last executing test programs:

2m43.330185088s ago: executing program 4 (id=51):
socket$kcm(0x2, 0x5, 0x84)
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @loopback, 0x1}, 0x1c)
syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x10000c2, &(0x7f00000003c0)=ANY=[], 0x1, 0x5fa, &(0x7f0000000400)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)={0x1f4, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x5e}}}}, [@NL80211_ATTR_TESTDATA={0xe4, 0x45, "58fbde630c947170ee86d21b187eca0d9f6418a7fd402740603dba08b07c346aed12c62919c4b3eeb0a0ff492de253688dc0f2a62da159ac7fd5f52a170aac8ba317ab2d31053352de3cb8ebe523d98f978f3cbe8dad6e49c6bbb8af98ba9d02acbbcfe8f5ba96c2030ff78e3293cd8b81921a0469133eb696870676568cfb49bdbb189a6e6a8d43c0fe6454252ffd1dadcf7150fd68586f770ec0601fd026271eb683d88605c0b72405e51773d84cd89e0672d690106941ce6935e764b2d6a702a7f3c74d2aadecd1e89498b70ce688f6cf5071b3206895396d475e0429b3aa"}, @NL80211_ATTR_TESTDATA={0xe6, 0x45, "bc51278dc86394a279fcb8a98869bc9782b9e93f6212a7604c8f6aafafc5e48867266bf3b8708f417a58c4e2a0c300cfb3dcc5c6f6a43cad5b773dfde1a5710102865152b909fe7cfa2aeadf90c841f912501f8db22bfda1519473620714650a15d5c5673c1a0b6a14ae6fa65b94f8fe63b4c82bbaf3ef2b2998c98ff2a22b3801a077becab5874c11e5d2aa66adac3c7394643a2b7bb3566ae35591649c95f55ad0d2a97e1176d4f2c212ab60d22ed8e3665e43ab01dabedda1b597b5674968b27afb5ca9e746b27fda7e44839a5aa9b7465ea8627573898d6adc6bce21f90a103f"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x20000084)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
getdents(r4, &(0x7f0000000040)=""/61, 0x3d)
getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

2m42.862034563s ago: executing program 4 (id=52):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000600)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})

2m41.486184887s ago: executing program 4 (id=54):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0xa00c0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x14, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e29651", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50)

2m39.246852838s ago: executing program 4 (id=62):
r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x37})
r2 = dup3(r0, r0, 0x80000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x802}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
pidfd_send_signal(r4, 0x29, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180))

2m38.705839725s ago: executing program 4 (id=65):
setresuid(0xee01, 0xee00, 0x0)
request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x01\x00\xee', 0x0)

2m37.399614917s ago: executing program 4 (id=69):
r0 = userfaultfd(0x801) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x2) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64)
r1 = io_uring_setup(0x76ad, &(0x7f0000000080)={0x0, 0x9415, 0x20000, 0x0, 0x359}) (rerun: 64)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000009, 0x10010, r1, 0x10000000)
r2 = creat(0x0, 0xecf86c37d53049cc)
write$binfmt_script(r2, &(0x7f0000000740)={'#! ', './file0'}, 0xb)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x80, 0x380000, @dev={0xfe, 0x80, '\x00', 0x13}, 0x10}, 0x1c) (rerun: 64)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0) (async, rerun: 32)
openat2(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0x121, 0x17}, 0x18) (async, rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf0, {0x0, 0x0, 0x0, r5, {0xfff3}, {}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async)
close_range(r0, r0, 0x0)

2m37.107554176s ago: executing program 32 (id=69):
r0 = userfaultfd(0x801) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x2) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64)
r1 = io_uring_setup(0x76ad, &(0x7f0000000080)={0x0, 0x9415, 0x20000, 0x0, 0x359}) (rerun: 64)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000009, 0x10010, r1, 0x10000000)
r2 = creat(0x0, 0xecf86c37d53049cc)
write$binfmt_script(r2, &(0x7f0000000740)={'#! ', './file0'}, 0xb)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x80, 0x380000, @dev={0xfe, 0x80, '\x00', 0x13}, 0x10}, 0x1c) (rerun: 64)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0) (async, rerun: 32)
openat2(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0x121, 0x17}, 0x18) (async, rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf0, {0x0, 0x0, 0x0, r5, {0xfff3}, {}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async)
close_range(r0, r0, 0x0)

7.252314159s ago: executing program 0 (id=813):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x38, r7, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x66}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_IE={0x4}]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x28, 0x0, 0x303, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffdffffd, 0x1c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
gettid()
timer_create(0x3, 0x0, &(0x7f0000044000)=<r8=>0x0)
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_delete(r8)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003"], 0x70}}, 0x4008000)
keyctl$session_to_parent(0x12)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x40000000015, 0x5, 0x0)

6.732584645s ago: executing program 1 (id=816):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4604040e00010000000000000003003e00ebffffff9402000002000000a9fdffffffffffff7c00000000000000000000002d8f3800"], 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

6.581736181s ago: executing program 2 (id=817):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x80000005, 0x5, 0x4, 0x47, 0x3, 0x7, 0x1ff, 0x6, 0x35})
quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001e40)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x1}, 0x0, 0x0, 0x7, 0x4, 0x100, 0x8003, 0x0, 0x7}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x2}}], 0x70, 0x20008011}, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
timerfd_gettime(r3, &(0x7f0000000240))
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x40, 0x2, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x4cb, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r1, 0x4, 0x30f4c1ce51e88b5b, r5, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000680)={0xd6, 0x200000, 0x2, r3, 0x8})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000400000000effed997e9d00000000c000071106e000000000095000a8b92c7a3e55529475836a5866148c4109ef7be44b41fa27c5efc234414670999ca891a6a28a48ace047375fa501552bec7e7a24c3cc775be275646874981c0eb82d48972f93f656fd05337206c4dae1239e531d987372551808bbda1231332dd8cf670d7674b2f973f6fb624b467e28ab587867f7bfeadf1546ee22c084612ce82b3"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2002, 0x40)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x7fff, 0x1}, 0x10)
socket$inet(0x2, 0x2, 0x1)
write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
lseek(r6, 0x7, 0x3)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x42, 0x40, 0x0, 0x1}, 0x50)
r10 = syz_open_dev$audion(&(0x7f00000005c0), 0x0, 0x12b141)
ioctl$KVM_CAP_HYPERV_SYNIC2(r10, 0x4068aea3, &(0x7f0000000600))
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r9}, 0x38)
mkdirat(r7, &(0x7f0000000080)='./file0\x00', 0xa1)

6.399799776s ago: executing program 5 (id=818):
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x180, 0x0, 0x4, 0x2, {0x87, 0x80}, {0x350, 0x20002, 0xffffffff}, {0x2b, 0x300, 0xfffffffd}, {0x4, 0x4000000, 0x7fe}, 0x1, 0x100, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4})

6.347379648s ago: executing program 1 (id=819):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="78030000", @ANYRES32=r1, @ANYRES32=r2], 0x378}}, 0x0)

6.145662484s ago: executing program 1 (id=820):
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x2, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'nr0\x00'})
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x2e, 0x5f]}}, 0x0, 0x38}, 0x20)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000180)=0x8, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000500)={0x0, @bt={0xe10, 0x871, 0x0, 0x3, 0xd59f80, 0x19f2, 0x3f, 0x19ed, 0x3, 0x20000003, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0x7}, 0xd0, 0x9}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x8d, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x3, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xfffffffe, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xbed}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x20, &(0x7f00000001c0)={&(0x7f00000000c0)=""/121, 0x79, 0x0, &(0x7f0000000140)=""/77, 0x4d}}, 0x10)

6.082920876s ago: executing program 0 (id=821):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000000080102000000000000002b2ad129020900010073797a310000000006000240808beb611c0004800800064000000008080003400000180608000440000006d60500030100000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800)
syz_emit_ethernet(0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a84300810000000011f4aaef65c815e30ec893090e"], 0x0)

6.007379368s ago: executing program 1 (id=822):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), 0xffffffffffffffff)
r2 = creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000008c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @empty, 0x8}}}, 0x30)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000140)={0x1, 0x600, 0x6, 0x1, 0x1})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000001e000000100024800c00020000000000000000000c00060001000000010000002ac46839746ed15618a26e59080cb2e95c3d6dd4a3f198cb7fbab74a07fc4689ab5097fb6c3ec03a95a4e4226f7e6d3785fd26edb0b552dd544272e625f23ad8a0831b0cc615e5d202f1c8cfcc7bba9a525a6f4fbae2408dfdee2219f7fe89f4eb299a909244da31f93b97e4115c86f56d1f4189df3e97d6b51cb74ac35760d6549b82832f3ceafe7d835df1c65aa8192a631c8068f1d8b84176c661c09f92"], 0x30}}, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}})
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$evdev(0x0, 0x6, 0x822b81)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x20, 0x0, 0x4, "9f6368d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000180))
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)

5.877843692s ago: executing program 5 (id=823):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r6 = dup(r5)
getsockname$packet(r6, 0x0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000000))
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYRES64=r0], 0x78}, 0x1, 0x0, 0x0, 0x40011}, 0x0)

5.877726672s ago: executing program 0 (id=824):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000c20100", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)

5.550962463s ago: executing program 5 (id=825):
unshare(0x6020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@map_fd, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94)

4.828402536s ago: executing program 5 (id=827):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file2\x00', 0x1000000, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
stat(&(0x7f0000001840)='./file2\x00', &(0x7f0000001880))
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x149001, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x2}], 0x2, 0x12222, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711823000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.673820421s ago: executing program 0 (id=828):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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")
r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r4, 0x0, 0x1, 0x8ffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x2e12, 0x8001, 0x1, 0x3})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"000037e45bd17505636dd1caff00"}, 0x100000000000, 0xfffffffffffffffc, 0x6}}}, 0x118)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000840)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r8, 0x0, 0x2, 0x4}}, 0x20)
write$P9_RUNLINKAT(r6, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)
fallocate(r3, 0x0, 0x0, 0x8800000)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setrlimit(0xb, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000080)=0xb0000)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff70, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x3a, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)

4.624651552s ago: executing program 2 (id=830):
r0 = creat(0x0, 0xecf86c37d53049cc)
write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './file0'}, 0xb)
r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r1, &(0x7f0000000180)="e502", 0x2)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$inet(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, 0x0, 0x0)
sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)}}], 0x1, 0x41)
setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000240)=[{0x2, 0x0, {0x2, 0x1, 0x3}, {0x2, 0x0, 0x1}, 0x0, 0xfe}, {0x1, 0x1, {0x2, 0xff, 0x1}, {0x1}, 0xfe, 0xfd}, {0x3, 0x3, {0x2, 0x1}, {0x2, 0x1, 0x1}, 0x0, 0x1}], 0x60)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(0x0, r6)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40100}, 0x20000000)
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4c001, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x20cc16, &(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x3, 0x22e, &(0x7f0000000480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f00000001c0)={[{@dioread_nolock}, {@noblock_validity}, {@noquota}, {@journal_checksum}, {@norecovery}, {@abort}, {@minixdf}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x224061, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
removexattr(&(0x7f0000000100)='./file1\x00', 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4d0, 0x320, 0x190, 0x320, 0xc8, 0x190, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00', {}, {}, 0x2c}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xffffffff], [], 'pimreg\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x25, 0x7}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xff000000], 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x5, 0x22}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x9, 0x4, 0x13}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private1, @loopback, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'bond_slave_0\x00', 'erspan0\x00', {0xff}, {}, 0x2b, 0x3, 0x0, 0x20}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1, 0x80, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c)
socket$inet6(0xa, 0x2, 0x0)

4.093842569s ago: executing program 3 (id=833):
syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x4000000000000000, &(0x7f0000000880), 0x1, 0x7f1, &(0x7f00000008c0)="$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")

4.009409572s ago: executing program 3 (id=834):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setrlimit(0xb, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000000c0)=0x5)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9f, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x1, 0x0, {0x4}})
socket$inet6_sctp(0xa, 0x5, 0x84)

3.881466496s ago: executing program 0 (id=835):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000a00)="c7", 0x1)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x220408a, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d6b6f69382d752c636f6465706167653d3933322c696f636861727365743d6575632d6a702c747a3d5554432c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c6e66732c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c00416786a537fd"], 0x1, 0x376, &(0x7f00000007c0)="$eJzs3U1oHOUbAPBnO0k2Ke0/e/hD0dPqTZDSRDzoKaFUKOaglaV+XFxs6kd2LWRxIYLZ7EUpngQvgj1560GPPYsHEW8evFpBquLFgodCgyOzO/u96Qe4seLvdyhP3+d59n1ndsjMhuTNq63YujAfF2/evBGLi4WYWzu9FrcKUYojkUTXXkz14cL0cQDgAXcrTeP3tOuuxUtxtBe69wPAv1fn/v/68cFA8Y7laTL8v8vHZrYuAGB27vHz/3NTRy/NbFkAwAxN3P8fHUmPfZt/LkY+/8fS7BcIAPztXnjp5WfXNyLOlcuLEfUPmpVmJZ4e5NcvxptRi804FcuxH9F9UOg+LWT/PnN248ypcubnUlSyjmYlot5qVrpPCutJp78YK7Ecpbw/7fcnWf9Kp78cEXutzvxRLzQr850fNsjm/+FobMZqLMf/J/ojzm6cWS3nL1Cp9/pbEe1Y7B1Etv6TsRzfvRaXohYXIusdrH93pVw+nW6M9DevFjt1AAAAAAAAAAAAAAAAAAAAAAAwCyfLfaU4lu9/k9ZbzffPjReURvbHqXTT+f5A7e7+QGmxmO/OczkZ3x9odH+eZmUujvyjRw4AAAAAAAAAAAAAAAAAAAAPjsbOQlRrtc3txs67W8NBa2jk7W8+/2opeqm5vPWtZNAV+eDI6/QKh145if4Uab89TUZq8iCJ6BXvVa9e6694uKbYP4qJ9iwoTqQK+ZqqtdrxR376dFrXn1mw1xlJYuK0jAaFfP6hVP1/2cBiROwf1HVwsHqXmutpmmbBfD7vcM3uJ+Nd+VYMrftexnhQ2JtIfX3jjYeeaJx4sjPyZT7TY48vn7/+8We/blVr0e6tcGG7sZ/eeYq0FbEThYjJVDJ0/RTy81yYciVMD9qDkfZ2Y6eafP/biw9/9O1YcTL9+kmHR96ZOsV7V/44X/tiPLXQDQoRpcm3aTKYn3LxTw9eud2/eu//rTxxZa16bffHX6bVZGd0vGvoi4SNOgAAAAAAAAAAAAAAAAAA4FAMful3LJGmaevArqeen/nCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAQDf7+/1DQnhi5l+B2KyZTxc3txoGTLx3qoQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8B/2VwAAAP//rnh3Vw==")
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, 0x0)
sendfile(r1, r0, 0x0, 0x3ffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$binfmt_elf64(r1, &(0x7f0000000d40)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x8, 0x8, 0x8, 0x4, 0x3, 0x3e, 0x366, 0x2b0, 0x40, 0x38a, 0x9, 0x401, 0x38, 0x1, 0xea, 0x1, 0x8}, [{0x60000000, 0x3, 0x3, 0xf4, 0x3, 0x1597e38a, 0x5, 0x3}], "", ['\x00']}, 0x178)

3.369932203s ago: executing program 2 (id=836):
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000040)="29000000150005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29)

2.81272143s ago: executing program 3 (id=837):
unshare(0x6020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@map_fd, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94)

2.802725681s ago: executing program 1 (id=838):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0xddbd, 0x4)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1c802, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES16=0x0, @ANYRES16], 0x1, 0x5f97, &(0x7f0000003040)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402)
pselect6(0x40, &(0x7f0000000180)={0x56, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000280)=ANY=[], 0x1, 0x1d6, &(0x7f0000000300)="$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")
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0x20)
getpid()
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x29}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x43638012}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0xe8, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_SET_USERDATA={0xc3, 0xd, 0x1, 0x0, "654d62e0bc036fc24c13ca916c4144fd9d923b2e33be7d08909fa58754a508516fa73001cfd611241c3f43d8e69643604a047f755a0f0a1fffbeb5a3a8b2882935906a76711b51a1c5bfe69d98ae1cbd2821696703d59a2e89af033bf3c119e312d3af5b768c760c726602c73c69144e1c34c69b8835c8dfac9fa36526c0ad734860622dcf60400b933b8ff79aff589030f6012c0c8ea3f8c4fe16e2aba27ab60c8a2cfa7f22f94eb40537731323f86490382c20f0e1dddbf0f6e87336e871"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x204}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

2.725813103s ago: executing program 2 (id=839):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x800)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x80000001)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400000004000000040000000a"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f0000000e00), 0x0}, 0x20)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

2.662731355s ago: executing program 3 (id=840):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x28)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x26}}, 0xfffffd09)

