last executing test programs:

11m17.424906052s ago: executing program 4 (id=31):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11m17.316512411s ago: executing program 4 (id=32):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x20108c0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xfe, 0x619d, &(0x7f00000012c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc00, 0x28)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

11m13.232984438s ago: executing program 4 (id=39):
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', <r4=>0x0, 0x700, 0x40, 0xffff, 0x7ff, {{0x15, 0x4, 0x0, 0x34, 0x54, 0x65, 0x0, 0x5, 0x29, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x1c, 0x58, 0x0, 0x8, [0x10001, 0x4, 0x5, 0x9, 0x9, 0x8000]}, @end, @timestamp={0x44, 0x20, 0x4e, 0x0, 0x2, [0x8, 0x1, 0x9a4c, 0x81, 0x4, 0x476, 0x8001]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232)
r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
io_setup(0x3, &(0x7f0000000000)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
fcntl$setpipe(r6, 0x407, 0x0)
read$char_usb(r6, &(0x7f0000000380)=""/138, 0x8a)
write$char_usb(r7, &(0x7f0000000740)='W', 0x1)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x1000008, &(0x7f0000000040)=ANY=[], 0x1, 0x179, &(0x7f0000000380)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x7fff)

11m11.459009418s ago: executing program 4 (id=43):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000640)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x5}}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5")
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0)

11m11.020782635s ago: executing program 4 (id=49):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004000)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000340)={0x53, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x80}, 0xe)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_io_uring_setup(0x2406, &(0x7f0000000040)={0x0, 0x0, 0x22, 0x2}, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x5e, 0x20008000, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r6 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000003c0))
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f907, 0x3})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

11m10.02456345s ago: executing program 4 (id=54):
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', <r4=>0x0, 0x700, 0x40, 0xffff, 0x7ff, {{0x15, 0x4, 0x0, 0x34, 0x54, 0x65, 0x0, 0x5, 0x29, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x1c, 0x58, 0x0, 0x8, [0x10001, 0x4, 0x5, 0x9, 0x9, 0x8000]}, @end, @timestamp={0x44, 0x20, 0x4e, 0x0, 0x2, [0x8, 0x1, 0x9a4c, 0x81, 0x4, 0x476, 0x8001]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232)
r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
io_setup(0x3, &(0x7f0000000000)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
fcntl$setpipe(r6, 0x407, 0x0)
read$char_usb(r6, &(0x7f0000000380)=""/138, 0x8a)
write$char_usb(r7, &(0x7f0000000740)='W', 0x1)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x1000008, &(0x7f0000000040)=ANY=[], 0x1, 0x179, &(0x7f0000000380)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x7fff)

11m9.167963015s ago: executing program 32 (id=54):
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', <r4=>0x0, 0x700, 0x40, 0xffff, 0x7ff, {{0x15, 0x4, 0x0, 0x34, 0x54, 0x65, 0x0, 0x5, 0x29, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x1c, 0x58, 0x0, 0x8, [0x10001, 0x4, 0x5, 0x9, 0x9, 0x8000]}, @end, @timestamp={0x44, 0x20, 0x4e, 0x0, 0x2, [0x8, 0x1, 0x9a4c, 0x81, 0x4, 0x476, 0x8001]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232)
r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
io_setup(0x3, &(0x7f0000000000)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
fcntl$setpipe(r6, 0x407, 0x0)
read$char_usb(r6, &(0x7f0000000380)=""/138, 0x8a)
write$char_usb(r7, &(0x7f0000000740)='W', 0x1)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x1000008, &(0x7f0000000040)=ANY=[], 0x1, 0x179, &(0x7f0000000380)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x7fff)

9m39.010972156s ago: executing program 0 (id=302):
syz_io_uring_setup(0x16e, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc", @ANYBLOB], 0x48)

9m36.25969074s ago: executing program 0 (id=306):
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x20000000)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r2 = socket(0x2, 0x2, 0x1)
bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e)

9m35.405980836s ago: executing program 0 (id=309):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x0, 0xc, 0x1e, "f163fb4c2d6dc6aeb566731b2d934d7cd2b6ba60396cb4fcdbb53c4df983"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x5}, 0x0, 0x0})

9m30.83744233s ago: executing program 0 (id=319):
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x20000000)
sched_setaffinity(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r2 = socket(0x2, 0x2, 0x1)
bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e)

9m24.648544685s ago: executing program 0 (id=331):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004400))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

9m24.421857454s ago: executing program 0 (id=334):
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x103)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

9m8.929047666s ago: executing program 33 (id=334):
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x103)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

8m39.980448423s ago: executing program 5 (id=426):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb0}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
modify_ldt$write2(0x11, &(0x7f00000001c0)={0x6, 0x20000800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
sendmmsg$unix(r4, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x400000, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000300)={0x2, @sdr={0x31303553, 0x4}})
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
getsockopt$llc_int(r8, 0x10c, 0x5, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0x101000000], [], 'bridge_slave_0\x00', 'gre0\x00', {}, {0xd9e065b4cefd6abf}}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x18}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)

8m38.924394957s ago: executing program 5 (id=430):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffed3, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8m38.678929526s ago: executing program 5 (id=431):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@stripe={'stripe', 0x3d, 0x1}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@mblk_io_submit}, {@data_writeback}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x55c, &(0x7f0000001080)="$eJzs3U1rG0cfAPD/ynbe88SBEJ72UAw5NCWNHNt9SaGH9Fja0EB7T4W9McFSFCw5xG6gyaG59FJCoZQGSj9A7z2GfoF+ikAbCCWY9tCLysorR7ElW3GUWKl+P1h7Zmfl2dHsfzyrkVAAQ2si+1GIeCUivkkijrSVjUZeOLF23OqjG7PZlkSj8emfSST5vtbxSf77YJ75f0T8+lXEqcLmemvLKwuHy+V0Mc9P1itXJ2vLK6cvV0rz6Xx6ZXpm5uzbM9PvvftO39r6xoW/v//k3odnvz6x+t3PD47eSeJcHMrL2tvxDG62ZyZiIn9OxuLchgOn+lDZIEl2+wTYkZE8zsciGwOOxEge9cB/35cR0QCGVCL+YUi15gGte/s+3Qe/NB5+sHYDtLn9o2uvjcS+5r3RgdXkiTuj7H53vA/1Z3X88sfdO9kW/XsdAmBbN29FxJnR0c3jX5KPfzt3podjNtZh/IMX5142/3mz0/ynsD7/iQ7zn4MdYncnto//woM+VNNVNv97v+P8d33Ranwkzx1uzvnGkkuXy2k2tv0vIk7G2N4sv9V6ztnV+41uZe3zv2zL6m/NBfPzeDC698nHzJXqpWdpc7uHtyJe7Tj/Tdb7P+nQ/9nzcaHHOo6nd1/rVrZ9+5+vxk8Rr3fs/8crWsnW65OTzethsnVVbPbX7eO/dat/t9uf9f+BfP2nS/vHk3y9tlQup4u1p6/jx33/pN3Kdnr970k+a6b35Puul+r1xamIPcnHm/dPP35sK986Pmv/yRNbj3+drv/9EfF5j+2/fex210MHof/ntr7+N/T/0yfuf/TFD93q763/32qmTuZ7ehn/ej3BZ3nuAAAAAAAAYNAUIuJQJIXierpQKBbX3t9xLA4UytVa/dSl6tKVuWh+VnY8xgqtle4jbe+HmMrfD9vKT2/Iz0TE0Yj4dmR/M1+crZbndrvxAAAAAAAAAAAAAAAAAAAAMCAORuzr9Pn/zO8ju312wHPnK79heHWP/7ykH9/0BAwk//9heIl/GF7iH4aX+IfhJf5heIl/GF7iH4aX+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLY1Vh/dmM3yc9eWlxaq107PpbWFYmVptjhbXbxanK9W58tpcbZa2e7vlavVq1PTsXR9sp7W6pO15ZWLlerSlfrFy5XSfHoxHXshrQIAAAAAAAAAAAAAAAAAAICXS215ZaFULqeLEhI7SowOxmlI9Dmx2yMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADz2bwAAAP//E8Y1sQ==")
syz_open_dev$mouse(0x0, 0x10, 0x10000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000eb0000000001000000940000930600003e7f0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000940)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

