last executing test programs:

4m32.134615559s ago: executing program 2 (id=191):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4814}, 0x0)

4m32.024965683s ago: executing program 2 (id=192):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000096, 0x0, 0x4}]})

4m31.647142807s ago: executing program 2 (id=200):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x3e)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000180)=@secondary)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

4m31.255221113s ago: executing program 2 (id=206):
io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x4, 0x18e})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TCFLSH(r0, 0x40087101, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x180)
ioctl(r1, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830")
ioctl(r1, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031")
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/dm-0\x00', 0x2, 0x0)
add_key$keyring(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./dev/dm-0\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff)

4m30.857037951s ago: executing program 2 (id=215):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x1)

4m30.090606219s ago: executing program 2 (id=223):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x77}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff27}, 0x80)

4m29.832532946s ago: executing program 32 (id=223):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x77}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff27}, 0x80)

3m27.69058515s ago: executing program 5 (id=667):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008413, &(0x7f0000000940), 0x0, 0x526, &(0x7f0000001300)="$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")

3m26.702069859s ago: executing program 5 (id=670):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0xc00000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0x277c, 0x0, 0x0, 0x0, &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, r1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000280)='./file2\x00', 0x0, 0x4000}, 0x18)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc840, &(0x7f0000000240)={0xa, 0x4e20, 0x8, @private2, 0x3}, 0x1c)
socket(0x2c, 0x3, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000000c0)='./file2\x00', 0x1018010, &(0x7f0000000140)={[{@grpjquota_path={'grpjquota', 0x3d, './file2'}}]}, 0x5, 0x57f, &(0x7f00000017c0)="$eJzs3c9vHGcZAOB3xt7EiV3ZBQ6lEqWiRUmBrOOatBaHIiQEp0pAESekYOy1ZXntjex1G1sRccUVCQkQVOICJy5I/AFIqBfuCKlSuSNAVKg4cADUdtDMzjbe7a7jKOvdxn4eaTrzza/3/bzdb+bbmcwEcGY9GRGXI2IsIp6JiOlyfloOsd8a8vXuHNxayocksuylt5NIynntfZ0vx5PlZhMR8Y2vRnw3+WDc7d299cV6vbZVlmebG8k7WbZ3ZW1jcbW2Wtucn597buH5hWsLlYHUcyYiXvjy3376w1995YXffe6VP19/6/L38rT+m2W3o6se3cYeIG6r6pXib9E2HhFbD7DPD5vxooYt1461RY//IQAAGIr8fP8jEfGp4vx/OsaKszkAAADgNMm+OBXvJBFZkhcAAACA0yiNiKlI0mp5v+9UeW/mZER8LC6m9cZ287MrjZ3N5XxZxExU0pW1eu1qTBT3DsxEJcnLc+U9tu3ys13l+Yh4NCJ+Mn2hKFeXGvXlUf/4AQAAAGfEZFf//9/TaVqtlgv3R5wcAAAAMDgzo04AAAAAOHH6/wAAAHC6VfL+f3asFzKl5dgbAgAAAODh8rUXX8yHrP3+6+WXd3fWGy9fWa5tr1c3dpaqS42tG9XVRmO1eGbfxr32V280bnw+NnduzjZr283Z7d296xuNnc3m9bWOV2ADAAAAQ/ToJ1//UxIR+1+4UAy5c+WySkQ2dnhlF/7hVEnvZ+W/nlwewPAdPr5fGGEewPA5pYezqzLqBICRu9c/AOp7884fBp8LAABwMi59vP/1/7dXjtry/DDSA05Qef0/OdYDQIBTZazHvOrkCBIBhq51/e+9rGXU2QDDVOl5BlDSKYBTLx3M9f97PN8j0aAAAMCITRVDklbLfsBUpGm1GvFI8VrASrKyVq9djYVi3TenK+fz8lxRSpzNAwAAAAAAAAAAAAAAAAAAAAAAAMAxZVkSGQAAAHCqRaR/b7+Z69L001Pdvw+cS/4zXYwj4pWfv/Szm4vN5tZcPv+f789vvlbOf/Z+f3348VsD+hkDAAAAOKTdT2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgkO4c3Fq6k2VZdnBraZhx//GliJgp45dDa8l4TBTjiahExMV/JTF+aLskIsYGEH//1Yh4rFf8JE8rZsosOuKfi0gj4sKg4sd9xo9W/MkBxIez7PW8/clabnd8/9J4shj3/v6Nl8OD6t/+pe+3f2NFi9Mpb/8e6bfTSmfx8Td+M9s3/qsRj4/3bn/a8ZN8fz3a36eOWcfvfHNvr9+y7JcRl3q1f0lnrNnmxo3Z7d29K2sbi6u11drm/PzccwvPL1xbuDq7slavlf/tGeNHn/jte3dL736g/hePaH+L+vc5/jx9RJ0PHxvefePmwUdbk12fTFTiF1l2+anen/9j+egzvePnx75Pl8eBfHn+N0xf+1bPXJ749R+f6JdnXv/lPvWf6Kr/+a76Xz6i/oc98/Xv/+WYqwIAQ7C9u7e+WK/XtkwcnoiZYcV6yD6Cc9GayM87R55PEknkE292LFo8dmL/y040w9vld2yx3v62DWjPvy87RyeZfGcz0berCQAAPDzunvR3L0n6bpNE7J90XgAAAAAAAAAAAAAAAAAAAHCW9H76VyUiyseA9XtCWBoRd+d8+wdHPI2sO6aHBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH0b/DwAA//968tVE")
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x20, 0x0, 0xfffffb81}, {0xff, 0x0, 0x9}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x8000, 0x5, 0x5, 0xf, 0x1, 0x9, 0x7, 0x4, 0x7, 0x5, 0xb, 0xa6, 0x25d2, 0x7fff, 0x1, 0x800, 0x7, 0x8001, 0xff, 0x7f, 0x200, 0x3, 0xffff, 0x6, 0x800, 0x200802, 0x5, 0x3, 0x1, 0x7, 0x5, 0xfffffffd, 0x80000001, 0x5, 0x2, 0x100, 0x50, 0x8, 0x6, 0x1, 0x938, 0x2, 0x0, 0xd, 0x8, 0x9, 0x7f, 0x5, 0x2, 0x3, 0x3cf9c485, 0x6, 0x1, 0x9, 0x6, 0x8001, 0x3, 0xea68, 0x8000, 0x114, 0x8f19, 0x5, 0x8, 0x599ed91f, 0x4, 0x5d20, 0x4, 0x0, 0x2, 0x3, 0x3, 0x7, 0x800, 0x7, 0x4, 0x6, 0x4, 0x55, 0x99d, 0x800, 0x3, 0x5, 0x8000, 0x7fff, 0x8001, 0xc2, 0x7ff, 0x1b7cde5c, 0x832, 0x3, 0xd4, 0x1000, 0xb46, 0x81, 0x7, 0x7fffffff, 0xe353, 0x7, 0x7, 0xfffffff9, 0xcd, 0x4, 0x400, 0xff, 0xe8e, 0x2, 0x3, 0xf, 0x2, 0x5, 0x5, 0x7, 0x8, 0x8f7, 0x1, 0x6, 0x5, 0x8, 0x5, 0x9, 0x9, 0x3, 0x0, 0x8, 0x725, 0xef, 0x9, 0x101, 0x80001000, 0x9, 0x1, 0x7, 0x4, 0x331e54b1, 0x5, 0x7, 0x5, 0x5, 0x7, 0x4, 0x3, 0x100, 0x7, 0x9, 0xfb, 0x3e, 0x0, 0x6e6f, 0xffff, 0x1, 0x5, 0x700000, 0x2000, 0x9, 0x0, 0x4, 0x40, 0x7, 0x2, 0x3, 0x7, 0x8, 0x0, 0x4, 0x401, 0x400, 0x6343, 0x80, 0x4, 0x101, 0x8b0b, 0x5, 0xd, 0x9, 0xffffffff, 0x6, 0x3, 0xb, 0x6, 0x3ff, 0x0, 0x4, 0x6, 0x7ff, 0x1cbe52bd, 0x8, 0x7f, 0x39933be1, 0x5, 0x49b, 0x33d431d7, 0x4, 0xffffffff, 0xcbb, 0xf0000000, 0x1, 0xffffffff, 0x4, 0x5, 0x2, 0x7, 0x4, 0xffff, 0xee, 0x8001, 0x6a, 0xa, 0x5, 0x6, 0x8316, 0x2, 0xffffffff, 0x3, 0x7a98, 0x480000, 0xfffffff7, 0x7f, 0x9, 0x9, 0x0, 0xe0, 0x2, 0x7, 0x557, 0x0, 0xfc6, 0x3, 0x81, 0x9, 0xffff, 0x0, 0x400, 0x8, 0x4, 0x6f1, 0x9, 0x200, 0x8, 0x9b, 0x80000001, 0x2, 0xff85, 0xfffffe00, 0x7ff, 0x1ff, 0x7, 0x3, 0x6, 0xfffffffe, 0x10001, 0x7, 0xbf, 0x2, 0x400, 0x81]}]}}]}, 0x45c}}, 0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x2c000)

3m25.774104073s ago: executing program 5 (id=671):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)
pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00')

3m25.682365793s ago: executing program 5 (id=672):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5f1, &(0x7f0000000c80)="$eJzs3U9rHOcdB/DvrNZrrQu2ktiJ2wYqUvqHitqS1m2TgqlaTNEhlIBfgajlWHitBEkpSg7FLn4NPacEHXrtJZccfPC5fQmCHguFnoroxWVmZ1ebWJLlRNKu7M/Hfnae0TPzm9/8dma0OyvYAC+txZk0H6XI4sy7m+X89lanu73VudfvJzmbpFH9T7Ps/jOZeJhMp9fy7SRFHa7YbzvXP/+smS8e3OzNNepWLT9x0HqHc79uWaiTXDjCeI+/cbxisIdl0Bv94OPgybP95xg3P3GMsTmMVm9S7PNcTCXnkkzW14H+gds4wQyPxdicgAAAAHCMLuxkJ5s5P+o8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DSpv/+/qFuj359O0f/+/1b9s9T9U+3RqBMAAAAAAAAAgCPwvZ3sZDPn+5/lPymqz/zfqgYvVo/fykdZz3LWciWbWcpGNrKWuSRTQ4Fam0sbG2tzh1hzfs81509unwEAAAAAAADgBfSnLFaf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNgokonepGoX+/2pNJpJJpO0yuXuJ//o90+zR6NOAAAAAE7AhZ3sZDPn+/NPiuo9/+vV+/7JfJTVbGQlG+lmObeqewG9d/2N7a1Od3urc69sT8f99b+fK40qYnr3Hvbe8uVqiXZu323W6/w+H6SbW2lUa5Yu9/PZO68HZU7Fr2qHzOxWPS2S4rv13ZDxMFVV5ExuZ6Wq0WydW1mNVw6uxKGenb/uu6W5NAZ3fi4eQ83P1dOy5pNjXfP5oaPv9YMrkfzg+n9X73RX7965vT4zPrv0NX21Ep2hSrzxUlVitqrEpcH8Yn6bm5nJdN7LWlbyhyxlI8uZzo2qt1Qfz+Xj1MGVWvjS3HvPyqRVPy+9q+jz5fRWte75rOR3+SC3spyfZz7X8nbm8ovq37WhZ/jSIc76xvOd9d//cd15NSnavemYKOv6ylBdh6+5U9XY8E92q/Tq0V8bm9+pOxNJ0RzkNA6+Wom5oUq8dnAl/vKkfFzvrt5du7P04SG396N6Wv6WOPvM3xInWadWffT2Xql8+egox17bc2yuGrs4GGs8NXZpMFaeqWVt9ztTW/VruKcjzVdjb+w51qnGLg+NtQdjVwavtwAYe+d+cq7V/lf77+1P2w/bd9rvTv7m7Ntn32zlzOMzv2zOTvyw8Wbxt3yaP+6+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL6+9Y8/ubvU7S6v6ezT+fN4pPECdCaPKM6FjMXuvOCdUV+ZOAlXN+59eHX9409+unJv6f3l95dXO7M/m3+nMzf/zrWrt1e6y7O9x1GnyTHZPelHnQkAAAAAAAAAAADP4yT+nHTU+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDpsTiT5qMUmZu9MlvOb291umXr93eXbCRpltP/JRMPk+n0WqaGwhX7bef6558188WDm7uxGv3lJw5a73Du1y0LdZILRxjv8TeOVwz2sAx6ox8cRu3/AQAA//9iDBuy")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0xd)
open(0x0, 0x55783, 0xa0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)='\v', 0x1}, {&(0x7f0000000480)="738c", 0x2}], 0x2)

3m25.479273358s ago: executing program 5 (id=673):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
memfd_create(0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x2275, 0xffffffffffffffff)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6a}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x1, 0x1100)
socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000440)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c}, 0x48)

3m25.178124254s ago: executing program 5 (id=677):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/UDC\x00', 0x400, 0x0)

3m24.78754899s ago: executing program 33 (id=677):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/UDC\x00', 0x400, 0x0)

2m59.402542044s ago: executing program 1 (id=801):
fdatasync(0xffffffffffffffff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080), 0xff, 0x55b, &(0x7f0000000f40)="$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")
open(&(0x7f00000000c0)='.\x00', 0xfb3bdc61155d168b, 0xa)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
mount$9p_tcp(0x0, 0x0, &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='tr'])
close(0x3)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x0)

2m57.864459244s ago: executing program 1 (id=810):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000000240)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
read$FUSE(r0, &(0x7f0000003c80)={0x2020}, 0xfffffceb)

2m57.159135119s ago: executing program 1 (id=817):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000940)}, 0x400c0c0)
open(0x0, 0x80242, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000700)={[{@inode32}, {@huge_never}]})

2m55.717387007s ago: executing program 1 (id=822):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4c6, &(0x7f0000000100)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000640)='usrjqBrCK=\x8a\x05\x00\xbc\xb6\xc9\xe1\xd4n\xe1\xdf')

2m55.151224292s ago: executing program 1 (id=832):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffff2e, 0xffffffff, 0x8001, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x80000000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4241, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x200000000, 0xfffffff8, 0x2})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000040)=0x2)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0)