2.50109133s ago: executing program 2 (id=841):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7fff0000}]})
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10012, &(0x7f0000001e80)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRES16], 0x4, 0x340, &(0x7f0000000bc0)="$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") (async)
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10012, &(0x7f0000001e80)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRES16], 0x4, 0x340, &(0x7f0000000bc0)="$eJzs3U9r1EwcB/DvJLvb7NM+NbaVgiepFjyVth4ULy1SfA0epKjtFoprBa2gIlg9i3hTRI+9eRZ9C4ogvgE99SCe9FI8GJlfJruT7GSz29bdln4/4JpN5s9vkkwys8s2IKJD68LC180zW/qfKgPwAZwHPAABUAJwDOPBnbX1woL8xpJCnFO1pFlaq7myBjA5jFC/K2HIXkf/RhRF0bfCVD97Egv1j7J7sMUDBkzvlO1BzyPbtTnXyo24XYeLdYTVNrZxF8P9DIeIiPrP3P89c5cYMuN3zwMmzTj8oN7/E6nxzXb/4tgXZHKm7/9e/D5Sev8ckU16vre6Xq8tS6pXn15U9Op4lugqy3lORM3dLdk9wB+0hlxWLW4Si1ddWa3XpjakgMeYM6xkY/K6jKQhIpnTZsusADMAJhxz0zbySis2KG0o6zbM5sQ/2q5G5wT4/Xc8d1e3+LGDmNQH9VktqhAvsdwY/5UipXeOHKkw01Xi+KfzS5RWhnGqVCub4R+VSo6bGvDuTbOV1bz9GsDXsbjoUlR2/B4mcT6r5OfCCNIfK8Stm8lvnRgFSkpmDXau2cb23866xrJ1VVfK9drU0s163km/t5wzOvVUXVIT+IG3WLDG/55OPYn8npnq5UpSmjOjbXtKkrLlODo6oHTgG131TBIXUxe/zjzBNZzD8O17969frddrt3q6kJxLqU1JV9lhySf2ONT4RDSno16j/7fSINAL5Wwr7IVy/ibnwp8oipybSujF0SlLU8++bjTZ7qW7q0JfOTOb5vMTA5gHYNYkQeyk9oeNXAPNAjvK/ksfbVnjPiGTqHrQZZTrEPgY6KinVFvWbBbkevB/1xcTOqiaRx/jl/sdDPWDHjuoeP5nzVem5aqjX8I285+oqHCrxJmcGdCIvP7X2QyuUWzuOHEwWSiYc508DZzK1OghqfFRttjQxIn9+K1k919lqAV8wRV+/k9EREREREREREREREREREREREREdNB0+2uE1p8TFC+ka9w6hH94g4iIiIiIiIiIiIiIiIiIiIiIiIiIiIhod6zn/wK+PDGm4nr+b7snNQk/fkJMsBfP//U7eP6v2uiilUTk8jcAAP//9TRVMw==")
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x4004010, 0xffffffffffffffff, 0x8000000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
syz_mount_image$jfs(&(0x7f0000005e00), &(0x7f0000005e40)='./file0\x00', 0x5, &(0x7f0000005e80)=ANY=[@ANYBLOB='\x00'], 0x1, 0x5e4c, &(0x7f0000005ec0)="$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")

2.20519315s ago: executing program 5 (id=842):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
keyctl$session_to_parent(0x12)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x38, r7, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x66}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_IE={0x4}]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x28, 0x0, 0x303, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffdffffd, 0x1c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
gettid()
timer_create(0x3, 0x0, &(0x7f0000044000)=<r8=>0x0)
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_delete(r8)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003"], 0x70}}, 0x4008000)
keyctl$session_to_parent(0x12)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x40000000015, 0x5, 0x0)

1.917863259s ago: executing program 3 (id=843):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000600)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

464.883155ms ago: executing program 3 (id=844):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0xfffffffe, &(0x7f0000000680), 0x1, 0x5d2, &(0x7f00000006c0)="$eJzs3c1rHOcdB/DvrNey1wVHSezELYGKGNJSUVvSorTqpW4pRYdQQnroWdjrePFaCdKmKKEU9/3aQ/6A9KBbT4XeDem5veWqY6DQS066uczs7GpjKYoUy95V/PmIZ57nmWfmmWd+87I7u4gN8MxanU/zQYqszr+xVdZ3ttu9ne32vWE5ybkkjaQ5yFKsJ8XHyY0MUr5Zzqy7K75oOx92V9765LOdTwe1Zp2q5RuHrXc09+uUuSRn6vyk+rv52P0Voz0sA3Z1GDiYtIf73D/O6o953QLToBi8bu4zm1xIcr5+H5D67tB4uqM7ece6ywEAAMAp9dxudrOVi5MeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwm9e//F3VqDMtzKYa//z9Tz0tdPtUeTHoAAAAAAAAAAHACvr2b3Wzl4rD+sKi+83+1qlyqpt/Ie9lMJxu5lq2spZ9+NrKYZHaso5mttX5/Y/EIay4duObS09lfAAAAAAAAAPia+n1W977/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAaVAkZwZZlS4Ny7NpNJOcTzJTLnc/+c+wfJo9mPQAAAAA4Cl4bje72crFYf1hUT3zv1Q995/Pe1lPP93000snt6rPAgZP/Y2d7XZvZ7t9r0z7+/3J/441jKrHDD57OHjLV6olWrmdbjXnWm7mnfRyK41qzdKV4XgOHtfvyjEVP64dcWS36rzc87/W+XSYrSJydhSRhXpsZTSePzwSxzw6j25pMY3RJz+XnkDML9R5uT9/nuqYL42dfS8dHonkO//8+6/u9Nbv3rm9OT89u/QVPRqJ9lgkXn6mIrFQReLyqL6an+eXmc9c3sxGuvl11tJPJ3P5WVVaq8/ncjp7eKRufK725peNZKY+LoO76PHG9Gq17sV084u8k1vp5PXqbymL+UGWs5yVsSN8+QhXfeN4V/3V79aFVpK/1Pl0KOP6/Fhcx++5s1Xb+Jy9KL1w8vfG5rfqQrmNP9T5dHg0EotjkXjx8Ej87WE53eyt3924s/buEbf3Wp2X19GfpupVojxfXigPVlX7/NlRtr14YNti1XZp1NbY13Z51PZlV+pM/R5uf09LVdvLB7a1q7YrY20Hvd8CYOpd+N6FmdZ/W/9ufdT6Y+tO643zPz33w3OvzOTsv87+qLlw5rXGK8U/8lF+u/f8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHWb739wd63X62woKCgojAqTvjMBT9r1/r13r2++/8H3u/fW3u683VlfWV5eWVhZfr19/Xa311kYTCc9SuBJ2HvRn/RIAAAAAAAAAAAAgKN6Gv9OMOl9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE631fk0H6TI4sK1hbK+s93ulWlY3luymaSRpPhNUnyc3MggZXasu+KLtvNhd+WtTz7b+XSvr+Zw+cZh6x3N/TplLsmZOj+p/m4+dn/FaA/LgF0dBg4m7f8BAAD//w+LD6w=")

260.555791ms ago: executing program 2 (id=845):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=")
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x0, 0x1, 0x8ffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x2e12, 0x8001, 0x1, 0x3})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"000037e45bd17505636dd1caff00"}, 0x100000000000, 0xfffffffffffffffc, 0x6}}}, 0x118)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000840)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r7, 0x0, 0x2, 0x4}}, 0x20)
write$P9_RUNLINKAT(r5, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setrlimit(0xb, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff70, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x3a, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)

44.871448ms ago: executing program 5 (id=846):
r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x3b2303, 0x0)
ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]})
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x2390024, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x5, 0x7fffffff}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', <r6=>0x0})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@mcast2, <r7=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@RTM_NEWMDB={0x78, 0x54, 0x0, 0x70bd28, 0x25dfdbfe, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x1, 0x0, {@in6_addr=@private1, 0x800}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004cc0}, 0x800)
write$cgroup_pid(r3, &(0x7f0000000040)=r0, 0x12)

2.79569ms ago: executing program 1 (id=847):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x1000000000000000)

0s ago: executing program 0 (id=848):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c706172743d3078303030303030303030303030306630332c6e6c733d6d61637475726b6973682c008866a7758e550da0947fc42499952002356575bac0cb11c22f31b6605838f92fc821ef9ee4df4806500b7738a217e12f5c0000000000000000"], 0x1, 0x5e7, &(0x7f0000000680)="$eJzs3U1vG8cdB+Df0rIsuoDNJHaSBi0q2IcWMWqLYuLoUKBuURQ6BEWAXnLJQbDpWDCtBBJTKEFR2H299hskPcjnnnooejCQnvsVBPSQQ4HedXOwy6XEWIpCxbJJJ88DDGdGszs78/fukLuEwQDfWstv5+SDFFm+9OZmWd/e6vS2tzp3huUkp5I0kplBlmItKT5NrmWQ8t3yj3V3xZcd552P31j6rH3/3qA2U6dq+8Zh+43nbp0yn+REnR9Xf9cfu79id4ZlwC4OAweT9nCfu0fZ/TGvW2AaFIP3zX1ayekkc/XngNSrQ+Ppju74HWmVAwAAgGfU2Z3sZDNnJj0OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJbUv/9f1KlR5nNJMZ9i+Pv/s3Vb6vIz7cGkBwAAAAAAAAAAx+AHO9nJZs4M6w+L6jv/C1XlXPX6nXyQjXSznsvZzEr66Wc97SStkY5mN1f6/fX2GHsuHrjn4tOZLwAAAAAAAAB8Q/0+y3vf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokhODrErnhuVWGjNJ5pLMltvdTf41LE+hV+bG3PDBEx4IAAAATIOzO9nJZs4M6w+L6p7/xeq+fy4fZC39rKafXrq5UT0LGNz1N7a3Or3trc6dMu3v92f/P9Iwqh4zePZw8JEXqi3O7+6xnF/m17mU+byV9azmN1lJP93M5xdVaSVFWvXTi9ZwnAeP99oXam991VhfrkbSzM2sVmO7nOt5L73cSKOaQ7XN4Ue8V0an+GltzBjdqPNyRn+t8+nQqiJycjciC3Xsy2g8d3gkjniePHqkdhq7z6DOPYGYn67zMtZ/nr6Ynx3WulkcOftePDwSyYX/fv8ft3prt2/d3Lg0PVP6mh49JzojkXjpWxWJ2Toag1X0aKvlhWrfM1nNr/JebqSb17OU17OY1/JaFrKUqyNxPT/GtdY42rV28Ud1oZnkL3U+Hcq4PjcS19GVrlW1jf5lL0rPH/+KNPNKXSiP8Yc6nw6PRqI9EokXDo/E3x6Wrxu9tdvrt1beH/N4P6zz8rL901StzeX58nz5j1XVvnh2lG0vHNjWrtrO7bY19rWd3237qit1tv4Mt7+nxartpQPbOlXbyyNtB33KAWDqnX719Gzzf83/ND9p/rF5q/nm3M9PLZ363mxO/nvmnyf+3rjf+Enxaj7J7/bu/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK9v48OPbq/0et11BYVxC2edNt/8wqRXJuBJu9K/8/6VjQ8/+vHqnZV3u+921zqd9tXFpatLi1ev3FztdRcGr5MeJvAE7L3pT3okAAAAAAAAAAAAwLiexn8nmPQcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfb8ts5+SBF2guXF8r69lanV6ZheW/LmSSNJMVvk+LT5FoGKa2R7oovO847H7+x9Fn7/r29vmaG2zcO2288d+uU+SQn6vy4+rv+2P0VuzMsA3ZxGDiYtM8DAAD//496DJI=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x20000020064e, 0xe, 0x200000, 0x3, 0x5, 0x9})

kernel console output (not intermixed with test programs):