8m37.394534368s ago: executing program 5 (id=435):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000640)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x5}}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5")
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0)

8m37.146389587s ago: executing program 5 (id=436):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$inet6(0xa, 0x3, 0x6)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0x0, @local, 0xb}, 0x1c)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x2}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}, 0xfe}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x1}}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

8m36.615461004s ago: executing program 5 (id=441):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffed3, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8m35.83139693s ago: executing program 34 (id=441):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffed3, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8m20.713081284s ago: executing program 3 (id=470):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$tun(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="0000994c058020630078c40040000c00000186dd061000090180c200000bfc000000000000000000000000000001000000000000fc0000000000"], 0x42)
unshare(0x400)
landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000b00)=ANY=[@ANYBLOB=' ', @ANYRES16=0x0, @ANYBLOB="000028bd7000fddbdf25210000000200", @ANYRES32=0x0, @ANYBLOB="3410f2ef23d67415d656207097f3725ad15c679f56365f2392435d33cae43d037923e9483e84688d7f827ea4c8065594e9c2b794897c41cc716978e97e768c94517481108f9244050c5456eb7a6d16f7eb88988d969073fccf371e497b4b3f"], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0/file0'}, 0x11)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000340), 0x0}, 0x20)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)

8m19.562473298s ago: executing program 3 (id=475):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0)
fallocate(r0, 0x7, 0x0, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_setup(0x30d5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000340)=0x4, 0x12)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'geneve0\x00'}, 0x18)

8m18.052553299s ago: executing program 3 (id=476):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000004, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x1, 0x6a4, &(0x7f0000000cc0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
open(&(0x7f0000000080)='./file0/file0\x00', 0x103000, 0x2)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)

8m17.567736986s ago: executing program 3 (id=478):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000640)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x5}}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x1524, &(0x7f0000002280)="$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")
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0)

8m16.859036022s ago: executing program 3 (id=479):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}})
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r6 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0)
request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x4, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x3d, 0x0, &(0x7f0000000500), 0x7b73a58ead9aae5a, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xe, 0xbf4c, 0x7fff}, 0x10, 0x1f68a, r2, 0x9, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000680)=[{0x1, 0x4, 0x3, 0x9}, {0x5, 0x2, 0xe, 0x3}, {0x4, 0x3, 0x6, 0x8}, {0x4, 0x1, 0x7, 0xa}, {0x2, 0x5, 0x7, 0xc}, {0x3, 0x2, 0x3, 0xc}, {0x5, 0x2, 0x1, 0x9}, {0x3, 0x1, 0x7, 0x6}, {0x0, 0x5, 0xf, 0xa}], 0x10, 0x6, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000600)=r10, 0x4)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0)

8m15.542406945s ago: executing program 3 (id=482):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0xce)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='9p_protocol_dump\x00', r5}, 0x10)
mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

8m14.062156137s ago: executing program 35 (id=482):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0xce)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='9p_protocol_dump\x00', r5}, 0x10)
mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

5m20.746769078s ago: executing program 7 (id=839):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='\x00']}, 0x0)

5m17.113861638s ago: executing program 7 (id=846):
socket(0x2000000000000021, 0x2, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0xc, 0x18}, {0xe, 0xc}, 0xfa7, 0x2, 0x5})
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x484400, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r4, <r5=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [<r7=>0x0], [0x0, 0x40, 0x3], [], [0x0, 0x1]})
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={r7, 0x0, <r8=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r8})
close_range(r1, 0xffffffffffffffff, 0x0)

5m16.516743145s ago: executing program 7 (id=847):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x1b8, 0x0, 0x148, 0x0, 0x148, 0x298, 0x240, 0x240, 0x298, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0xcb0a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xa616f000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13)

5m15.409286338s ago: executing program 7 (id=852):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
unshare(0x42000000)
r3 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xe)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
dup2(r5, r4)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x42, 0x40, 0xfffffff9, 0x8416, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x0, @value=r3, @void, @void, @value}, 0x50)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]})
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001010103000700000000000000eb00001000020300000000000000003a000000e0175729e9c579a46d1fe25f8f5991e83792286ca2a068e931c1c4fc5389a47b100f3985407102dc04b28fc590d59114c9906bb6becfdf61c2dc31f8d899affa910181190c2f"], 0x24}}, 0x0)

5m13.226237556s ago: executing program 7 (id=854):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x3e, 0x0, 0x0, 0x9, 0x10000, @value}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10)
ioctl$TCFLSH(r0, 0x404c4701, 0x20000000)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000140), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5)

5m12.345300301s ago: executing program 7 (id=856):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x64000600)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[@ANYBLOB="c4020000180013070000000000000000fe8000000000000000000000d540fd6a5da1c793453e09b1c34422000000aa2a9971654c7750fe8000000000000000000000000000aa00000000000000000000000500000000c10be1be1d39ba92cbe96d8ff16ea4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c4}, 0x1, 0x0, 0x0, 0x4000}, 0x20008014)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x41a840)
ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000100)=0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="009b7e91bf18cd9430f4e1ee26870d4e291b10f3af9c21afd779d0ef023223a551f81042fa1b4a3eac3fa71eab99124c75f5a0d624ae9caeb800"], 0x1, 0xdab, &(0x7f0000000e80)="$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")
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0xfffffffe, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0xfffd, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x4, 0x1c, 0x3, 0x1}, @noop, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}, @rr={0x7, 0xb, 0x0, [@dev, @local]}]}}}}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b)