2m53.627955837s ago: executing program 1 (id=839):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl(r0, 0x8916, &(0x7f0000000200)="76657468303a3000000000000000000002")

2m52.730632725s ago: executing program 34 (id=839):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl(r0, 0x8916, &(0x7f0000000200)="76657468303a3000000000000000000002")

1m35.556286532s ago: executing program 3 (id=1256):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@bsdgroups}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x6}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@orlov}], [], 0x2c}, 0x81, 0x465, &(0x7f0000000480)="$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")
chdir(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000180))
fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

1m34.139593054s ago: executing program 3 (id=1264):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x8a, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x2, 0x8, {0x400000006, 0x9, 0x4, 0x80000000000000ff, 0x6, 0x0, 0x7fffffff, 0x58, 0x3, 0x2000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0})
getdents64(r4, &(0x7f0000000100)=""/134, 0x86)

1m32.955389605s ago: executing program 3 (id=1268):
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x2000a, 0x0, 0x3, 0x0, 0x0)

1m32.775467155s ago: executing program 3 (id=1273):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
mkdir(0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, 0x0, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)

1m32.243305852s ago: executing program 3 (id=1274):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@bsdgroups}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x6}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@orlov}], [], 0x2c}, 0x81, 0x465, &(0x7f0000000480)="$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")
chdir(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000180))
fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

1m31.406656776s ago: executing program 3 (id=1283):
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x2000a, 0x0, 0x3, 0x0, 0x0)

1m31.068339191s ago: executing program 35 (id=1283):
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x2000a, 0x0, 0x3, 0x0, 0x0)

8.049172826s ago: executing program 6 (id=1699):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000940)}, 0x400c0c0)
open(0x0, 0x80242, 0x0)
r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000700)={[{@inode32}, {@huge_never}]})
getcwd(&(0x7f00000003c0)=""/220, 0xdc)

7.746080733s ago: executing program 8 (id=1700):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffff]}, 0x8, 0x400)
read$watch_queue(r0, &(0x7f0000000300)=""/176, 0xb0)
rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8)
open(0x0, 0x80ff, 0x88)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000200)="c7", 0x1)

7.456014646s ago: executing program 8 (id=1704):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0xa20, 0x8000c65)
mremap(&(0x7f0000b24000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f000007f000/0x3000)=nil)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2)
sendfile(r2, r2, 0x0, 0x8000000f3aa6ea)

7.429217953s ago: executing program 7 (id=1705):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0)

6.270885738s ago: executing program 7 (id=1707):
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r0, 0x8b1b, &(0x7f0000000040))

6.128246489s ago: executing program 8 (id=1708):
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x802, 0x0)
ftruncate(0xffffffffffffffff, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

4.941243401s ago: executing program 4 (id=1710):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000008440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=[@ip_retopts={{0x18, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x4, 0xc, 0x1, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x50}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x48}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x5, 0x2}]}]}}}], 0x18}}], 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$inet(0x2, 0x200000003, 0x84)
fcntl$setlease(r4, 0x400, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20)
setns(0xc9, 0x8000000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0)
unshare(0x600)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="00000000000000000000000014000000000000000f7ffb80e25d5f2f9054e28f447018f3bea612ae3e0335dc589f050c11149d26aea13262277784e2c6fc930e10ed00349adb68ab47825d0d19594936aadb9a907bda1a0dc198abd17a25a0065af3799a1d90d80f85e7a42b7769560d4f1681063bd076ce1c93101e94863dd03afb05cf0432b65a7f281985b6ead427683f1cada4bcd74c90d9209b363296cf257de366311ca4d41585ab1cce3e3b079aec750b4569e14a78436aa29a578c693a4d5e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6, <r8=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000005d42f4ff100000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.790643984s ago: executing program 7 (id=1712):
socket$inet6(0xa, 0x2, 0x0)
setresuid(0x0, 0xee01, 0x0)
r0 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
socket(0x9, 0x803, 0x3)
r1 = syz_pidfd_open(r0, 0x0)
process_mrelease(r1, 0x700000000000000)

4.681315718s ago: executing program 7 (id=1713):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
memfd_create(0x0, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6a}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
unshare(0x20060400)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000440)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c}, 0x48)

3.971177095s ago: executing program 0 (id=1714):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffff]}, 0x8, 0x400)
read$watch_queue(r0, &(0x7f0000000300)=""/176, 0xb0)
rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8)
open(0x0, 0x80ff, 0x88)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$eJzs3U1rG9caAOB3ZClfzr12IIR77+ISyKIpIXJs9yOFQtJlaUMD7T4VtmKC5ShYcojdQJNFs+mmhEIpDZT+gO67DP0D/RWBNhBKMO2iFFxGHjmKJfkrcqVGzwOTnKMZzTlHZ96jMzOSFcDQOpn+k4v4b0R8kUSMtazLR7by5Pp2q09vz6RLEmtrH/6axIVN+0qy/0ezzH8i4sfPIs7k2sutLa/MlyqV8mKWn6gv3JioLa+cvbZQmivPla9PTU+ff3166q033+hZW1+9/PvXHzx89/znp1a/+v7xsftJXIyj2bq0XT0o4k5r5mTpzyxViIubNpzsQWGDJOl3BdiTkSzOC5GOAWMxkkU98PL7NCLWgCGViH8YUs15QPPcvkfnwf8YT95ZPwFqb39+/dpIHGqcGx1ZTZ47M0rPd8d7UH5axg+/PLifLrH1dYjD2+QBduXO3Yg4l8+3j39JNv7t3bnGxeOtbS5j2N5/oJ8epvOf5E5EW/znNuY/0WH+M9ohdvfi2T7WpzPt8Z973INiukrnf293nP9uDF3jI1nuX405XyG5eq1SPhcR/46I01E4mOa3up9zfvXRWrd1rfO/dEnLb84Fs3o8zh98/jmzpXrpRdrc6sndiP91nP8mG/2fdOj/9PW4vMMyTpQf/L/buu3bv7/Wvot4pWP/P7ujlWx9f3KicTxMNI+Kdr/dO/FTt/L73f60/49s3f7xpPV+ba3rrrreOPr20B/lbuv2evwfSD5qpA9kj90q1euLkxEHkvfzo5sfn3r23Ga+uX3a/tOnOsf/Vsd/Olp93PWleN694/e6bjoI/T+7q/7ffeLRe5980638nfX/a43U6eyRnYx/O63gi7x2AAAAAAAAMGhyEXE0klxxI53LFYvrn+84HkdylWqtfuZqden6bDS+KzsehVzzTvdYy+chJrPPwzbzU5vy0xFxLCK+HDncyBdnqpXZfjceAAAAAAAAAAAAAAAAAAAABsRol+//p34e6XftgH3X+GGDg/2uBdAP2/7kfy9+6QkYSNvGP/DS2n38uzIALwvv/zC8xD8ML/EPw2un8V8Y2+eKAH877/8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NTlS5fSZW316e2ZND97c3lpvnrz7Gy5Nl9cWJopzlQXbxTnqtW5Srk4U13Ybn+VavXG5FQs3Zqol2v1idryypWF6tL1+pVrC6W58pVywR8bBgAAAAAAAAAAAAAAAAAAgDa15ZX5UqVSXpTomrgQA1GN/Wzguj09PT8orZDoaaLPAxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtPgrAAD//20CM10=")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000200)="c7", 0x1)

3.859933339s ago: executing program 8 (id=1715):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4})
write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x430f, 0x8)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0)
write(r3, &(0x7f0000000140)='!*ys:evt:m', 0xa)

3.85714633s ago: executing program 4 (id=1716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd2c, 0x1, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2000004, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)

3.771475559s ago: executing program 6 (id=1717):
r0 = timerfd_create(0x0, 0x80000)
close_range(r0, 0xffffffffffffffff, 0x2)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = eventfd2(0x6, 0x1)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2})
close_range(r0, r2, 0x2)

3.740856546s ago: executing program 0 (id=1718):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@acl}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noblock_validity}, {@noauto_da_alloc}, {@abort}, {@journal_async_commit}, {@auto_da_alloc}]}, 0x1, 0x5c4, &(0x7f0000000600)="$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")
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@nombcache}]}, 0x1, 0xbe7, &(0x7f0000000fc0)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000))

3.657996514s ago: executing program 8 (id=1719):
r0 = syz_usb_connect$hid(0x2, 0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000206a05160000000000000109022400010000a0200904000d02030005000921011002012206000905810310"], 0x0)
timer_create(0xfffffffffffffffc, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002206000000a3979d10b854"], 0x0}, 0x0)

3.573600582s ago: executing program 4 (id=1720):
r0 = socket(0x840000000002, 0x3, 0x101)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'wg2\x00', {0x2, 0x0, @local}})

3.504680757s ago: executing program 6 (id=1721):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_PBUF_RING(0x0, 0x9, 0x8, 0x10, r4, 0x851669a8)
r5 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x13, 0xa8c, 0x30}, 0x2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
fcntl$lock(r6, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0xfffffffffffff02f})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff)

3.397783631s ago: executing program 4 (id=1722):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x2004054, &(0x7f00000011c0)={[{@mode={'mode', 0x3d, 0x7}}, {@longad}, {@mode={'mode', 0x3d, 0xcc}}, {@anchor={'anchor', 0x3d, 0x1}}, {@rootdir={'rootdir', 0x3d, 0x6}}, {}, {@uid_forget}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0xffffffffffffffff}}, {@uid_ignore}, {@unhide}, {@unhide}, {@utf8}, {@fileset={'fileset', 0x3d, 0x2000000000e42}}, {@undelete}, {@partition={'partition', 0x3d, 0x2}}, {@utf8}, {@rootdir={'rootdir', 0x3d, 0x1}}], [{@dont_measure}, {@subj_type={'subj_type', 0x3d, '\x00\x00\x00\x00.'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'longad'}}, {@smackfstransmute}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@seclabel}]}, 0x1, 0xc43, &(0x7f0000000200)="$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")
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180))
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
readahead(0xffffffffffffffff, 0x5, 0x1)
rename(&(0x7f0000000080)='.\x02\x00', &(0x7f0000000100)='.\x02/file0\x00')

3.352696271s ago: executing program 0 (id=1723):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
fchmod(r0, 0x9)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@noinit_itable}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000950000000000000000dbefe005177d77893fd7efffe0946197045dc11afa229fe77de06ed83ff9fcf9063de20d"], &(0x7f0000000040)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0)
socket$packet(0x11, 0x3, 0x300)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x7)

2.228397819s ago: executing program 0 (id=1724):
setgroups(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x1, 0x7e5, &(0x7f00000018c0)="$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")
r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000})
fallocate(r0, 0x0, 0x0, 0x8800000)

1.374478217s ago: executing program 6 (id=1725):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x400000000010, 0x3, 0x0)
getpeername$packet(r0, 0x0, &(0x7f0000000100))

1.273360839s ago: executing program 4 (id=1726):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x40000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x11, 0x0, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000cc0)={{r1}, "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"})

1.056748097s ago: executing program 8 (id=1727):
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000940)}, 0x400c0c0)
open(0x0, 0x80242, 0x0)
r4 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000700)={[{@inode32}, {@huge_never}]})
getcwd(&(0x7f00000003c0)=""/220, 0xdc)

1.002624539s ago: executing program 6 (id=1728):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffff]}, 0x8, 0x400)
read$watch_queue(r0, &(0x7f0000000300)=""/176, 0xb0)
rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8)
open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
open(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$eJzs3U1rG9caAOB3ZClfzr12IIR77+ISyKIpIXJs9yOFQtJlaUMD7T4VtmKC5ShYcojdQJNFs+mmhEIpDZT+gO67DP0D/RWBNhBKMO2iFFxGHjmKJfkrcqVGzwOTnKMZzTlHZ96jMzOSFcDQOpn+k4v4b0R8kUSMtazLR7by5Pp2q09vz6RLEmtrH/6axIVN+0qy/0ezzH8i4sfPIs7k2sutLa/MlyqV8mKWn6gv3JioLa+cvbZQmivPla9PTU+ff3166q033+hZW1+9/PvXHzx89/znp1a/+v7xsftJXIyj2bq0XT0o4k5r5mTpzyxViIubNpzsQWGDJOl3BdiTkSzOC5GOAWMxkkU98PL7NCLWgCGViH8YUs15QPPcvkfnwf8YT95ZPwFqb39+/dpIHGqcGx1ZTZ47M0rPd8d7UH5axg+/PLifLrH1dYjD2+QBduXO3Yg4l8+3j39JNv7t3bnGxeOtbS5j2N5/oJ8epvOf5E5EW/znNuY/0WH+M9ohdvfi2T7WpzPt8Z973INiukrnf293nP9uDF3jI1nuX405XyG5eq1SPhcR/46I01E4mOa3up9zfvXRWrd1rfO/dEnLb84Fs3o8zh98/jmzpXrpRdrc6sndiP91nP8mG/2fdOj/9PW4vMMyTpQf/L/buu3bv7/Wvot4pWP/P7ujlWx9f3KicTxMNI+Kdr/dO/FTt/L73f60/49s3f7xpPV+ba3rrrreOPr20B/lbuv2evwfSD5qpA9kj90q1euLkxEHkvfzo5sfn3r23Ga+uX3a/tOnOsf/Vsd/Olp93PWleN694/e6bjoI/T+7q/7ffeLRe5980638nfX/a43U6eyRnYx/O63gi7x2AAAAAAAAMGhyEXE0klxxI53LFYvrn+84HkdylWqtfuZqden6bDS+KzsehVzzTvdYy+chJrPPwzbzU5vy0xFxLCK+HDncyBdnqpXZfjceAAAAAAAAAAAAAAAAAAAABsRol+//p34e6XftgH3X+GGDg/2uBdAP2/7kfy9+6QkYSNvGP/DS2n38uzIALwvv/zC8xD8ML/EPw2un8V8Y2+eKAH877/8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NTlS5fSZW316e2ZND97c3lpvnrz7Gy5Nl9cWJopzlQXbxTnqtW5Srk4U13Ybn+VavXG5FQs3Zqol2v1idryypWF6tL1+pVrC6W58pVywR8bBgAAAAAAAAAAAAAAAAAAgDa15ZX5UqVSXpTomrgQA1GN/Wzguj09PT8orZDoaaLPAxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtPgrAAD//20CM10=")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000200)="c7", 0x1)

