.631575][   T26] audit: type=1326 audit(615.581:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  615.745716][   T26] audit: type=1326 audit(615.581:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  616.959196][ T1326] usb 1-1: unable to read config index 0 descriptor/start: -110
[  616.966879][ T1326] usb 1-1: can't read configurations, error -110
[  616.973331][   T26] audit: type=1326 audit(615.601:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  616.995726][   T26] audit: type=1326 audit(615.601:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  617.018342][   T26] audit: type=1326 audit(615.601:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  617.050837][ T8355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (8355)
[  617.137594][ T1326] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  617.155364][   T26] audit: type=1326 audit(615.601:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  617.367964][   T26] audit: type=1326 audit(615.615:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  617.389902][ T1326] usb 1-1: device descriptor read/64, error -32
[  617.522289][ T1326] usb usb1-port1: attempt power cycle
[  617.547697][   T26] audit: type=1326 audit(615.615:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  618.480031][ T1326] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  619.417542][ T1326] usb 1-1: device descriptor read/8, error -32
[  621.658121][ T8596] loop6: detected capacity change from 0 to 512
[  621.746450][ T8596] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[  622.748026][ T8601] binder_alloc: 8595: binder_alloc_buf, no vma
[  622.847618][ T8601] binder: 8595:8601 ioctl c0306201 0 returned -14
[  624.497956][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  624.504405][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  624.869471][ T8613] loop7: detected capacity change from 0 to 512
[  624.961974][ T8613] EXT4-fs (loop7): Test dummy encryption mode enabled
[  624.962028][ T8613] EXT4-fs (loop7): Invalid journal IO priority (must be 0-7)
[  627.479808][ T8625] loop7: detected capacity change from 0 to 256
[  627.487271][ T8616] loop4: detected capacity change from 0 to 4096
[  627.556135][ T8625] exfat: Deprecated parameter 'utf8'
[  627.572267][ T8625] exfat: Unknown parameter 'keep_last_dots'
[  627.858605][ T8616] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  629.450926][ T8645] loop4: detected capacity change from 0 to 64
[  629.530214][ T8645] hfs: type requires a 4 character value
[  629.536383][ T8645] hfs: unable to parse mount options
[  630.082135][ T8647] loop4: detected capacity change from 0 to 1024
[  631.859738][   T26] audit: type=1326 audit(630.675:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  631.898736][ T8647] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  631.918792][   T26] audit: type=1326 audit(630.685:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  631.941000][   T26] audit: type=1326 audit(630.745:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  631.962945][   T26] audit: type=1326 audit(630.755:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  631.986069][   T26] audit: type=1326 audit(630.755:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  632.009369][   T26] audit: type=1326 audit(630.795:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  632.032343][   T26] audit: type=1326 audit(630.828:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  632.056353][   T26] audit: type=1326 audit(630.828:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b4b9629 code=0x7ffc0000
[  633.604382][ T8664] loop4: detected capacity change from 0 to 512
[  633.628334][ T8664] EXT4-fs (loop4): Ignoring removed nobh option
[  633.628369][ T8664] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  633.652842][ T8664] EXT4-fs (loop4): 1 truncate cleaned up
[  633.652864][ T8664] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodiscard,nobh,lazytime,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  635.251753][ T4203] Bluetooth: Wrong link type (-71)
[  636.047992][ T8677] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  636.213139][ T8682] devtmpfs: Unknown parameter '\']*'
[  639.701519][ T8696] loop4: detected capacity change from 0 to 64
[  639.746440][ T8696] hfs: type requires a 4 character value
[  639.800224][ T8696] hfs: unable to parse mount options
[  643.796219][ T8718] devtmpfs: Unknown parameter '\']*'
[  644.445142][ T8721] loop7: detected capacity change from 0 to 512
[  644.533556][ T8721] EXT4-fs (loop7): Test dummy encryption mode enabled
[  644.602733][ T8721] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  644.691438][ T8721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  644.747655][ T8721] System zones: 1-12
[  644.813043][ T8721] EXT4-fs (loop7): orphan cleanup on readonly fs
[  644.858357][ T8721] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.976: bg 0: block 361: padding at end of block bitmap is not set
[  644.920790][ T8721] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  646.611707][ T8721] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.976: invalid indirect mapped block 12 (level 1)
[  646.643743][ T8721] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.976: invalid indirect mapped block 2 (level 2)
[  646.683431][ T8728] loop4: detected capacity change from 0 to 64
[  646.700966][ T8721] EXT4-fs (loop7): 1 truncate cleaned up
[  646.706685][ T8721] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,i_version,test_dummy_encryption=v1,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,errors=continue. Quota mode: none.