4m57.210689146s ago: executing program 36 (id=856):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x64000600)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[@ANYBLOB="c4020000180013070000000000000000fe8000000000000000000000d540fd6a5da1c793453e09b1c34422000000aa2a9971654c7750fe8000000000000000000000000000aa00000000000000000000000500000000c10be1be1d39ba92cbe96d8ff16ea4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000033000000ac1414aa00000000000000000000000000000000000000000700000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000004000000ffffffff0000000000000000000000000200040000000000000000004c001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600ff010000ac000700ac1e000100000000000000000000000000000000000000000000ffffac1414aa4e2000004e2308760a00800032000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c4}, 0x1, 0x0, 0x0, 0x4000}, 0x20008014)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x41a840)
ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000100)=0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="009b7e91bf18cd9430f4e1ee26870d4e291b10f3af9c21afd779d0ef023223a551f81042fa1b4a3eac3fa71eab99124c75f5a0d624ae9caeb800"], 0x1, 0xdab, &(0x7f0000000e80)="$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")
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0xfffffffe, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0xfffd, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x4, 0x1c, 0x3, 0x1}, @noop, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}, @rr={0x7, 0xb, 0x0, [@dev, @local]}]}}}}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b)

13.751409877s ago: executing program 9 (id=1506):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = syz_open_dev$vim2m(0x0, 0x1f, 0x2)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r1, r3, 0xfffffffffffffc01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0xf)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}})
syz_emit_ethernet(0x0, 0x0, 0x0)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000002c0)=0x4)
syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000080)='./file1\x00', 0x80cc90, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESDEC, @ANYRESHEX], 0x1, 0x292, &(0x7f0000001f80)="$eJzs3c9qE1EUx/HfnUSNtrTTPyKIC6kWXElbN+pGkO5cunElahOhGCpoBXVVXYsP4N5XEJ9BN9K14M6VD9CVkXvmTjNpZpo0JJ3Efj+QMOncc++58yczJyVEAE6su+u/Pt/47R9Oqqgi6bYUSapJVUnndaH2amt7c7vZqB/WUcUi/MMpiXRdbTa2GnmhPs4igti/qmo6+zeMRu1n2RlgHNjZnyOSzoSz09bXjj2z0dgpO4GSuT3t6bVmys4DAFCucP2PwnV+Oty/R5G0HC77dv3/20pM+gV0r+wERqa77Mpt1b7+W5XVcn7/ztqqdr1nffn1UVolDpLRadmRtduZwP4oty7nRlku0dmnm83G9Y3nzXqk97oTZJot2nM9OXRT2WzfdXe91OdGyuntaKZsDqf8HNYK8l/Q12GO2Jv75n64hy7WJ9X37/+qLed3k+2p+EApkOS/UtyjzTJOWhXMcs4GuRhGCPJmeS9dqKigIlF6RM2p8wOCuFeeFjV/ICqZ3apaRYNZ1EJu1FqPsRYPRrWP5uLIUXMf3QO3pD/6ovXM/X/kt/ayOs//4k6sZTgyDp1P1VrG9sYUzrqdS7kto0FnhAF80BPd1MzLN2+fPW42Gy9YOEEL6UGQWeXfqMpPrJSFavfWGNaC+t6q6S458hD5Oy6d0+DJH/cbEsrQ3un9tf8+Gxb438z/wt93uaT+y9QrK3az5p/iQ6qRVq/OMz2uFtQG8/Z8rriC6+Dss/up4gqur5pL0pVr0tV+RkzEmj9a1Tje3Lp29YjP/wEAAAAAAAAAAAAAAAAAACbN8L7wUCv86kLZcwQAAAAAAAAAAAAAAAAAAAAAYNKN3e//3lfyit//BUbuXwAAAP//LdJ4VA==")
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x1010, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x434, &(0x7f0000000200)={0x0, 0x92ef, 0x8, 0x2, 0x3db, 0x0, r2}, 0x0, &(0x7f0000000340))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

12.960503694s ago: executing program 8 (id=1509):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]})

12.920721304s ago: executing program 2 (id=1510):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
exit(0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)

10.807188447s ago: executing program 8 (id=1511):
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv2(r0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffd, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_setup(0x807f7d, &(0x7f00000002c0)={0x0, 0x10000, 0x10, 0x3})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$midi(0x0, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
creat(0x0, 0xd931d3864d39dc0c)
sync_file_range(0xffffffffffffffff, 0x101, 0x9, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000001100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x4b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)

10.806377527s ago: executing program 2 (id=1512):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x4804, &(0x7f0000000380)={[{@rodir}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlate}, {@fat=@usefree}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@numtail}]}, 0x1, 0x276, &(0x7f0000000a80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r3, &(0x7f0000000140)='./file1\x00', r3, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

10.301566536s ago: executing program 6 (id=1513):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x0, 0xffffffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x8}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x20}}, 0x0)

10.251591605s ago: executing program 2 (id=1514):
ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f00000001c0)={0x2f, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000008f80), 0x1000, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x7b9, 0xffffffffffffffff)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)

10.208634655s ago: executing program 9 (id=1515):
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$alg(0x26, 0x5, 0x0)
keyctl$revoke(0x3, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000029c0), &(0x7f0000002a00)={'enc=', 'oaep', ' hash=', {'wp256-generic\x00'}}, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
fchown(r3, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
write$UHID_INPUT(r4, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140), 0x111}}, 0x20)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)

10.198323805s ago: executing program 1 (id=1516):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setrlimit(0xa, &(0x7f00000000c0)={0x96, 0x9})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x81000, 0x3a, 0x1000, 0x2, 0x0, 0xfffffffc, 0x341}, 0x1c)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ifreq(r6, 0x89fb, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x20001100, 0x0, @fr=0x0}})
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x86d, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x7, 0x3, 0x7, 0x2800, 0x9, 0x440, 0xcd, 0xc, 0x30, {0x8, 0x1ff}, 0xd0, 0x9}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, 0x0, &(0x7f00000001c0))

10.140853505s ago: executing program 8 (id=1517):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000206, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ftruncate(0xffffffffffffffff, 0xffff)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000940)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1afa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x1, 0x0, 0x6, {0x7, 0x0, 0x0, 0x0, 0x3, 0xffffc3fd}}}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x3f72, 0x74f1, 0x0, 0x0, 0x39)

6.595324833s ago: executing program 2 (id=1518):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b1, &(0x7f00000014c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x3, 0x7ff, 0x0, &(0x7f0000000040), 0x0)

6.594556652s ago: executing program 8 (id=1519):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = syz_open_dev$vim2m(0x0, 0x1f, 0x2)
pipe2(0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
tee(0xffffffffffffffff, r2, 0xfffffffffffffc01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0xf)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000080)='./file1\x00', 0x80cc90, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESDEC, @ANYRESHEX], 0x1, 0x292, &(0x7f0000001f80)="$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")

6.594393233s ago: executing program 6 (id=1520):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x9, 0x10000, @value}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCFLSH(r0, 0x404c4701, 0x20000000)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000140), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5)

6.587560153s ago: executing program 9 (id=1521):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