957.874879ms ago: executing program 0 (id=1729):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4})
write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x430f, 0x8)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0)
write(r3, &(0x7f0000000140)='!*ys:evt:m', 0xa)

219.099391ms ago: executing program 4 (id=1730):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
poll(&(0x7f0000000140)=[{r3, 0x8}], 0x1, 0x8000007)

170.162402ms ago: executing program 7 (id=1731):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2006c08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)

109.501095ms ago: executing program 6 (id=1732):
fanotify_mark(0xffffffffffffffff, 0x2, 0x40000008, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0xfffffffa)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="856d86", 0x3}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x200040e0}, 0x40000)
close_range(r0, 0xffffffffffffffff, 0x0)

65.640175ms ago: executing program 0 (id=1733):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x737}, @IFLA_BR_STP_STATE={0x8}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x4c}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 7 (id=1734):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
write(r0, &(0x7f0000000300)="c193c3330c54b5ff96ea29bca00cb5ae27481678b91796c036294ae2f114e4a131afb4496becbf3b57a5d966a638cd7ced4039a6eb517492bc2510012f72fab5cd10c36073817928f86791f49834f7de41e04aa37491cae08a", 0x59)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0)
close_range(r2, r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0x3, 0x1}, {0x6}]}]}}, &(0x7f0000001b80)=""/4090, 0x3e, 0xffa, 0xa}, 0x28)
unshare(0x60000600)
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0)
write(r5, &(0x7f0000000300)='bfq', 0x3)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x1000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