[  646.730370][ T8728] hfs: type requires a 4 character value
[  646.736056][ T8728] hfs: unable to parse mount options
[  650.071882][ T8748] loop7: detected capacity change from 0 to 2048
[  652.791014][ T8768] loop6: detected capacity change from 0 to 1764
[  653.353804][ T8766] loop7: detected capacity change from 0 to 32768
[  654.429044][ T8766] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  654.446031][ T8766] BTRFS info (device loop7): allowing degraded mounts
[  654.460456][ T8766] BTRFS info (device loop7): metadata ratio 4
[  654.466609][ T8766] BTRFS info (device loop7): turning on sync discard
[  654.475088][ T8779] loop6: detected capacity change from 0 to 512
[  654.513387][ T8779] EXT4-fs (loop6): Test dummy encryption mode enabled
[  654.527513][ T8766] BTRFS info (device loop7): turning off discard
[  654.547508][ T8779] EXT4-fs (loop6): Invalid journal IO priority (must be 0-7)
[  654.562424][ T8766] BTRFS info (device loop7): turning on sync discard
[  654.581018][ T8766] BTRFS info (device loop7): disabling tree log
[  654.597590][ T8766] BTRFS info (device loop7): using free space tree
[  654.604277][ T8766] BTRFS info (device loop7): has skinny extents
[  655.667264][ T8766] BTRFS error (device loop7): open_ctree failed: -12
[  656.578145][ T8807] devtmpfs: Unknown parameter '\']*'
[  657.609965][ T7880] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by udevd (7880)
[  666.340870][ T8875] devtmpfs: Unknown parameter '\']*'
[  669.114001][ T8894] binder_alloc: 8890: binder_alloc_buf, no vma
[  669.122208][ T8894] binder: 8890:8894 ioctl c0306201 0 returned -14
[  670.617486][ T2309] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  670.997722][ T2309] usb 1-1: config 0 has an invalid interface number: 237 but max is 0
[  671.087245][ T2309] usb 1-1: config 0 has no interface number 0
[  671.137542][ T2309] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  671.209685][ T2309] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  672.737601][ T2309] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  673.581975][ T2309] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  673.663129][ T2309] usb 1-1: string descriptor 0 read error: -71
[  673.687595][ T2309] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  673.767831][ T8905] devtmpfs: Unknown parameter '\']*'
[  673.777581][ T2309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.898060][ T2309] usb 1-1: config 0 descriptor??
[  673.937814][ T2309] usb 1-1: can't set config #0, error -71
[  674.005603][ T2309] usb 1-1: USB disconnect, device number 10
[  676.108809][ T8912] xt_time: unknown flags 0xc
[  680.636389][ T8925] loop4: detected capacity change from 0 to 512
[  680.926974][ T8925] EXT4-fs (loop4): Ignoring removed nobh option
[  681.698465][ T8925] EXT4-fs (loop4): orphan cleanup on readonly fs
[  681.827976][ T8925] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #11: block 1: comm syz.4.1023: lblock 0 mapped to illegal pblock 1 (length 1)
[  681.927486][ T8925] EXT4-fs (loop4): Remounting filesystem read-only
[  681.964610][ T8925] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  682.057832][ T8925] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.1023: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  682.211218][ T8925] EXT4-fs (loop4): Remounting filesystem read-only
[  682.233386][ T8925] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.4.1023: ea_inode dec ref err=-117
[  682.246930][ T8933] loop7: detected capacity change from 0 to 512
[  682.328816][ T8933] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal
[  682.328987][ T8925] EXT4-fs (loop4): 1 orphan inode deleted
[  682.373337][ T8925] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005c,nobh,resgid=0x0000000000000000,acl,init_itable=0x0000000000000e4d,. Quota mode: none.
[  683.042542][ T8935] binder_alloc: 8932: binder_alloc_buf, no vma
[  683.049937][ T8935] binder: 8932:8935 ioctl c0306201 0 returned -14
[  683.924114][ T8940] loop4: detected capacity change from 0 to 1024
[  684.144450][ T4634] hfsplus: b-tree write err: -5, ino 4
[  686.106107][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  686.112834][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  689.295875][ T8958] xt_time: unknown flags 0xc
[  691.095508][ T4634] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.218309][ T4634] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.343968][ T4634] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.170922][ T4634] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.445851][ T8961] chnl_net:caif_netlink_parms(): no params data found
[  693.135972][ T4230] Bluetooth: hci1: command 0x0409 tx timeout
[  693.249335][ T8971] devtmpfs: Unknown parameter '\']*'
[  693.657452][ T4268] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  693.706217][ T8961] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.345744][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.387861][ T8961] device bridge_slave_0 entered promiscuous mode
[  694.417438][ T4268] usb 7-1: Using ep0 maxpacket: 32
[  694.421277][ T8961] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.470987][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.518801][ T8961] device bridge_slave_1 entered promiscuous mode
[  694.577699][ T4268] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  694.621227][ T4268] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  694.654188][ T8961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  694.663929][ T4268] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  694.710329][ T8961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  694.717656][ T4268] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.798322][ T4268] usb 7-1: config 0 descriptor??