6.419085972s ago: executing program 1 (id=1522):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000400)='./file0\x00', 0x2000002, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@gid}, {@gid}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@uid}, {}, {@nostrict}, {@anchor={'anchor', 0x3d, 0xf87a}}, {@umask={'umask', 0x3d, 0x70ed}}]}, 0x1, 0xc3b, &(0x7f0000001a40)="$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")
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000f00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x820063, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

6.102256021s ago: executing program 6 (id=1523):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x1b8, 0x0, 0x148, 0x0, 0x148, 0x298, 0x240, 0x240, 0x298, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0xcb0a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xa616f000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r4, &(0x7f0000002380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x21e)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x43}, 0x1}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)

5.6005903s ago: executing program 1 (id=1524):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_MCE_KILL(0x4c, 0x0, 0x2)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x3ff)
sendfile(r1, r2, 0x0, 0x10ffff)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000740)={0x0, 0x483aa011, 0x0, 0x0, 0x0, "fe941600"})

5.585541709s ago: executing program 2 (id=1525):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setrlimit(0xa, &(0x7f00000000c0)={0x96, 0x9})
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x81000, 0x3a, 0x1000, 0x2, 0x0, 0xfffffffc, 0x341}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x86d, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x7, 0x3, 0x7, 0x2800, 0x9, 0x440, 0xcd, 0xc, 0x30, {0x8, 0x1ff}, 0xd0, 0x9}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000001c0))

5.552271559s ago: executing program 9 (id=1526):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
exit(0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)

5.101627938s ago: executing program 1 (id=1527):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb0}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
modify_ldt$write2(0x11, &(0x7f00000001c0)={0x6, 0x20000800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
sendmmsg$unix(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x400000, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000300)={0x2, @sdr={0x31303553, 0x4}})
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
getsockopt$llc_int(r7, 0x10c, 0x5, 0x0, 0x0)
sendmsg$rds(r5, 0x0, 0x0)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0x101000000], [], 'bridge_slave_0\x00', 'gre0\x00', {}, {0xd9e065b4cefd6abf}}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x18}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)

4.387718785s ago: executing program 8 (id=1528):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
ppoll(&(0x7f0000000200)=[{r1, 0x1102}], 0x1, 0x0, 0x0, 0x0)

4.081484504s ago: executing program 6 (id=1529):
r0 = socket$inet(0xa, 0x801, 0x84)
mount$fuse(0x0, 0x0, 0x0, 0x100048, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f00000002c0), 0x20, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8)
syz_usb_connect(0x2, 0xb7, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a500018104004f0904870609a97a37020a24010a0b06020102092403050703020496062404029cfe09050b00400080000007250181f7090009050d00000464040507250103"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

2.092979627s ago: executing program 1 (id=1530):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000206, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ftruncate(0xffffffffffffffff, 0xffff)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000940)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1afa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x1, 0x0, 0x6, {0x7, 0x0, 0x0, 0x0, 0x3, 0xffffc3fd}}}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x3f72, 0x74f1, 0x0, 0x0, 0x39)

1.820852006s ago: executing program 9 (id=1531):
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$alg(0x26, 0x5, 0x0)
keyctl$revoke(0x3, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000029c0), &(0x7f0000002a00)={'enc=', 'oaep', ' hash=', {'wp256-generic\x00'}}, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
fchown(r3, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
write$UHID_INPUT(r4, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140), 0x111}}, 0x20)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)

555.478382ms ago: executing program 1 (id=1532):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setrlimit(0xa, &(0x7f00000000c0)={0x96, 0x9})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x81000, 0x3a, 0x1000, 0x2, 0x0, 0xfffffffc, 0x341}, 0x1c)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ifreq(r6, 0x89fb, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x20001100, 0x0, @fr=0x0}})
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x86d, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x7, 0x3, 0x7, 0x2800, 0x9, 0x440, 0xcd, 0xc, 0x30, {0x8, 0x1ff}, 0xd0, 0x9}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, 0x0, &(0x7f00000001c0))

439.974131ms ago: executing program 6 (id=1533):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x9, 0x10000, @value}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCFLSH(r0, 0x404c4701, 0x20000000)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000140), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5)

439.637301ms ago: executing program 9 (id=1534):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
creat(&(0x7f0000000140)='./file2\x00', 0x1ad)
unlink(&(0x7f0000000180)='./file1\x00')

358.191511ms ago: executing program 8 (id=1535):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b1, &(0x7f00000014c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x3, 0x7ff, 0x0, &(0x7f0000000040), 0x0)

230.048461ms ago: executing program 6 (id=1536):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=1537):
r0 = socket$inet(0xa, 0x801, 0x84)
mount$fuse(0x0, 0x0, 0x0, 0x100048, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000193, 0x48, 0x0)
mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000640)='./file1\x00', &(0x7f00000002c0)='qnx6\x00', 0x2008000, 0x0)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8)

kernel console output (not intermixed with test programs):

RCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  287.892343][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  288.205192][ T6262] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.333423][ T6262] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.584659][ T6262] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.609417][ T6262] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.635113][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  288.679972][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  288.846799][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.921567][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  288.941250][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  288.972495][ T6440] 8021q: adding VLAN 0 to HW filter on device team0
[  289.011142][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  289.053683][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  289.088903][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.096101][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.157752][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.166331][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.180143][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  289.205568][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  289.221712][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  289.259147][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.266447][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.298918][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  289.355029][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  289.370233][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  289.394894][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.414157][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  289.423903][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.436851][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  289.476008][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  289.495191][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  289.561566][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  290.126869][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  290.165676][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  290.175374][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  290.198851][ T6440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  290.231291][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  290.257484][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  290.274657][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  290.355743][ T6625] lo speed is unknown, defaulting to 1000
[  290.427133][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.443'.
[  290.473014][ T6625] lo speed is unknown, defaulting to 1000
[  290.517984][ T6625] lo speed is unknown, defaulting to 1000
[  290.550216][ T6625] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  290.915151][ T6643] loop6: detected capacity change from 0 to 64
[  290.924663][ T6643] hfs: keylen 9474 too large
[  290.929289][ T6643] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  290.935406][ T6643] hfs: get root inode failed
[  290.959214][ T6625] lo speed is unknown, defaulting to 1000
[  290.974604][ T6625] lo speed is unknown, defaulting to 1000
[  291.004357][ T6625] lo speed is unknown, defaulting to 1000
[  291.018950][ T6625] lo speed is unknown, defaulting to 1000
[  291.026240][ T6641] loop2: detected capacity change from 0 to 4096
[  291.045267][ T6647] loop7: detected capacity change from 0 to 2048
[  291.059290][ T6641] ntfs3: Unknown parameter 'hide_dot_files'
[  291.069372][ T6625] lo speed is unknown, defaulting to 1000
[  291.090948][ T6647] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  291.812053][ T6651] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 0, id = 0
[  292.221126][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  292.243327][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  292.291974][ T6440] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.340619][ T6262] EXT4-fs (loop7): unmounting filesystem.
[  293.735655][ T6673] loop7: detected capacity change from 0 to 1024
[  293.806022][ T6673] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  293.965986][ T6262] EXT4-fs (loop7): unmounting filesystem.
[  293.994762][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.521'.
[  295.422239][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.524'.
[  295.894072][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  295.923232][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  296.012031][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  296.020927][ T4265] Bluetooth: min 0 < 6
[  296.055017][ T6703] loop2: detected capacity change from 0 to 2048
[  296.160539][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  296.175580][ T6703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  296.264437][ T6440] device veth0_vlan entered promiscuous mode
[  296.300718][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  296.320893][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  296.391370][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  296.425514][ T6711] loop1: detected capacity change from 0 to 64
[  296.435310][ T6711] hfs: keylen 9474 too large
[  296.439941][ T6711] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  296.445950][ T6711] hfs: get root inode failed
[  296.481217][ T6440] device veth1_vlan entered promiscuous mode
[  296.571565][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  296.598651][ T6690] loop7: detected capacity change from 0 to 32768
[  296.603590][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  296.640370][ T6690] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 scanned by syz.7.522 (6690)
[  296.640554][ T6714] loop6: detected capacity change from 0 to 1024
[  296.822232][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  296.846392][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  297.674563][ T6690] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  297.723205][ T6690] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  297.732526][ T6690] BTRFS info (device loop7): force zlib compression, level 3
[  297.773070][ T6690] BTRFS info (device loop7): force clearing of disk cache
[  297.803768][ T6440] device veth0_macvtap entered promiscuous mode
[  297.846135][ T6690] BTRFS info (device loop7): setting nodatasum
[  297.856522][ T4300] hfsplus: b-tree write err: -5, ino 4
[  297.880108][ T6724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'.
[  297.901036][ T6690] BTRFS info (device loop7): doing ref verification
[  297.909193][ T6440] device veth1_macvtap entered promiscuous mode
[  297.925973][ T6690] BTRFS info (device loop7): allowing degraded mounts
[  297.970239][ T6690] BTRFS info (device loop7): enabling disk space caching
[  297.989974][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.001097][ T6690] BTRFS info (device loop7): disk space caching is enabled
[  298.032916][ T4265] Bluetooth: hci5: command 0x2021 tx timeout
[  298.082892][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.143536][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.177040][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.212347][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.279145][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.341227][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.392583][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.411431][ T6690] BTRFS error (device loop7): open_ctree failed
[  298.448134][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.522259][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  298.537614][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  298.615774][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.648342][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.717754][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.773227][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.813013][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.032758][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.285619][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.413521][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.525578][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.678280][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  301.962690][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  302.278589][ T6760] lo speed is unknown, defaulting to 1000
[  302.605591][ T6440] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.673883][ T6440] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.688435][ T6440] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.708785][ T6440] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.754910][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'.
[  303.122664][ T6779] loop2: detected capacity change from 0 to 2048