ice number 8 using dummy_hcd
[  176.593592][  T130] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  176.707321][ T6389] usb 5-1: config index 0 descriptor too short (expected 539, got 27)
[  176.749044][ T6389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 102, changing to 4
[  176.811273][  T130] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  176.885903][  T130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  176.937828][ T6389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 1023
[  177.054378][  T130] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  177.118055][ T6389] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  177.170580][ T6389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.179309][  T130] usb 2-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  177.193485][ T6389] usb 5-1: Product: syz
[  177.197697][ T6389] usb 5-1: Manufacturer: syz
[  177.202532][  T130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.219293][ T6389] usb 5-1: SerialNumber: syz
[  177.226827][  T130] usb 2-1: config 0 descriptor??
[  177.256292][ T6389] usb 5-1: config 0 descriptor??
[  177.289400][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  177.300508][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  177.316245][ T6412] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.338757][ T6389] hub 5-1:0.0: bad descriptor, ignoring hub
[  177.351911][ T6389] hub: probe of 5-1:0.0 failed with error -5
[  177.376134][ T6389] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14
[  177.407020][ T6389] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  177.425121][ T6389] usbtouchscreen: probe of 5-1:0.0 failed with error -22
[  177.441581][ T6669] loop1: detected capacity change from 0 to 512
[  177.505856][ T6389] usb 5-1: USB disconnect, device number 8
[  177.558509][ T6669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  177.585426][ T6669] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.880114][  T130] wacom 0003:056A:00B3.000C: item fetching failed at offset 0/6
[  177.913951][  T130] wacom 0003:056A:00B3.000C: parse failed
[  177.919800][  T130] wacom: probe of 0003:056A:00B3.000C failed with error -22
[  178.054107][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  178.066154][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  178.085080][ T6712] fuse: Bad value for 'fd'
[  178.271069][ T6717] loop3: detected capacity change from 0 to 1024
[  178.273680][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  178.290567][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  178.291563][ T6717] EXT4-fs: Ignoring removed nobh option
[  178.351289][ T6718] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4270] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6718]
[  178.414317][ T6412] device veth0_vlan entered promiscuous mode
[  178.527822][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  178.576896][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  178.715291][ T6412] device veth1_vlan entered promiscuous mode
[  178.855722][ T4274] Bluetooth: hci4: command 0x0405 tx timeout
[  178.865911][ T6719] overlayfs: failed to resolve './bus': -2
[  178.872263][ T6717] EXT4-fs: inline encryption not supported
[  178.911794][ T6717] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  179.004469][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  179.013846][ T6717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  179.037963][ T6729] 9pnet_fd: Insufficient options for proto=fd
[  179.054195][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  179.115086][ T6412] device veth0_macvtap entered promiscuous mode
[  179.137741][ T6412] device veth1_macvtap entered promiscuous mode
[  179.190213][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.216797][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.231125][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.243173][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.265423][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.279019][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.291440][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.307599][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.362592][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.387246][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  179.514046][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  179.637927][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  179.796683][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  180.042470][   T14] usb 2-1: USB disconnect, device number 7
[  180.057389][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  180.124451][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  180.197379][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.226365][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.258223][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.271727][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.307686][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.325897][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.364216][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.397418][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.409190][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.449597][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  180.549920][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.605875][ T6412] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.663988][ T6412] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.672738][ T6412] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.682002][ T6412] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.690989][ T6762] fuse: Bad value for 'fd'
[  181.997860][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.028679][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.087029][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  182.140062][ T6759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.150591][ T6777] 9pnet_fd: Insufficient options for proto=fd
[  182.165126][ T6759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.207236][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  182.337597][ T6779] loop3: detected capacity change from 0 to 1024
[  183.683618][ T6796] loop3: detected capacity change from 0 to 2048
[  184.093923][ T6796] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  184.117943][ T6803] loop6: detected capacity change from 0 to 256
[  184.257473][ T6803] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  184.503176][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  184.602224][ T6820] 9pnet_fd: Insufficient options for proto=fd
[  184.696550][ T6819] loop6: detected capacity change from 0 to 512
[  184.782836][ T6823] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  185.271919][ T6819] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  185.324349][ T6819] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.790: invalid indirect mapped block 256 (level 1)
[  185.489472][ T6819] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.790: invalid indirect mapped block 2683928664 (level 1)
[  185.501683][ T6831] loop3: detected capacity change from 0 to 1024
[  185.561407][ T6831] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  185.580688][ T6819] EXT4-fs (loop6): 1 truncate cleaned up
[  185.583328][ T6831] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  185.621114][ T6819] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  185.644720][ T6831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c01c, mo2=0002]
[  185.683510][ T6831] System zones: 0-1, 3-36
[  185.903362][ T6831] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  186.052015][ T6840] loop4: detected capacity change from 0 to 1024
[  186.302611][ T6412] EXT4-fs (loop6): unmounting filesystem.
[  186.436801][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  186.523635][ T6849] loop1: detected capacity change from 0 to 512
[  186.571028][ T6849] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  186.664853][ T6849] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.801: bad orphan inode 13
[  186.718989][ T6849] ext4_test_bit(bit=12, block=18) = 1
[  187.352657][ T6849] is_bad_inode(inode)=0
[  187.380548][ T6849] NEXT_ORPHAN(inode)=0
[  187.424034][ T6849] max_ino=32
[  187.427290][ T6849] i_nlink=1
[  187.430481][ T6849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  187.516585][ T6849] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  187.542403][ T6849] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.801: bg 0: block 248: padding at end of block bitmap is not set
[  187.590537][ T6849] Quota error (device loop1): write_blk: dquota write failed
[  187.619027][ T6849] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  187.662992][ T6872] FAULT_INJECTION: forcing a failure.
[  187.662992][ T6872] name failslab, interval 1, probability 0, space 0, times 0
[  187.676844][ T6849] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.801: Failed to acquire dquot type 1
[  187.723342][ T6872] CPU: 0 PID: 6872 Comm: syz.0.804 Not tainted syzkaller #0
[  187.730686][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  187.740765][ T6872] Call Trace:
[  187.744059][ T6872]  <TASK>
[  187.747087][ T6872]  dump_stack_lvl+0x188/0x24e
[  187.751807][ T6872]  ? show_regs_print_info+0x12/0x12
[  187.757040][ T6872]  ? load_image+0x410/0x410
[  187.761577][ T6872]  ? __might_sleep+0xd0/0xd0
[  187.766185][ T6872]  ? __lock_acquire+0x7c40/0x7c40
[  187.771233][ T6872]  ? __might_sleep+0xd0/0xd0
[  187.775842][ T6872]  should_fail_ex+0x390/0x4c0
[  187.780553][ T6872]  should_failslab+0x5/0x20
[  187.785068][ T6872]  slab_pre_alloc_hook+0x59/0x300
[  187.790114][ T6872]  kmem_cache_alloc_lru+0x49/0x2e0
[  187.795239][ T6872]  ? sock_alloc_inode+0x24/0xc0
[  187.800109][ T6872]  sock_alloc_inode+0x24/0xc0
[  187.804798][ T6872]  ? sockfs_init_fs_context+0xa0/0xa0
[  187.810168][ T6872]  new_inode_pseudo+0x5f/0x1c0
[  187.814933][ T6872]  __sock_create+0x129/0x940
[  187.819520][ T6872]  ? __might_fault+0xa6/0x120
[  187.824196][ T6872]  ? __might_fault+0xc2/0x120
[  187.828874][ T6872]  __sys_socketpair+0x1bd/0x540
[  187.833735][ T6872]  __x64_sys_socketpair+0x97/0xb0
[  187.838758][ T6872]  do_syscall_64+0x4c/0xa0
[  187.843164][ T6872]  ? clear_bhb_loop+0x60/0xb0
[  187.847832][ T6872]  ? clear_bhb_loop+0x60/0xb0
[  187.852499][ T6872]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  187.858392][ T6872] RIP: 0033:0x7fe150f9e159
[  187.862812][ T6872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.882412][ T6872] RSP: 002b:00007fe151edc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  187.890822][ T6872] RAX: ffffffffffffffda RBX: 00007fe151225fa0 RCX: 00007fe150f9e159
[  187.898789][ T6872] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  187.906749][ T6872] RBP: 00007fe15103506b R08: 0000000000000000 R09: 0000000000000000
[  187.914707][ T6872] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  187.922687][ T6872] R13: 00007fe151226038 R14: 00007fe151225fa0 R15: 00007ffde8df1de8
[  187.930664][ T6872]  </TASK>
[  187.968113][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  187.998015][ T6878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.019837][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  188.032089][ T6872] socket: no more sockets
[  188.096357][ T6759] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  188.116667][ T6759] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:13: Failed to release dquot type 1
[  188.356588][ T6896] loop1: detected capacity change from 0 to 1764
[  189.212945][ T6912] loop6: detected capacity change from 0 to 256
[  189.414469][ T6912] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205a7fec, utbl_chksum : 0xe619d30d)
[  190.179245][ T6921] ALSA: seq fatal error: cannot create timer (-19)
[  190.272182][ T6932] loop1: detected capacity change from 0 to 512
[  190.306530][ T6932] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.822: bg 0: block 5: invalid block bitmap
[  190.388921][ T6932] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  190.406655][ T6940] loop4: detected capacity change from 0 to 128
[  190.431920][ T6940] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  190.462416][ T6932] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.822: invalid indirect mapped block 3 (level 2)
[  190.516905][ T6932] EXT4-fs (loop1): 1 orphan inode deleted
[  190.564412][ T6932] EXT4-fs (loop1): 1 truncate cleaned up
[  190.584566][ T6932] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  190.634064][ T6932] ext4: Unknown parameter 'usrjqBrCK'
[  190.680705][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  190.712577][ T4270] EXT4-fs error (device loop1): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  190.738881][ T6950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  190.892076][ T4270] EXT4-fs error (device loop1): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  192.154152][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  192.495904][ T4961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.090242][ T4961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.283889][ T6994] loop3: detected capacity change from 0 to 16
[  193.322540][ T6994] erofs: (device loop3): mounted with root inode @ nid 36.
[  193.336636][ T4961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.506859][ T4961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.832784][ T7009] loop3: detected capacity change from 0 to 1024
[  194.134399][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.149259][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.863427][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  194.883589][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.892658][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.901822][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.909683][ T4274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  194.917677][ T4274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  195.584002][ T7029] chnl_net:caif_netlink_parms(): no params data found
[  195.841926][ T7061] loop3: detected capacity change from 0 to 2048
[  195.875100][ T7061] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  195.941141][ T7029] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.961801][ T7061] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  195.974489][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.982561][ T7029] device bridge_slave_0 entered promiscuous mode
[  196.012498][ T7061] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  196.203343][ T4276] Bluetooth: hci2: command 0x0406 tx timeout
[  196.210950][ T4276] Bluetooth: hci3: command 0x0406 tx timeout
[  196.220151][ T4276] Bluetooth: hci1: command 0x0406 tx timeout
[  196.295498][ T7061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.920136][ T7029] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.940043][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.967279][ T7029] device bridge_slave_1 entered promiscuous mode
[  197.003355][ T4274] Bluetooth: hci0: command 0x0409 tx timeout
[  197.050163][ T7029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.061951][ T7029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.213400][   T14] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  197.346314][ T7029] team0: Port device team_slave_0 added
[  197.384044][ T4961] device hsr_slave_0 left promiscuous mode
[  197.414424][ T4961] device hsr_slave_1 left promiscuous mode
[  197.421651][   T14] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  197.453344][   T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  197.483308][   T14] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  197.523304][   T14] usb 7-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  197.552785][   T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.590407][   T14] usb 7-1: config 0 descriptor??
[  197.595661][ T7088] capability: warning: `syz.0.867' uses 32-bit capabilities (legacy support in use)
[  197.635188][ T4961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.642856][ T4961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.709287][ T4961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.727242][ T4961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.792051][ T4961] device bridge_slave_1 left promiscuous mode
[  197.803585][ T4961] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.825808][ T7076] loop6: detected capacity change from 0 to 512
[  197.865442][ T4961] device bridge_slave_0 left promiscuous mode
[  197.872825][ T4961] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.915892][ T7076] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  197.965571][ T7076] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.059117][ T4961] device veth1_macvtap left promiscuous mode
[  198.093205][ T4961] device veth0_macvtap left promiscuous mode
[  198.136393][ T4961] device veth1_vlan left promiscuous mode
[  198.142259][ T4961] device veth0_vlan left promiscuous mode
[  198.262421][   T14] wacom 0003:056A:00B3.000D: item fetching failed at offset 0/6
[  198.291040][   T14] wacom 0003:056A:00B3.000D: parse failed
[  198.310909][   T14] wacom: probe of 0003:056A:00B3.000D failed with error -22
[  198.724770][ T7104] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6412] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7104]
[  198.749932][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.759522][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.083305][ T4274] Bluetooth: hci0: command 0x041b tx timeout
[  199.325239][ T7107] FAULT_INJECTION: forcing a failure.
[  199.325239][ T7107] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.357589][ T7107] CPU: 1 PID: 7107 Comm: syz.3.868 Not tainted syzkaller #0
[  199.364942][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  199.375014][ T7107] Call Trace:
[  199.378309][ T7107]  <TASK>
[  199.381257][ T7107]  dump_stack_lvl+0x188/0x24e
[  199.385957][ T7107]  ? show_regs_print_info+0x12/0x12
[  199.391175][ T7107]  ? load_image+0x410/0x410
[  199.395709][ T7107]  ? __lock_acquire+0x7c40/0x7c40
[  199.400766][ T7107]  should_fail_ex+0x390/0x4c0
[  199.405482][ T7107]  _copy_from_user+0x2c/0x170
[  199.410181][ T7107]  __se_sys_mount+0x175/0x3d0
[  199.414886][ T7107]  ? __x64_sys_mount+0xc0/0xc0
[  199.419676][ T7107]  ? lockdep_hardirqs_on+0x94/0x140
[  199.424896][ T7107]  ? __x64_sys_mount+0x1c/0xc0
[  199.429718][ T7107]  do_syscall_64+0x4c/0xa0
[  199.434149][ T7107]  ? clear_bhb_loop+0x60/0xb0
[  199.438838][ T7107]  ? clear_bhb_loop+0x60/0xb0
[  199.443529][ T7107]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  199.449446][ T7107] RIP: 0033:0x7f33f739f3ca
[  199.453882][ T7107] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.473505][ T7107] RSP: 002b:00007f33f8295e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  199.481942][ T7107] RAX: ffffffffffffffda RBX: 00007f33f8295ee0 RCX: 00007f33f739f3ca
[  199.489929][ T7107] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000000
[  199.497914][ T7107] RBP: 0000200000000240 R08: 00007f33f8295ee0 R09: 0000000000010008
[  199.505914][ T7107] R10: 0000000000010008 R11: 0000000000000246 R12: 0000000000000000
[  199.513906][ T7107] R13: 00007f33f8295ea0 R14: 0000000000000000 R15: 0000200000000300
[  199.521906][ T7107]  </TASK>
[  200.077511][ T4961] team0 (unregistering): Port device team_slave_1 removed
[  200.149350][ T4961] team0 (unregistering): Port device team_slave_0 removed
[  200.210301][ T4961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.320673][ T6389] usb 7-1: USB disconnect, device number 2
[  200.321162][ T6412] EXT4-fs (loop6): unmounting filesystem.
[  200.381143][ T4961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.164877][ T4274] Bluetooth: hci0: command 0x040f tx timeout
[  201.724991][ T4961] bond0 (unregistering): Released all slaves
[  202.235377][ T7135] loop3: detected capacity change from 0 to 2048
[  202.256697][ T7135] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  202.269588][ T7135] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  202.291510][ T7135] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  202.315625][ T7135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.343898][ T7029] team0: Port device team_slave_1 added
[  202.349819][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'.
[  202.412638][ T7137] loop6: detected capacity change from 0 to 2048
[  202.434917][ T7137] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  202.486554][ T7137] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  202.552147][ T7137] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  202.592234][ T7137] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.243731][ T4274] Bluetooth: hci0: command 0x0419 tx timeout
[  203.417786][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.624333][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.053382][ T7029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.101214][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.115371][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.192444][ T7029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.386900][ T7029] device hsr_slave_0 entered promiscuous mode
[  204.453691][ T7029] device hsr_slave_1 entered promiscuous mode
[  204.523608][ T7029] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.542889][ T7029] Cannot create hsr debugfs directory
[  205.390668][ T7172] sch_tbf: burst 240 is lower than device lo mtu (1554) !
[  206.538508][ T7029] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  206.576826][ T7029] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  206.659758][ T7029] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  206.696518][ T7029] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  206.973648][ T7029] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.047526][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  207.061058][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  207.240118][ T7029] 8021q: adding VLAN 0 to HW filter on device team0