[  694.897823][ T8961] team0: Port device team_slave_0 added
[  694.956387][ T8961] team0: Port device team_slave_1 added
[  695.053737][ T8961] batman_adv: batadv0: Adding interface: batadv_slave_0
[  695.087141][ T8986] loop7: detected capacity change from 0 to 32768
[  695.087680][ T8961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  695.182406][ T8986] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  695.198198][ T2309] Bluetooth: hci1: command 0x041b tx timeout
[  695.248392][ T8986] BTRFS info (device loop7): allowing degraded mounts
[  695.255436][ T8986] BTRFS info (device loop7): metadata ratio 4
[  695.278874][ T8961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  695.306517][ T4268] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[  695.343687][ T8986] BTRFS info (device loop7): turning on sync discard
[  695.397204][ T8961] batman_adv: batadv0: Adding interface: batadv_slave_1
[  695.414982][ T8961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  695.427560][ T8986] BTRFS info (device loop7): turning off discard
[  695.575417][ T8986] BTRFS info (device loop7): turning on sync discard
[  695.575454][ T8961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  695.602493][ T8809] usb 7-1: USB disconnect, device number 3
[  695.611402][ T8986] BTRFS info (device loop7): disabling tree log
[  695.658976][ T8986] BTRFS info (device loop7): using free space tree
[  695.665546][ T8986] BTRFS info (device loop7): has skinny extents
[  696.087610][ T8986] BTRFS info (device loop7): enabling ssd optimizations
[  696.118979][ T8961] device hsr_slave_0 entered promiscuous mode
[  696.244345][ T8961] device hsr_slave_1 entered promiscuous mode
[  697.381915][ T4233] Bluetooth: hci1: command 0x040f tx timeout
[  697.664071][ T8961] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  697.684802][ T8961] Cannot create hsr debugfs directory
[  697.920552][   T26] audit: type=1326 audit(697.882:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6a064629 code=0x7ffc0000
[  698.804332][   T26] audit: type=1326 audit(697.882:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6a064629 code=0x7ffc0000
[  699.437510][ T4233] Bluetooth: hci1: command 0x0419 tx timeout
[  700.401078][ T8961] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  700.480765][ T8961] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  700.549584][ T8961] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  700.665533][ T4634] device hsr_slave_0 left promiscuous mode
[  700.681016][ T4634] device hsr_slave_1 left promiscuous mode
[  700.749740][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  700.769327][ T4634] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.828365][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  700.897581][ T4634] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.973429][ T4634] device bridge_slave_1 left promiscuous mode
[  701.022922][ T4634] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.890381][ T9075] xt_time: unknown flags 0xc
[  702.981584][ T4634] device bridge_slave_0 left promiscuous mode
[  702.997682][ T4634] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.057199][ T4634] device veth1_macvtap left promiscuous mode
[  703.063773][ T4634] device veth0_macvtap left promiscuous mode
[  703.098338][ T4634] device veth1_vlan left promiscuous mode
[  703.124791][ T4634] device veth0_vlan left promiscuous mode
[  705.848830][ T9091] devtmpfs: Unknown parameter '\']*'
[  706.571324][ T9094] loop6: detected capacity change from 0 to 512
[  706.638665][ T4634] team0 (unregistering): Port device team_slave_1 removed
[  706.696220][ T4634] team0 (unregistering): Port device team_slave_0 removed
[  706.766323][ T9094] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[  707.467909][ T9102] binder_alloc: 9093: binder_alloc_buf, no vma
[  707.475837][ T9102] binder: 9093:9102 ioctl c0306201 0 returned -14
[  707.747846][ T4634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  708.064629][ T4634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  708.468561][ T4634] bond0 (unregistering): Released all slaves
[  708.649765][ T8961] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  708.662150][ T9100] loop4: detected capacity change from 0 to 32768
[  708.804298][ T9100] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1055 (9100)
[  709.948361][ T9100] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  709.984820][ T9100] BTRFS info (device loop4): allowing degraded mounts
[  710.029558][ T9100] BTRFS info (device loop4): metadata ratio 4
[  710.077460][ T9100] BTRFS info (device loop4): turning on sync discard
[  710.084226][ T9100] BTRFS info (device loop4): turning off discard
[  710.156569][ T9100] BTRFS info (device loop4): turning on sync discard
[  710.159096][ T8961] 8021q: adding VLAN 0 to HW filter on device bond0
[  710.207913][ T9100] BTRFS info (device loop4): disabling tree log
[  710.214263][ T9100] BTRFS info (device loop4): using free space tree
[  710.356796][ T9120] xt_time: unknown flags 0xc
[  711.143334][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  711.158161][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  711.184258][ T9100] BTRFS info (device loop4): has skinny extents
[  711.225196][ T8961] 8021q: adding VLAN 0 to HW filter on device team0
[  711.255625][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  711.307992][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  711.357845][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.365087][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  711.515481][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  711.533893][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  711.543747][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  711.553207][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state
[  711.560380][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  711.568615][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  712.429239][ T9100] BTRFS error (device loop4): open_ctree failed: -12
[  712.507750][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  712.594501][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  712.673483][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  712.698670][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  712.738689][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  712.787162][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  713.635965][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  713.656853][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  713.730582][ T9156] devtmpfs: Unknown parameter '\']*'
[  713.778494][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  713.856387][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  713.898696][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  714.258287][ T9164] loop4: detected capacity change from 0 to 256
[  714.395216][ T9164] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  714.578549][ T9164] attempt to access beyond end of device
[  714.578549][ T9164] loop4: rw=524288, want=408, limit=256
[  714.623648][ T9164] attempt to access beyond end of device
[  714.623648][ T9164] loop4: rw=524288, want=664, limit=256
[  714.677902][ T9164] attempt to access beyond end of device
[  714.677902][ T9164] loop4: rw=0, want=288, limit=256
[  714.723114][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  714.742024][   T26] audit: type=1800 audit(714.692:162): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1062" name="file1" dev="loop4" ino=1048644 res=0 errno=0
[  714.753262][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  714.876215][ T8961] 8021q: adding VLAN 0 to HW filter on device batadv0
[  717.529548][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  717.590008][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  718.013023][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  718.058788][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  718.110463][ T8961] device veth0_vlan entered promiscuous mode
[  718.331147][ T9203] xt_time: unknown flags 0xc
[  719.369335][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  719.549992][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  719.613435][ T8961] device veth1_vlan entered promiscuous mode
[  720.165580][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  720.205280][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  720.259990][ T8961] device veth0_macvtap entered promiscuous mode
[  720.276875][ T8961] device veth1_macvtap entered promiscuous mode
[  720.358628][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  720.417571][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  720.476027][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  720.557822][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  720.619417][ T9219] loop6: detected capacity change from 0 to 512
[  720.632781][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  720.713973][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  720.735332][ T9219] EXT4-fs (loop6): can't mount with commit=1, fs mounted w/o journal
[  720.767812][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  720.826957][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  720.890421][ T8961] batman_adv: batadv0: Interface activated: batadv_slave_0
[  720.957791][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  720.971998][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  721.026883][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  721.072385][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  721.123535][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.169995][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.217605][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.267410][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.320703][ T9224] loop4: detected capacity change from 0 to 1024
[  721.332898][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.373683][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.397407][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.424429][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.455799][ T8961] batman_adv: batadv0: Interface activated: batadv_slave_1
[  721.535799][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  721.583150][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  721.769788][ T8961] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  721.940197][ T8961] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  722.187503][ T8961] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  722.393478][ T8961] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  722.993837][ T4494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.023487][ T4494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.064694][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  723.091449][ T9240] loop7: detected capacity change from 0 to 512
[  723.746876][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.772048][ T9240] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  723.811709][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.860872][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  723.879026][ T9240] EXT4-fs (loop7): 1 truncate cleaned up
[  723.972188][ T9240] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,usrquota,lazytime,nombcache,i_version,,errors=continue. Quota mode: writeback.