[  303.238598][ T5247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.293465][ T5247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.294398][ T6779] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  303.345745][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.380466][ T6774] netlink: 'syz.6.537': attribute type 10 has an invalid length.
[  303.448470][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.749596][ T6774] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  304.759103][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  304.778795][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  304.916206][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  305.159520][ T6796] capability: warning: `syz.8.483' uses deprecated v2 capabilities in a way that may be insecure
[  305.912855][ T6811] lo speed is unknown, defaulting to 1000
[  306.003897][ T6811] loop2: detected capacity change from 0 to 4096
[  309.280691][ T6811] NILFS (loop2): error -4 creating segctord thread
[  309.966680][ T4351] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  310.938766][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'.
[  311.064068][ T6825] loop8: detected capacity change from 0 to 256
[  311.135264][ T6825] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  311.210960][ T6830] loop1: detected capacity change from 0 to 2048
[  311.297031][ T6830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  311.298997][ T6835] loop7: detected capacity change from 0 to 512
[  311.596501][ T6835] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  311.613354][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  311.838227][ T6848] siw: device registration error -23
[  312.220672][ T6835] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.277535][ T6872] loop2: detected capacity change from 0 to 512
[  314.376397][ T6866] kvm: emulating exchange as write
[  314.377847][ T6872] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  314.533143][ T6872] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.682976][ T6262] EXT4-fs (loop7): unmounting filesystem.
[  315.333854][ T6888] loop7: detected capacity change from 0 to 4096
[  315.981752][ T6889] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  316.997210][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.003833][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.605562][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  317.757758][ T6899] loop6: detected capacity change from 0 to 256
[  317.790562][ T6899] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  318.152182][ T6905] loop7: detected capacity change from 0 to 2048
[  318.793869][ T6905] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  318.976236][ T6262] EXT4-fs (loop7): unmounting filesystem.
[  320.884899][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'.
[  321.633003][ T6052] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  321.648858][ T6928] loop8: detected capacity change from 0 to 4096
[  321.674312][ T6928] ntfs3: Unknown parameter 'hide_dot_files'
[  321.723292][ T4351] I/O error, dev loop8, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  321.822785][ T6052] usb 7-1: Using ep0 maxpacket: 32
[  321.830308][ T6052] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  321.861413][ T6052] usb 7-1: config 0 has no interface number 0
[  321.886714][ T6052] usb 7-1: config 0 interface 184 has no altsetting 0
[  321.911730][ T6052] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  321.942444][ T6052] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.965031][ T6052] usb 7-1: Product: syz
[  321.969252][ T6052] usb 7-1: Manufacturer: syz
[  321.989090][ T6052] usb 7-1: SerialNumber: syz
[  322.008226][ T6052] usb 7-1: config 0 descriptor??
[  322.025197][ T6052] smsc75xx v1.0.0
[  322.070742][ T6052] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  322.127762][ T6052] smsc75xx: probe of 7-1:0.184 failed with error -71
[  322.172982][  T127] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  322.193054][ T6052] usb 7-1: USB disconnect, device number 2
[  322.245433][ T6947] netlink: 36 bytes leftover after parsing attributes in process `syz.6.576'.
[  322.382877][  T127] usb 3-1: Using ep0 maxpacket: 8
[  322.390476][  T127] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  322.427716][  T127] usb 3-1: config 0 has no interface number 0
[  322.486262][  T127] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  322.522610][  T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.563444][ T6950] loop1: detected capacity change from 0 to 4096
[  322.580704][ T6950] ntfs3: Unknown parameter 'hide_dot_files'
[  322.612854][  T127] usb 3-1: Product: syz
[  322.617075][  T127] usb 3-1: Manufacturer: syz
[  322.621698][  T127] usb 3-1: SerialNumber: syz
[  322.647363][  T127] usb 3-1: config 0 descriptor??
[  322.701656][  T127] radio-usb-si4713 3-1:0.128: Si4713 development board discovered: (10C4:8244)
[  323.377627][  T127] radio-usb-si4713: probe of 3-1:0.128 failed with error -71
[  323.417896][  T127] usbhid 3-1:0.128: couldn't find an input interrupt endpoint
[  323.507822][  T127] usb 3-1: USB disconnect, device number 4
[  323.891847][ T6971] loop8: detected capacity change from 0 to 2048
[  323.944354][ T6971] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  323.980753][ T6975] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 0, id = 0
[  324.022639][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  324.237794][ T6959] siw: device registration error -23
[  325.188242][ T6986] loop8: detected capacity change from 0 to 512
[  325.318595][ T6986] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  325.453264][ T6986] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.759931][ T6998] lo speed is unknown, defaulting to 1000
[  327.459355][ T7002] netlink: 'syz.2.588': attribute type 7 has an invalid length.
[  327.731717][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'.
[  328.917506][ T7015] loop7: detected capacity change from 0 to 4096
[  328.958970][ T7017] loop1: detected capacity change from 0 to 2048
[  328.981221][ T7015] ntfs3: Unknown parameter 'hide_dot_files'
[  329.232469][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  329.242392][ T4351] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  329.374653][ T7017] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  330.086322][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  333.586369][ T7070] netlink: 'syz.6.605': attribute type 7 has an invalid length.
[  333.598728][ T7069] loop2: detected capacity change from 0 to 512
[  333.835586][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.605'.
[  334.529126][ T7069] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  334.655750][ T7069] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.143476][ T7088] lo speed is unknown, defaulting to 1000
[  335.933276][ T7084] loop1: detected capacity change from 0 to 4096
[  335.940465][ T7084] ntfs3: Unknown parameter 'hide_dot_files'
[  336.500516][ T7103] siw: device registration error -23
[  337.578988][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  338.357666][ T7099] loop8: detected capacity change from 0 to 64
[  338.629280][ T7099] hfs: keylen 9474 too large
[  338.638016][ T7099] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  338.743905][ T7099] hfs: get root inode failed
[  341.420763][ T7137] netlink: 'syz.6.619': attribute type 7 has an invalid length.
[  341.480378][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.619'.
[  342.428704][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'.
[  342.974211][ T7161] siw: device registration error -23
[  343.645102][ T7164] loop2: detected capacity change from 0 to 512
[  344.793998][ T4262] Bluetooth: hci5: command 0x0406 tx timeout
[  344.844737][ T7164] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  344.877450][ T7164] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.285558][ T7178] lo speed is unknown, defaulting to 1000
[  347.685226][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  347.792421][ T7175] loop7: detected capacity change from 0 to 4096
[  347.860547][ T7175] ntfs3: Unknown parameter 'hide_dot_files'
[  347.870325][ T7181] loop6: detected capacity change from 0 to 1024
[  347.922498][ T7181] EXT4-fs: Ignoring removed mblk_io_submit option
[  347.967368][ T7181] EXT4-fs: Ignoring removed oldalloc option
[  347.998194][ T7184] loop2: detected capacity change from 0 to 512
[  348.026152][ T7184] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  348.042165][ T7181] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[  348.150503][ T7184] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  349.103181][ T7184] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.629: invalid indirect mapped block 4294967295 (level 0)
[  349.199312][ T7184] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.629: invalid indirect mapped block 4294967295 (level 1)
[  349.407283][ T7184] EXT4-fs (loop2): 1 orphan inode deleted
[  349.521758][ T7184] EXT4-fs (loop2): 1 truncate cleaned up
[  349.643093][ T7184] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  350.855523][ T7207] siw: device registration error -23
[  352.754118][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.7.634'.