[  207.511439][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  207.630236][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  207.857070][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.864261][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.966398][ T7218] loop4: detected capacity change from 0 to 128
[  207.975425][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  207.990125][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  208.015330][ T7218] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  208.028348][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  208.038622][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.045788][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.058135][ T7218] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  208.095597][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  208.124267][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  208.159175][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  208.216016][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  208.256744][ T6962] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  208.309320][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  208.361735][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  208.429443][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  208.458127][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  208.458153][ T7232] loop4: detected capacity change from 0 to 1024
[  208.471771][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  208.486625][ T7029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  208.525329][ T7029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  208.529522][ T7232] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  208.555679][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  208.567244][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  208.669568][ T7232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  208.714807][ T7232] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  209.560753][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  209.907404][ T7258] loop3: detected capacity change from 0 to 512
[  209.919727][ T7258] EXT4-fs: Ignoring removed nobh option
[  209.934536][ T7258] EXT4-fs (loop3): Test dummy encryption mode enabled
[  209.941421][ T7258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  210.002215][ T7262] device syzkaller0 entered promiscuous mode
[  210.030090][ T7258] EXT4-fs (loop3): 1 truncate cleaned up
[  210.035923][ T7258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  210.226102][ T7264] device syzkaller0 left promiscuous mode
[  210.311824][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  210.359650][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  210.380273][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  210.422216][ T7029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.467686][ T7270] loop6: detected capacity change from 0 to 1024
[  210.482934][ T7270] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  210.549561][ T7270] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  210.582806][   T27] audit: type=1804 audit(1790932207.185:11): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.907" name="/newroot/32/file1/bus" dev="loop6" ino=18 res=1 errno=0
[  211.755581][ T6412] EXT4-fs (loop6): unmounting filesystem.
[  211.828640][ T7298] capability: warning: `syz.4.911' uses deprecated v2 capabilities in a way that may be insecure
[  212.129689][ T7314] loop6: detected capacity change from 0 to 2048
[  212.152803][ T7314] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  212.188607][ T7314] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  212.268283][ T7314] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  212.294057][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  212.356382][ T7314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.357005][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  212.440638][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  212.458005][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  212.495042][ T7029] device veth0_vlan entered promiscuous mode
[  212.509485][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  212.537379][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  212.600657][ T7029] device veth1_vlan entered promiscuous mode
[  213.310341][ T7337] loop6: detected capacity change from 0 to 1024
[  213.326499][ T7337] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  213.542315][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  213.616866][ T7337] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  213.639126][   T27] audit: type=1804 audit(1790932210.245:12): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.922" name="/newroot/35/file1/bus" dev="loop6" ino=18 res=1 errno=0
[  213.732727][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  213.848351][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  213.871169][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  213.892377][ T6412] EXT4-fs (loop6): unmounting filesystem.
[  213.916415][ T7029] device veth0_macvtap entered promiscuous mode
[  213.971755][ T7029] device veth1_macvtap entered promiscuous mode
[  214.074183][ T7349] loop4: detected capacity change from 0 to 8
[  214.096975][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.111042][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.140652][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.140924][ T7349] SQUASHFS error: Unable to read directory block [631:72]
[  214.151537][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.215960][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.244473][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.255105][ T6389] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  214.303282][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.328448][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.353982][ T7029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.378340][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.419982][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.464834][ T6389] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  214.486042][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.761597][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.934949][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.102602][ T6389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  215.114667][ T6389] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  215.127883][ T6389] usb 1-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  215.137021][ T6389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.148290][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.154486][ T6389] usb 1-1: config 0 descriptor??
[  215.173408][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.184252][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.208273][ T7029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.248786][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  215.269912][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  215.294797][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  215.324788][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  215.347444][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  215.357812][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  215.369658][ T7361] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  215.446039][ T7029] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.467021][ T7029] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.508663][ T7029] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.528068][ T7029] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.643695][ T6389] wacom 0003:056A:00B3.000E: item fetching failed at offset 0/6
[  215.676789][ T7073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.688592][ T6389] wacom 0003:056A:00B3.000E: parse failed
[  215.714840][ T7073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.724998][ T6389] wacom: probe of 0003:056A:00B3.000E failed with error -22
[  215.777295][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  215.831651][ T7073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.940958][ T7073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.982479][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  216.109481][ T7394] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7394]
[  216.134830][ T7394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.144241][ T7394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.013955][ T7401] loop3: detected capacity change from 0 to 2048
[  217.081113][ T7401] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  217.217431][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  217.315383][ T7415] loop4: detected capacity change from 0 to 128
[  217.343767][ T7415] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  217.363714][ T7418] loop6: detected capacity change from 0 to 128
[  217.394388][ T7415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.455827][   T27] audit: type=1800 audit(1790932214.065:13): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.939" name="file1" dev="loop4" ino=94 res=0 errno=0
[  217.724380][    T7] usb 1-1: USB disconnect, device number 9
[  217.814146][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'.
[  217.874569][ T7438] netlink: 'syz.0.948': attribute type 12 has an invalid length.
[  217.882398][ T7438] netlink: 'syz.0.948': attribute type 29 has an invalid length.
[  217.901197][ T7438] netlink: 148 bytes leftover after parsing attributes in process `syz.0.948'.
[  217.945002][ T7438] netlink: 59 bytes leftover after parsing attributes in process `syz.0.948'.
[  218.059669][ T7446] loop3: detected capacity change from 0 to 512
[  218.190625][ T7454] loop7: detected capacity change from 0 to 512
[  218.200647][ T7446] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  218.202154][ T7454] EXT4-fs: inline encryption not supported
[  218.243984][ T7446] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.949: invalid indirect mapped block 256 (level 1)
[  218.265040][ T7454] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.952: inode #1: comm syz.7.952: iget: illegal inode #
[  218.334931][ T7446] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.949: invalid indirect mapped block 2683928664 (level 1)
[  218.350020][ T7446] EXT4-fs (loop3): 1 truncate cleaned up
[  218.356103][ T7446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  218.393574][ T7454] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.952: error while reading EA inode 1 err=-117
[  218.547046][ T7454] EXT4-fs (loop7): 1 orphan inode deleted
[  218.571263][ T7454] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  219.542475][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  219.691274][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  220.033368][ T5882] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  220.057949][ T7496] loop6: detected capacity change from 0 to 4096
[  220.268931][ T7496] EXT4-fs: Ignoring removed mblk_io_submit option
[  220.711960][ T5882] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  220.739689][ T7496] EXT4-fs: Ignoring removed orlov option
[  220.744091][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  220.764293][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  220.793334][ T5882] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  220.795560][ T7496] EXT4-fs (loop6): Test dummy encryption mode enabled
[  220.834246][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.870869][ T7496] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  220.894246][ T5882] usb 5-1: config 0 descriptor??
[  221.165494][ T7496] fscrypt (loop6): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  221.192119][ T7479] loop4: detected capacity change from 0 to 512
[  221.301572][ T7479] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  221.335828][ T6412] EXT4-fs (loop6): unmounting filesystem.
[  221.361346][ T7479] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.647621][ T5882] wacom 0003:056A:00B3.000F: item fetching failed at offset 0/6
[  221.674552][ T5882] wacom 0003:056A:00B3.000F: parse failed
[  221.691661][ T5882] wacom: probe of 0003:056A:00B3.000F failed with error -22
[  221.761704][ T7543] loop7: detected capacity change from 0 to 512
[  221.872049][ T7543] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF
[  221.932192][ T7543] FAT-fs (loop7): Filesystem has been set read-only
[  222.046330][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.6.976'.
[  222.112160][ T7554] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7554]
[  222.137162][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.146564][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.408593][ T7550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.858017][ T7550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.768303][    T7] usb 5-1: USB disconnect, device number 9
[  223.788006][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  224.196094][ T7593] loop6: detected capacity change from 0 to 2048
[  224.221065][ T7592] input: syz1 as /devices/virtual/input/input15
[  224.241783][ T7593] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  224.272777][ T7593] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  224.343582][ T7593] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  224.363324][ T5882] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  224.374858][ T7593] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.657947][ T5882] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  224.888839][ T5882] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  225.121417][ T5882] usb 8-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  225.204175][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.243503][ T5882] usb 8-1: Product: syz
[  225.247996][ T5882] usb 8-1: Manufacturer: syz
[  225.252726][ T5882] usb 8-1: SerialNumber: syz
[  225.516517][ T4315] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  225.622155][ T5882] disable ehci-hcd to run US-144
[  225.634561][ T5882] disable ehci-hcd to run US-144
[  225.648663][ T7632] loop6: detected capacity change from 0 to 512
[  225.677230][ T5882] usb 8-1: USB disconnect, device number 2
[  225.715036][ T4315] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  225.737747][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  225.750227][ T4315] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  225.763589][ T4315] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  225.771509][ T7632] Quota error (device loop6): do_check_range: Getting dqdh_entries 64 out of range 0-14
[  225.772706][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.793434][ T4315] usb 5-1: config 0 descriptor??
[  225.818877][ T7632] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  225.844174][ T7632] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.999: Failed to acquire dquot type 1
[  225.862612][ T7632] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.999: corrupted inode contents
[  225.895755][ T7632] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #16: comm syz.6.999: mark_inode_dirty error
[  225.919952][ T7632] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.999: corrupted inode contents
[  225.936292][ T7632] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.999: mark_inode_dirty error
[  226.009207][ T7615] loop4: detected capacity change from 0 to 512
[  226.030997][ T7632] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.999: corrupted inode contents
[  226.093308][ T4274] Bluetooth: hci0: command 0x0411 tx timeout
[  226.116339][ T7632] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  226.139647][ T7632] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.999: corrupted inode contents
[  226.517038][ T7615] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  226.660923][ T7615] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.671877][ T7632] EXT4-fs error (device loop6): ext4_truncate:4325: inode #16: comm syz.6.999: mark_inode_dirty error
[  226.696123][ T7632] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  226.706947][ T7632] EXT4-fs (loop6): 1 truncate cleaned up
[  226.726548][ T7632] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  226.858881][ T7632] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.929766][ T4315] wacom 0003:056A:00B3.0010: item fetching failed at offset 0/6
[  226.954187][ T4315] wacom 0003:056A:00B3.0010: parse failed
[  227.082336][ T6412] EXT4-fs (loop6): unmounting filesystem.
[  227.106636][ T4315] wacom: probe of 0003:056A:00B3.0010 failed with error -22
[  227.406702][ T7660] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7660]
[  227.428803][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.438179][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.339532][ T7657] loop7: detected capacity change from 0 to 2048
[  228.358663][ T7657] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  228.409326][ T7657] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  228.453627][ T7657] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  228.501780][ T7657] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  229.003452][ T5882] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  229.055744][ T4320] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  229.151666][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  229.151802][ T4315] usb 5-1: USB disconnect, device number 10
[  229.195334][ T5882] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.226239][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  229.244907][ T4320] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  229.245338][ T7685] loop7: detected capacity change from 0 to 512
[  229.279495][ T4320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  229.299096][ T5882] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  229.322581][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  229.332841][ T4320] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  229.351060][ T5882] usb 4-1: SerialNumber: syz
[  229.364154][ T4320] usb 7-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  229.393389][ T4320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.395606][ T7685] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  229.402424][ T7688] loop4: detected capacity change from 0 to 2048
[  229.428956][ T4320] usb 7-1: config 0 descriptor??
[  229.463325][ T7685] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.492060][ T7688] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  229.561060][ T7688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  229.584754][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  229.589917][ T5882] usb 4-1: 0:2 : does not exist
[  229.647130][ T7676] loop6: detected capacity change from 0 to 512
[  229.720454][ T5882] usb 4-1: USB disconnect, device number 8
[  229.731774][ T7676] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  229.776924][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.797041][ T7676] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.024279][ T4320] wacom 0003:056A:00B3.0011: item fetching failed at offset 0/6
[  230.032960][ T4320] wacom 0003:056A:00B3.0011: parse failed
[  230.064193][ T4320] wacom: probe of 0003:056A:00B3.0011 failed with error -22
[  230.728245][ T7701] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  230.977923][ T7712] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6412] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7712]
[  230.994439][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.003030][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.354455][ T4320] usb 7-1: USB disconnect, device number 3
[  232.355192][ T6412] EXT4-fs (loop6): unmounting filesystem.
[  232.387030][ T7733] ip_tables: iptables: counters copy to user failed while replacing table
[  232.431125][ T7734] loop3: detected capacity change from 0 to 2048
[  232.505207][ T7734] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  232.535391][ T7734] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  232.868783][ T7734] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  233.339831][ T7747] Bluetooth: MGMT ver 1.22
[  233.628462][ T7734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  233.960760][ T4314] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  234.293353][ T4314] usb 5-1: Using ep0 maxpacket: 32
[  234.310964][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.526258][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.727418][ T4314] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  234.826415][ T4315] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  234.847340][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.965530][ T4314] usb 5-1: config 0 descriptor??
[  234.977399][ T4314] hub 5-1:0.0: USB hub found
[  235.039872][ T4315] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  235.051149][ T4315] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  235.109794][ T4315] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  235.179243][ T4314] hub 5-1:0.0: 1 port detected
[  235.256316][ T4315] usb 7-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  235.265923][ T4315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.288493][ T4315] usb 7-1: config 0 descriptor??
[  235.301469][ T7778] xt_hashlimit: max too large, truncated to 1048576
[  235.402300][ T7781] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  235.666528][ T7757] loop6: detected capacity change from 0 to 512