8 scanned by syz.3.74 (4633)
[   94.723426][ T4606] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   94.810533][ T4181] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4181)
[   94.832113][ T4608] team0: Port device team_slave_0 added
[   94.873743][ T4672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'.
[   94.912084][ T4234] lenovo 0003:17EF:6047.0001: Failed to switch middle button: -71
[   94.931967][ T4234] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71
[   94.942033][ T4330] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (4330)
[   95.001904][ T4234] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71
[   95.036089][ T4234] usb 2-1: USB disconnect, device number 3
[   95.095622][ T4265] Bluetooth: hci2: command 0x0409 tx timeout
[   95.174570][ T4608] team0: Port device team_slave_1 added
[   95.190845][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'.
[   95.265245][ T4637] loop2: detected capacity change from 0 to 32768
[   96.432420][ T4679] fido_id[4679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   96.475421][ T4690] loop3: detected capacity change from 0 to 164
[   96.489850][ T4608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.502334][ T4608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.617318][ T4608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.722016][ T4608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.729002][ T4608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.773199][ T4699] iso9660: Corrupted directory entry in block 2 of inode 1920
[   96.872107][ T4608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.149993][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'.
[   97.159866][ T4713] netlink: 'syz.0.84': attribute type 2 has an invalid length.
[   97.167597][ T4713] netlink: 'syz.0.84': attribute type 1 has an invalid length.
[   97.181750][ T4234] Bluetooth: hci2: command 0x041b tx timeout
[   97.206259][ T4608] device hsr_slave_0 entered promiscuous mode
[   97.250732][ T4608] device hsr_slave_1 entered promiscuous mode
[   97.291925][ T4608] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.299639][ T4608] Cannot create hsr debugfs directory
[   97.646552][ T4720] loop3: detected capacity change from 0 to 512
[   97.685622][ T4710] loop1: detected capacity change from 0 to 32768
[   97.694043][ T4695] loop2: detected capacity change from 0 to 4096
[   97.817943][ T4720] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   97.826527][ T4608] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   97.880118][ T4720] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   98.022157][ T4695] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   98.974917][ T4405] device hsr_slave_0 left promiscuous mode
[   99.002677][ T4405] device hsr_slave_1 left promiscuous mode
[   99.054709][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.103176][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.132335][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.148543][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.171461][ T4405] device bridge_slave_1 left promiscuous mode
[   99.198171][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.261808][   T23] Bluetooth: hci2: command 0x040f tx timeout
[   99.270840][ T4405] device bridge_slave_0 left promiscuous mode
[   99.299679][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.447420][ T4405] device veth1_macvtap left promiscuous mode
[   99.492037][ T4405] device veth0_macvtap left promiscuous mode
[   99.498541][ T4744] loop1: detected capacity change from 0 to 512
[   99.601092][ T4405] device veth1_vlan left promiscuous mode
[   99.686482][ T4744] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   99.740797][ T4405] device veth0_vlan left promiscuous mode
[  100.245066][ T4744] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.89: Allocating blocks 41-42 which overlap fs metadata
[  100.371991][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.405128][ T4744] Quota error (device loop1): write_blk: dquota write failed
[  100.430302][ T4744] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  100.477302][ T4744] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.89: Allocating blocks 41-42 which overlap fs metadata
[  100.520449][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.532055][ T4744] Quota error (device loop1): write_blk: dquota write failed
[  100.551018][ T4744] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  100.562623][ T4744] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.89: Failed to acquire dquot type 1
[  100.580658][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.588933][ T4744] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  100.615034][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.628001][ T4744] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.89: corrupted inode contents
[  100.643216][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.649769][ T4744] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.89: mark_inode_dirty error
[  100.668746][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.677881][ T4744] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.89: corrupted inode contents
[  100.690742][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.698272][ T4744] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.89: mark_inode_dirty error
[  100.710572][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.721324][ T4744] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.89: corrupted inode contents
[  100.744919][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.751633][ T4744] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  100.768789][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.785337][ T4744] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.89: corrupted inode contents
[  100.805674][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.816208][ T4744] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.89: mark_inode_dirty error
[  100.828014][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.834933][ T4744] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  100.844669][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  100.852133][ T4744] EXT4-fs (loop1): 1 truncate cleaned up
[  100.865830][ T4744] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,max_dir_size_kb=0x0000000000000006,resgid=0x00000000000000002. Quota mode: writeback.
[  100.898607][ T4405] team0 (unregistering): Port device team_slave_1 removed
[  100.916076][ T4405] team0 (unregistering): Port device team_slave_0 removed
[  100.972417][ T4405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.023657][ T4405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.046434][ T4744] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.89: Allocating blocks 41-42 which overlap fs metadata
[  101.071763][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  101.078741][ T4744] Quota error (device loop1): write_blk: dquota write failed
[  101.097214][ T4744] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  101.108623][ T4744] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.89: Failed to acquire dquot type 1
[  101.123740][ T4744] EXT4-fs (loop1): Remounting filesystem read-only
[  101.127370][ T4758] 9pnet: Insufficient options for proto=fd
[  101.166904][ T4757] loop3: detected capacity change from 0 to 4096
[  101.185286][ T4405] bond0 (unregistering): Released all slaves
[  101.235713][ T4757] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  101.278614][ T4608] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  101.296881][ T4608] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  101.306518][ T4608] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  101.314297][ T4757] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  101.341723][ T4565] Bluetooth: hci2: command 0x0419 tx timeout
[  101.355336][ T4757] ntfs: volume version 3.1.
[  101.397353][ T4757] ntfs: (device loop3): map_mft_record_page(): Mft record 0x9 is corrupt.  Run chkdsk.
[  101.407200][ T4757] ntfs: (device loop3): map_mft_record(): Failed with error code 5.
[  101.719195][ T4608] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.776728][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.789319][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.840457][ T4608] 8021q: adding VLAN 0 to HW filter on device team0
[  101.922628][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.945647][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.018623][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.025991][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.049284][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.073068][ T4780] capability: warning: `syz.1.97' uses deprecated v2 capabilities in a way that may be insecure
[  102.083584][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.112527][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.121070][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.128218][ T4402] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.152837][ T4786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'.
[  102.161732][ T4786] netlink: 'syz.3.96': attribute type 2 has an invalid length.
[  102.169306][ T4786] netlink: 'syz.3.96': attribute type 1 has an invalid length.
[  102.179803][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.195185][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.226202][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.255553][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.268403][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.281133][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.296566][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.332883][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.373836][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.385988][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.423186][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.474555][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.513423][ T4796] netlink: 32 bytes leftover after parsing attributes in process `syz.0.99'.
[  102.601142][ T4796] loop0: detected capacity change from 0 to 2048
[  102.742326][ T4803] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.811051][ T4768] loop2: detected capacity change from 0 to 32768
[  102.912250][ T4557] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  103.163915][ T4820] befs: (nullb0): invalid magic header
[  103.186455][ T4265] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  103.194263][ T4557] usb 2-1: Using ep0 maxpacket: 16
[  103.342043][ T4557] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  103.427167][ T4557] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8
[  103.441825][ T4265] usb 4-1: device descriptor read/64, error -71
[  103.541064][ T4557] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  103.549375][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.622184][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.667054][ T4557] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  103.697187][ T4608] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.731753][ T4265] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  103.752510][ T4557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.824055][ T4557] usb 2-1: config 0 descriptor??
[  103.942115][ T4265] usb 4-1: device descriptor read/64, error -71
[  104.073030][ T4265] usb usb4-port1: attempt power cycle
[  104.511835][ T4265] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  104.570297][ T4801] loop1: detected capacity change from 0 to 128
[  104.653308][ T4265] usb 4-1: device descriptor read/8, error -71
[  104.665437][ T4839] loop0: detected capacity change from 0 to 256
[  104.780075][ T4801] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  104.852527][ T4801] System zones: 1-3, 19-19, 35-36
[  104.921868][ T4265] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  104.938449][ T4801] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[  104.971606][ T4839] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  105.013882][ T4839] FAT-fs (loop0): Filesystem has been set read-only
[  105.037795][ T4801] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  105.082065][ T4265] usb 4-1: device descriptor read/8, error -71
[  105.174010][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.193036][ T4801] EXT4-fs warning (device loop1): verify_group_input:165: Last group not full
[  105.204748][ T4265] usb usb4-port1: unable to enumerate USB device
[  105.222198][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.271814][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.295957][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.321398][ T4608] device veth0_vlan entered promiscuous mode
[  105.332474][ T4801] udc-core: couldn't find an available UDC or it's busy
[  105.342419][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.370402][ T4801] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  105.370445][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.416447][ T4608] device veth1_vlan entered promiscuous mode
[  105.498818][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  105.508019][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  105.517570][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.527339][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.536008][ T4557] usbhid 2-1:0.0: can't add hid device: -71
[  105.542542][ T4557] usbhid: probe of 2-1:0.0 failed with error -71
[  105.552991][ T4608] device veth0_macvtap entered promiscuous mode
[  105.599440][ T4557] usb 2-1: USB disconnect, device number 4
[  105.612317][ T4608] device veth1_macvtap entered promiscuous mode
[  105.701908][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.737148][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.778150][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.807820][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.817806][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.828608][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.840073][ T4608] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.868016][ T4874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'.
[  105.877049][ T4874] netlink: 'syz.2.110': attribute type 2 has an invalid length.
[  105.880879][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.884767][ T4874] netlink: 'syz.2.110': attribute type 1 has an invalid length.
[  105.951787][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.995651][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.016471][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.035830][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.056564][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.091869][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.134478][ T4881] kernel profiling enabled (shift: 9)
[  106.142667][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.165497][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.191998][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.213217][ T4608] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.235372][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.253477][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.280333][ T4608] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.321999][ T4608] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.330760][ T4608] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.351808][ T4608] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.374261][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'.
[  106.410442][ T4881] device bond0 entered promiscuous mode
[  106.420731][ T4881] device bond_slave_0 entered promiscuous mode
[  106.431340][ T4881] device bond_slave_1 entered promiscuous mode
[  106.444245][ T4881] device bond0 left promiscuous mode
[  106.449716][ T4881] device bond_slave_0 left promiscuous mode
[  106.512927][ T4881] device bond_slave_1 left promiscuous mode
[  106.586667][ T4883] loop1: detected capacity change from 0 to 8192
[  106.648059][ T4886] loop2: detected capacity change from 0 to 512
[  106.701556][ T4403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.721137][ T4403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.736592][ T4886] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  106.748812][ T4883] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  106.765706][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  106.792420][ T4883] REISERFS (device loop1): using ordered data mode
[  106.798980][ T4883] reiserfs: using flush barriers
[  106.883153][ T4886] EXT4-fs (loop2): 1 truncate cleaned up
[  106.913274][ T4886] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none.
[  106.931988][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.935109][ T4883] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  106.950466][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.965445][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  107.105581][ T4883] REISERFS (device loop1): checking transaction log (loop1)
[  107.418297][ T4883] REISERFS (device loop1): Using r5 hash to sort names
[  107.595705][ T4883] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  108.045374][ T4909] device syzkaller0 entered promiscuous mode
[  108.119344][ T4913] loop2: detected capacity change from 0 to 2048
[  108.183547][ T4913] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.264785][ T4913] Zero length message leads to an empty skb
[  108.487867][ T4920] netlink: 100 bytes leftover after parsing attributes in process `syz.0.120'.
[  108.678593][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'.
[  109.200664][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.123'.
[  109.209781][ T4940] netlink: 'syz.5.123': attribute type 2 has an invalid length.
[  109.217525][ T4940] netlink: 'syz.5.123': attribute type 1 has an invalid length.
[  109.853712][ T4957] loop1: detected capacity change from 0 to 4096
[  110.425412][ T4962] loop2: detected capacity change from 0 to 512
[  110.506381][ T4962] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  110.516565][ T4957] __ntfs_error: 4 callbacks suppressed
[  110.516583][ T4957] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  110.530982][ T4957] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  110.544015][ T4957] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  110.566302][ T4957] ntfs: volume version 3.1.
[  110.574510][ T4957] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  110.584779][ T4957] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota.
[  110.594482][ T4957] ntfs: (device loop1): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  110.607225][ T4957] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  110.617170][ T4957] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  110.627273][ T4957] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  110.658844][ T4961] loop5: detected capacity change from 0 to 4096
[  110.735510][ T4962] EXT4-fs (loop2): 1 truncate cleaned up
[  110.740662][ T4920] loop0: detected capacity change from 0 to 32768
[  110.747520][ T4961] ntfs3: Unknown parameter '�Εp2#��Xz��������_[��‰b�����)�<��LQD<��U�W���?)nX@���_��#�W�T�'
[  110.801977][ T4962] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none.
[  111.813249][ T4977] netlink: 56 bytes leftover after parsing attributes in process `syz.2.129'.
[  112.059756][ T4980] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  112.067672][ T4980] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  112.074311][ T4980] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  112.080966][ T4980] comedi comedi3: 8255: I/O port conflict (0xf0000,4)
[  112.087894][ T4980] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  112.094527][ T4980] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  112.101549][ T4980] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4)
[  112.108839][ T4980] comedi comedi3: 8255: I/O port conflict (0xa,4)
[  112.115498][ T4980] comedi comedi3: 8255: I/O port conflict (0x1000,4)
[  112.123669][ T4980] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  112.130288][ T4980] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[  112.137636][ T4980] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4)