[  353.074323][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  353.574300][ T7227] loop7: detected capacity change from 0 to 512
[  354.852947][ T7239] siw: device registration error -23
[  355.770500][ T7241] loop6: detected capacity change from 0 to 64
[  355.934479][ T7227] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  355.974915][ T7227] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.762782][ T7254] lo speed is unknown, defaulting to 1000
[  358.300761][ T7241] hfs: unable to open extent tree
[  358.372308][ T6262] EXT4-fs (loop7): unmounting filesystem.
[  358.532421][ T7248] loop1: detected capacity change from 0 to 4096
[  358.591475][ T7248] ntfs3: Unknown parameter 'hide_dot_files'
[  359.536741][ T7269] siw: device registration error -23
[  360.500544][ T7273] lo speed is unknown, defaulting to 1000
[  360.571930][ T7273] loop6: detected capacity change from 0 to 4096
[  360.644872][ T7275] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  360.889770][ T7277] loop7: detected capacity change from 0 to 1024
[  360.942968][ T7277] EXT4-fs: Ignoring removed mblk_io_submit option
[  360.959906][ T7277] EXT4-fs: Ignoring removed oldalloc option
[  360.986091][ T7277] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal
[  361.144134][ T7279] loop8: detected capacity change from 0 to 4096
[  361.186208][ T7279] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512)
[  363.010382][ T7302] loop1: detected capacity change from 0 to 8
[  363.131260][ T7305] siw: device registration error -23
[  364.207749][ T7317] loop7: detected capacity change from 0 to 512
[  365.113158][ T7317] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  365.257801][ T7317] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.285502][ T7311] loop2: detected capacity change from 0 to 64
[  365.308304][ T7311] hfs: keylen 9474 too large
[  365.313179][ T7311] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  365.318996][ T7311] hfs: get root inode failed
[  366.155861][ T4351] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  368.046401][ T7335] lo speed is unknown, defaulting to 1000
[  368.326072][ T6262] EXT4-fs (loop7): unmounting filesystem.
[  368.399796][ T7340] siw: device registration error -23
[  369.371780][ T7349] loop1: detected capacity change from 0 to 1024
[  369.379008][ T7349] EXT4-fs: Ignoring removed mblk_io_submit option
[  369.385801][ T7349] EXT4-fs: Ignoring removed oldalloc option
[  369.436070][ T7349] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  369.523185][   T52] block nbd6: Attempted send on invalid socket
[  369.529760][   T52] I/O error, dev nbd6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  369.542047][ T7351] qnx6: unable to read the first superblock
[  369.549859][   T52] block nbd6: Attempted send on invalid socket
[  369.615561][   T52] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  369.624803][ T7351] qnx6: unable to read the first superblock
[  369.630771][ T7351] qnx6: unable to read the first superblock
[  370.502894][ T6051] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  371.347484][ T6051] usb 7-1: unable to get BOS descriptor or descriptor too short
[  371.363923][ T6051] usb 7-1: not running at top speed; connect to a high speed hub
[  371.385218][ T7377] loop1: detected capacity change from 0 to 64
[  371.404564][ T6051] usb 7-1: config 129 has an invalid interface number: 135 but max is 0
[  371.422426][ T6051] usb 7-1: config 129 has an invalid interface number: 5 but max is 0
[  371.468109][ T6051] usb 7-1: config 129 descriptor has 1 excess byte, ignoring
[  371.513186][ T6051] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  371.551803][ T6051] usb 7-1: config 129 has no interface number 0
[  371.587495][ T6051] usb 7-1: config 129 has no interface number 1
[  371.610256][ T6051] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  371.673584][ T7379] loop8: detected capacity change from 0 to 4096
[  371.682987][ T6051] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  371.720477][ T7379] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512)
[  371.731364][ T6051] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  371.772796][ T6051] usb 7-1: config 129 interface 135 has no altsetting 0
[  371.796231][ T7383] loop2: detected capacity change from 0 to 4096
[  371.805407][ T6051] usb 7-1: config 129 interface 5 has no altsetting 0
[  371.819549][ T7379] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  371.903688][ T7383] ntfs3: Unknown parameter 'hide_dot_files'
[  371.922332][ T7379] ntfs3: loop8: Failed to load $Extend.
[  372.012017][ T6051] usb 7-1: string descriptor 0 read error: -22
[  372.018931][ T6051] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  372.028159][ T6051] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.078825][ T6051] usb 7-1: MIDIStreaming interface descriptor not found
[  372.959712][ T6051] usb 7-1: USB disconnect, device number 3
[  373.832223][ T4621] udevd[4621]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  375.714726][ T4265] Bluetooth: hci3: command 0x0405 tx timeout
[  375.721308][ T4265] Bluetooth: hci1: command 0x0406 tx timeout
[  375.775864][ T7420] overlayfs: failed to resolve './file1': -2
[  375.911512][ T7422] loop8: detected capacity change from 0 to 1024
[  375.951555][ T7422] EXT4-fs: Ignoring removed mblk_io_submit option
[  375.978491][ T7422] EXT4-fs: Ignoring removed oldalloc option
[  376.061691][ T7422] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[  377.772948][ T7449] siw: device registration error -23
[  378.438635][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.445977][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  378.755614][ T7461] overlayfs: failed to resolve './file0': -2
[  379.618938][ T7469] siw: device registration error -23
[  380.222921][   T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  380.426315][   T14] usb 2-1: config 0 has an invalid interface number: 156 but max is 0
[  380.465056][   T14] usb 2-1: config 0 has no interface number 0
[  380.471211][   T14] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  380.595644][   T14] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  380.629508][ T7475] loop8: detected capacity change from 0 to 4096
[  380.701671][   T14] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  380.899991][ T7475] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512)
[  381.472081][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.540258][   T14] usb 2-1: config 0 descriptor??
[  381.716055][   T14] usb 2-1: can't set config #0, error -71
[  381.729933][   T14] usb 2-1: USB disconnect, device number 3
[  381.811132][ T7487] loop6: detected capacity change from 0 to 1024
[  381.884393][ T7487] EXT4-fs: Ignoring removed mblk_io_submit option
[  381.890910][ T7487] EXT4-fs: Ignoring removed oldalloc option
[  381.991635][ T7487] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[  382.071618][ T7499] loop7: detected capacity change from 0 to 1024
[  382.393163][ T7499] hfsplus: cannot replace xattr
[  382.440349][ T7506] siw: device registration error -23
[  382.981323][ T7479] loop2: detected capacity change from 0 to 32768
[  383.169381][ T4467] hfsplus: b-tree write err: -5, ino 4
[  383.290165][ T7479] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  383.317076][ T7479] XFS (loop2): Mounting V5 Filesystem
[  383.456584][ T7479] XFS (loop2): Ending clean mount
[  383.528350][ T7479] XFS (loop2): Quotacheck needed: Please wait.
[  383.631976][ T7479] XFS (loop2): Quotacheck: Done.
[  383.760639][ T4257] XFS (loop2): Unmounting Filesystem
[  384.900131][ T7548] loop7: detected capacity change from 0 to 32768
[  384.911900][ T7550] siw: device registration error -23
[  385.092994][ T6051] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  385.448844][ T6051] usb 2-1: Using ep0 maxpacket: 8
[  385.596435][ T7548] XFS (loop7): Mounting V5 Filesystem
[  385.649720][ T6051] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  385.666120][ T6051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.675218][ T6051] usb 2-1: Product: syz
[  385.679449][ T6051] usb 2-1: Manufacturer: syz
[  385.684228][ T6051] usb 2-1: SerialNumber: syz
[  385.703681][ T6051] usb 2-1: config 0 descriptor??
[  385.810674][ T7548] XFS (loop7): Starting recovery (logdev: internal)
[  385.837673][ T7548] XFS (loop7): Ending recovery (logdev: internal)
[  385.983550][ T6051] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  386.733013][ T6262] XFS (loop7): Unmounting Filesystem
[  387.984444][ T7587] siw: device registration error -23
[  388.907173][ T6051] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  388.989476][ T6051] usb 2-1: USB disconnect, device number 4
[  389.417284][ T7602] overlayfs: conflicting lowerdir path
[  390.815842][ T7615] lo speed is unknown, defaulting to 1000
[  390.898506][ T7615] loop6: detected capacity change from 0 to 4096
[  391.166271][ T7616] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  392.941598][ T7629] loop7: detected capacity change from 0 to 1024
[  392.949547][ T7629] EXT4-fs: Ignoring removed mblk_io_submit option