[  235.954601][ T7757] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  236.026876][ T7757] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.096429][ T4314] usb 5-1: USB disconnect, device number 11
[  236.255785][ T7795] loop3: detected capacity change from 0 to 128
[  236.270349][ T4315] wacom 0003:056A:00B3.0012: item fetching failed at offset 0/6
[  236.296493][ T4315] wacom 0003:056A:00B3.0012: parse failed
[  236.324715][ T4315] wacom: probe of 0003:056A:00B3.0012 failed with error -22
[  236.371260][ T7795] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  236.456314][ T7795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  236.490094][ T7795] ext2 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.779224][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  238.080920][ T7824] loop7: detected capacity change from 0 to 2048
[  238.089206][ T7824] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=4294967169, location=4294967169
[  238.293205][    C0] sched: RT throttling activated
[  238.328509][ T7824] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  238.340100][ T4314] usb 7-1: USB disconnect, device number 4
[  238.364697][ T7824] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  238.376411][ T7824] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  238.388967][ T7824] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=4294967169, location=4294967169
[  238.400388][ T7824] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  238.413643][ T7824] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  238.458270][ T7824] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  238.471268][ T7824] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=4294967169, location=4294967169
[  238.483517][ T7824] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  238.494681][ T7824] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  238.506711][ T6412] EXT4-fs (loop6): unmounting filesystem.
[  238.545562][ T7824] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  238.561309][ T7824] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=4294967169, location=4294967169
[  238.572497][ T7824] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  238.594350][ T7824] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  238.605674][ T7824] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  238.616491][ T7824] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1)
[  238.718475][ T7831] loop3: detected capacity change from 0 to 164
[  239.126112][ T7836] FAULT_INJECTION: forcing a failure.
[  239.126112][ T7836] name fail_futex, interval 1, probability 0, space 0, times 0
[  239.457654][ T7842] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  239.813318][ T7836] CPU: 0 PID: 7836 Comm: syz.0.1046 Not tainted syzkaller #0
[  239.820734][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  239.830800][ T7836] Call Trace:
[  239.834082][ T7836]  <TASK>
[  239.837014][ T7836]  dump_stack_lvl+0x188/0x24e
[  239.841700][ T7836]  ? show_regs_print_info+0x12/0x12
[  239.846907][ T7836]  ? load_image+0x410/0x410
[  239.851425][ T7836]  ? mark_lock+0x94/0x320
[  239.855766][ T7836]  ? __lock_acquire+0x1465/0x7c40
[  239.860810][ T7836]  should_fail_ex+0x390/0x4c0
[  239.865503][ T7836]  get_futex_key+0x1de/0x1000
[  239.870182][ T7836]  ? __stack_depot_save+0x35/0x480
[  239.875311][ T7836]  ? verify_lock_unused+0x140/0x140
[  239.880519][ T7836]  ? futex_setup_timer+0xc0/0xc0
[  239.885466][ T7836]  ? verify_lock_unused+0x140/0x140
[  239.890683][ T7836]  futex_wake+0x123/0x4f0
[  239.895024][ T7836]  ? futex_wake_mark+0x150/0x150
[  239.899989][ T7836]  do_futex+0x2e2/0x320
[  239.904166][ T7836]  ? __ia32_sys_get_robust_list+0x100/0x100
[  239.910073][ T7836]  ? __might_fault+0xc2/0x120
[  239.914768][ T7836]  mm_release+0x20a/0x330
[  239.919106][ T7836]  ? exit_robust_list+0x2ce/0x2f0
[  239.924139][ T7836]  ? exit_mm_release+0x30/0x30
[  239.928924][ T7836]  ? lockdep_hardirqs_on+0x94/0x140
[  239.934141][ T7836]  exit_mm+0xa0/0x350
[  239.938136][ T7836]  ? sysctl_delayacct+0x220/0x220
[  239.943178][ T7836]  ? do_exit+0x2570/0x2570
[  239.947602][ T7836]  ? mm_trace_rss_stat+0xa7/0x250
[  239.952638][ T7836]  ? sync_mm_rss+0x211/0x350
[  239.957250][ T7836]  do_exit+0x958/0x2570
[  239.961424][ T7836]  ? put_task_struct+0x80/0x80
[  239.966215][ T7836]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  239.972220][ T7836]  ? lock_chain_count+0x20/0x20
[  239.977095][ T7836]  ? _raw_spin_lock_irq+0xb7/0xf0
[  239.982139][ T7836]  do_group_exit+0x229/0x2e0
[  239.986728][ T7836]  ? lockdep_hardirqs_on+0x94/0x140
[  239.991927][ T7836]  get_signal+0x1259/0x1340
[  239.996441][ T7836]  arch_do_signal_or_restart+0xc4/0x1310
[  240.002069][ T7836]  ? lock_chain_count+0x20/0x20
[  240.006922][ T7836]  ? do_futex+0x310/0x320
[  240.011243][ T7836]  ? get_sigframe_size+0x10/0x10
[  240.016257][ T7836]  ? __ia32_sys_get_robust_list+0x100/0x100
[  240.022137][ T7836]  ? slab_free_freelist_hook+0x133/0x1b0
[  240.027773][ T7836]  ? exit_to_user_mode_loop+0x3b/0x110
[  240.033234][ T7836]  exit_to_user_mode_loop+0x70/0x110
[  240.038513][ T7836]  exit_to_user_mode_prepare+0xee/0x180
[  240.044055][ T7836]  syscall_exit_to_user_mode+0x16/0x40
[  240.049505][ T7836]  do_syscall_64+0x58/0xa0
[  240.053916][ T7836]  ? clear_bhb_loop+0x60/0xb0
[  240.058586][ T7836]  ? clear_bhb_loop+0x60/0xb0
[  240.063255][ T7836]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  240.069148][ T7836] RIP: 0033:0x7fe150f9e159
[  240.073555][ T7836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.093162][ T7836] RSP: 002b:00007fe151edc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  240.101578][ T7836] RAX: fffffffffffffe00 RBX: 00007fe151225fa8 RCX: 00007fe150f9e159
[  240.109541][ T7836] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe151225fa8
[  240.117537][ T7836] RBP: 00007fe151225fa0 R08: 0000000000000000 R09: 0000000000000000
[  240.125509][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.133479][ T7836] R13: 00007fe151226038 R14: 00007ffde8df1d00 R15: 00007ffde8df1de8
[  240.141456][ T7836]  </TASK>
[  240.651033][ T7864] binder: 7851:7864 ioctl c0306201 0 returned -14
[  242.296342][ T7884] loop3: detected capacity change from 0 to 2048
[  242.405313][ T7894] loop6: detected capacity change from 0 to 512
[  242.514448][ T7884] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  242.565360][ T7884] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  242.596808][ T7894] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  242.610452][ T7894] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.656363][ T7884] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  242.713068][ T7884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.824725][ T6412] EXT4-fs (loop6): unmounting filesystem.
[  244.448362][ T7927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  244.771623][ T7942] loop7: detected capacity change from 0 to 512
[  244.853033][ T7942] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  244.886678][ T7942] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.069800][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  245.280823][ T7959] loop4: detected capacity change from 0 to 128
[  245.352688][   T27] audit: type=1804 audit(1790932241.955:14): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1077" name="/newroot/204/file0/bus" dev="loop4" ino=1048638 res=1 errno=0
[  245.419321][ T7959] ip_tables: iptables: counters copy to user failed while replacing table
[  245.496046][   T27] audit: type=1804 audit(1790932242.045:15): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1077" name="/newroot/204/file0/bus" dev="loop4" ino=1048638 res=1 errno=0
[  245.549000][ T7969] loop6: detected capacity change from 0 to 1024
[  245.559852][ T7969] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  245.616093][ T7969] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  245.632167][   T27] audit: type=1804 audit(1790932242.235:16): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1080" name="/newroot/61/file1/bus" dev="loop6" ino=18 res=1 errno=0
[  245.823027][ T7959] syz.4.1077: attempt to access beyond end of device
[  245.823027][ T7959] loop4: rw=2049, sector=145, nr_sectors = 56 limit=128
[  245.929524][ T7983] loop7: detected capacity change from 0 to 512
[  246.053007][ T7983] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  246.113128][ T7983] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.159729][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  246.172145][ T6759] kworker/u4:13: attempt to access beyond end of device
[  246.172145][ T6759] loop4: rw=1, sector=201, nr_sectors = 840 limit=128
[  246.652176][ T6412] EXT4-fs (loop6): unmounting filesystem.
[  246.917229][ T8013] loop6: detected capacity change from 0 to 256
[  246.944369][ T8013] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  246.971237][ T8013] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  247.004448][ T8013] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0x60b14e5c, utbl_chksum : 0xe619d30d)
[  247.040054][ T8013] exFAT-fs (loop6): failed to load alloc-bitmap
[  247.063686][ T8013] exFAT-fs (loop6): failed to recognize exfat type
[  247.395566][ T8018] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  247.601474][ T8035] loop6: detected capacity change from 0 to 1024
[  247.609639][ T8035] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  247.656937][ T8035] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  247.669634][   T27] audit: type=1804 audit(1790932244.275:17): pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1101" name="/newroot/66/file1/bus" dev="loop6" ino=18 res=1 errno=0
[  248.997972][ T8058] loop4: detected capacity change from 0 to 512
[  249.084482][ T8061] loop3: detected capacity change from 0 to 1024
[  249.118163][ T6412] EXT4-fs (loop6): unmounting filesystem.
[  249.125364][ T8061] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  249.145987][ T8058] syz.4.1107: attempt to access beyond end of device
[  249.145987][ T8058] loop4: rw=524288, sector=17179852706, nr_sectors = 16 limit=512
[  249.204491][ T8061] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  249.212011][ T8058] syz.4.1107: attempt to access beyond end of device
[  249.212011][ T8058] loop4: rw=0, sector=17179852706, nr_sectors = 8 limit=512
[  249.253624][ T8061] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c01c, mo2=0002]
[  249.291792][ T8061] System zones: 0-1, 3-36
[  249.310273][   T27] audit: type=1800 audit(1790932245.915:18): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1107" name="file2" dev="loop4" ino=1048639 res=0 errno=0
[  249.338594][ T8061] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  249.644198][ T8081] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  250.115550][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  250.417298][ T8095] loop3: detected capacity change from 0 to 128
[  250.438438][ T8093] loop7: detected capacity change from 0 to 1764
[  250.471481][ T8095] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  250.547838][ T5695] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  250.628142][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'.
[  250.643297][ T4314] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  250.700908][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'.
[  250.854998][ T4314] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  250.873297][ T4314] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.896548][ T4314] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  250.937310][ T4314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.134688][ T4314] usb 7-1: Product: syz
[  251.138917][ T4314] usb 7-1: Manufacturer: syz
[  251.144375][ T4314] usb 7-1: SerialNumber: syz
[  251.189528][ T8112] sch_tbf: burst 240 is lower than device lo mtu (1554) !
[  252.949519][ T4314] cdc_ncm 7-1:1.0: bind() failure
[  252.966875][ T4314] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  252.987044][ T4314] cdc_ncm 7-1:1.1: bind() failure
[  253.029604][ T7073] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  253.163697][ T4314] usb 7-1: USB disconnect, device number 5
[  253.240370][ T8143] loop3: detected capacity change from 0 to 256
[  253.831865][ T8168] loop6: detected capacity change from 0 to 1024
[  254.008422][ T8169] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  254.013276][    T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  254.070568][ T8173] loop6: detected capacity change from 0 to 128
[  254.092935][ T8173] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  254.121084][ T8173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  254.219184][    T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  254.241723][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  254.268692][    T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  254.284127][    T7] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  254.309951][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.327289][    T7] usb 5-1: config 0 descriptor??
[  254.542930][ T8163] loop4: detected capacity change from 0 to 512
[  254.886000][ T8163] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  254.974914][ T8163] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.479962][ T8209] loop6: detected capacity change from 0 to 2048
[  255.493084][ T8209] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  255.504185][ T8209] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  255.521353][ T8209] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  255.533595][ T4273] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  255.546351][ T8209] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  255.567804][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.574419][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  255.586282][    T7] wacom 0003:056A:00B3.0013: item fetching failed at offset 0/6
[  255.619692][    T7] wacom 0003:056A:00B3.0013: parse failed
[  255.631410][    T7] wacom: probe of 0003:056A:00B3.0013 failed with error -22
[  255.738769][ T4273] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  255.758876][ T4273] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  255.768305][ T4273] usb 8-1: config 1 has no interface number 0
[  255.774784][ T4273] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  255.956843][   T22] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  256.122186][ T8218] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8218]
[  256.147418][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.156860][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.183539][ T4273] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  256.192961][ T4273] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.201155][ T4273] usb 8-1: Product: syz
[  256.205739][ T4273] usb 8-1: Manufacturer: syz
[  256.210494][ T4273] usb 8-1: SerialNumber: syz
[  256.412351][ T4273] usb 8-1: selecting invalid altsetting 1
[  256.480131][   T22] usb 4-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config
[  256.506391][   T22] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  256.547646][   T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  256.565330][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  256.574620][   T22] usb 4-1: SerialNumber: syz
[  256.594453][   T22] rndis_wlan: probe of 4-1:1.0 failed with error -22
[  256.601810][ T8227] FAULT_INJECTION: forcing a failure.
[  256.601810][ T8227] name fail_futex, interval 1, probability 0, space 0, times 0
[  256.615454][   T22] rndis_host: probe of 4-1:1.0 failed with error -22
[  256.622249][ T8227] CPU: 1 PID: 8227 Comm: syz.0.1152 Not tainted syzkaller #0
[  256.629641][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  256.639710][ T8227] Call Trace:
[  256.642987][ T8227]  <TASK>
[  256.645910][ T8227]  dump_stack_lvl+0x188/0x24e
[  256.650592][ T8227]  ? show_regs_print_info+0x12/0x12
[  256.655789][ T8227]  ? load_image+0x410/0x410
[  256.660287][ T8227]  ? mark_lock+0x94/0x320
[  256.664620][ T8227]  ? __lock_acquire+0x1465/0x7c40
[  256.669651][ T8227]  should_fail_ex+0x390/0x4c0
[  256.674341][ T8227]  get_futex_key+0x1de/0x1000
[  256.679010][ T8227]  ? __stack_depot_save+0x35/0x480
[  256.684116][ T8227]  ? verify_lock_unused+0x140/0x140
[  256.689312][ T8227]  ? futex_setup_timer+0xc0/0xc0
[  256.694242][ T8227]  ? verify_lock_unused+0x140/0x140
[  256.699442][ T8227]  futex_wake+0x123/0x4f0
[  256.703771][ T8227]  ? futex_wake_mark+0x150/0x150
[  256.708713][ T8227]  do_futex+0x2e2/0x320
[  256.712883][ T8227]  ? __ia32_sys_get_robust_list+0x100/0x100
[  256.718790][ T8227]  ? __might_fault+0xc2/0x120
[  256.723475][ T8227]  mm_release+0x20a/0x330
[  256.727807][ T8227]  ? exit_robust_list+0x2ce/0x2f0
[  256.732827][ T8227]  ? exit_mm_release+0x30/0x30
[  256.737583][ T8227]  ? lockdep_hardirqs_on+0x94/0x140
[  256.742787][ T8227]  exit_mm+0xa0/0x350
[  256.746768][ T8227]  ? sysctl_delayacct+0x220/0x220
[  256.751787][ T8227]  ? do_exit+0x2570/0x2570
[  256.756200][ T8227]  ? mm_trace_rss_stat+0xa7/0x250
[  256.761221][ T8227]  ? sync_mm_rss+0x211/0x350
[  256.765807][ T8227]  do_exit+0x958/0x2570
[  256.769964][ T8227]  ? put_task_struct+0x80/0x80
[  256.774726][ T8227]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  256.780711][ T8227]  ? lock_chain_count+0x20/0x20
[  256.785562][ T8227]  ? _raw_spin_lock_irq+0xb7/0xf0
[  256.790781][ T8227]  do_group_exit+0x229/0x2e0
[  256.795367][ T8227]  ? lockdep_hardirqs_on+0x94/0x140
[  256.800568][ T8227]  get_signal+0x1259/0x1340
[  256.805082][ T8227]  arch_do_signal_or_restart+0xc4/0x1310
[  256.810712][ T8227]  ? lock_chain_count+0x20/0x20
[  256.815567][ T8227]  ? do_futex+0x310/0x320
[  256.819887][ T8227]  ? get_sigframe_size+0x10/0x10
[  256.824815][ T8227]  ? __ia32_sys_get_robust_list+0x100/0x100
[  256.830698][ T8227]  ? slab_free_freelist_hook+0x133/0x1b0
[  256.836334][ T8227]  ? exit_to_user_mode_loop+0x3b/0x110
[  256.841790][ T8227]  exit_to_user_mode_loop+0x70/0x110
[  256.847071][ T8227]  exit_to_user_mode_prepare+0xee/0x180
[  256.852620][ T8227]  syscall_exit_to_user_mode+0x16/0x40
[  256.858076][ T8227]  do_syscall_64+0x58/0xa0
[  256.862482][ T8227]  ? clear_bhb_loop+0x60/0xb0
[  256.867146][ T8227]  ? clear_bhb_loop+0x60/0xb0
[  256.871814][ T8227]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  256.877895][ T8227] RIP: 0033:0x7fe150f9e159
[  256.882314][ T8227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.901918][ T8227] RSP: 002b:00007fe151edc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  256.910341][ T8227] RAX: fffffffffffffe00 RBX: 00007fe151225fa8 RCX: 00007fe150f9e159
[  256.918318][ T8227] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe151225fa8
[  256.926286][ T8227] RBP: 00007fe151225fa0 R08: 0000000000000000 R09: 0000000000000000
[  256.934250][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.942209][ T8227] R13: 00007fe151226038 R14: 00007ffde8df1d00 R15: 00007ffde8df1de8
[  256.950186][ T8227]  </TASK>
[  256.961412][ T4273] cdc_ncm 8-1:1.1: failed GET_NTB_PARAMETERS
[  256.985152][   T22] usb 4-1: USB disconnect, device number 9
[  256.987410][ T4273] cdc_ncm 8-1:1.1: bind() failure
[  257.025868][ T4273] usb 8-1: USB disconnect, device number 3
[  257.487863][   T22] usb 5-1: USB disconnect, device number 12
[  257.739994][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  258.273848][ T8264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'.
[  258.330199][ T8264] netlink: 'syz.3.1160': attribute type 2 has an invalid length.
[  258.436964][ T4314] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  258.446556][ T8275] loop3: detected capacity change from 0 to 512
[  258.497065][ T8275] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  258.508854][ T8275] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.516845][ T8281] loop6: detected capacity change from 0 to 512
[  258.635079][ T4314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.652310][ T4314] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  258.653507][ T8281] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  258.671928][ T8281] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.672636][ T4314] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  258.710158][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.727015][ T4314] usb 5-1: config 0 descriptor??
[  258.739012][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  258.749817][ T6412] EXT4-fs (loop6): unmounting filesystem.
[  259.185297][ T4314] usb 5-1: Direct firmware load for ar3k/AthrBT_0x72a0e6e3.dfu failed with error -2
[  259.214416][ T4314] usb 5-1: Falling back to sysfs fallback for: ar3k/AthrBT_0x72a0e6e3.dfu
[  261.596985][ T8365] loop6: detected capacity change from 0 to 128
[  261.628457][ T8365] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  261.650129][ T8365] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.800279][ T8365] EXT4-fs (loop6): unmounting filesystem.
[  261.818086][ T8374] loop4: detected capacity change from 0 to 2048
[  262.042180][ T8374] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  262.117868][   T27] audit: type=1800 audit(1790932258.725:19): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1190" name="bus" dev="loop4" ino=1367 res=0 errno=0
[  262.221925][   T27] audit: type=1804 audit(1790932258.795:20): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1190" name="/newroot/216/file0/bus" dev="loop4" ino=1367 res=1 errno=0
[  262.335662][   T27] audit: type=1804 audit(1790932258.805:21): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1190" name="/newroot/216/file0/bus" dev="loop4" ino=1367 res=1 errno=0
[  263.611659][ T8415] loop3: detected capacity change from 0 to 1024
[  263.730511][ T8419] fuse: Bad value for 'fd'
[  264.015916][ T8429] loop4: detected capacity change from 0 to 1024