[  112.144806][ T4980] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  112.151439][ T4980] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  112.315257][ T4972] loop1: detected capacity change from 0 to 8192
[  112.831915][ T4972] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  112.855947][ T4972] REISERFS (device loop1): using ordered data mode
[  112.876847][ T4981] nfs: Unknown parameter 'D.���"�'
[  112.903826][ T4972] reiserfs: using flush barriers
[  112.916634][ T4972] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  113.017938][ T4972] REISERFS (device loop1): checking transaction log (loop1)
[  113.091093][ T4972] REISERFS (device loop1): Using r5 hash to sort names
[  113.120706][ T4972] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  113.545732][ T5001] loop2: detected capacity change from 0 to 4096
[  113.682851][ T5008] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  113.933503][ T5001] ntfs: volume version 3.1.
[  113.941545][ T5013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.136'.
[  113.950971][ T5013] netlink: 'syz.5.136': attribute type 2 has an invalid length.
[  113.958696][ T5013] netlink: 'syz.5.136': attribute type 1 has an invalid length.
[  114.031866][ T4234] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  114.311952][ T4234] usb 4-1: Using ep0 maxpacket: 32
[  114.358832][ T5019] loop0: detected capacity change from 0 to 512
[  114.438691][ T4234] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.460801][ T5019] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  114.494795][ T4234] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.522707][ T5023] loop1: detected capacity change from 0 to 512
[  114.546900][ T5019] EXT4-fs (loop0): 1 truncate cleaned up
[  114.553036][ T5019] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none.
[  114.761877][ T5023] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  114.770208][ T5023] EXT4-fs (loop1): Unrecognized mount option "permit_directio" or missing value
[  114.782565][ T4234] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  115.674490][ T4234] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  115.752051][ T4234] usb 4-1: Product: syz
[  115.766663][ T4234] usb 4-1: Manufacturer: syz
[  115.787742][ T5034] loop5: detected capacity change from 0 to 256
[  115.852862][ T4234] hub 4-1:4.0: USB hub found
[  116.202005][ T4566] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  116.212019][ T4234] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[  116.491771][ T4566] usb 6-1: Using ep0 maxpacket: 16
[  116.638231][ T4234] usb 4-1: USB disconnect, device number 7
[  116.771047][ T5043] netlink: 84 bytes leftover after parsing attributes in process `syz.0.143'.
[  116.902017][ T4566] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  116.931737][ T5048] loop3: detected capacity change from 0 to 64
[  116.965826][ T4566] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.007690][ T4566] usb 6-1: Product: syz
[  117.053231][ T4566] usb 6-1: Manufacturer: syz
[  117.082432][ T4566] usb 6-1: SerialNumber: syz
[  117.124351][ T4566] usb 6-1: config 0 descriptor??
[  117.164180][ T4566] ums-onetouch 6-1:0.0: USB Mass Storage device detected
[  117.364799][ T5057] loop2: detected capacity change from 0 to 4096
[  117.589373][ T5057] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  117.704449][ T5063] loop3: detected capacity change from 0 to 8192
[  117.743401][   T26] audit: type=1800 audit(1781596220.010:5): pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.147" name="file1" dev="loop2" ino=30 res=0 errno=0
[  117.806024][ T5063] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  117.832356][ T5063] REISERFS (device loop3): using ordered data mode
[  117.839624][ T5063] reiserfs: using flush barriers
[  117.862177][ T5063] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  117.916955][ T5063] REISERFS (device loop3): checking transaction log (loop3)
[  118.012206][ T5063] REISERFS (device loop3): Using r5 hash to sort names
[  118.019550][ T5063] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  118.067993][ T5046] loop1: detected capacity change from 0 to 4096
[  118.149560][ T5046] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  118.868293][ T5084] loop2: detected capacity change from 0 to 4096
[  118.899794][ T4454] usb 6-1: USB disconnect, device number 2
[  119.050412][ T5090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'.
[  119.059434][ T5090] netlink: 'syz.1.150': attribute type 2 has an invalid length.
[  119.067475][ T5090] netlink: 'syz.1.150': attribute type 1 has an invalid length.
[  119.359002][ T5084] ntfs: volume version 3.1.
[  119.614484][ T5084] ntfs: (device loop2): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters.
[  120.544638][ T5095] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  120.547831][ T5098] loop5: detected capacity change from 0 to 256
[  120.790944][ T5112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'.
[  120.799978][ T5112] netlink: 'syz.0.154': attribute type 2 has an invalid length.
[  120.807896][ T5112] netlink: 'syz.0.154': attribute type 1 has an invalid length.
[  121.650046][ T5107] loop1: detected capacity change from 0 to 131072
[  121.659953][ T5116] 9pnet: Insufficient options for proto=fd
[  121.681460][ T5098] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  121.749169][ T5107] F2FS-fs (loop1): invalid crc value
[  121.867097][ T5107] F2FS-fs (loop1): Found nat_bits in checkpoint
[  121.952348][ T5107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  122.121756][ T4566] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  122.162978][ T5123] loop2: detected capacity change from 0 to 8192
[  122.228005][ T5123] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  122.265653][ T5123] REISERFS (device loop2): using ordered data mode
[  122.361763][ T4566] usb 6-1: Using ep0 maxpacket: 8
[  122.796887][ T5123] reiserfs: using flush barriers
[  122.842035][ T4566] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  122.938905][ T5123] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  123.374409][ T4566] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  123.437661][ T5123] REISERFS (device loop2): checking transaction log (loop2)
[  123.465328][ T5123] REISERFS (device loop2): Using r5 hash to sort names
[  123.490690][ T5116] loop0: detected capacity change from 0 to 32768
[  123.601792][ T4566] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  123.639002][ T4566] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.691014][ T4566] usb 6-1: Product: syz
[  123.852266][ T4265] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  124.050714][ T4566] usb 6-1: config 0 descriptor??
[  124.058210][ T5123] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  124.072354][ T4566] usb 6-1: can't set config #0, error -71
[  124.081500][ T4566] usb 6-1: USB disconnect, device number 3
[  124.101798][ T4265] usb 4-1: device descriptor read/64, error -71
[  124.317787][ T5123] device bridge1 entered promiscuous mode
[  124.367084][ T5163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'.
[  124.376151][ T5163] netlink: 'syz.0.163': attribute type 2 has an invalid length.
[  124.384015][ T5163] netlink: 'syz.0.163': attribute type 1 has an invalid length.
[  124.392363][ T4265] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  124.411096][ T5166] overlayfs: unrecognized mount option "appraise" or missing value
[  124.611819][ T4265] usb 4-1: device descriptor read/64, error -71
[  124.734225][ T4265] usb usb4-port1: attempt power cycle
[  125.192431][ T4265] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  125.280548][ T5179] loop8: detected capacity change from 0 to 8
[  125.302120][ T4265] usb 4-1: device descriptor read/8, error -71
[  125.363608][ T4330] Dev loop8: unable to read RDB block 8
[  125.387292][ T4330]  loop8: unable to read partition table
[  125.418788][ T4330] loop8: partition table beyond EOD, truncated
[  125.440469][ T5179] Dev loop8: unable to read RDB block 8
[  125.475344][ T5179]  loop8: unable to read partition table
[  125.504707][ T5179] loop8: partition table beyond EOD, truncated
[  125.534938][ T5179] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  125.591980][ T4265] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  125.703485][ T5192] netlink: 'syz.0.169': attribute type 1 has an invalid length.
[  125.731494][ T4265] usb 4-1: device descriptor read/8, error -71
[  125.872517][ T4265] usb usb4-port1: unable to enumerate USB device
[  126.416153][ T5196] loop0: detected capacity change from 0 to 128
[  126.456486][ T5182] loop2: detected capacity change from 0 to 8192
[  126.466800][ T5192] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.556103][ T5194] bond1: (slave ip6erspan0): making interface the new active one
[  126.619815][ T5182] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  126.623118][ T5194] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  126.629885][ T5196] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  126.652393][ T5182] REISERFS (device loop2): using ordered data mode
[  126.659155][ T5182] reiserfs: using flush barriers
[  126.796976][ T5182] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  126.896120][ T5196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.912029][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  126.926607][ T5182] REISERFS (device loop2): checking transaction log (loop2)
[  126.947410][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'.
[  127.083420][ T5182] REISERFS (device loop2): Using r5 hash to sort names
[  127.096701][ T5182] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  127.136728][ T5213] loop5: detected capacity change from 0 to 512
[  127.377423][ T5213] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  127.470525][ T5213] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.110751][ T5235] loop3: detected capacity change from 0 to 256
[  128.445571][ T5235] exfat: Unknown parameter '@'
[  129.235317][ T5242] overlayfs: unrecognized mount option "appraise" or missing value
[  129.279479][ T5243] loop0: detected capacity change from 0 to 64
[  129.401552][ T4565] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  129.755028][ T5255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'.
[  129.764358][ T5255] netlink: 'syz.2.177': attribute type 2 has an invalid length.
[  129.774184][ T5255] netlink: 'syz.2.177': attribute type 1 has an invalid length.
[  129.788111][  T144] handle_bad_sector: 3 callbacks suppressed
[  129.788129][  T144] attempt to access beyond end of device
[  129.788129][  T144] loop0: rw=1, want=66, limit=64
[  129.813599][  T144] Buffer I/O error on dev loop0, logical block 65, lost async page write
[  129.831911][ T4565] usb 4-1: Using ep0 maxpacket: 16
[  129.837617][  T144] attempt to access beyond end of device
[  129.837617][  T144] loop0: rw=1, want=67, limit=64
[  129.881267][  T144] Buffer I/O error on dev loop0, logical block 66, lost async page write
[  129.912850][  T144] attempt to access beyond end of device
[  129.912850][  T144] loop0: rw=1, want=68, limit=64
[  129.936611][  T144] Buffer I/O error on dev loop0, logical block 67, lost async page write
[  129.954410][  T144] attempt to access beyond end of device
[  129.954410][  T144] loop0: rw=1, want=69, limit=64
[  129.961974][ T4565] usb 4-1: config 28 has no interfaces?
[  129.967408][  T144] Buffer I/O error on dev loop0, logical block 68, lost async page write
[  129.985829][  T144] attempt to access beyond end of device
[  129.985829][  T144] loop0: rw=1, want=73, limit=64
[  130.008014][  T144] Buffer I/O error on dev loop0, logical block 72, lost async page write
[  130.022183][  T144] attempt to access beyond end of device
[  130.022183][  T144] loop0: rw=1, want=74, limit=64
[  130.037821][  T144] Buffer I/O error on dev loop0, logical block 73, lost async page write
[  130.051460][  T144] attempt to access beyond end of device
[  130.051460][  T144] loop0: rw=1, want=77, limit=64
[  130.069475][  T144] Buffer I/O error on dev loop0, logical block 76, lost async page write
[  130.078620][  T144] attempt to access beyond end of device
[  130.078620][  T144] loop0: rw=1, want=78, limit=64
[  130.096371][  T144] Buffer I/O error on dev loop0, logical block 77, lost async page write
[  130.110888][  T144] attempt to access beyond end of device
[  130.110888][  T144] loop0: rw=1, want=169, limit=64
[  130.119637][ T5251] loop5: detected capacity change from 0 to 32768
[  130.139006][ T5251] resize option for remount only
[  130.549739][ T5272] loop5: detected capacity change from 0 to 4096
[  131.472305][ T4565] usb 4-1: string descriptor 0 read error: -71
[  131.480659][ T4565] usb 4-1: New USB device found, idVendor=0b3b, idProduct=5630, bcdDevice=a9.d9
[  131.546177][ T4565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.688056][ T4565] usb 4-1: rejected 1 configuration due to insufficient available bus power
[  131.763089][ T4565] usb 4-1: no configuration chosen from 1 choice
[  131.972422][ T4565] usb 4-1: USB disconnect, device number 12
[  132.050119][ T5305] loop5: detected capacity change from 0 to 512
[  132.101897][ T5305] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  132.135880][ T5305] EXT4-fs (loop5): 1 truncate cleaned up
[  132.141556][ T5305] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  132.170818][ T5305] overlayfs: './file1' not a directory
[  132.324849][ T5300] loop3: detected capacity change from 0 to 8192
[  132.439401][ T5300] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  132.481919][ T5300] REISERFS (device loop3): using ordered data mode
[  132.492614][ T5300] reiserfs: using flush barriers
[  132.498965][ T5300] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  132.515660][ T5300] REISERFS (device loop3): checking transaction log (loop3)
[  132.533611][ T5300] REISERFS (device loop3): Using r5 hash to sort names
[  132.548976][ T5300] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  132.864794][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  132.871229][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  133.033321][ T5330] loop5: detected capacity change from 0 to 512
[  133.216123][ T5330] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  133.226619][ T5330] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  133.236950][ T5330] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.191: Failed to acquire dquot type 1
[  133.267144][ T5330] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #16: comm syz.5.191: corrupted inode contents
[  133.281528][ T5330] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #16: comm syz.5.191: mark_inode_dirty error
[  133.294151][ T5330] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #16: comm syz.5.191: corrupted inode contents
[  133.309799][ T5330] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.191: mark_inode_dirty error
[  133.325417][ T5330] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #16: comm syz.5.191: corrupted inode contents
[  133.340686][ T5330] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  133.351416][ T5330] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #16: comm syz.5.191: corrupted inode contents
[  133.365758][ T5330] EXT4-fs error (device loop5): ext4_truncate:4286: inode #16: comm syz.5.191: mark_inode_dirty error
[  133.379525][ T5330] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  133.397376][ T5330] EXT4-fs (loop5): 1 truncate cleaned up
[  133.403363][ T5330] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  133.414800][ T5330] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.613416][ T5330] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.191: iget: bad i_size value: 360287970189639690
[  134.134444][ T5340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'.
[  134.145077][ T5340] netlink: 'syz.1.193': attribute type 2 has an invalid length.
[  134.152833][ T5340] netlink: 'syz.1.193': attribute type 1 has an invalid length.
[  134.545303][ T5303] loop0: detected capacity change from 0 to 32768
[  134.550507][ T5345] overlayfs: unrecognized mount option "appraise" or missing value
[  134.883194][ T5351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.197'.
[  135.021436][ T5358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.197'.
[  135.186785][ T5355] process 'syz.1.199' launched './file1' with NULL argv: empty string added
[  135.188944][ T5356] loop0: detected capacity change from 0 to 8192
[  135.979331][ T5349] loop5: detected capacity change from 0 to 32768
[  136.008429][ T5382] loop0: detected capacity change from 0 to 4096
[  136.051552][ T5349] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.194 (5349)
[  136.145781][ T5349] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  136.206871][ T5382] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  136.252249][ T5382] ntfs3: loop0: Failed to load $Extend.
[  136.258816][ T5349] BTRFS info (device loop5): setting nodatacow, compression disabled
[  136.304184][ T5349] BTRFS info (device loop5): use no compression
[  136.310924][ T5349] BTRFS info (device loop5): enabling disk space caching
[  136.352142][ T5349] BTRFS info (device loop5): ignoring data csums
[  136.358692][ T5349] BTRFS info (device loop5): turning on async discard
[  136.381078][ T5380] ALSA: mixer_oss: invalid OSS volume ''
[  136.401750][ T5380] ALSA: mixer_oss: invalid OSS volume '�Ȫ�U�����B��FR�нE�V��#d'
[  136.443172][ T5349] BTRFS info (device loop5): enabling free space tree
[  136.450206][ T5349] BTRFS error (device loop5): ignoredatacsums must be used with ro mount option
[  136.460391][ T5380] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*���q�pA�ڜ��e�T��|K�'
[  136.501799][ T5380] ALSA: mixer_oss: invalid OSS volume ':�a��z����]�q��e�X�fb]݆�B��.'
[  136.523045][ T5349] BTRFS error (device loop5): open_ctree failed: -22
[  136.561775][ T5380] ALSA: mixer_oss: invalid OSS volume '��j|�����q⩃˚[�w�3�^.���ג�'
[  136.570279][ T5380] ALSA: mixer_oss: invalid OSS volume '�u�dF�����d����s�j@J���u�g0�cd'
[  136.660729][ T5380] ALSA: mixer_oss: invalid OSS volume '����N�W֓YZ���S%�����f���V'
[  136.715335][ T5380] ALSA: mixer_oss: invalid OSS volume '�'�lȿD��TBx�N'
[  136.729075][ T5364] loop3: detected capacity change from 0 to 32768
[  136.746823][ T5380] ALSA: mixer_oss: invalid OSS volume '��y'
[  136.776259][ T5380] ALSA: mixer_oss: invalid OSS volume '�5y���}�9��r~�M��+����3��'
[  136.812438][ T5380] ALSA: mixer_oss: invalid OSS volume '϶��*k�C9��d�7띦2�;�"'
[  136.860850][ T5380] ALSA: mixer_oss: invalid OSS volume '*n�dV��8��m�E�����5�:��4'
[  136.874098][ T5364] gfs2: Unknown parameter 'statfs_perc00000000000002'
[  136.891265][ T5380] ALSA: mixer_oss: invalid OSS volume '����PK��ڵ1}��{N&I����a8*ʇ'
[  136.948746][ T5380] ALSA: mixer_oss: invalid OSS volume '�OC���"��[�'m����/A�O^��G&�-��'
[  136.995215][ T5380] ALSA: mixer_oss: invalid OSS volume '���'
[  137.080827][ T5380] ALSA: mixer_oss: invalid OSS volume '����@H����V��-=f#o��)�U.N�'
[  138.293200][ T5445] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.369491][ T5450] device bridge1 entered promiscuous mode
[  138.605671][ T5449] loop5: detected capacity change from 0 to 8192
[  139.447842][ T5418] loop0: detected capacity change from 0 to 32768
[  139.466087][ T5449] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  139.492128][ T5449] REISERFS (device loop5): using ordered data mode
[  139.517549][ T5449] reiserfs: using flush barriers
[  139.550596][ T5449] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  139.579236][ T5418] XFS (loop0): Mounting V5 Filesystem
[  139.610506][ T5449] REISERFS (device loop5): checking transaction log (loop5)
[  139.686095][ T5449] REISERFS (device loop5): Using r5 hash to sort names
[  139.718084][ T5483] overlayfs: unrecognized mount option "appraise" or missing value
[  139.743606][ T5449] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  139.787804][ T5418] XFS (loop0): Ending clean mount
[  139.810858][ T5418] XFS (loop0): Quotacheck needed: Please wait.
[  140.029693][ T5418] XFS (loop0): Quotacheck: Done.
[  140.408380][ T5502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'.
[  141.271235][ T4188] XFS (loop0): Unmounting Filesystem
[  142.170216][ T4265] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  142.463818][ T4265] usb 6-1: device descriptor read/64, error -71