[  724.914688][ T9261] xt_time: unknown flags 0xc
[  729.646284][ T9290] loop4: detected capacity change from 0 to 8
[  729.800146][ T9290] SQUASHFS error: Unable to read inode 0x11f
[  730.346327][ T9302] loop4: detected capacity change from 0 to 1024
[  730.430970][ T9302] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  730.579120][ T9302] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  732.558599][ T4230] Bluetooth: hci5: command 0x0409 tx timeout
[  733.176018][ T9304] chnl_net:caif_netlink_parms(): no params data found
[  733.369354][ T9304] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.376792][ T9304] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.612117][ T9336] xt_time: unknown flags 0xc
[  734.647457][ T6456] Bluetooth: hci5: command 0x041b tx timeout
[  734.675268][ T9304] device bridge_slave_0 entered promiscuous mode
[  734.734760][ T9304] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.777737][ T9304] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.786418][ T9304] device bridge_slave_1 entered promiscuous mode
[  734.901694][ T9304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  734.958291][ T9304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  735.065283][ T9304] team0: Port device team_slave_0 added
[  735.118810][ T9304] team0: Port device team_slave_1 added
[  735.214366][ T9304] batman_adv: batadv0: Adding interface: batadv_slave_0
[  735.244011][ T9304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  735.331735][ T9304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  735.374299][ T9304] batman_adv: batadv0: Adding interface: batadv_slave_1
[  735.397501][ T9304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  735.485014][ T9304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  735.602605][ T9304] device hsr_slave_0 entered promiscuous mode
[  735.638427][ T9304] device hsr_slave_1 entered promiscuous mode
[  736.465999][ T9304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  736.503292][ T9304] Cannot create hsr debugfs directory
[  737.601671][ T1111] Bluetooth: hci5: command 0x040f tx timeout
[  739.074429][ T9372] xt_time: unknown flags 0xc
[  739.743407][ T8818] Bluetooth: hci5: command 0x0419 tx timeout
[  739.909931][ T9304] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  739.970004][ T9304] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  740.058585][ T9304] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  741.466022][ T9304] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  741.601644][ T9304] 8021q: adding VLAN 0 to HW filter on device bond0
[  741.637646][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  741.655233][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  741.691146][ T9304] 8021q: adding VLAN 0 to HW filter on device team0
[  741.743918][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  741.760013][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  741.794883][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.802143][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  741.845368][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  741.873564][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  741.915506][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  741.951086][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.958360][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  742.017899][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  742.095506][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  742.129684][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  742.169020][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  742.208131][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  742.245945][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  742.278397][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  742.328593][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  742.358912][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  742.388398][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  742.408614][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  742.440881][ T9304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  743.985690][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1104'.