[  264.052675][ T8429] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  264.130142][ T8429] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  264.293567][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  264.606330][ T8457] fuse: Bad value for 'fd'
[  265.943797][ T8483] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  266.191152][ T8489] loop3: detected capacity change from 0 to 1024
[  266.203585][ T8489] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  266.318610][ T8489] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  266.411403][ T8503] loop7: detected capacity change from 0 to 512
[  266.425700][ T8508] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1223'.
[  266.518147][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  266.563814][ T8503] EXT4-fs (loop7): 1 truncate cleaned up
[  266.585144][ T8503] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  266.695183][ T8503] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1224: bg 0: block 465: padding at end of block bitmap is not set
[  266.763002][ T8503] EXT4-fs (loop7): Remounting filesystem read-only
[  266.788013][ T8520] loop3: detected capacity change from 0 to 2048
[  266.792045][ T8521] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1224: invalid indirect mapped block 234881024 (level 0)
[  266.816207][ T8520] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  266.839497][ T8520] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  266.868069][ T8520] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  266.889596][ T8521] EXT4-fs (loop7): Remounting filesystem read-only
[  266.921784][ T8520] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.988531][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  267.391302][ T8531] loop3: detected capacity change from 0 to 512
[  267.424008][ T8531] EXT4-fs: Ignoring removed nomblk_io_submit option
[  267.487810][ T8531] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  267.506536][ T8531] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.1232: corrupted in-inode xattr
[  267.554932][ T8531] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1232: couldn't read orphan inode 15 (err -117)
[  267.567751][ T8531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  267.682670][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  268.286983][ T8555] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1240'.
[  270.536170][ T8604] loop3: detected capacity change from 0 to 512
[  270.606356][ T8604] EXT4-fs: inline encryption not supported
[  270.669514][ T8604] EXT4-fs: Ignoring removed orlov option
[  271.254454][ T8604] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  271.297482][ T8604] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  271.306244][ T8604] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1256: invalid indirect mapped block 2683928664 (level 1)
[  271.347399][ T8604] EXT4-fs (loop3): 1 truncate cleaned up
[  271.397984][ T8604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  271.547117][   T27] audit: type=1800 audit(1790932268.155:22): pid=8612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1260" name="file1" dev="sda1" ino=2054 res=0 errno=0
[  271.701843][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  271.750164][   T27] audit: type=1800 audit(1790932268.245:23): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1260" name="file1" dev="sda1" ino=2054 res=0 errno=0
[  274.267553][ T8687] fuse: Bad value for 'fd'
[  274.331716][ T8693] loop7: detected capacity change from 0 to 8
[  274.374639][ T8693] SQUASHFS error: zlib decompression failed, data probably corrupt
[  274.395403][ T8693] SQUASHFS error: Failed to read block 0x9b: -5
[  274.402000][ T8693] SQUASHFS error: Unable to read metadata cache entry [99]
[  274.418460][ T8693] SQUASHFS error: Unable to read inode 0x127
[  274.599596][ T4961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.756052][ T4961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.892149][ T4961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.309097][ T4961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.404472][ T8724] fuse: Bad value for 'fd'
[  278.694488][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  278.705433][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  278.723392][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  278.733841][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  278.742298][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  278.750177][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  280.075160][ T8775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.425791][ T8791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.152052][ T4274] Bluetooth: hci3: command 0x0409 tx timeout
[  281.479064][ T8753] chnl_net:caif_netlink_parms(): no params data found
[  281.597497][ T8801] loop7: detected capacity change from 0 to 512
[  281.612463][ T8801] EXT4-fs: Ignoring removed oldalloc option
[  281.794616][ T8791] syz.4.1305 (8791) used greatest stack depth: 17904 bytes left
[  283.295423][ T4283] Bluetooth: hci3: command 0x041b tx timeout
[  283.306083][ T8801] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  283.717913][ T8814] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  284.096613][ T8801] EXT4-fs (loop7): 1 truncate cleaned up
[  284.102320][ T8801] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  284.293931][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  284.351125][   T27] audit: type=1326 audit(1790932280.955:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.0.1314" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe150f9e159 code=0x7fc00000
[  284.359150][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.435951][   T27] audit: type=1326 audit(1790932280.955:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.0.1314" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe150f9e159 code=0x7fc00000
[  284.439095][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.521923][ T8753] device bridge_slave_0 entered promiscuous mode
[  284.594162][   T27] audit: type=1326 audit(1790932280.955:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.0.1314" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe150f9e159 code=0x7fc00000
[  284.640678][ T8844] loop7: detected capacity change from 0 to 128
[  284.691391][ T8844] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  284.731971][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.748415][ T8844] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.749763][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.840298][ T8753] device bridge_slave_1 entered promiscuous mode
[  285.022737][ T8844] EXT4-fs (loop7): unmounting filesystem.
[  285.221348][ T8856] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  286.090895][ T4283] Bluetooth: hci3: command 0x040f tx timeout
[  286.127254][ T8753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.479403][ T8753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.603052][ T4961] device hsr_slave_0 left promiscuous mode
[  287.620069][ T4961] device hsr_slave_1 left promiscuous mode
[  287.653409][ T4961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  287.660863][ T4961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  287.704252][ T4961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.721928][ T4961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.740252][ T4961] device bridge_slave_1 left promiscuous mode
[  287.771641][ T4961] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.801786][ T4961] device bridge_slave_0 left promiscuous mode
[  287.826411][ T4961] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.991825][ T8901] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  288.119186][ T4961] device veth1_macvtap left promiscuous mode
[  288.134682][ T4283] Bluetooth: hci3: command 0x0419 tx timeout
[  288.300710][ T4961] device veth0_macvtap left promiscuous mode
[  288.452108][ T4961] device veth1_vlan left promiscuous mode
[  288.543336][ T4274] Bluetooth: hci4: command 0x0406 tx timeout
[  290.242476][ T4961] team0 (unregistering): Port device team_slave_1 removed
[  290.325911][ T4961] team0 (unregistering): Port device team_slave_0 removed
[  290.391401][ T4961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.469818][ T4961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.481978][ T8955] FAULT_INJECTION: forcing a failure.
[  291.481978][ T8955] name fail_futex, interval 1, probability 0, space 0, times 0
[  291.497194][ T8955] CPU: 1 PID: 8955 Comm: syz.0.1353 Not tainted syzkaller #0
[  291.504620][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  291.514684][ T8955] Call Trace:
[  291.517965][ T8955]  <TASK>
[  291.520885][ T8955]  dump_stack_lvl+0x188/0x24e
[  291.525553][ T8955]  ? do_syscall_64+0x4c/0xa0
[  291.530159][ T8955]  ? show_regs_print_info+0x12/0x12
[  291.535342][ T8955]  ? load_image+0x410/0x410
[  291.539843][ T8955]  should_fail_ex+0x390/0x4c0
[  291.544511][ T8955]  get_futex_key+0x1de/0x1000
[  291.549179][ T8955]  ? futex_setup_timer+0xc0/0xc0
[  291.554102][ T8955]  ? memset+0x1e/0x40
[  291.558071][ T8955]  futex_requeue+0x246/0x13a0
[  291.562738][ T8955]  ? futex_unqueue+0xc7/0xf0
[  291.567316][ T8955]  ? put_task_struct+0x80/0x80
[  291.572067][ T8955]  ? futex_wait_setup+0x270/0x270
[  291.577087][ T8955]  do_futex+0x23d/0x320
[  291.581234][ T8955]  ? __ia32_sys_get_robust_list+0x100/0x100
[  291.587131][ T8955]  __se_sys_futex+0x381/0x410
[  291.591821][ T8955]  ? __x64_sys_futex+0xf0/0xf0
[  291.596588][ T8955]  ? __x64_sys_futex+0x1d/0xf0
[  291.601367][ T8955]  do_syscall_64+0x4c/0xa0
[  291.605780][ T8955]  ? clear_bhb_loop+0x60/0xb0
[  291.610458][ T8955]  ? clear_bhb_loop+0x60/0xb0
[  291.615120][ T8955]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  291.621004][ T8955] RIP: 0033:0x7fe150f9e159
[  291.625405][ T8955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.645001][ T8955] RSP: 002b:00007fe151edc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  291.653412][ T8955] RAX: ffffffffffffffda RBX: 00007fe151225fa0 RCX: 00007fe150f9e159
[  291.661395][ T8955] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc
[  291.669364][ T8955] RBP: 00007fe15103506b R08: 0000000000000000 R09: 0000000000000000
[  291.677333][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.685298][ T8955] R13: 00007fe151226038 R14: 00007fe151225fa0 R15: 00007ffde8df1de8
[  291.693281][ T8955]  </TASK>
[  291.868919][ T4961] bond0 (unregistering): Released all slaves
[  292.010746][ T8753] team0: Port device team_slave_0 added
[  292.021230][ T8753] team0: Port device team_slave_1 added
[  292.050499][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.083216][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.143388][ T8753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.165142][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.172130][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.212296][ T8753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.084968][ T8974] fuse: Bad value for 'fd'
[  293.087163][ T8753] device hsr_slave_0 entered promiscuous mode
[  293.134099][ T8753] device hsr_slave_1 entered promiscuous mode
[  293.433447][   T22] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  293.644987][   T22] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  293.787215][   T22] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  294.021352][   T22] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  294.049545][   T22] usb 8-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  294.059947][   T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.079305][   T22] usb 8-1: config 0 descriptor??
[  294.122611][ T8753] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  294.145999][ T8753] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  294.207543][ T8753] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  294.245007][ T8753] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  294.307414][ T8977] loop7: detected capacity change from 0 to 512
[  294.487690][ T8977] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  294.497713][ T8977] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.553445][ T8753] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.612181][ T7017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  294.622293][ T7017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  294.634478][ T8753] 8021q: adding VLAN 0 to HW filter on device team0
[  294.682135][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  294.709852][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  294.733808][ T7073] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.740943][ T7073] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.752079][   T22] wacom 0003:056A:00B3.0014: item fetching failed at offset 0/6
[  294.778910][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  294.789406][   T22] wacom 0003:056A:00B3.0014: parse failed
[  294.796813][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  294.805943][   T22] wacom: probe of 0003:056A:00B3.0014 failed with error -22
[  294.812772][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  294.850597][ T7073] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.857795][ T7073] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.908554][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  294.921874][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  294.961418][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  294.977776][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  294.991277][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  295.002351][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  295.011962][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  295.037089][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  295.059557][ T8753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  295.081213][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  295.111781][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  295.120131][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  295.128984][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  295.205768][ T9029] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7029] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9029]
[  295.229692][ T9029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.239024][ T9029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.432361][ T9040] loop4: detected capacity change from 0 to 16
[  297.292661][ T9040] erofs: (device loop4): mounted with root inode @ nid 36.
[  297.323740][ T4315] usb 8-1: USB disconnect, device number 4
[  297.341939][ T9039] syz.4.1371: attempt to access beyond end of device
[  297.341939][ T9039] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  297.357387][ T9039] syz.4.1371: attempt to access beyond end of device
[  297.357387][ T9039] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[  297.590502][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  299.321835][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  299.330369][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  299.359697][ T8753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.554000][ T9104] syz.6.1389 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  301.083662][   T26] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  301.278607][ T9111] loop4: detected capacity change from 0 to 128
[  301.349301][   T26] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.388740][ T9111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  301.413804][   T26] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  301.423437][   T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  301.431470][   T26] usb 8-1: Product: syz
[  301.436273][   T26] usb 8-1: Manufacturer: syz
[  301.436831][ T9111] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.463063][   T26] hub 8-1:1.0: USB hub found
[  301.672031][   T26] hub 8-1:1.0: config failed, can't read hub descriptor (err -22)
[  301.710402][   T26] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input16
[  301.715430][ T9110] EXT4-fs (loop4): unmounting filesystem.
[  301.744025][    C1] usbtouchscreen 8-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1
[  301.838418][    C1] usbtouchscreen 8-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1
[  302.055514][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  302.067531][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  302.224787][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  302.274222][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  302.326873][ T8753] device veth0_vlan entered promiscuous mode
[  302.772475][ T8753] device veth1_vlan entered promiscuous mode
[  302.941103][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  302.970434][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  303.018072][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  303.077140][ T6799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  303.124169][ T6799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  303.148845][ T6799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  303.213895][ T8753] device veth0_macvtap entered promiscuous mode
[  303.244783][ T8753] device veth1_macvtap entered promiscuous mode
[  303.287113][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.297850][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.321798][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.347307][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.366881][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.895835][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.025034][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.037606][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  304.058556][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  304.117008][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  304.179756][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  304.211599][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.250715][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.306248][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.385252][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.402368][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.413635][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.423909][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.434791][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.484192][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.501216][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  304.519425][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  304.548626][ T8753] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.565622][ T8753] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.587790][ T8753] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.597195][ T8753] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.754172][ T6759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.762034][ T6759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.811405][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  304.841318][ T4961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.865168][ T4961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.875591][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  305.229710][ T9204] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  305.406544][ T9214] loop8: detected capacity change from 0 to 8
[  305.692520][ T9222] loop8: detected capacity change from 0 to 2048
[  305.973477][ T9222] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  306.181554][ T9222] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  306.276463][ T9222] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  306.316209][ T9222] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  307.433682][   T26] usb 8-1: USB disconnect, device number 5
[  307.822395][ T9257] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  309.888203][ T9301] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1437'.
[  309.918055][ T9301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1437'.
[  309.953253][ T9301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1437'.
[  309.979733][ T9301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1437'.
[  310.213043][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'.
[  310.237261][ T9310] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.354900][ T9314] loop8: detected capacity change from 0 to 512
[  310.412244][ T9314] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  310.431784][ T9314] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.445696][ T9310] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.520842][ T9314] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #2: comm syz.8.1440: corrupted inode contents
[  310.573722][ T9314] EXT4-fs error (device loop8): ext4_dirty_inode:6166: inode #2: comm syz.8.1440: mark_inode_dirty error
[  310.620321][ T9314] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #2: comm syz.8.1440: corrupted inode contents
[  310.662702][ T9314] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.1440: mark_inode_dirty error
[  310.796265][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  310.830973][ T9322] loop7: detected capacity change from 0 to 4096
[  310.921363][ T9322] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  310.974571][ T9332] loop8: detected capacity change from 0 to 512
[  311.055102][ T9322] EXT4-fs (loop7): Online defrag not supported with bigalloc
[  311.087664][ T9332] EXT4-fs: Ignoring removed nobh option
[  311.199963][ T9332] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  311.213653][ T9332] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.297850][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  311.408395][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  311.527457][ T9348] loop8: detected capacity change from 0 to 512
[  311.569492][ T9348] EXT4-fs: inline encryption not supported