[  142.464640][ T5529] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  142.754293][ T4265] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  143.221899][ T4265] usb 6-1: device descriptor read/64, error -71
[  143.429338][ T4265] usb usb6-port1: attempt power cycle
[  143.607176][ T5547] xt_time: invalid argument - start or stop time greater than 23:59:59
[  143.797452][ T5554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.244'.
[  143.884267][ T4265] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  144.008455][ T4265] usb 6-1: device descriptor read/8, error -71
[  144.200069][ T5573] netlink: 36 bytes leftover after parsing attributes in process `syz.1.248'.
[  144.302717][ T5551] loop0: detected capacity change from 0 to 32768
[  144.478035][ T4265] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  144.572005][ T5551] 
[  144.572005][ T5551]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.572005][ T5551] 
[  144.629199][ T5551] ERROR: (device loop0): diWrite: ixpxd invalid
[  144.629199][ T5551] 
[  144.653957][ T5551] ERROR: (device loop0): remounting filesystem as read-only
[  144.673089][ T5551] ERROR: (device loop0): txCommit: 
[  144.673089][ T5551] 
[  144.727502][ T5583] ERROR: (device loop0): diWrite: ixpxd invalid
[  144.727502][ T5583] 
[  144.736721][ T4265] usb 6-1: device not accepting address 7, error -71
[  144.744834][ T4265] usb usb6-port1: unable to enumerate USB device
[  144.759085][ T5583] ERROR: (device loop0): remounting filesystem as read-only
[  144.767215][ T5583] ERROR: (device loop0): txCommit: 
[  144.767215][ T5583] 
[  144.798013][ T5585] IPVS: Error connecting to the multicast addr
[  144.985334][ T5591] FAULT_INJECTION: forcing a failure.
[  144.985334][ T5591] name failslab, interval 1, probability 0, space 0, times 1
[  145.000269][ T5591] CPU: 0 PID: 5591 Comm: syz.0.253 Not tainted syzkaller #0
[  145.007608][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  145.017795][ T5591] Call Trace:
[  145.021132][ T5591]  <TASK>
[  145.024093][ T5591]  dump_stack_lvl+0x188/0x250
[  145.029088][ T5591]  ? show_regs_print_info+0x20/0x20
[  145.034325][ T5591]  ? load_image+0x400/0x400
[  145.038956][ T5591]  ? __might_sleep+0xf0/0xf0
[  145.043659][ T5591]  ? __lock_acquire+0x7d10/0x7d10
[  145.048708][ T5591]  ? netlink_insert+0xe95/0x11f0
[  145.053671][ T5591]  should_fail+0x38c/0x4c0
[  145.058119][ T5591]  should_failslab+0x5/0x20
[  145.062643][ T5591]  slab_pre_alloc_hook+0x51/0xc0
[  145.067608][ T5591]  kmem_cache_alloc_node+0x47/0x2d0
[  145.072836][ T5591]  ? __alloc_skb+0xf4/0x750
[  145.077400][ T5591]  __alloc_skb+0xf4/0x750
[  145.081767][ T5591]  netlink_sendmsg+0x654/0xbe0
[  145.086570][ T5591]  ? netlink_getsockopt+0x570/0x570
[  145.091785][ T5591]  ? aa_sock_msg_perm+0x94/0x150
[  145.096763][ T5591]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  145.102103][ T5591]  ? security_socket_sendmsg+0x7c/0xa0
[  145.107597][ T5591]  ? netlink_getsockopt+0x570/0x570
[  145.112806][ T5591]  ____sys_sendmsg+0x5b7/0x8f0
[  145.117585][ T5591]  ? __sys_sendmsg_sock+0x30/0x30
[  145.122617][ T5591]  ? import_iovec+0x6f/0xa0
[  145.127130][ T5591]  ___sys_sendmsg+0x236/0x2e0
[  145.131824][ T5591]  ? __sys_sendmsg+0x2a0/0x2a0
[  145.136598][ T5591]  ? vfs_write+0x8b2/0xd60
[  145.141125][ T5591]  __se_sys_sendmsg+0x1af/0x290
[  145.146010][ T5591]  ? __x64_sys_sendmsg+0x80/0x80
[  145.150949][ T5591]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  145.156943][ T5591]  ? lockdep_hardirqs_on+0x94/0x140
[  145.162148][ T5591]  do_syscall_64+0x4c/0xa0
[  145.166652][ T5591]  ? clear_bhb_loop+0x30/0x80
[  145.171594][ T5591]  ? clear_bhb_loop+0x30/0x80
[  145.176275][ T5591]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  145.182169][ T5591] RIP: 0033:0x7fe8c7933e59
[  145.186587][ T5591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.206201][ T5591] RSP: 002b:00007fe8c5b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.214724][ T5591] RAX: ffffffffffffffda RBX: 00007fe8c7bacfa0 RCX: 00007fe8c7933e59
[  145.222705][ T5591] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  145.230702][ T5591] RBP: 00007fe8c5b8d090 R08: 0000000000000000 R09: 0000000000000000
[  145.238686][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.246656][ T5591] R13: 00007fe8c7bad038 R14: 00007fe8c7bacfa0 R15: 00007ffc5620bcc8
[  145.254646][ T5591]  </TASK>
[  145.521505][ T5601] loop5: detected capacity change from 0 to 64
[  146.356749][ T5600] netlink: 'syz.3.257': attribute type 1 has an invalid length.
[  146.565587][ T4245] attempt to access beyond end of device
[  146.565587][ T4245] loop5: rw=1, want=66, limit=64
[  146.586623][ T4245] Buffer I/O error on dev loop5, logical block 65, lost async page write
[  146.715440][ T4245] attempt to access beyond end of device
[  146.715440][ T4245] loop5: rw=1, want=67, limit=64
[  147.004231][ T4245] Buffer I/O error on dev loop5, logical block 66, lost async page write
[  147.162366][ T4245] attempt to access beyond end of device
[  147.162366][ T4245] loop5: rw=1, want=68, limit=64
[  147.411861][ T4245] Buffer I/O error on dev loop5, logical block 67, lost async page write
[  147.468331][ T4245] attempt to access beyond end of device
[  147.468331][ T4245] loop5: rw=1, want=69, limit=64
[  147.514323][ T4245] Buffer I/O error on dev loop5, logical block 68, lost async page write
[  147.522240][ T5623] loop0: detected capacity change from 0 to 4096
[  147.522937][ T4245] attempt to access beyond end of device
[  147.522937][ T4245] loop5: rw=1, want=73, limit=64
[  147.550859][ T4245] Buffer I/O error on dev loop5, logical block 72, lost async page write
[  147.559703][ T4245] attempt to access beyond end of device
[  147.559703][ T4245] loop5: rw=1, want=74, limit=64
[  147.580623][ T4245] Buffer I/O error on dev loop5, logical block 73, lost async page write
[  147.601750][ T4245] attempt to access beyond end of device
[  147.601750][ T4245] loop5: rw=1, want=77, limit=64
[  147.621763][ T4245] Buffer I/O error on dev loop5, logical block 76, lost async page write
[  147.632200][ T4245] attempt to access beyond end of device
[  147.632200][ T4245] loop5: rw=1, want=78, limit=64
[  147.653583][ T4245] Buffer I/O error on dev loop5, logical block 77, lost async page write
[  147.672212][ T4245] attempt to access beyond end of device
[  147.672212][ T4245] loop5: rw=1, want=169, limit=64
[  147.927091][ T5634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'.
[  147.936070][ T5634] netlink: 'syz.0.266': attribute type 2 has an invalid length.
[  147.944471][ T5634] netlink: 'syz.0.266': attribute type 1 has an invalid length.
[  148.105528][ T5615] netlink: 'syz.2.261': attribute type 32 has an invalid length.
[  148.491803][ T4565] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  148.604742][ T5653] netlink: 4100 bytes leftover after parsing attributes in process `syz.1.269'.
[  149.878950][ T5658] loop0: detected capacity change from 0 to 4096
[  150.110076][ T5658] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing.
[  150.119251][ T5658] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  150.132533][ T5658] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  150.216642][ T5658] ntfs: volume version 3.1.
[  150.237348][ T5658] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  150.247476][ T5658] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota.
[  150.257217][ T5658] ntfs: (device loop0): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  150.270542][ T5658] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  150.280583][ T5658] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  150.290664][ T5658] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  150.309315][ T5661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'.
[  150.331769][ T4565] usb 6-1: Using ep0 maxpacket: 16
[  150.372405][ T5661] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.396370][ T5661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'.
[  150.451963][ T4565] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.459035][ T5661] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  150.470873][ T4565] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.569401][ T4565] usb 6-1: config 0 interface 0 has no altsetting 0
[  150.576156][ T4565] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  150.580936][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  150.585443][ T4565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.599475][ T4565] usb 6-1: config 0 descriptor??
[  151.032438][ T4565] hid (null): bogus close delimiter
[  151.040286][ T4565] mcp2221 0003:04D8:00DD.0002: bogus close delimiter
[  151.071789][ T4565] mcp2221 0003:04D8:00DD.0002: item 0 1 2 10 parsing failed
[  151.079490][ T4565] mcp2221 0003:04D8:00DD.0002: can't parse reports
[  151.104822][ T4565] mcp2221: probe of 0003:04D8:00DD.0002 failed with error -22
[  151.232355][ T4451] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  151.292276][ T5685] udc-core: couldn't find an available UDC or it's busy
[  151.308809][ T5685] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  151.521847][ T4451] usb 1-1: Using ep0 maxpacket: 16
[  151.652247][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.660182][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.668101][ T4451] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.678781][ T4451] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  151.873293][ T4451] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  151.889186][ T4451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.897654][ T4451] usb 1-1: Product: syz
[  151.908518][ T4451] usb 1-1: Manufacturer: syz
[  151.913395][ T4451] usb 1-1: SerialNumber: syz
[  152.135302][ T5672] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.176935][ T5672] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.288154][ T5672] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.297886][ T5672] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.307563][ T5672] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.323594][ T5672] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.474863][ T4565] usb 6-1: USB disconnect, device number 8
[  154.271988][ T4451] usb 1-1: 0:2 : does not exist
[  154.503891][ T4451] usb 1-1: USB disconnect, device number 2
[  154.555669][ T5736] comedi comedi0: comedi_config --init_data is deprecated
[  154.666795][ T5738] loop5: detected capacity change from 0 to 512
[  154.736811][ T5738] EXT4-fs (loop5): orphan cleanup on readonly fs
[  154.788127][ T5738] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  154.815399][ T4330] udevd[4330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  154.861776][ T5738] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  154.922589][ T5738] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.298: bg 0: block 64: padding at end of block bitmap is not set
[  154.960921][ T5738] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  154.988464][ T5738] EXT4-fs (loop5): 1 orphan inode deleted
[  155.001882][ T5738] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue. Quota mode: writeback.
[  155.264721][ T5743] binder: 5742:5743 ioctl c018620b 0 returned -14
[  155.399537][ T5747] loop5: detected capacity change from 0 to 128
[  155.467141][ T5747] FAT-fs (loop5): Directory bread(block 162) failed
[  155.476882][ T5747] FAT-fs (loop5): Directory bread(block 163) failed
[  155.500996][ T5747] FAT-fs (loop5): Directory bread(block 164) failed
[  155.528365][ T5747] FAT-fs (loop5): Directory bread(block 165) failed
[  155.545543][ T5747] FAT-fs (loop5): Directory bread(block 166) failed
[  155.571314][ T5747] FAT-fs (loop5): Directory bread(block 167) failed
[  155.588911][ T5747] FAT-fs (loop5): Directory bread(block 168) failed
[  155.606077][ T5747] FAT-fs (loop5): Directory bread(block 169) failed
[  155.622186][ T5747] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  155.696948][ T5747] FAT-fs (loop5): Directory bread(block 162) failed
[  155.729037][ T5747] FAT-fs (loop5): Directory bread(block 163) failed
[  155.754624][ T5747] attempt to access beyond end of device
[  155.754624][ T5747] loop5: rw=3, want=232, limit=128
[  155.795114][ T5747] attempt to access beyond end of device
[  155.795114][ T5747] loop5: rw=2051, want=234, limit=128
[  155.803588][ T5729] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  155.841420][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'.
[  156.047235][ T5743] loop0: detected capacity change from 0 to 32768
[  157.232809][ T5776] loop5: detected capacity change from 0 to 32768
[  157.265280][ T5788] netlink: 'syz.3.318': attribute type 15 has an invalid length.
[  157.278541][ T5776] 
[  157.278541][ T5776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.278541][ T5776] 
[  157.401079][ T5776] 
[  157.401079][ T5776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.401079][ T5776] 
[  157.441801][ T5776] 
[  157.441801][ T5776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.441801][ T5776] 
[  157.446007][ T5791] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  157.464618][ T5786] loop0: detected capacity change from 0 to 8192
[  157.497579][  T278] 
[  157.497579][  T278]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.497579][  T278] 
[  157.517190][ T5786] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  157.527553][ T5786] REISERFS (device loop0): using ordered data mode
[  157.535245][ T5786] reiserfs: using flush barriers
[  157.545862][ T5786] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  157.562687][ T5786] REISERFS (device loop0): checking transaction log (loop0)
[  157.578547][ T5786] REISERFS (device loop0): Using r5 hash to sort names
[  157.626461][ T5786] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  157.643852][ T5791] netlink: 4844 bytes leftover after parsing attributes in process `syz.2.319'.
[  157.655618][ T4608] 
[  157.655618][ T4608]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.655618][ T4608] 
[  157.673597][ T4608] 
[  157.673597][ T4608]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.673597][ T4608] 
[  158.112504][ T5820] smb3: Unknown parameter 'overriderockperm'
[  158.119324][ T5820] netlink: 'syz.3.328': attribute type 6 has an invalid length.
[  158.186944][ T5826] loop0: detected capacity change from 0 to 512
[  158.235381][ T5826] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  158.245700][ T4451] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  158.300075][ T5826] EXT4-fs (loop0): 1 truncate cleaned up
[  158.319186][ T5826] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none.
[  158.661949][ T4451] usb 6-1: Using ep0 maxpacket: 8
[  158.812288][ T4451] usb 6-1: config 0 interface 0 altsetting 29 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.913539][ T4451] usb 6-1: config 0 interface 0 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  159.216371][ T4451] usb 6-1: config 0 interface 0 has no altsetting 0
[  159.312660][ T4451] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  159.421766][ T4451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.446649][ T4451] usb 6-1: config 0 descriptor??
[  159.802358][ T4451] hid (null): unknown global tag 0xe
[  159.820961][ T4451] redragon 0003:0C45:760B.0003: unknown main item tag 0x2
[  159.849954][ T4451] redragon 0003:0C45:760B.0003: unknown main item tag 0x0
[  159.864851][ T4451] redragon 0003:0C45:760B.0003: unknown main item tag 0x0
[  159.885526][ T4451] redragon 0003:0C45:760B.0003: unknown main item tag 0x0
[  159.906533][ T4451] redragon 0003:0C45:760B.0003: unknown main item tag 0x0
[  159.923202][ T4451] redragon 0003:0C45:760B.0003: unknown global tag 0xe
[  159.930759][ T4451] redragon 0003:0C45:760B.0003: item 0 0 1 14 parsing failed
[  159.941719][ T4565] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  159.944580][ T4451] redragon: probe of 0003:0C45:760B.0003 failed with error -22
[  160.003532][ T4233] usb 6-1: USB disconnect, device number 9
[  161.151766][ T4565] usb 1-1: Using ep0 maxpacket: 8
[  161.964928][ T4565] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  161.974361][ T4565] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  161.984729][ T4565] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  161.995044][ T4565] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  162.005292][ T4565] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  162.024275][ T4565] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  162.034408][ T5855] Invalid ELF header magic: != ELF
[  162.042084][ T4565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.001720][ T4565] usb 1-1: usb_control_msg returned -32
[  163.007360][ T4565] usbtmc 1-1:16.0: can't read capabilities
[  163.036867][ T5876] xt_limit: Overflow, try lower: 2147483649/3300
[  163.058378][ T4565] usb 1-1: USB disconnect, device number 3
[  163.338363][ T5880] loop5: detected capacity change from 0 to 8192
[  163.492506][ T5880] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  163.854728][ T5880] REISERFS (device loop5): using ordered data mode
[  164.040515][ T5880] reiserfs: using flush barriers
[  164.150305][ T5880] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  164.228123][ T5880] REISERFS (device loop5): checking transaction log (loop5)
[  164.301520][ T5880] REISERFS (device loop5): Using r5 hash to sort names
[  164.332239][ T5880] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  164.559231][ T5891] loop0: detected capacity change from 0 to 8192
[  165.011311][ T5891] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  165.100547][ T5891] REISERFS (device loop0): using ordered data mode
[  165.306720][ T5891] reiserfs: using flush barriers
[  165.361871][ T5891] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  165.438699][ T5891] REISERFS (device loop0): checking transaction log (loop0)
[  165.462592][ T5891] REISERFS (device loop0): Using r5 hash to sort names
[  165.480083][ T5891] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  166.110749][ T5925] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  166.121014][ T5925] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  166.219952][ T5904] overlayfs: failed to clone upperpath
[  166.511028][ T5933] loop5: detected capacity change from 0 to 4096
[  167.138525][ T5933] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  167.147530][ T5933] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  167.160732][ T5933] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  167.187237][ T5933] ntfs: volume version 3.1.
[  167.239775][ T5933] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  167.249906][ T5933] ntfs: (device loop5): load_and_init_quota(): Failed to find inode number for $Quota.
[  167.259625][ T5933] ntfs: (device loop5): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  167.272618][ T5933] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  167.282692][ T5933] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  167.292776][ T5933] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  168.131485][ T5966] AppArmor: change_hat: Invalid input '0x000000000000'
[  168.584834][ T4451] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  169.552354][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'.
[  169.613533][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'.
[  169.959604][ T4451] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[  169.970879][ T4451] usb 6-1: config 1 has no interface number 0
[  169.995956][ T4451] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  170.050389][ T5998] loop0: detected capacity change from 0 to 512
[  170.060434][ T4451] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  170.108909][ T4451] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 244, changing to 11
[  170.127031][ T5998] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  170.142029][ T5998] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.351929][ T4451] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  170.370622][ T4451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.389055][ T4451] usb 6-1: Product: syz
[  170.396660][ T4451] usb 6-1: Manufacturer: syz
[  170.406480][ T4451] usb 6-1: SerialNumber: syz
[  170.474977][ T4451] usb 6-1: Error in usbnet_get_endpoints (-22)
[  170.967787][ T6027] loop0: detected capacity change from 0 to 8192