[  744.509840][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  744.518622][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  744.538832][ T9304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  746.135849][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  746.145641][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  746.229641][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  746.248258][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  746.290537][ T9304] device veth0_vlan entered promiscuous mode
[  746.317887][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  746.351335][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  746.398926][ T9304] device veth1_vlan entered promiscuous mode
[  746.527966][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  746.548399][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  746.588547][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  746.637926][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  746.670549][ T9304] device veth0_macvtap entered promiscuous mode
[  747.239594][ T9437] loop7: detected capacity change from 0 to 32768
[  747.317787][ T9437] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1112 (9437)
[  748.808088][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  748.819467][ T9304] device veth1_macvtap entered promiscuous mode
[  748.828428][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  748.833097][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  748.895402][ T9437] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  748.934738][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  750.517488][ T9437] BTRFS info (device loop7): allowing degraded mounts
[  750.524962][ T9437] BTRFS info (device loop7): metadata ratio 4
[  750.540834][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  752.117451][ T9437] BTRFS info (device loop7): turning on sync discard
[  752.137391][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.147277][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  752.147740][ T9437] BTRFS info (device loop7): turning off discard
[  752.217534][ T9437] BTRFS info (device loop7): turning on sync discard
[  752.225611][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.253016][ T9437] BTRFS info (device loop7): disabling tree log
[  752.276975][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  752.280112][ T9437] BTRFS info (device loop7): using free space tree
[  753.161244][ T9437] BTRFS info (device loop7): has skinny extents
[  753.191494][ T9437] BTRFS error (device loop7): open_ctree failed: -12
[  753.217442][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.267462][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  753.317485][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.351470][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  753.427439][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.493758][ T9304] batman_adv: batadv0: Interface activated: batadv_slave_0
[  753.556347][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  753.687509][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.727476][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  753.777856][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.817476][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  753.862801][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.917480][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  753.957438][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.997427][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  754.049978][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.112155][ T9304] batman_adv: batadv0: Interface activated: batadv_slave_1
[  754.160533][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  754.188616][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  754.228130][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  754.272362][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  754.323137][ T9304] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  754.369095][ T9304] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  754.435494][ T9304] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  754.481592][ T9304] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  754.772738][ T4494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  754.791738][ T4494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  754.842487][ T9492] loop7: detected capacity change from 0 to 764
[  754.891413][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  754.948531][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  754.978329][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  755.003489][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  755.393592][ T9505] loop4: detected capacity change from 0 to 128
[  755.560521][ T9505] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  757.953326][ T9532] loop4: detected capacity change from 0 to 512
[  758.096843][ T9532] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  759.128063][ T9532] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  759.177832][ T9532] EXT4-fs (loop4): 1 truncate cleaned up
[  759.203082][ T9532] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  759.850873][ T9545] loop9: detected capacity change from 0 to 764
[  766.070192][ T9580] loop7: detected capacity change from 0 to 8
[  766.238991][ T9580] SQUASHFS error: Unable to read inode 0x11f
[  768.640605][ T9607] loop7: detected capacity change from 0 to 764
[  769.059816][ T9583] loop8: detected capacity change from 0 to 32768
[  769.105761][ T9583] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1138 (9583)
[  769.214300][ T9583] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  769.241923][ T9583] BTRFS info (device loop8): allowing degraded mounts
[  769.282716][ T9583] BTRFS info (device loop8): metadata ratio 4
[  769.319833][ T9583] BTRFS info (device loop8): turning on sync discard
[  769.350178][ T9583] BTRFS info (device loop8): turning off discard
[  769.356583][ T9583] BTRFS info (device loop8): turning on sync discard
[  769.417049][ T9583] BTRFS info (device loop8): disabling tree log
[  769.467629][ T9583] BTRFS info (device loop8): using free space tree
[  769.474376][ T9583] BTRFS info (device loop8): has skinny extents
[  769.920269][ T9583] BTRFS error (device loop8): open_ctree failed: -12
[  770.268029][ T9004] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by udevd (9004)
[  774.668932][ T9671] loop8: detected capacity change from 0 to 8
[  774.765908][ T9671] SQUASHFS error: Unable to read inode 0x11f
[  776.120932][ T9689] loop7: detected capacity change from 0 to 512
[  776.174922][ T9689] EXT4-fs (loop7): Ignoring removed nobh option
[  776.203880][ T9689] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  776.263797][ T9689] EXT4-fs (loop7): 1 truncate cleaned up
[  776.271806][ T9689] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nodiscard,nobh,lazytime,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  779.085160][ T8818] Bluetooth: hci6: command 0x0409 tx timeout
[  779.184589][ T9696] chnl_net:caif_netlink_parms(): no params data found
[  779.722818][ T9696] bridge0: port 1(bridge_slave_0) entered blocking state
[  779.752382][ T9696] bridge0: port 1(bridge_slave_0) entered disabled state
[  779.765993][ T9696] device bridge_slave_0 entered promiscuous mode
[  779.776022][ T9696] bridge0: port 2(bridge_slave_1) entered blocking state
[  779.784752][ T9696] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.794717][ T9696] device bridge_slave_1 entered promiscuous mode
[  779.823957][ T9696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  779.880030][ T9696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  780.086440][ T9696] team0: Port device team_slave_0 added
[  780.142712][ T9696] team0: Port device team_slave_1 added
[  780.159024][ T9747] loop8: detected capacity change from 0 to 512
[  781.091692][ T9696] batman_adv: batadv0: Adding interface: batadv_slave_0
[  781.110480][ T9747] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  781.127412][ T9696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  781.198136][ T9635] Bluetooth: hci6: command 0x041b tx timeout
[  781.224822][ T9747] EXT4-fs (loop8): 1 truncate cleaned up
[  781.237496][ T9747] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  781.237840][ T9696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  781.458331][ T9696] batman_adv: batadv0: Adding interface: batadv_slave_1
[  781.465594][ T9696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  781.491788][ T9696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  781.613596][ T9696] device hsr_slave_0 entered promiscuous mode
[  781.650945][ T9696] device hsr_slave_1 entered promiscuous mode
[  781.663892][ T9696] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  781.683520][ T9696] Cannot create hsr debugfs directory
[  782.772363][ T9773] loop7: detected capacity change from 0 to 512
[  782.898164][ T9773] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  783.079410][ T9782] loop4: detected capacity change from 0 to 8
[  783.303522][ T9782] SQUASHFS error: Unable to read inode 0x11f
[  783.348124][ T9630] Bluetooth: hci6: command 0x040f tx timeout
[  784.918257][ T9800] loop7: detected capacity change from 0 to 764
[  785.357633][ T2309] Bluetooth: hci6: command 0x0419 tx timeout
[  785.506624][ T9696] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  785.564938][ T9696] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  786.020545][ T9696] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  786.044936][ T9696] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  787.429320][ T9820] loop7: detected capacity change from 0 to 512
[  787.442657][ T9820] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  787.455003][ T9820] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  787.527173][ T9820] EXT4-fs (loop7): 1 orphan inode deleted
[  787.556836][ T9696] 8021q: adding VLAN 0 to HW filter on device bond0
[  787.572851][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  787.575657][ T9820] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,jqfmt=vfsv0,auto_da_alloc=0x0000000000000002,quota,. Quota mode: writeback.