[  311.575561][ T9350] fuse: Bad value for 'fd'
[  311.609812][ T9348] EXT4-fs: Ignoring removed orlov option
[  311.623640][ T9348] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  311.672180][ T9348] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  311.682059][ T9348] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1448: invalid indirect mapped block 2683928664 (level 1)
[  311.698520][ T9348] EXT4-fs (loop8): 1 truncate cleaned up
[  311.705757][ T9348] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  311.929088][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  312.123940][ T9366] loop8: detected capacity change from 0 to 4096
[  312.131387][ T9366] EXT4-fs: Ignoring removed mblk_io_submit option
[  312.139600][ T9366] EXT4-fs (loop8): Test dummy encryption mode enabled
[  312.149985][ T9366] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  312.896611][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  313.224625][ T9384] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6412] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9384]
[  314.126024][ T9388] loop8: detected capacity change from 0 to 1024
[  314.262701][ T6799] hfsplus: b-tree write err: -5, ino 25
[  314.270573][ T9393] fuse: Bad value for 'fd'
[  314.271977][ T6799] hfsplus: b-tree write err: -5, ino 4
[  314.304341][ T6799] hfsplus: b-tree write err: -5, ino 2
[  314.713332][   T22] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  314.895216][   T22] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  314.911275][   T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  314.923121][   T22] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  314.942429][   T22] usb 9-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  314.951823][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.969125][   T22] usb 9-1: config 0 descriptor??
[  315.186774][ T9397] loop8: detected capacity change from 0 to 512
[  315.375321][ T9397] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  315.399705][ T9397] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.853606][ T9431] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9431]
[  316.739161][ T9450] fuse: Bad value for 'fd'
[  317.008971][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.015750][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.536614][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  317.563112][   T22] usbhid 9-1:0.0: can't add hid device: -71
[  317.570929][   T22] usbhid: probe of 9-1:0.0 failed with error -71
[  317.590378][   T22] usb 9-1: USB disconnect, device number 2
[  318.534534][ T9488] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1484'.
[  319.742852][ T9498] loop8: detected capacity change from 0 to 1024
[  319.884804][ T9498] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  320.785598][ T9498] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  320.802624][   T27] audit: type=1804 audit(1790932317.405:27): pid=9498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1487" name="/newroot/11/file1/bus" dev="loop8" ino=18 res=1 errno=0
[  320.879828][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  322.057905][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1500'.
[  322.070928][ T9545] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1500'.
[  322.080937][ T9545] xt_hashlimit: max too large, truncated to 1048576
[  322.089696][ T9545] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  322.110486][ T9545] loop8: detected capacity change from 0 to 1024
[  322.129252][ T4314] Bluetooth: Patch file not found ar3k/AthrBT_0x72a0e6e3.dfu
[  322.131850][ T9545] EXT4-fs: Ignoring removed bh option
[  322.143330][ T4314] Bluetooth: Loading patch file failed
[  322.161860][ T4314] ath3k: probe of 5-1:0.0 failed with error -110
[  322.215204][ T9545] EXT4-fs: Mount option(s) incompatible with ext3
[  322.215485][ T4314] usb 5-1: USB disconnect, device number 13
[  322.491063][ T9558] loop8: detected capacity change from 0 to 1024
[  322.538722][ T9558] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  322.647450][ T9558] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  322.682892][   T27] audit: type=1804 audit(1790932319.285:28): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1504" name="/newroot/15/file1/bus" dev="loop8" ino=18 res=1 errno=0
[  322.850856][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  323.295956][ T9585] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  325.069872][ T9618] input: syz0 as /devices/virtual/input/input17
[  325.938838][ T9639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.404886][    T7] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  327.029182][    T7] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  327.185299][ T4314] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  327.578506][    T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  327.592755][    T7] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  327.610639][    T7] usb 8-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  327.619752][    T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.668447][    T7] usb 8-1: config 0 descriptor??
[  327.685173][ T4314] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  327.696833][ T4314] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  327.717502][ T4314] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  327.731859][ T4314] usb 9-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  327.758534][ T4314] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.943052][ T4314] usb 9-1: config 0 descriptor??
[  327.949119][ T9628] loop7: detected capacity change from 0 to 512
[  328.379767][ T9628] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  328.424112][ T9632] loop8: detected capacity change from 0 to 512
[  328.585401][ T9628] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.717172][ T9664] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1535'.
[  328.751588][ T9632] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  328.839957][ T9632] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.222845][    T7] wacom 0003:056A:00B3.0015: item fetching failed at offset 0/6
[  329.233826][    T7] wacom 0003:056A:00B3.0015: parse failed
[  329.239679][    T7] wacom: probe of 0003:056A:00B3.0015 failed with error -22
[  329.707965][ T9682] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7029] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9682]
[  329.726073][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.734824][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.406969][ T6389] usb 8-1: USB disconnect, device number 6
[  330.420317][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  330.526726][ T4314] usbhid 9-1:0.0: can't add hid device: -71
[  330.532753][ T4314] usbhid: probe of 9-1:0.0 failed with error -71
[  330.542236][ T4314] usb 9-1: USB disconnect, device number 3
[  330.648761][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  332.131819][ T9731] loop8: detected capacity change from 0 to 764
[  334.149944][ T9775] loop7: detected capacity change from 0 to 764
[  335.584992][ T9808] loop8: detected capacity change from 0 to 1024
[  335.592754][ T9808] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  335.600129][ T9810] loop7: detected capacity change from 0 to 512
[  335.632995][ T9810] EXT4-fs: inline encryption not supported
[  335.662638][ T9808] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  335.677006][   T27] audit: type=1804 audit(1790932332.285:29): pid=9808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1576" name="/newroot/34/file1/bus" dev="loop8" ino=18 res=1 errno=0
[  335.710169][ T9810] EXT4-fs: Ignoring removed orlov option
[  335.814256][ T9810] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  336.039915][ T9810] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  336.140687][ T9823] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9823]
[  336.186927][ T9810] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1577: invalid indirect mapped block 2683928664 (level 1)
[  336.608924][ T9810] EXT4-fs (loop7): 1 truncate cleaned up
[  336.623542][ T9810] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  336.778072][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  336.807880][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  336.919525][ T9829] loop8: detected capacity change from 0 to 128
[  336.960698][ T9829] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  336.962756][ T9830] loop7: detected capacity change from 0 to 764
[  336.986048][ T9829] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.222874][ T9829] EXT4-fs (loop8): unmounting filesystem.
[  338.697477][ T9865] loop7: detected capacity change from 0 to 764
[  342.521984][ T9937] fuse: Bad value for 'fd'
[  342.683829][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.691147][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.717959][ T9946] loop7: detected capacity change from 0 to 2048
[  342.742209][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.747168][ T9946] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  342.749378][ T9948] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.768629][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.772242][ T9946] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  342.775797][ T9948] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.844100][ T9948] device bridge0 entered promiscuous mode
[  342.852673][ T9946] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  342.866667][ T9946] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  344.013585][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  344.395830][ T9974] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  345.262973][ T9992] loop7: detected capacity change from 0 to 764
[  345.634004][T10005] loop8: detected capacity change from 0 to 512
[  345.656332][T10005] EXT4-fs: inline encryption not supported
[  345.741919][T10005] EXT4-fs: Ignoring removed orlov option
[  345.775788][T10005] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  345.870019][T10005] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  346.042339][T10005] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1635: invalid indirect mapped block 2683928664 (level 1)
[  346.122359][T10005] EXT4-fs (loop8): 1 truncate cleaned up
[  346.165207][T10005] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  346.523043][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  347.121818][T10028] loop8: detected capacity change from 0 to 128
[  348.049607][T10045] loop8: detected capacity change from 0 to 512
[  348.129995][T10045] EXT4-fs: inline encryption not supported
[  348.338446][ T4274] Bluetooth: hci4: command 0x0401 tx timeout
[  348.750697][T10045] EXT4-fs: Ignoring removed orlov option
[  348.771326][T10045] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  348.991929][T10045] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  349.070553][T10045] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1648: invalid indirect mapped block 2683928664 (level 1)
[  349.170217][T10045] EXT4-fs (loop8): 1 truncate cleaned up
[  349.196351][T10045] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  349.421964][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  349.562396][T10075] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10075]
[  349.856034][ T4283] Bluetooth: hci0: command 0x0406 tx timeout
[  350.785287][T10085] loop7: detected capacity change from 0 to 512
[  350.822655][T10085] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #3: comm syz.7.1659: corrupted inode contents
[  350.835366][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  350.842127][T10085] EXT4-fs error (device loop7): ext4_dirty_inode:6166: inode #3: comm syz.7.1659: mark_inode_dirty error
[  350.867888][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  350.876881][T10085] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #3: comm syz.7.1659: corrupted inode contents
[  350.902901][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  350.916929][T10085] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #3: comm syz.7.1659: mark_inode_dirty error
[  350.960779][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  351.011220][T10085] Quota error (device loop7): write_blk: dquota write failed
[  351.042370][T10085] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  351.073668][T10085] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1659: Failed to acquire dquot type 0
[  351.100156][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  351.117663][T10085] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #16: comm syz.7.1659: corrupted inode contents
[  351.139164][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  351.146362][T10085] EXT4-fs error (device loop7): ext4_dirty_inode:6166: inode #16: comm syz.7.1659: mark_inode_dirty error
[  351.164855][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  351.171545][T10085] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #16: comm syz.7.1659: corrupted inode contents
[  351.184131][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  351.192206][T10085] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #16: comm syz.7.1659: mark_inode_dirty error
[  351.209388][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  351.216226][T10085] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #16: comm syz.7.1659: corrupted inode contents
[  351.250374][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  351.257064][T10085] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  351.266203][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  351.272813][T10085] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #16: comm syz.7.1659: corrupted inode contents
[  351.292747][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  351.308801][T10085] EXT4-fs error (device loop7): ext4_truncate:4325: inode #16: comm syz.7.1659: mark_inode_dirty error
[  351.323426][ T4274] Bluetooth: hci4: command 0x0401 tx timeout
[  351.362993][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  351.384336][T10085] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  351.412935][T10085] EXT4-fs (loop7): Remounting filesystem read-only
[  351.421879][T10085] EXT4-fs (loop7): 1 truncate cleaned up
[  351.432158][T10085] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  351.445058][T10085] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.636744][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  352.923071][T10131] loop8: detected capacity change from 0 to 128
[  352.931097][T10131] FAT-fs (loop8): Unrecognized mount option "ÿÿ" or missing value
[  352.986582][T10133] loop7: detected capacity change from 0 to 1024
[  352.995206][T10133] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  353.032252][T10133] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  353.048108][ T9950] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  353.058856][   T27] audit: type=1804 audit(1790932349.665:30): pid=10133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1672" name="/newroot/139/file1/bus" dev="loop7" ino=18 res=1 errno=0
[  353.246792][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  353.942839][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1681'.
[  354.205911][T10171] device veth3 entered promiscuous mode
[  354.225907][T10171] bridge1: port 1(veth3) entered blocking state
[  354.245494][T10171] bridge1: port 1(veth3) entered disabled state
[  354.909104][T10171] bridge1: port 1(veth3) entered blocking state
[  354.915570][T10171] bridge1: port 1(veth3) entered forwarding state
[  354.955693][ T4324] bridge1: port 1(veth3) entered disabled state
[  355.214989][T10186] loop8: detected capacity change from 0 to 1024
[  355.536953][T10186] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  355.971033][T10195] loop7: detected capacity change from 0 to 1024
[  356.015493][T10186] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  356.034266][T10195] EXT4-fs: Ignoring removed nomblk_io_submit option
[  356.052846][T10195] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  356.065342][   T27] audit: type=1804 audit(1790932352.675:31): pid=10186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1685" name="/newroot/54/file1/bus" dev="loop8" ino=18 res=1 errno=0
[  356.106219][T10195] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  356.167488][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  356.430381][ T7029] EXT4-fs (loop7): unmounting filesystem.
[  356.444904][T10208] loop8: detected capacity change from 0 to 8
[  356.499331][T10208] SQUASHFS error: lzo decompression failed, data probably corrupt
[  356.540936][T10208] SQUASHFS error: Failed to read block 0x91: -5
[  356.568808][T10208] SQUASHFS error: Unable to read metadata cache entry [8f]
[  356.598474][T10208] SQUASHFS error: Unable to read inode 0x11f
[  358.180223][T10242] loop8: detected capacity change from 0 to 1024
[  358.195682][T10242] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  358.254809][T10242] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  358.268391][   T27] audit: type=1804 audit(1790932354.875:32): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1700" name="/newroot/57/file1/bus" dev="loop8" ino=18 res=1 errno=0
[  358.412445][ T8753] EXT4-fs (loop8): unmounting filesystem.
[  362.605120][ T6389] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  362.904795][ T6389] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  362.923193][ T6389] usb 9-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  363.539403][ T6389] usb 9-1: config 0 interface 0 has no altsetting 0
[  363.546169][ T6389] usb 9-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00
[  363.555283][ T6389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.574943][ T6389] usb 9-1: config 0 descriptor??
[  363.991827][ T6389] wacom 0003:056A:0016.0016: unbalanced collection at end of report description
[  364.021969][ T6389] wacom 0003:056A:0016.0016: parse failed
[  364.033355][ T6389] wacom: probe of 0003:056A:0016.0016 failed with error -22
[  364.227519][ T4315] usb 9-1: USB disconnect, device number 4
[  365.862945][ T9975] 
[  365.865321][ T9975] ============================================
[  365.871479][ T9975] WARNING: possible recursive locking detected
[  365.877647][ T9975] syzkaller #0 Not tainted
[  365.882066][ T9975] --------------------------------------------
[  365.888216][ T9975] kworker/u4:20/9975 is trying to acquire lock:
[  365.894460][ T9975] ffff88807cce31e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0x15c/0x550
[  365.903616][ T9975] 
[  365.903616][ T9975] but task is already holding lock:
[  365.910975][ T9975] ffff88807cce51e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xb7/0x550
[  365.920042][ T9975] 
[  365.920042][ T9975] other info that might help us debug this:
[  365.928105][ T9975]  Possible unsafe locking scenario:
[  365.928105][ T9975] 
[  365.935558][ T9975]        CPU0
[  365.938839][ T9975]        ----
[  365.942128][ T9975]   lock(rlock-AF_UNIX);
[  365.946378][ T9975]   lock(rlock-AF_UNIX);
[  365.950629][ T9975] 
[  365.950629][ T9975]  *** DEADLOCK ***
[  365.950629][ T9975] 
[  365.958768][ T9975]  May be due to missing lock nesting notation
[  365.958768][ T9975] 
[  365.967080][ T9975] 4 locks held by kworker/u4:20/9975:
[  365.972443][ T9975]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  365.983492][ T9975]  #1: ffffc90005357d00 (unix_gc_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  365.993068][ T9975]  #2: ffffffff8de55ad8 (unix_gc_lock){+.+.}-{2:2}, at: __unix_gc+0xcb/0x1100
[  366.001949][ T9975]  #3: ffff88807cce51e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xb7/0x550
[  366.011425][ T9975] 
[  366.011425][ T9975] stack backtrace:
[  366.017309][ T9975] CPU: 1 PID: 9975 Comm: kworker/u4:20 Not tainted syzkaller #0
[  366.024930][ T9975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  366.034972][ T9975] Workqueue: events_unbound __unix_gc
[  366.040360][ T9975] Call Trace:
[  366.043626][ T9975]  <TASK>
[  366.046544][ T9975]  dump_stack_lvl+0x188/0x24e
[  366.051213][ T9975]  ? show_regs_print_info+0x12/0x12
[  366.056400][ T9975]  ? load_image+0x410/0x410
[  366.060897][ T9975]  __lock_acquire+0x12c8/0x7c40
[  366.065759][ T9975]  ? verify_lock_unused+0x140/0x140
[  366.070944][ T9975]  ? verify_lock_unused+0x140/0x140
[  366.076136][ T9975]  lock_acquire+0x1bb/0x4a0
[  366.080629][ T9975]  ? unix_collect_skb+0x15c/0x550
[  366.085645][ T9975]  ? read_lock_is_recursive+0x10/0x10
[  366.091005][ T9975]  ? do_raw_spin_lock+0x128/0x2f0
[  366.096016][ T9975]  ? __rwlock_init+0x140/0x140
[  366.100768][ T9975]  ? unix_scc_dead+0x689/0x6f0
[  366.105551][ T9975]  _raw_spin_lock+0x2a/0x40
[  366.110133][ T9975]  ? unix_collect_skb+0x15c/0x550
[  366.115148][ T9975]  unix_collect_skb+0x15c/0x550
[  366.120016][ T9975]  __unix_gc+0x868/0x1100
[  366.124359][ T9975]  ? wait_for_unix_gc+0x190/0x190
[  366.129405][ T9975]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  366.135386][ T9975]  ? _raw_spin_unlock_irq+0x1f/0x40
[  366.140589][ T9975]  ? process_one_work+0x7b4/0x1160
[  366.145698][ T9975]  process_one_work+0x8ab/0x1160
[  366.150633][ T9975]  ? worker_detach_from_pool+0x240/0x240
[  366.156255][ T9975]  ? _raw_spin_lock_irq+0xb7/0xf0
[  366.161270][ T9975]  ? _raw_spin_lock_irqsave+0x100/0x100
[  366.166810][ T9975]  ? wq_worker_running+0x97/0x190
[  366.171820][ T9975]  worker_thread+0xaf5/0x12a0
[  366.176487][ T9975]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  366.182386][ T9975]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  366.188281][ T9975]  kthread+0x29d/0x330
[  366.192341][ T9975]  ? worker_clr_flags+0x1a0/0x1a0
[  366.197356][ T9975]  ? kthread_blkcg+0xd0/0xd0
[  366.201939][ T9975]  ret_from_fork+0x1f/0x30
[  366.206366][ T9975]  </TASK>