[  171.062444][ T6027] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  171.088345][ T6027] REISERFS (device loop0): using ordered data mode
[  171.111891][ T6027] reiserfs: using flush barriers
[  171.119322][ T6027] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  171.208409][ T6027] REISERFS (device loop0): checking transaction log (loop0)
[  171.238144][ T6027] REISERFS (device loop0): Using r5 hash to sort names
[  171.258240][ T6027] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  171.330121][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'.
[  171.528498][ T6044] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  171.574877][ T5971] loop5: detected capacity change from 0 to 32768
[  171.844277][ T5971] XFS (loop5): Mounting V5 Filesystem
[  172.496505][ T5971] XFS (loop5): log mount failed
[  172.919527][ T4237] usb 6-1: USB disconnect, device number 10
[  173.156734][ T6069] IPv6: NLM_F_REPLACE set, but no existing node found!
[  173.381420][ T6071] loop5: detected capacity change from 0 to 4096
[  173.407950][ T6074] tipc: Started in network mode
[  173.436935][ T6071] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  173.446324][ T6074] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  173.488623][ T6074] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  173.515817][ T6071] ntfs3: loop5: failed to convert "c46c" to koi8-r
[  173.539488][ T6060] loop0: detected capacity change from 0 to 32768
[  173.550639][ T6071] capability: warning: `syz.5.407' uses 32-bit capabilities (legacy support in use)
[  173.565972][ T6074] tipc: Enabled bearer <udp:syz0>, priority 10
[  173.613141][ T6078] program syz.5.407 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  173.625161][ T6060] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  173.645762][ T6060] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  173.768455][ T6060] BTRFS info (device loop0): use zstd compression, level 3
[  173.779828][ T6060] BTRFS info (device loop0): using free space tree
[  173.791673][ T6060] BTRFS info (device loop0): has skinny extents
[  174.086534][ T6060] BTRFS info (device loop0): enabling ssd optimizations
[  174.236186][ T6115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.417'.
[  174.614926][ T6119] loop5: detected capacity change from 0 to 4096
[  174.696971][ T4451] tipc: Node number set to 1
[  174.844754][ T6119] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  174.853945][ T6119] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  174.867139][ T6119] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  174.910866][ T6119] ntfs: volume version 3.1.
[  174.929712][ T6119] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  174.939804][ T6119] ntfs: (device loop5): load_and_init_quota(): Failed to find inode number for $Quota.
[  174.949566][ T6119] ntfs: (device loop5): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  174.962400][ T6119] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  174.972427][ T6119] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  174.982627][ T6119] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  179.128264][ T6156] loop5: detected capacity change from 0 to 8192
[  179.212341][ T6154] loop0: detected capacity change from 0 to 4096
[  179.392484][ T6154] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  179.989535][ T6154] ntfs: volume version 3.1.
[  180.054180][ T6154] __ntfs_error: 1 callbacks suppressed
[  180.054199][ T6154] ntfs: (device loop0): ntfs_read_locked_inode(): Index block size (72) is not a power of two.
[  180.158328][ T6154] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x5 as bad.  Run chkdsk.
[  180.216825][ T6154] ntfs: (device loop0): load_system_files(): Failed to load root directory.
[  180.254290][ T6154] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files.
[  180.430265][ T6177] loop5: detected capacity change from 0 to 1024
[  180.487181][ T6177] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  180.505622][ T6177] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  180.609016][ T6177] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc=0x0000000000000007,noblock_validity,delalloc,quota,errors=remount-ro,nomblk_io_submit,dioread_nolock,mb_optimize_scan=0x0000000000000000,. Quota mode: writeback.
[  180.639283][ T6177] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.649652][ T6154] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.429'.
[  180.944000][ T6194] 8021q: adding VLAN 0 to HW filter on device bond1
[  181.073311][ T6202] loop0: detected capacity change from 0 to 8192
[  181.383404][ T6208] fuse: Bad value for 'fd'
[  181.425709][ T6202] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  181.447967][ T6202] REISERFS (device loop0): using ordered data mode
[  181.456678][ T6202] reiserfs: using flush barriers
[  181.469239][ T6202] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  181.493505][ T6202] REISERFS (device loop0): checking transaction log (loop0)
[  181.507266][ T6202] REISERFS (device loop0): Using r5 hash to sort names
[  181.511242][ T4555] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  181.522955][ T6202] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  181.846664][    C0] hrtimer: interrupt took 52448 ns
[  181.872037][ T4555] usb 6-1: Using ep0 maxpacket: 16
[  182.331849][ T4555] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.351671][ T4555] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  182.561881][ T4555] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  182.581304][ T4555] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.614383][ T4555] usb 6-1: Product: syz
[  182.618608][ T4555] usb 6-1: Manufacturer: syz
[  182.631692][ T4555] usb 6-1: SerialNumber: syz
[  182.772520][ T6231] loop0: detected capacity change from 0 to 16
[  182.830334][ T6235] netlink: 830 bytes leftover after parsing attributes in process `syz.3.453'.
[  182.876867][ T6231] erofs: (device loop0): mounted with root inode @ nid 36.
[  183.432612][ T6260] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.456'.
[  184.391240][ T6276] netlink: 'syz.1.459': attribute type 16 has an invalid length.
[  185.055575][ T4555] usb 6-1: 0:2 : does not exist
[  185.091370][ T4555] usb 6-1: USB disconnect, device number 11
[  185.547941][ T4555] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  185.821725][ T4555] usb 6-1: Using ep0 maxpacket: 32
[  185.971931][ T4555] usb 6-1: config 0 has an invalid interface number: 167 but max is 0
[  185.985373][ T4555] usb 6-1: config 0 has no interface number 0
[  186.002357][ T4555] usb 6-1: config 0 interface 167 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8
[  186.021701][ T4555] usb 6-1: config 0 interface 167 has no altsetting 0
[  186.043854][ T6316] loop0: detected capacity change from 0 to 8192
[  186.081132][ T6316] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  186.100896][ T6316] REISERFS (device loop0): using ordered data mode
[  186.140012][ T6316] reiserfs: using flush barriers
[  186.145955][ T4233] Bluetooth: hci0: command 0x0406 tx timeout
[  186.152066][    T7] Bluetooth: hci1: command 0x0406 tx timeout
[  186.152107][    T7] Bluetooth: hci3: command 0x0406 tx timeout
[  186.152129][    T7] Bluetooth: hci4: command 0x0406 tx timeout
[  186.160570][ T6316] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  186.193927][ T6316] REISERFS (device loop0): checking transaction log (loop0)
[  186.205700][ T6316] REISERFS (device loop0): Using r5 hash to sort names
[  186.215353][ T6316] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  186.231980][ T4555] usb 6-1: New USB device found, idVendor=07ca, idProduct=b808, bcdDevice=db.cd
[  186.266947][ T4555] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.275570][ T4555] usb 6-1: Product: syz
[  186.279827][ T4555] usb 6-1: Manufacturer: syz
[  186.284794][ T4555] usb 6-1: SerialNumber: syz
[  186.292546][ T4555] usb 6-1: config 0 descriptor??
[  186.322346][ T6311] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  186.650101][ T4555] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in cold state, will try to load a firmware
[  186.765277][ T4555] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  186.944523][ T4555] dib0700: firmware download failed at 7 with -71
[  186.958826][ T4330] udevd[4330]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  186.976066][ T4555] usb 6-1: USB disconnect, device number 12
[  187.297450][ T6360] loop5: detected capacity change from 0 to 512
[  187.394259][ T6360] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5
[  187.394259][ T6360] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  187.394259][ T6360] 
[  187.580024][ T6360] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouser_xattr,grpquota,,errors=continue. Quota mode: writeback.
[  187.594641][ T6360] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.623796][ T4233] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  188.646615][ T6388] loop5: detected capacity change from 0 to 512
[  188.704663][ T6388] EXT4-fs (loop5): Unrecognized mount option "smackfsfloor=" or missing value
[  188.747893][ T6394] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.495'.
[  188.814934][ T4233] usb 1-1: device descriptor read/64, error -71
[  188.823086][ T6388] tipc: Can't bind to reserved service type 2
[  189.091794][ T4233] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  189.127881][ T6383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.491'.
[  189.291824][ T4233] usb 1-1: device descriptor read/64, error -71
[  189.480732][ T4233] usb usb1-port1: attempt power cycle
[  189.812844][ T6425] loop5: detected capacity change from 0 to 4096
[  189.872115][ T6423] netlink: 44 bytes leftover after parsing attributes in process `syz.2.505'.
[  189.924847][ T6425] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  189.934039][ T6425] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  189.947373][ T6425] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  190.007369][ T6425] ntfs: volume version 3.1.
[  190.025452][ T6425] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  190.035715][ T6425] ntfs: (device loop5): load_and_init_quota(): Failed to find inode number for $Quota.
[  190.045497][ T6425] ntfs: (device loop5): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  190.058384][ T6425] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  190.068420][ T6425] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  190.078529][ T6425] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  190.213324][ T6423] netlink: 51 bytes leftover after parsing attributes in process `syz.2.505'.
[  190.222421][ T6423] netlink: 'syz.2.505': attribute type 4 has an invalid length.
[  190.510307][ T6435] 9pnet: p9_errstr2errno: server reported unknown error Dfߠ��r
[  190.510307][ T6435] ����Ԇ�����
[  190.527681][ T6443] loop5: detected capacity change from 0 to 64
[  190.782143][  T145] attempt to access beyond end of device
[  190.782143][  T145] loop5: rw=1, want=66, limit=64
[  190.814908][  T145] Buffer I/O error on dev loop5, logical block 65, lost async page write
[  190.848286][  T145] attempt to access beyond end of device
[  190.848286][  T145] loop5: rw=1, want=67, limit=64
[  190.890096][  T145] Buffer I/O error on dev loop5, logical block 66, lost async page write
[  190.914380][  T145] attempt to access beyond end of device
[  190.914380][  T145] loop5: rw=1, want=68, limit=64
[  190.940876][ T6457] loop0: detected capacity change from 0 to 4096
[  190.955502][  T145] Buffer I/O error on dev loop5, logical block 67, lost async page write
[  190.986654][  T145] attempt to access beyond end of device
[  190.986654][  T145] loop5: rw=1, want=69, limit=64
[  191.012069][  T145] Buffer I/O error on dev loop5, logical block 68, lost async page write
[  191.054552][  T145] attempt to access beyond end of device
[  191.054552][  T145] loop5: rw=1, want=73, limit=64
[  191.087666][  T145] Buffer I/O error on dev loop5, logical block 72, lost async page write
[  191.099512][  T145] attempt to access beyond end of device
[  191.099512][  T145] loop5: rw=1, want=74, limit=64
[  191.331933][  T145] Buffer I/O error on dev loop5, logical block 73, lost async page write
[  191.340482][  T145] attempt to access beyond end of device
[  191.340482][  T145] loop5: rw=1, want=77, limit=64
[  191.938102][  T145] Buffer I/O error on dev loop5, logical block 76, lost async page write
[  192.104246][  T145] attempt to access beyond end of device
[  192.104246][  T145] loop5: rw=1, want=78, limit=64
[  192.114843][  T145] Buffer I/O error on dev loop5, logical block 77, lost async page write
[  192.131934][  T145] attempt to access beyond end of device
[  192.131934][  T145] loop5: rw=1, want=169, limit=64
[  192.264945][ T6466] 9pnet: Insufficient options for proto=fd
[  192.420208][ T6471] loop5: detected capacity change from 0 to 1024
[  192.724685][ T6480] loop0: detected capacity change from 0 to 128
[  193.048352][ T6484] hfsplus: invalid length 3840 has been corrected to 255
[  193.068564][ T6484] netlink: 'syz.5.517': attribute type 8 has an invalid length.
[  193.076562][ T6484] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.517'.
[  194.316562][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  194.324324][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  194.691010][ T6506] loop0: detected capacity change from 0 to 512
[  194.938477][ T6506] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  195.289029][ T6506] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.571156][ T6506] EXT4-fs error (device loop0): ext4_xattr_block_list:713: inode #12: comm syz.0.533: corrupted xattr block 6
[  195.884517][ T6521] netlink: 320 bytes leftover after parsing attributes in process `syz.0.536'.
[  196.111403][ T6501] loop5: detected capacity change from 0 to 32768
[  196.179937][ T6524] netlink: 4100 bytes leftover after parsing attributes in process `syz.2.538'.
[  196.385604][ T6501] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.530 (6501)
[  196.975914][ T6501] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  197.034474][ T6501] BTRFS info (device loop5): setting nodatacow, compression disabled
[  197.056522][ T6501] BTRFS info (device loop5): use no compression
[  197.073619][ T6501] BTRFS info (device loop5): enabling disk space caching
[  197.091004][ T6501] BTRFS info (device loop5): ignoring data csums
[  197.108018][ T6501] BTRFS info (device loop5): turning on async discard
[  197.125327][ T6501] BTRFS info (device loop5): enabling free space tree
[  197.141697][ T6501] BTRFS error (device loop5): ignoredatacsums must be used with ro mount option
[  197.234796][ T6501] BTRFS error (device loop5): open_ctree failed: -22
[  198.609629][ T6552] loop0: detected capacity change from 0 to 8192
[  199.002496][ T6558] FAULT_INJECTION: forcing a failure.
[  199.002496][ T6558] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.164893][ T6552] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  199.260185][ T6552] REISERFS (device loop0): using ordered data mode
[  199.287151][ T6558] CPU: 0 PID: 6558 Comm: syz.5.547 Not tainted syzkaller #0
[  199.294593][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  199.304668][ T6558] Call Trace:
[  199.307965][ T6558]  <TASK>
[  199.310949][ T6558]  dump_stack_lvl+0x188/0x250
[  199.315658][ T6558]  ? show_regs_print_info+0x20/0x20
[  199.320879][ T6558]  ? load_image+0x400/0x400
[  199.325405][ T6558]  ? __lock_acquire+0x7d10/0x7d10
[  199.330460][ T6558]  should_fail+0x38c/0x4c0
[  199.334905][ T6558]  _copy_to_user+0x2e/0x130
[  199.339430][ T6558]  simple_read_from_buffer+0xe3/0x150
[  199.344829][ T6558]  proc_fail_nth_read+0x1a6/0x220
[  199.349884][ T6558]  ? proc_fault_inject_write+0x310/0x310
[  199.355542][ T6558]  ? fsnotify_perm+0x254/0x560
[  199.360326][ T6558]  ? proc_fault_inject_write+0x310/0x310
[  199.365977][ T6558]  vfs_read+0x301/0xd60
[  199.370160][ T6558]  ? kernel_read+0x1e0/0x1e0
[  199.374772][ T6558]  ? __fget_files+0x40f/0x480
[  199.379589][ T6558]  ? mutex_lock_nested+0x17/0x20
[  199.384547][ T6558]  ? __fdget_pos+0x2bf/0x370
[  199.389162][ T6558]  ? ksys_read+0x71/0x260
[  199.393510][ T6558]  ksys_read+0x152/0x260
[  199.397865][ T6558]  ? vfs_write+0xd60/0xd60
[  199.402302][ T6558]  ? lockdep_hardirqs_on+0x94/0x140
[  199.407533][ T6558]  do_syscall_64+0x4c/0xa0
[  199.412050][ T6558]  ? clear_bhb_loop+0x30/0x80
[  199.416747][ T6558]  ? clear_bhb_loop+0x30/0x80
[  199.421444][ T6558]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  199.427364][ T6558] RIP: 0033:0x7fb790d3968e
[  199.431821][ T6558] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  199.451659][ T6558] RSP: 002b:00007fb78efd1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  199.455513][ T6552] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  199.460107][ T6558] RAX: ffffffffffffffda RBX: 00007fb78efd26c0 RCX: 00007fb790d3968e
[  199.484592][ T6558] RDX: 000000000000000f RSI: 00007fb78efd20a0 RDI: 0000000000000006
[  199.492772][ T6558] RBP: 00007fb78efd2090 R08: 0000000000000000 R09: 0000000000000000
[  199.500905][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.508909][ T6558] R13: 00007fb790ff2038 R14: 00007fb790ff1fa0 R15: 00007ffd9b0aa858
[  199.512401][ T6552] REISERFS (device loop0): checking transaction log (loop0)
[  199.516922][ T6558]  </TASK>
[  199.565249][ T6552] REISERFS (device loop0): Using r5 hash to sort names
[  199.615179][ T6552] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  199.683400][ T6552] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  200.959151][ T6599] loop5: detected capacity change from 0 to 512
[  201.126599][ T6599] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  201.130630][ T6609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.563'.
[  201.145229][ T6599] EXT4-fs (loop5): inline encryption not supported
[  201.178525][ T6599] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  201.231793][ T6599] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  201.252049][ T6599] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  201.272648][ T6599] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  201.288765][ T6599] EXT4-fs (loop5): orphan cleanup on readonly fs
[  201.311220][ T6599] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.559: bg 0: block 34: padding at end of block bitmap is not set
[  201.353010][ T6599] Quota error (device loop5): write_blk: dquota write failed
[  201.360500][ T6599] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  201.438364][ T6599] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.559: Failed to acquire dquot type 1
[  201.439754][ T6599] EXT4-fs (loop5): 1 truncate cleaned up
[  201.467280][ T6599] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,bsddf,resgid=0x0000000000000000,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue. Quota mode: writeback.
[  201.469060][ T6619] device wireguard0 entered promiscuous mode
[  201.774252][ T6628] loop5: detected capacity change from 0 to 164
[  202.077774][ T6638] loop5: detected capacity change from 0 to 64
[  202.279065][ T6642] loop0: detected capacity change from 0 to 512
[  202.355078][ T4403] attempt to access beyond end of device
[  202.355078][ T4403] loop5: rw=1, want=66, limit=64
[  202.391581][ T4403] Buffer I/O error on dev loop5, logical block 65, lost async page write
[  202.420174][ T4403] attempt to access beyond end of device
[  202.420174][ T4403] loop5: rw=1, want=67, limit=64
[  202.441303][ T4403] Buffer I/O error on dev loop5, logical block 66, lost async page write
[  202.460376][ T4403] attempt to access beyond end of device
[  202.460376][ T4403] loop5: rw=1, want=68, limit=64
[  202.478005][ T4403] Buffer I/O error on dev loop5, logical block 67, lost async page write
[  202.487028][ T4403] attempt to access beyond end of device
[  202.487028][ T4403] loop5: rw=1, want=69, limit=64
[  202.521720][ T6642] EXT4-fs (loop0): Unrecognized mount option "smackfsfloor=" or missing value
[  202.790622][ T4403] Buffer I/O error on dev loop5, logical block 68, lost async page write
[  203.038486][ T4403] attempt to access beyond end of device
[  203.038486][ T4403] loop5: rw=1, want=73, limit=64
[  203.242129][ T4403] Buffer I/O error on dev loop5, logical block 72, lost async page write
[  203.250668][ T4403] attempt to access beyond end of device