[  787.608017][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  787.620266][ T9696] 8021q: adding VLAN 0 to HW filter on device team0
[  787.673463][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  788.768530][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  788.818142][ T4919] bridge0: port 1(bridge_slave_0) entered blocking state
[  788.825301][ T4919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  788.884726][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  788.988083][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  788.996819][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  789.078510][ T4919] bridge0: port 2(bridge_slave_1) entered blocking state
[  789.086071][ T4919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  789.166916][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  789.206611][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  789.238464][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  789.300706][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  789.329887][ T9843] loop7: detected capacity change from 0 to 8
[  789.359444][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  789.395621][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  789.404030][ T9843] SQUASHFS error: Unable to read inode 0x11f
[  789.429579][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  789.468338][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  789.477203][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  789.708070][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  790.187945][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  790.233361][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  791.684732][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  791.724509][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  791.807286][ T9696] 8021q: adding VLAN 0 to HW filter on device batadv0
[  792.437005][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  792.476949][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  792.561215][ T9696] device veth0_vlan entered promiscuous mode
[  792.592109][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  792.608000][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  792.643692][ T9696] device veth1_vlan entered promiscuous mode
[  792.686807][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  792.783739][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  793.570233][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  793.699497][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  793.732121][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  793.811642][ T9696] device veth0_macvtap entered promiscuous mode
[  793.850791][ T9696] device veth1_macvtap entered promiscuous mode
[  793.986306][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  794.016515][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.042247][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  794.054021][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.064420][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  794.075564][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.086864][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  794.100382][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.111267][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  794.121974][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.132367][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  794.143197][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.161501][ T9696] batman_adv: batadv0: Interface activated: batadv_slave_0
[  794.170290][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  794.191097][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  794.221956][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  794.238356][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.249497][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.261003][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.272053][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.282418][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.293124][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.303487][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.314891][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.328287][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.339027][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.349279][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.360400][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.389089][ T9696] batman_adv: batadv0: Interface activated: batadv_slave_1
[  794.398593][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  794.439868][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  794.475809][ T9696] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  794.498151][ T9696] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  794.507247][ T9696] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  794.516903][ T9696] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  794.771959][ T9905] loop8: detected capacity change from 0 to 256
[  794.830287][ T4564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  794.862530][ T4564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  794.954691][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  794.986154][ T4634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  795.026034][ T4634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  795.039002][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  797.439714][ T9919] loop2: detected capacity change from 0 to 32768
[  799.718429][ T9950] loop7: detected capacity change from 0 to 512
[  799.794207][ T9950] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  799.887058][ T9950] EXT4-fs (loop7): 1 truncate cleaned up
[  799.897475][ T9950] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  801.224892][ T9978] loop2: detected capacity change from 0 to 512
[  801.483152][ T9978] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  802.027837][ T9978] binder_alloc: 9977: binder_alloc_buf, no vma