[  203.250668][ T4403] loop5: rw=1, want=74, limit=64
[  203.283774][ T4403] Buffer I/O error on dev loop5, logical block 73, lost async page write
[  203.294805][ T4403] attempt to access beyond end of device
[  203.294805][ T4403] loop5: rw=1, want=77, limit=64
[  203.306434][ T4403] Buffer I/O error on dev loop5, logical block 76, lost async page write
[  203.340032][ T4403] attempt to access beyond end of device
[  203.340032][ T4403] loop5: rw=1, want=78, limit=64
[  203.371221][ T4403] Buffer I/O error on dev loop5, logical block 77, lost async page write
[  203.380050][ T4403] attempt to access beyond end of device
[  203.380050][ T4403] loop5: rw=1, want=169, limit=64
[  203.644852][ T6658] netlink: 'syz.5.573': attribute type 1 has an invalid length.
[  203.895241][ T6676] loop0: detected capacity change from 0 to 764
[  204.192465][ T6676] netlink: 60 bytes leftover after parsing attributes in process `syz.0.579'.
[  204.823662][ T6680] loop5: detected capacity change from 0 to 512
[  204.916175][ T6680] EXT4-fs (loop5): orphan cleanup on readonly fs
[  204.946052][ T6680] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (7168 > 1024).
[  204.977692][ T6680] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  204.992695][ T6680] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  205.010274][ T6680] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.582: bg 0: block 64: padding at end of block bitmap is not set
[  205.037721][ T6680] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  205.057611][ T6680] EXT4-fs (loop5): 1 orphan inode deleted
[  205.070449][ T6680] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue. Quota mode: writeback.
[  206.052556][ T6707] loop0: detected capacity change from 0 to 4096
[  206.099814][ T6707] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  206.139042][ T6705] loop5: detected capacity change from 0 to 32768
[  206.205501][ T6707] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  206.243288][ T6707] ntfs: volume version 3.1.
[  206.249277][ T6707] ntfs: (device loop0): map_mft_record_page(): Mft record 0x9 is corrupt.  Run chkdsk.
[  206.299489][ T6705] netlink: 'syz.5.591': attribute type 29 has an invalid length.
[  206.309779][ T6707] ntfs: (device loop0): map_mft_record(): Failed with error code 5.
[  206.352523][ T6707] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x9 as bad.  Run chkdsk.
[  206.402445][ T6707] ntfs: (device loop0): load_system_files(): Failed to load $Secure.
[  206.424076][ T6707] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files.
[  207.386944][ T6747] loop0: detected capacity change from 0 to 256
[  207.599897][ T6747] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[  207.928947][ T6746] loop5: detected capacity change from 0 to 2048
[  208.080963][ T6746] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  208.123554][ T6746] NILFS (loop5): invalid segment: Checksum error in segment payload
[  208.151698][ T6746] NILFS (loop5): unable to fall back to spare super block
[  208.209558][ T6746] NILFS (loop5): error -22 while searching super root
[  208.217119][ T6755] loop0: detected capacity change from 0 to 16
[  208.256356][ T6755] cramfs: Unknown parameter '��������'
[  208.489743][ T6755] loop0: detected capacity change from 0 to 512
[  208.552344][ T6755] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  208.559715][ T6746] overlayfs: overlapping lowerdir path
[  208.571055][ T6755] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  208.644172][ T6755] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.608: bad orphan inode 131083
[  208.665155][ T6755] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,journal_dev=0x00000000000003f2,noload,,errors=continue. Quota mode: none.
[  209.315477][ T6787] loop5: detected capacity change from 0 to 4096
[  209.408224][ T6787] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  209.419513][ T6787] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  209.432571][ T6787] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  209.463385][ T6787] ntfs: volume version 3.1.
[  209.466673][ T6789] netlink: 56 bytes leftover after parsing attributes in process `syz.2.619'.
[  209.484191][ T6787] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  209.494626][ T6787] ntfs: (device loop5): load_and_init_quota(): Failed to find inode number for $Quota.
[  209.504721][ T6787] ntfs: (device loop5): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  209.517841][ T6787] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  209.540968][ T6787] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  210.161083][ T6785] device ipip0 entered promiscuous mode
[  210.181108][ T6796] loop0: detected capacity change from 0 to 256
[  210.327892][ T6796] FAT-fs (loop0): Directory bread(block 64) failed
[  210.358908][ T6796] FAT-fs (loop0): Directory bread(block 65) failed
[  210.388721][ T6796] FAT-fs (loop0): Directory bread(block 66) failed
[  210.436860][ T6796] FAT-fs (loop0): Directory bread(block 67) failed
[  210.491961][ T6796] FAT-fs (loop0): Directory bread(block 68) failed
[  210.553181][ T6796] FAT-fs (loop0): Directory bread(block 69) failed
[  210.559857][ T6796] FAT-fs (loop0): Directory bread(block 70) failed
[  210.581020][ T6811] netlink: 56 bytes leftover after parsing attributes in process `syz.1.624'.
[  210.622362][ T6815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.625'.
[  210.652160][ T6796] FAT-fs (loop0): Directory bread(block 71) failed
[  210.674981][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'.
[  210.687236][ T6817] netlink: 56 bytes leftover after parsing attributes in process `syz.1.624'.
[  210.701038][ T6796] FAT-fs (loop0): Directory bread(block 72) failed
[  210.732734][ T6796] FAT-fs (loop0): Directory bread(block 73) failed
[  210.757552][ T6822] netlink: 56 bytes leftover after parsing attributes in process `syz.5.626'.
[  210.914209][ T6823] loop5: detected capacity change from 0 to 512
[  211.764415][ T6842] loop0: detected capacity change from 0 to 4096
[  212.601499][ T6842] __ntfs_error: 1 callbacks suppressed
[  212.601519][ T6842] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing.
[  212.616425][ T6842] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  212.629581][ T6842] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  212.649992][ T6842] ntfs: volume version 3.1.
[  212.657114][ T6842] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  212.667288][ T6842] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota.
[  212.677524][ T6842] ntfs: (device loop0): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  212.690416][ T6842] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  212.700396][ T6842] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  212.711128][ T6842] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  213.316359][ T6867] loop0: detected capacity change from 0 to 4096
[  213.629250][ T6872] loop5: detected capacity change from 0 to 8192
[  214.063964][ T6872] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  214.198212][ T6867] ntfs: volume version 3.1.
[  214.385791][ T6867] ntfs: (device loop0): ntfs_read_locked_inode(): Index collation rule is not COLLATION_FILE_NAME.
[  214.538131][ T6872] REISERFS (device loop5): using ordered data mode
[  214.545123][ T6872] reiserfs: using flush barriers
[  214.564621][ T6872] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  214.702528][ T6872] REISERFS (device loop5): checking transaction log (loop5)
[  214.849017][ T6867] tmpfs: Unknown parameter 'm-��M+�We�pol'
[  215.370557][ T6872] REISERFS (device loop5): Using tea hash to sort names
[  215.399938][ T6902] loop0: detected capacity change from 0 to 4096
[  215.401387][ T6872] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  215.548977][ T6902] ntfs: volume version 3.1.
[  215.641915][ T6911] overlayfs: failed to clone upperpath
[  215.788459][ T6915] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  216.129651][ T6936] loop0: detected capacity change from 0 to 64
[  216.299500][ T4403] attempt to access beyond end of device
[  216.299500][ T4403] loop0: rw=1, want=66, limit=64
[  216.317520][ T4403] Buffer I/O error on dev loop0, logical block 65, lost async page write
[  216.339359][ T4403] attempt to access beyond end of device
[  216.339359][ T4403] loop0: rw=1, want=67, limit=64
[  216.350654][ T4403] Buffer I/O error on dev loop0, logical block 66, lost async page write
[  216.359652][ T4403] attempt to access beyond end of device
[  216.359652][ T4403] loop0: rw=1, want=68, limit=64
[  216.370880][ T4403] Buffer I/O error on dev loop0, logical block 67, lost async page write
[  216.379846][ T4403] attempt to access beyond end of device
[  216.379846][ T4403] loop0: rw=1, want=69, limit=64
[  216.391167][ T4403] Buffer I/O error on dev loop0, logical block 68, lost async page write
[  216.400036][ T4403] attempt to access beyond end of device
[  216.400036][ T4403] loop0: rw=1, want=73, limit=64
[  216.411140][ T4403] Buffer I/O error on dev loop0, logical block 72, lost async page write
[  216.420095][ T4403] attempt to access beyond end of device
[  216.420095][ T4403] loop0: rw=1, want=74, limit=64
[  216.431228][ T4403] Buffer I/O error on dev loop0, logical block 73, lost async page write
[  216.443221][ T4403] attempt to access beyond end of device
[  216.443221][ T4403] loop0: rw=1, want=77, limit=64
[  216.454496][ T4403] Buffer I/O error on dev loop0, logical block 76, lost async page write
[  216.463602][ T4403] attempt to access beyond end of device
[  216.463602][ T4403] loop0: rw=1, want=78, limit=64
[  216.474739][ T4403] Buffer I/O error on dev loop0, logical block 77, lost async page write
[  216.483886][ T4403] attempt to access beyond end of device
[  216.483886][ T4403] loop0: rw=1, want=169, limit=64
[  216.611969][ T4447] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  216.821819][ T4447] usb 6-1: device descriptor read/64, error -71
[  216.862249][ T4451] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  217.120953][ T6949] fuse: Bad value for 'fd'
[  217.125864][ T4447] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  217.170663][ T6951] tmpfs: Bad value for 'mpol'
[  217.282031][ T4451] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  217.290213][ T4451] usb 1-1: can't read configurations, error -22
[  217.343008][ T4447] usb 6-1: device descriptor read/64, error -71
[  217.441860][ T4451] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  217.471899][ T4447] usb usb6-port1: attempt power cycle
[  217.586869][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.871859][ T4451] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  217.880373][ T4451] usb 1-1: can't read configurations, error -22
[  217.888072][ T4451] usb usb1-port1: attempt power cycle
[  217.941821][ T4447] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  218.051876][ T4447] usb 6-1: device descriptor read/8, error -71
[  218.302298][ T4451] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  218.332418][ T4447] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  218.432372][ T4447] usb 6-1: device descriptor read/8, error -71
[  218.563198][ T4447] usb usb6-port1: unable to enumerate USB device
[  218.621954][ T4451] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  218.629935][ T4451] usb 1-1: can't read configurations, error -22
[  218.801796][ T4451] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  219.088041][ T4451] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  219.132418][ T4451] usb 1-1: can't read configurations, error -22
[  219.144920][ T4451] usb usb1-port1: unable to enumerate USB device
[  220.708320][ T6990] loop0: detected capacity change from 0 to 131072
[  220.773851][ T6990] F2FS-fs (loop0): invalid crc value
[  220.824886][ T6990] F2FS-fs (loop0): Found nat_bits in checkpoint
[  220.875263][ T6990] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  220.901809][ T6990] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  221.286062][ T6988] loop5: detected capacity change from 0 to 40427
[  221.921891][ T4565] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  222.201714][ T4565] usb 6-1: Using ep0 maxpacket: 16
[  222.342531][ T4565] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  222.363788][ T4565] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  222.404368][ T4565] usb 6-1: config 0 interface 0 has no altsetting 0
[  222.581967][ T4565] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  222.601348][ T4565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.628063][ T4565] usb 6-1: Product: syz
[  222.641661][ T4565] usb 6-1: Manufacturer: syz
[  222.650882][ T4565] usb 6-1: SerialNumber: syz
[  222.660769][ T7030] loop0: detected capacity change from 0 to 4096
[  222.702757][ T4565] usb 6-1: config 0 descriptor??
[  222.745704][ T7030] ntfs3: loop0: Failed to load $MFT.
[  223.066760][ T7047] netlink: 64 bytes leftover after parsing attributes in process `syz.0.704'.
[  223.118977][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'.
[  223.533293][ T4237] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  224.106708][ T7023] loop5: detected capacity change from 0 to 40427
[  224.434550][ T7023] F2FS-fs (loop5): Corrupted extension count (327717 + 1 > 64)
[  224.455241][ T7023] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  224.510048][ T7023] F2FS-fs (loop5): invalid crc value
[  224.521993][ T4237] usb 1-1: Using ep0 maxpacket: 8
[  224.547103][ T7023] F2FS-fs (loop5): Found nat_bits in checkpoint
[  224.652099][ T4237] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  224.660349][ T4237] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  224.706234][ T4237] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  224.732148][ T4237] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  225.921610][    C1] sched: RT throttling activated
[  225.954126][ T4565] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90)
[  226.072013][ T4237] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  226.086596][ T4565] imon 6-1:0.0: unable to initialize intf0, err -90
[  226.110999][ T7070] netlink: 'syz.3.714': attribute type 1 has an invalid length.
[  226.133461][ T4565] imon:imon_probe: failed to initialize context!
[  226.142004][ T4237] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  226.150228][ T7086] loop5: detected capacity change from 0 to 64
[  226.167983][ T4565] imon 6-1:0.0: unable to register, err -19
[  226.177246][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.306560][ T7085] loop0: detected capacity change from 0 to 512
[  226.426752][ T4245] attempt to access beyond end of device
[  226.426752][ T4245] loop5: rw=1, want=66, limit=64
[  226.494464][ T4245] Buffer I/O error on dev loop5, logical block 65, lost async page write
[  226.504798][ T4565] usb 6-1: USB disconnect, device number 17
[  226.541832][ T4237] usb 1-1: can't set config #16, error -71
[  226.546760][ T4245] attempt to access beyond end of device
[  226.546760][ T4245] loop5: rw=1, want=67, limit=64
[  226.554273][ T4237] usb 1-1: USB disconnect, device number 11
[  226.559353][ T7085] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #3: comm syz.0.717: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 3, max 2(4), depth 0(0)
[  226.590887][ T7085] EXT4-fs error (device loop0): ext4_quota_enable:6447: comm syz.0.717: Bad quota inode: 3, type: 0
[  226.619520][ T7085] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  226.646374][ T4245] Buffer I/O error on dev loop5, logical block 66, lost async page write
[  226.677142][ T4245] attempt to access beyond end of device
[  226.677142][ T4245] loop5: rw=1, want=68, limit=64
[  226.703097][ T7085] EXT4-fs (loop0): mount failed
[  226.745912][ T4245] Buffer I/O error on dev loop5, logical block 67, lost async page write
[  226.771796][ T4245] attempt to access beyond end of device
[  226.771796][ T4245] loop5: rw=1, want=69, limit=64
[  226.805063][ T4245] Buffer I/O error on dev loop5, logical block 68, lost async page write
[  226.819456][ T4245] attempt to access beyond end of device
[  226.819456][ T4245] loop5: rw=1, want=73, limit=64
[  226.851698][ T4245] Buffer I/O error on dev loop5, logical block 72, lost async page write
[  226.870465][ T4245] attempt to access beyond end of device
[  226.870465][ T4245] loop5: rw=1, want=74, limit=64
[  226.922042][ T4245] Buffer I/O error on dev loop5, logical block 73, lost async page write
[  226.940804][ T4245] attempt to access beyond end of device
[  226.940804][ T4245] loop5: rw=1, want=77, limit=64
[  226.970326][ T4245] Buffer I/O error on dev loop5, logical block 76, lost async page write
[  226.980144][ T4245] attempt to access beyond end of device
[  226.980144][ T4245] loop5: rw=1, want=78, limit=64
[  227.001813][ T4245] Buffer I/O error on dev loop5, logical block 77, lost async page write
[  227.010530][ T4245] attempt to access beyond end of device
[  227.010530][ T4245] loop5: rw=1, want=169, limit=64
[  227.029448][ T7105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.031977][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.718'.
[  227.201912][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.718'.
[  227.292096][ T7115] loop5: detected capacity change from 0 to 512
[  227.669515][ T7115] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  227.703527][ T7115] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.845792][ T7127] device bridge2 entered promiscuous mode
[  228.065417][ T7085] loop0: detected capacity change from 0 to 40427
[  228.112451][ T7085] F2FS-fs (loop0): invalid crc value
[  228.348220][ T7085] F2FS-fs (loop0): Found nat_bits in checkpoint
[  228.929962][ T7085] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  228.957355][ T7129] loop5: detected capacity change from 0 to 4096
[  229.010663][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'.
[  229.064192][ T7129] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  229.161489][ T4188] attempt to access beyond end of device
[  229.161489][ T4188] loop0: rw=2049, want=45104, limit=40427
[  230.530379][ T7179] loop5: detected capacity change from 0 to 4096
[  230.723107][ T7179] __ntfs_error: 12 callbacks suppressed
[  230.723128][ T7179] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  230.737943][ T7179] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  230.751056][ T7179] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  230.779769][ T7179] ntfs: volume version 3.1.
[  230.787875][ T7179] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  230.797910][ T7179] ntfs: (device loop5): load_and_init_quota(): Failed to find inode number for $Quota.
[  230.807598][ T7179] ntfs: (device loop5): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  230.820465][ T7179] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  230.830450][ T7179] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  230.840640][ T7179] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  231.259684][ T7169] loop0: detected capacity change from 0 to 32768
[  231.327907][ T7169] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.741 (7169)
[  231.420257][ T7169] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  231.459989][ T7169] BTRFS info (device loop0): turning on sync discard
[  231.477432][ T7169] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  231.510923][ T7203] loop5: detected capacity change from 0 to 64
[  231.529280][ T7169] BTRFS info (device loop0): use zstd compression, level 3
[  231.579347][ T7169] BTRFS info (device loop0): turning on async discard
[  231.611907][ T7169] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  231.675080][ T7169] BTRFS info (device loop0): trying to use backup root at mount time
[  231.732184][ T7169] BTRFS info (device loop0): enabling auto defrag
[  231.779412][ T7169] BTRFS info (device loop0): allowing degraded mounts
[  231.841779][ T7169] BTRFS info (device loop0): using free space tree
[  231.848522][ T7169] BTRFS info (device loop0): has skinny extents
[  232.517772][ T4275] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  232.553687][ T7169] BTRFS warning (device loop0): failed to read root (objectid=2): -5
[  232.582348][ T4402] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  232.611872][ T7169] BTRFS warning (device loop0): couldn't read tree root
[  232.835733][ T7237] loop5: detected capacity change from 0 to 64
[  232.855337][ T7169] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7
[  233.194565][ T7169] BTRFS warning (device loop0): couldn't read tree root
[  233.205319][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'.
[  233.214666][ T7245] netlink: 'syz.1.758': attribute type 2 has an invalid length.
[  233.222466][ T7245] netlink: 'syz.1.758': attribute type 1 has an invalid length.
[  233.851139][ T7169] BTRFS error (device loop0): open_ctree failed: -22
[  234.248579][ T7270] loop5: detected capacity change from 0 to 512
[  234.281829][ T7270] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  234.320558][ T7270] EXT4-fs (loop5): 1 truncate cleaned up
[  234.334772][ T7270] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  235.504015][ T7291] loop0: detected capacity change from 0 to 16
[  235.542385][ T7292] loop5: detected capacity change from 0 to 64
[  235.991277][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.773'.
[  236.000335][ T7298] netlink: 'syz.3.773': attribute type 2 has an invalid length.
[  236.008498][ T7298] netlink: 'syz.3.773': attribute type 1 has an invalid length.
[  236.190514][ T7307] netlink: 52 bytes leftover after parsing attributes in process `syz.0.775'.
[  236.242458][ T7306] tc action pedit offset must be on 32 bit boundaries
[  236.561982][ T7318] loop5: detected capacity change from 0 to 512
[  236.838376][ T4450] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  238.351770][ T4450] usb 1-1: Using ep0 maxpacket: 16
[  238.429968][ T7318] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,discard,max_batch_time=0x0000000000002afa,,errors=continue. Quota mode: writeback.
[  238.490783][ T7318] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.568911][ T4450] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  238.605268][ T4450] usb 1-1: config 1 has no interface number 0
[  238.642803][ T4450] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  238.693821][ T4450] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  238.747580][ T4450] usb 1-1: config 1 interface 105 has no altsetting 0
[  239.002714][ T4450] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  239.041671][ T4450] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  239.080370][ T4450] usb 1-1: Product: syz
[  239.110847][ T4450] usb 1-1: Manufacturer: syz
[  239.131121][ T4450] usb 1-1: SerialNumber: syz
[  239.242096][ T7312] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  239.289988][ T7312] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  239.413418][ T7348] SET target dimension over the limit!
[  239.503827][ T4450] usb 1-1: can't set config #1, error -71
[  239.538293][ T4450] usb 1-1: USB disconnect, device number 12
[  239.896163][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.793'.
[  239.905702][ T7358] netlink: 'syz.5.793': attribute type 2 has an invalid length.
[  239.913433][ T7358] netlink: 'syz.5.793': attribute type 1 has an invalid length.
[  240.236993][ T7362] loop0: detected capacity change from 0 to 4096
[  240.288212][ T7362] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing.
[  240.297692][ T7362] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  240.311077][ T7362] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  240.338441][ T7362] ntfs: volume version 3.1.
[  240.349331][ T7362] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  240.359423][ T7362] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota.
[  240.369171][ T7362] ntfs: (device loop0): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  240.383658][ T7362] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  240.393730][ T7362] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  240.403882][ T7362] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  240.670825][ T7377] loop5: detected capacity change from 0 to 1024
[  240.928528][ T7380] loop0: detected capacity change from 0 to 32768
[  240.989236][ T7380] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.802 (7380)
[  241.009296][ T7380] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  241.018239][ T7380] BTRFS info (device loop0): turning on sync discard
[  241.025917][ T7380] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  241.035447][ T7380] BTRFS info (device loop0): use zstd compression, level 3
[  241.042809][ T7380] BTRFS info (device loop0): turning on async discard
[  241.049617][ T7380] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  241.060304][ T7380] BTRFS info (device loop0): trying to use backup root at mount time
[  241.068495][ T7380] BTRFS info (device loop0): enabling auto defrag
[  241.075067][ T7380] BTRFS info (device loop0): using free space tree
[  241.081633][ T7380] BTRFS info (device loop0): has skinny extents
[  241.266551][ T4405] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  241.315328][ T7380] BTRFS warning (device loop0): failed to read root (objectid=2): -5
[  241.325442][ T4403] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  241.352453][ T7380] BTRFS warning (device loop0): couldn't read tree root
[  241.360050][ T7380] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7
[  241.369892][ T7380] BTRFS warning (device loop0): couldn't read tree root
[  241.408660][ T7380] BTRFS info (device loop0): enabling ssd optimizations
[  241.432046][ T7380] BTRFS info (device loop0): clearing free space tree
[  241.439374][ T7380] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  241.449819][ T7380] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  241.544490][ T7380] BTRFS info (device loop0): creating free space tree
[  241.554440][ T7380] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  241.564303][ T7380] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  242.996904][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.813'.
[  243.006039][ T7427] netlink: 'syz.0.813': attribute type 2 has an invalid length.
[  243.013838][ T7427] netlink: 'syz.0.813': attribute type 1 has an invalid length.
[  243.049026][ T7430] loop5: detected capacity change from 0 to 4096
[  243.165646][ T7430] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  244.077644][ T7451] netlink: 88 bytes leftover after parsing attributes in process `syz.5.823'.
[  245.154831][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'.
[  245.360405][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.831'.
[  245.369446][ T7470] netlink: 'syz.3.831': attribute type 2 has an invalid length.
[  245.377169][ T7470] netlink: 'syz.3.831': attribute type 1 has an invalid length.
[  245.523681][ T7475] overlayfs: './file0' not a directory
[  245.634241][ T7464] loop0: detected capacity change from 0 to 4096
[  245.638763][ T7461] loop5: detected capacity change from 0 to 32768
[  245.676520][ T7464] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  245.710300][ T7461] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.827 (7461)
[  245.983052][ T7461] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  245.992823][ T7461] BTRFS info (device loop5): using free space tree
[  245.999463][ T7461] BTRFS info (device loop5): has skinny extents
[  246.915949][ T7500] loop0: detected capacity change from 0 to 32768
[  246.987949][ T7500] (syz.0.835,7500,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  247.004666][ T7500] (syz.0.835,7500,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  247.064235][ T7461] BTRFS info (device loop5): enabling ssd optimizations
[  247.074439][ T7500] JBD2: Ignoring recovery information on journal
[  247.102033][ T7514] "syz.2.839" (7514) uses obsolete ecb(arc4) skcipher
[  247.125852][ T7500] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  247.466073][   T26] audit: type=1804 audit(1781596349.730:6): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.835" name="/newroot/140/file0/bus" dev="loop0" ino=16978 res=1 errno=0
[  249.563616][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.842'.
[  249.572619][ T7530] netlink: 'syz.5.842': attribute type 2 has an invalid length.
[  249.580248][ T7530] netlink: 'syz.5.842': attribute type 1 has an invalid length.
[  249.766682][  T144] 
[  249.769160][  T144] ======================================================
[  249.776281][  T144] WARNING: possible circular locking dependency detected
[  249.783317][  T144] syzkaller #0 Not tainted
[  249.787934][  T144] ------------------------------------------------------
[  249.795230][  T144] kworker/u4:1/144 is trying to acquire lock:
[  249.801335][  T144] ffff8880775d2990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x19f/0x270
[  249.810949][  T144] 
[  249.810949][  T144] but task is already holding lock:
[  249.818329][  T144] ffff88805ff25ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  249.828723][  T144] 
[  249.828723][  T144] which lock already depends on the new lock.
[  249.828723][  T144] 
[  249.839147][  T144] 
[  249.839147][  T144] the existing dependency chain (in reverse order) is:
[  249.848186][  T144] 
[  249.848186][  T144] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  249.856733][  T144]        down_read+0x44/0x2e0
[  249.861449][  T144]        ocfs2_start_trans+0x3a6/0x6f0
[  249.866932][  T144]        ocfs2_modify_bh+0xe0/0x4c0
[  249.872161][  T144]        ocfs2_local_read_info+0x13c8/0x1750
[  249.878165][  T144]        dquot_load_quota_sb+0x756/0xac0
[  249.883825][  T144]        dquot_load_quota_inode+0x2d8/0x5d0
[  249.889781][  T144]        ocfs2_enable_quotas+0x1c5/0x490
[  249.895449][  T144]        ocfs2_fill_super+0x3cd2/0x50f0
[  249.901008][  T144]        mount_bdev+0x287/0x3c0
[  249.905881][  T144]        legacy_get_tree+0xe6/0x180
[  249.911089][  T144]        vfs_get_tree+0x88/0x270
[  249.916039][  T144]        do_new_mount+0x24a/0xa40
[  249.921073][  T144]        __se_sys_mount+0x2e3/0x3d0
[  249.926275][  T144]        do_syscall_64+0x4c/0xa0
[  249.931300][  T144]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  249.937719][  T144] 
[  249.937719][  T144] -> #4 (sb_internal#5){.+.+}-{0:0}:
[  249.945203][  T144]        ocfs2_start_trans+0x2a7/0x6f0
[  249.950661][  T144]        ocfs2_acquire_dquot+0x688/0xb10
[  249.956300][  T144]        dqget+0x72b/0xc30
[  249.960765][  T144]        __dquot_initialize+0x3c3/0xcd0
[  249.966343][  T144]        ocfs2_get_init_inode+0x144/0x1b0
[  249.972080][  T144]        ocfs2_mknod+0x8ab/0x2510
[  249.977146][  T144]        ocfs2_create+0x192/0x420
[  249.982171][  T144]        path_openat+0x11db/0x2fa0
[  249.987420][  T144]        do_filp_open+0x1e2/0x410
[  249.992446][  T144]        do_sys_openat2+0x150/0x4b0
[  249.997640][  T144]        __x64_sys_openat+0x135/0x160
[  250.003011][  T144]        do_syscall_64+0x4c/0xa0
[  250.007948][  T144]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  250.014538][  T144] 
[  250.014538][  T144] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  250.023400][  T144]        down_write+0x38/0x60
[  250.028081][  T144]        ocfs2_create_local_dquot+0x199/0x1850
[  250.034236][  T144]        ocfs2_acquire_dquot+0x7ed/0xb10
[  250.039866][  T144]        dqget+0x72b/0xc30
[  250.044280][  T144]        __dquot_initialize+0x3c3/0xcd0
[  250.049853][  T144]        ocfs2_get_init_inode+0x144/0x1b0
[  250.055570][  T144]        ocfs2_mknod+0x8ab/0x2510
[  250.060590][  T144]        ocfs2_create+0x192/0x420
[  250.065700][  T144]        path_openat+0x11db/0x2fa0
[  250.070807][  T144]        do_filp_open+0x1e2/0x410
[  250.075830][  T144]        do_sys_openat2+0x150/0x4b0
[  250.081032][  T144]        __x64_sys_openat+0x135/0x160
[  250.086427][  T144]        do_syscall_64+0x4c/0xa0
[  250.091393][  T144]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  250.097817][  T144] 
[  250.097817][  T144] -> #2 (&dquot->dq_lock){+.+.}-{3:3}:
[  250.105466][  T144]        __mutex_lock_common+0x1e3/0x2400
[  250.111188][  T144]        mutex_lock_nested+0x17/0x20
[  250.116479][  T144]        dquot_commit+0x5a/0x410
[  250.121524][  T144]        ext4_write_dquot+0x1f0/0x360
[  250.126898][  T144]        mark_all_dquot_dirty+0xf9/0x400
[  250.132528][  T144]        __dquot_alloc_space+0x5d0/0xe20
[  250.138158][  T144]        ext4_mb_new_blocks+0xfb1/0x4820
[  250.143793][  T144]        ext4_ext_map_blocks+0x18ab/0x65e0
[  250.149598][  T144]        ext4_map_blocks+0x98e/0x1b30
[  250.154967][  T144]        ext4_convert_inline_data_nolock+0x40c/0xcd0
[  250.161640][  T144]        ext4_convert_inline_data+0x4b9/0x5f0
[  250.167706][  T144]        ext4_fallocate+0xf4/0x1ed0
[  250.172926][  T144]        vfs_fallocate+0x587/0x6f0
[  250.178038][  T144]        __x64_sys_fallocate+0xbd/0x100
[  250.183605][  T144]        do_syscall_64+0x4c/0xa0
[  250.188546][  T144]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  250.194961][  T144] 
[  250.194961][  T144] -> #1 (&ei->i_data_sem){++++}-{3:3}:
[  250.202601][  T144]        down_read+0x44/0x2e0
[  250.207275][  T144]        ext4_map_blocks+0x33c/0x1b30
[  250.212645][  T144]        ext4_append+0x232/0x560
[  250.217583][  T144]        ext4_init_new_dir+0x2a2/0x940
[  250.223055][  T144]        ext4_mkdir+0x4fb/0xce0
[  250.227907][  T144]        vfs_mkdir+0x387/0x570
[  250.232673][  T144]        do_mkdirat+0x1df/0x5b0
[  250.237538][  T144]        __x64_sys_mkdir+0x6a/0x80
[  250.242650][  T144]        do_syscall_64+0x4c/0xa0
[  250.247601][  T144]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  250.254013][  T144] 
[  250.254013][  T144] -> #0 (jbd2_handle){++++}-{0:0}:
[  250.261316][  T144]        __lock_acquire+0x2c42/0x7d10
[  250.266865][  T144]        lock_acquire+0x19e/0x400
[  250.271885][  T144]        wait_transaction_locked+0x1bb/0x270
[  250.277863][  T144]        add_transaction_credits+0x103/0xc80
[  250.283840][  T144]        start_this_handle+0x74d/0x15c0
[  250.289383][  T144]        jbd2__journal_start+0x2b7/0x5a0
[  250.295010][  T144]        jbd2_journal_start+0x26/0x30
[  250.300551][  T144]        ocfs2_start_trans+0x3b2/0x6f0
[  250.306027][  T144]        ocfs2_release_dquot+0x497/0xb50
[  250.311967][  T144]        quota_release_workfn+0x35e/0x610
[  250.317706][  T144]        process_one_work+0x85f/0x1010
[  250.323176][  T144]        worker_thread+0xaa6/0x1290
[  250.328386][  T144]        kthread+0x436/0x520
[  250.332973][  T144]        ret_from_fork+0x1f/0x30
[  250.337906][  T144] 
[  250.337906][  T144] other info that might help us debug this:
[  250.337906][  T144] 
[  250.348125][  T144] Chain exists of:
[  250.348125][  T144]   jbd2_handle --> sb_internal#5 --> &journal->j_trans_barrier
[  250.348125][  T144] 
[  250.361769][  T144]  Possible unsafe locking scenario:
[  250.361769][  T144] 
[  250.369229][  T144]        CPU0                    CPU1
[  250.374591][  T144]        ----                    ----
[  250.379952][  T144]   lock(&journal->j_trans_barrier);
[  250.385240][  T144]                                lock(sb_internal#5);
[  250.392103][  T144]                                lock(&journal->j_trans_barrier);
[  250.399937][  T144]   lock(jbd2_handle);
[  250.404006][  T144] 
[  250.404006][  T144]  *** DEADLOCK ***
[  250.404006][  T144] 
[  250.412234][  T144] 7 locks held by kworker/u4:1/144:
[  250.417599][  T144]  #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  250.428670][  T144]  #1: ffffc9000169fd00 ((quota_release_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  250.439463][  T144]  #2: ffff8880206e82a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_release_dquot+0x26a/0xb50
[  250.449580][  T144]  #3: ffff88801c27ed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1d7/0x290
[  250.462631][  T144]  #4: ffff88801c27ea20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290
[  250.474033][  T144]  #5: ffff88802b202650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_release_dquot+0x497/0xb50
[  250.483866][  T144]  #6: ffff88805ff25ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  250.494564][  T144] 
[  250.494564][  T144] stack backtrace:
[  250.500448][  T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0
[  250.507902][  T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  250.517978][  T144] Workqueue: events_unbound quota_release_workfn
[  250.524334][  T144] Call Trace:
[  250.527625][  T144]  <TASK>
[  250.530585][  T144]  dump_stack_lvl+0x188/0x250
[  250.535272][  T144]  ? load_image+0x400/0x400
[  250.539779][  T144]  ? show_regs_print_info+0x20/0x20
[  250.545119][  T144]  ? print_circular_bug+0x12b/0x1a0
[  250.550641][  T144]  check_noncircular+0x296/0x330
[  250.555591][  T144]  ? add_chain_block+0x940/0x940
[  250.560536][  T144]  ? lockdep_lock+0xf1/0x1f0
[  250.565138][  T144]  ? mark_lock+0x94/0x320
[  250.569472][  T144]  __lock_acquire+0x2c42/0x7d10
[  250.574334][  T144]  ? verify_lock_unused+0x140/0x140
[  250.579532][  T144]  ? mark_lock+0x94/0x320
[  250.583862][  T144]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  250.589844][  T144]  ? lock_chain_count+0x20/0x20
[  250.594699][  T144]  lock_acquire+0x19e/0x400
[  250.599212][  T144]  ? wait_transaction_locked+0x19f/0x270
[  250.604856][  T144]  ? wait_transaction_locked+0x17c/0x270
[  250.610492][  T144]  ? __lock_acquire+0x7d10/0x7d10
[  250.615527][  T144]  ? read_lock_is_recursive+0x10/0x10
[  250.620902][  T144]  wait_transaction_locked+0x1bb/0x270
[  250.626359][  T144]  ? wait_transaction_locked+0x19f/0x270
[  250.631991][  T144]  ? add_transaction_credits+0xc80/0xc80
[  250.637625][  T144]  ? init_wait_entry+0xd0/0xd0
[  250.642398][  T144]  add_transaction_credits+0x103/0xc80
[  250.647869][  T144]  ? jbd2_journal_begin_ordered_truncate+0x150/0x150
[  250.654544][  T144]  ? read_lock_is_recursive+0x10/0x10
[  250.659913][  T144]  ? __kasan_slab_alloc+0xb3/0xd0
[  250.664942][  T144]  ? __kasan_slab_alloc+0x9c/0xd0
[  250.669967][  T144]  ? slab_post_alloc_hook+0x4c/0x380
[  250.675251][  T144]  ? jbd2__journal_start+0x13c/0x5a0
[  250.680534][  T144]  ? jbd2_journal_start+0x26/0x30
[  250.685562][  T144]  ? ocfs2_start_trans+0x3b2/0x6f0
[  250.690670][  T144]  ? quota_release_workfn+0x35e/0x610
[  250.696039][  T144]  ? process_one_work+0x85f/0x1010
[  250.701174][  T144]  ? worker_thread+0xaa6/0x1290
[  250.706022][  T144]  ? ret_from_fork+0x1f/0x30
[  250.710615][  T144]  start_this_handle+0x74d/0x15c0
[  250.715670][  T144]  ? jbd2__journal_start+0x5a0/0x5a0
[  250.721054][  T144]  ? slab_post_alloc_hook+0x68/0x380
[  250.726423][  T144]  ? jbd2__journal_start+0x13c/0x5a0
[  250.731704][  T144]  ? rcu_is_watching+0x11/0xa0
[  250.736471][  T144]  ? jbd2__journal_start+0x13c/0x5a0
[  250.741751][  T144]  ? kmem_cache_alloc+0x133/0x290
[  250.746772][  T144]  jbd2__journal_start+0x2b7/0x5a0
[  250.751886][  T144]  jbd2_journal_start+0x26/0x30
[  250.756821][  T144]  ocfs2_start_trans+0x3b2/0x6f0
[  250.761844][  T144]  ? down_write+0x44/0x60
[  250.766177][  T144]  ? ocfs2_recovery_exit+0x50/0x50
[  250.771286][  T144]  ocfs2_release_dquot+0x497/0xb50
[  250.776396][  T144]  ? ocfs2_acquire_dquot+0xb10/0xb10
[  250.781678][  T144]  ? __lock_acquire+0x7d10/0x7d10
[  250.786701][  T144]  ? do_raw_spin_lock+0x128/0x2f0
[  250.791741][  T144]  ? __rwlock_init+0x140/0x140
[  250.796506][  T144]  ? do_raw_spin_unlock+0x11d/0x230
[  250.801701][  T144]  quota_release_workfn+0x35e/0x610
[  250.806906][  T144]  ? dquot_quota_disable+0x380/0x380
[  250.812280][  T144]  ? try_to_wake_up+0x6cf/0x1050
[  250.817223][  T144]  ? _raw_spin_unlock_irq+0x1f/0x40
[  250.822421][  T144]  process_one_work+0x85f/0x1010
[  250.827538][  T144]  ? worker_detach_from_pool+0x240/0x240
[  250.833175][  T144]  ? lockdep_hardirqs_off+0x70/0x100
[  250.838549][  T144]  ? _raw_spin_lock_irq+0xb7/0xf0
[  250.843751][  T144]  ? _raw_spin_lock_irqsave+0x100/0x100
[  250.849311][  T144]  ? wq_worker_running+0x97/0x170
[  250.854347][  T144]  worker_thread+0xaa6/0x1290
[  250.859073][  T144]  kthread+0x436/0x520
[  250.863139][  T144]  ? rcu_lock_release+0x20/0x20
[  250.867993][  T144]  ? kthread_blkcg+0xd0/0xd0
[  250.872604][  T144]  ret_from_fork+0x1f/0x30
[  250.877025][  T144]  </TASK>
[  250.923413][ T7535] loop5: detected capacity change from 0 to 64
[  250.946285][ T4188] ocfs2: Unmounting device (7,0) on (node local)
[  251.203362][ T7553] loop0: detected capacity change from 0 to 1024
[  255.742896][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  255.749385][ T1432] ieee802154 phy1 wpan1: encryption failed: -22