[  806.950794][T10016] loop4: detected capacity change from 0 to 512
[  807.051475][T10016] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  809.863439][T10037] binder_alloc: 10015: binder_alloc_buf, no vma
[  809.907624][T10016] binder: 10015:10016 ioctl c0306201 0 returned -14
[  812.663605][T10091] loop7: detected capacity change from 0 to 8
[  812.738006][T10091] SQUASHFS error: Unable to read inode 0x11f
[  813.884832][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  813.891562][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  816.723585][ T9632] Bluetooth: hci1: command 0x0406 tx timeout
[  816.894890][T10112] loop7: detected capacity change from 0 to 512
[  817.037004][T10112] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal
[  818.314977][T10112] binder_alloc: 10110: binder_alloc_buf, no vma
[  818.357677][T10112] binder: 10110:10112 ioctl c0306201 0 returned -14
[  821.128564][T10150] loop4: detected capacity change from 0 to 8
[  821.194089][T10153] loop2: detected capacity change from 0 to 8
[  821.380491][T10153] SQUASHFS error: Unable to read inode 0x11f
[  821.461960][T10157] overlayfs: missing 'lowerdir'
[  821.497274][T10150] SQUASHFS error: zlib decompression failed, data probably corrupt
[  821.599564][T10150] SQUASHFS error: Failed to read block 0x4de: -5
[  821.895341][T10150] SQUASHFS error: Failed to read block 0x4e2: -5
[  822.076738][T10150] SQUASHFS error: Failed to read block 0x9ca: -5
[  822.111488][T10150] SQUASHFS error: Failed to read block 0x2cf2: -5
[  822.118270][T10150] SQUASHFS error: Failed to read block 0x52cf2: -5
[  822.127486][T10150] SQUASHFS error: Failed to read block 0x535f2: -5
[  822.138819][   T26] audit: type=1800 audit(822.092:163): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1234" name="file1" dev="loop4" ino=5 res=0 errno=0
[  824.554590][T10178] loop2: detected capacity change from 0 to 512
[  824.639490][T10178] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  824.709300][T10178] EXT4-fs (loop2): 1 truncate cleaned up
[  824.726238][T10178] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  828.678159][T10212] loop8: detected capacity change from 0 to 512
[  828.978936][T10212] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[  829.889587][T10221] loop2: detected capacity change from 0 to 512
[  830.060695][T10221] EXT4-fs (loop2): Ignoring removed nobh option
[  830.087746][T10221] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  830.809054][T10225] binder_alloc: 10209: binder_alloc_buf, no vma
[  830.866349][T10212] binder: 10209:10212 ioctl c0306201 0 returned -14
[  831.029043][T10221] EXT4-fs (loop2): 1 truncate cleaned up
[  831.034838][T10221] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,nobh,lazytime,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  837.181355][T10260] loop7: detected capacity change from 0 to 764
[  837.628187][T10270] loop7: detected capacity change from 0 to 512
[  837.723923][T10270] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  837.840956][T10270] EXT4-fs (loop7): 1 truncate cleaned up
[  837.877254][T10270] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  841.943936][T10313] loop4: detected capacity change from 0 to 512
[  842.004373][T10313] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  842.050460][T10315] loop2: detected capacity change from 0 to 2048
[  842.277488][T10315] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  844.917967][ T4564] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  845.015251][ T4564] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 728 with error 28
[  845.077588][ T4564] EXT4-fs (loop2): This should not happen!! Data will be lost
[  845.077588][ T4564] 
[  845.087279][ T4564] EXT4-fs (loop2): Total free blocks count 0
[  846.192317][ T4564] EXT4-fs (loop2): Free/Dirty block details
[  846.201083][ T4564] EXT4-fs (loop2): free_blocks=2415919504
[  846.206855][ T4564] EXT4-fs (loop2): dirty_blocks=736
[  846.220561][ T4564] EXT4-fs (loop2): Block reservation details
[  846.238079][ T4564] EXT4-fs (loop2): i_reserved_data_blocks=46
[  850.209066][T10389] loop4: detected capacity change from 0 to 8
[  850.999333][T10389] SQUASHFS error: Unable to read inode 0x11f
[  852.313846][T10393] loop8: detected capacity change from 0 to 2048
[  852.468387][T10393] UDF-fs: bad mount option "" or missing value
[  856.896388][ T4230] Bluetooth: hci5: command 0x0406 tx timeout
[  858.695793][T10448] xt_hashlimit: max too large, truncated to 1048576
[  858.704070][T10448] No such timeout policy "syz1"
[  864.808213][T10492] loop4: detected capacity change from 0 to 2048
[  864.868798][T10492] UDF-fs: bad mount option "" or missing value
[  868.877723][   T27] INFO: task syz.6.1065:9219 blocked for more than 145 seconds.
[  868.885396][   T27]       Not tainted syzkaller #0
[  868.988123][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  869.038190][   T27] task:syz.6.1065      state:D stack:26224 pid: 9219 ppid:  4825 flags:0x00004004
[  869.127467][   T27] Call Trace:
[  869.158857][   T27]  <TASK>
[  869.184393][   T27]  __schedule+0x11ef/0x43c0
[  869.222680][   T27]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  869.272778][T10527] loop8: detected capacity change from 0 to 8
[  869.316153][   T27]  ? release_firmware_map_entry+0x190/0x190
[  869.370216][   T27]  ? verify_lock_unused+0x140/0x140
[  869.417541][   T27]  ? cpufreq_update_util+0x91/0x230
[  869.457234][   T27]  schedule+0x11b/0x1e0
[  869.493148][   T27]  schedule_timeout+0xbd/0x2d0
[  869.535901][   T27]  ? console_conditional_schedule+0x40/0x40
[  869.592690][   T27]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  869.662851][   T27]  ? lock_chain_count+0x20/0x20
[  869.724260][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  869.783329][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  869.846614][   T27]  do_wait_for_common+0x2a2/0x450
[  869.897344][   T27]  ? console_conditional_schedule+0x40/0x40
[  869.977321][   T27]  ? wait_for_completion_killable_timeout+0x60/0x60
[  870.055201][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  870.119337][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  870.169124][   T27]  wait_for_completion+0x48/0x60
[  870.223957][   T27]  kthread_stop+0x16e/0x540
[  870.276197][   T27]  ext4_stop_mmpd+0x43/0xb0
[  870.321709][   T27]  ext4_fill_super+0x6386/0x95a0
[  870.368470][   T27]  ? ext4_mount+0x40/0x40
[  870.405118][   T27]  ? set_blocksize+0x1f3/0x370
[  870.440710][   T27]  ? sb_set_blocksize+0xa5/0xe0
[  870.478404][   T27]  mount_bdev+0x287/0x3c0
[  870.513388][   T27]  ? ext4_mount+0x40/0x40
[  870.556675][   T27]  legacy_get_tree+0xe6/0x180
[  870.594407][   T27]  ? ext4_errno_to_code+0x160/0x160
[  871.317759][T10533] loop4: detected capacity change from 0 to 512
[  871.357752][   T27]  vfs_get_tree+0x88/0x270
[  871.381112][   T27]  do_new_mount+0x24a/0xa40
[  871.405307][   T27]  __se_sys_mount+0x2e3/0x3d0
[  871.445869][   T27]  ? __x64_sys_mount+0xc0/0xc0
[  871.483984][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  871.523542][   T27]  ? __x64_sys_mount+0x1c/0xc0
[  871.560011][   T27]  do_syscall_64+0x4c/0xa0
[  871.596814][   T27]  ? clear_bhb_loop+0x30/0x80
[  871.650143][   T27]  ? clear_bhb_loop+0x30/0x80
[  871.700849][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  871.751630][   T27] RIP: 0033:0x7f529b4ba8ca
[  871.791095][   T27] RSP: 002b:00007f5299712e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  871.865712][   T27] RAX: ffffffffffffffda RBX: 00007f5299712ee0 RCX: 00007f529b4ba8ca
[  872.044219][   T27] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 00007f5299712ea0
[  872.084621][   T27] RBP: 0000200000000040 R08: 00007f5299712ee0 R09: 0000000002000008
[  872.126361][   T27] R10: 0000000002000008 R11: 0000000000000246 R12: 0000200000000080
[  872.186001][   T27] R13: 00007f5299712ea0 R14: 000000000000054c R15: 0000200000001c80
[  872.241201][   T27]  </TASK>
[  872.269231][   T27] 
[  872.269231][   T27] Showing all locks held in the system:
[  872.331062][   T27] 1 lock held by khungtaskd/27:
[  872.353231][T10533] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  872.553476][   T27]  #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  872.566479][T10533] EXT4-fs (loop4): 1 truncate cleaned up
[  872.623892][   T27] 2 locks held by getty/3945:
[  872.653690][   T27]  #0: ffff88802b8ff098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  872.719735][T10533] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  872.800515][   T27]  #1: ffffc90002d032e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70
[  872.879500][   T27] 2 locks held by kworker/u4:0/9038:
[  873.258594][   T27] 1 lock held by syz.6.1065/9219:
[  873.283828][   T27]  #0: ffff888071bf40e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[  873.338163][   T27] 1 lock held by syz.9.1131/9554:
[  873.377300][   T27]  #0: ffff888071bf40e0 (&type->s_umount_key#32){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0
[  873.468336][   T27] 1 lock held by syz-executor/9696:
[  873.500123][   T27] 2 locks held by syz.2.1278/10431:
[  873.533812][   T27] 2 locks held by syz.5.1291/10472:
[  873.572055][   T27] 2 locks held by udevd/10487:
[  873.600537][   T27]  #0: ffff88801fbe7d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0
[  873.663077][   T27]  #1: ffff888147bac468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[  873.715209][   T27] 2 locks held by syz.5.1300/10543:
[  873.745784][   T27] 1 lock held by dhcpcd-run-hook/10555:
[  873.783057][   T27] 
[  873.821742][   T27] =============================================
[  873.821742][   T27] 
[  873.915360][   T27] NMI backtrace for cpu 0
[  873.919764][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  873.926996][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  873.937081][   T27] Call Trace:
[  873.940397][   T27]  <TASK>
[  873.943357][   T27]  dump_stack_lvl+0x188/0x250
[  873.948106][   T27]  ? show_regs_print_info+0x20/0x20
[  873.953354][   T27]  ? load_image+0x400/0x400
[  873.957894][   T27]  ? tick_nohz_tick_stopped+0x7b/0xb0
[  873.963313][   T27]  ? nmi_cpu_backtrace+0x1b2/0x3d0
[  873.968475][   T27]  nmi_cpu_backtrace+0x3a2/0x3d0
[  873.973448][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  873.979637][   T27]  ? _printk+0xda/0x130
[  873.983835][   T27]  ? load_image+0x400/0x400
[  873.988373][   T27]  ? load_image+0x400/0x400
[  873.992912][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  873.999100][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  874.005136][   T27]  watchdog+0xe0f/0xe50
[  874.009386][   T27]  kthread+0x436/0x520
[  874.013485][   T27]  ? hungtask_pm_notify+0x40/0x40
[  874.018551][   T27]  ? kthread_blkcg+0xd0/0xd0
[  874.023184][   T27]  ret_from_fork+0x1f/0x30
[  874.027654][   T27]  </TASK>
[  874.031777][   T27] Sending NMI from CPU 0 to CPUs 1:
[  874.037024][    C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10
[  874.525925][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  874.532830][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  874.540058][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  874.550139][   T27] Call Trace:
[  874.553420][   T27]  <TASK>
[  874.556349][   T27]  dump_stack_lvl+0x188/0x250
[  874.561045][   T27]  ? show_regs_print_info+0x20/0x20
[  874.566292][   T27]  ? load_image+0x400/0x400
[  874.570814][   T27]  panic+0x2e5/0x810
[  874.574775][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  874.580419][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  874.584927][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  874.590474][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  874.596925][   T27]  watchdog+0xe4e/0xe50
[  874.601103][   T27]  kthread+0x436/0x520
[  874.605195][   T27]  ? hungtask_pm_notify+0x40/0x40
[  874.610219][   T27]  ? kthread_blkcg+0xd0/0xd0
[  874.614810][   T27]  ret_from_fork+0x1f/0x30
[  874.619273][   T27]  </TASK>
[  874.622600][   T27] Kernel Offset: disabled
[  874.634187][   T27] Rebooting in 86400 seconds..