[  392.956812][ T7629] EXT4-fs: Ignoring removed oldalloc option
[  393.202897][ T7629] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal
[  397.316214][ T7677] device syzkaller1 entered promiscuous mode
[  397.748880][ T7683] lo speed is unknown, defaulting to 1000
[  397.826232][ T7683] loop8: detected capacity change from 0 to 4096
[  397.862762][ T7687] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  402.139819][ T7722] loop7: detected capacity change from 0 to 128
[  402.167836][ T7722] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  402.200369][ T7722] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  402.225744][ T7712] loop2: detected capacity change from 0 to 1024
[  402.261632][ T7712] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  403.728730][ T7734] lo speed is unknown, defaulting to 1000
[  403.789717][ T7734] loop6: detected capacity change from 0 to 4096
[  404.953251][ T7743] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  405.255615][ T7747] loop8: detected capacity change from 0 to 1024
[  405.295463][ T7747] EXT4-fs: Ignoring removed mblk_io_submit option
[  405.301994][ T7747] EXT4-fs: Ignoring removed oldalloc option
[  405.443001][ T7747] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[  408.615367][ T7781] loop7: detected capacity change from 0 to 64
[  408.777939][   T26] audit: type=1800 audit(1737513245.647:6): pid=7781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.763" name="bus" dev="loop7" ino=22 res=0 errno=0
[  409.947095][ T7768] loop2: detected capacity change from 0 to 32768
[  410.091635][ T7798] loop7: detected capacity change from 0 to 1024
[  410.172516][ T7768] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  410.213384][ T7768] XFS (loop2): Mounting V5 Filesystem
[  410.283708][ T7798] hfsplus: cannot replace xattr
[  410.380885][ T7768] XFS (loop2): Ending clean mount
[  410.427819][ T7768] XFS (loop2): Quotacheck needed: Please wait.
[  410.571063][ T7768] XFS (loop2): Quotacheck: Done.
[  410.588046][ T7808] lo speed is unknown, defaulting to 1000
[  410.628853][ T7811] loop8: detected capacity change from 0 to 4096
[  410.653027][ T7814] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  411.079839][   T75] hfsplus: b-tree write err: -5, ino 4
[  411.212275][ T4257] XFS (loop2): Unmounting Filesystem
[  411.488618][ T7789] loop1: detected capacity change from 0 to 32768
[  411.810700][   T26] audit: type=1800 audit(1737513248.677:7): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.767" name="file1" dev="loop1" ino=4 res=0 errno=0
[  411.900340][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.774'.
[  413.998916][ T7841] siw: device registration error -23
[  416.680565][ T7868] lo speed is unknown, defaulting to 1000
[  416.762374][ T7868] loop6: detected capacity change from 0 to 4096
[  417.015451][ T7869] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  419.892275][ T7892] siw: device registration error -23
[  420.354553][ T7896] siw: device registration error -23
[  421.210905][ T7910] netlink: 36 bytes leftover after parsing attributes in process `syz.7.792'.
[  422.162503][ T7907] loop7: detected capacity change from 0 to 1024
[  423.666719][ T7906] loop8: detected capacity change from 0 to 32768
[  423.947912][ T7906] XFS (loop8): Mounting V5 Filesystem
[  424.287978][ T7906] XFS (loop8): AIL initialisation failed: error -12
[  424.703767][ T7906] XFS (loop8): log mount failed
[  424.935647][ T7951] loop7: detected capacity change from 0 to 1024
[  425.087470][ T7954] hfsplus: cannot replace xattr
[  425.187261][ T7927] loop6: detected capacity change from 0 to 32768
[  425.194514][ T7927] XFS: ikeep mount option is deprecated.
[  425.470881][ T7927] XFS (loop6): Mounting V5 Filesystem
[  425.588728][ T4678] hfsplus: b-tree write err: -5, ino 4
[  425.632212][ T7927] XFS (loop6): Ending clean mount
[  425.647128][ T7927] XFS (loop6): Quotacheck needed: Please wait.
[  425.746724][ T7927] XFS (loop6): Quotacheck: Done.
[  426.073441][   T26] audit: type=1804 audit(1737513262.937:8): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.797" name="/newroot/93/file0/bus" dev="loop6" ino=9290 res=1 errno=0
[  429.026811][ T7991] loop8: detected capacity change from 0 to 1024
[  429.084640][ T7991] EXT4-fs: Ignoring removed mblk_io_submit option
[  429.775449][ T7991] EXT4-fs: Ignoring removed oldalloc option
[  429.875000][ T5855] XFS (loop6): Unmounting Filesystem
[  429.907658][ T7991] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[  430.241608][ T8008] siw: device registration error -23
[  430.662754][ T8002] loop1: detected capacity change from 0 to 2048
[  430.911130][ T8002] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  432.713505][ T8006] loop7: detected capacity change from 0 to 32768
[  433.858435][ T8045] loop8: detected capacity change from 0 to 1024
[  434.057683][ T8045] hfsplus: cannot replace xattr
[  434.204670][ T4365] hfsplus: b-tree write err: -5, ino 4
[  434.685594][ T8055] loop7: detected capacity change from 0 to 128
[  435.378889][ T8055] VFS: Found a Xenix FS (block size = 512) on device loop7
[  435.546622][ T8051] sysv_free_block: trying to free block not in datazone
[  436.782910][ T8068] siw: device registration error -23
[  437.721811][ T6262] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  437.814696][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.8.822'.
[  439.877113][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  439.883543][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  440.169831][ T8100] loop2: detected capacity change from 0 to 512
[  440.192977][ T4467] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  440.289283][ T8100] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  440.322988][ T8100] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.388571][ T4467] EXT4-fs (loop1): Remounting filesystem read-only
[  440.534355][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  441.601599][ T8123] overlayfs: missing 'lowerdir'
[  441.806956][ T8117] loop1: detected capacity change from 0 to 32768
[  441.921711][ T8117] XFS (loop1): Mounting V5 Filesystem
[  442.016686][ T8131] loop8: detected capacity change from 0 to 4096
[  442.056609][ T8131] ntfs3: Unknown parameter 'hide_dot_files'
[  442.089622][ T8117] XFS (loop1): Ending clean mount
[  442.235714][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  442.481553][ T4249] XFS (loop1): Unmounting Filesystem
[  443.448323][ T8126] loop7: detected capacity change from 0 to 32768
[  443.543999][ T8126] XFS (loop7): DAX unsupported by block device. Turning off DAX.
[  443.582443][ T8126] XFS (loop7): Mounting V5 Filesystem
[  443.748869][ T8163] loop2: detected capacity change from 0 to 1024
[  443.822024][ T8163] hfsplus: cannot replace xattr
[  443.855921][ T8126] XFS (loop7): Ending clean mount
[  443.916642][ T8126] XFS (loop7): Quotacheck needed: Please wait.
[  444.011720][ T8126] XFS (loop7): Quotacheck: Done.
[  444.104425][ T4466] hfsplus: b-tree write err: -5, ino 4
[  444.138052][ T8169] loop1: detected capacity change from 0 to 512
[  444.256911][ T8174] loop2: detected capacity change from 0 to 2048
[  444.488926][ T8174] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  445.005688][ T6262] XFS (loop7): Unmounting Filesystem
[  445.037503][ T8169] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  445.047939][ T8169] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  445.779870][ T8189] lo speed is unknown, defaulting to 1000
[  447.459502][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  447.512151][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  447.628252][ T8197] loop6: detected capacity change from 0 to 512
[  447.742974][ T8197] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  447.816153][ T8197] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  448.179777][ T8210] loop1: detected capacity change from 0 to 4096
[  448.232161][ T8210] ntfs3: Unknown parameter 'hide_dot_files'
[  449.200695][ T8204] loop2: detected capacity change from 0 to 32768
[  449.586842][ T8204] XFS (loop2): Mounting V5 Filesystem
[  449.848549][ T8204] XFS (loop2): Ending clean mount
[  449.960363][ T5855] EXT4-fs (loop6): unmounting filesystem.
[  450.143811][ T8248] loop6: detected capacity change from 0 to 1024
[  450.151467][ T4257] XFS (loop2): Unmounting Filesystem
[  450.345598][ T8248] hfsplus: cannot replace xattr
[  450.375844][ T8251] random: crng reseeded on system resumption
[  450.467098][ T8256] loop7: detected capacity change from 0 to 512
[  450.550675][ T5661] hfsplus: b-tree write err: -5, ino 4
[  450.574451][ T8256] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  450.686977][ T8256] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  450.857935][ T8261] loop6: detected capacity change from 0 to 2048
[  450.898635][ T8261] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  451.069311][ T8266] lo speed is unknown, defaulting to 1000
[  452.579654][ T8272] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 0, id = 0
[  452.609630][ T6262] EXT4-fs (loop7): unmounting filesystem.
[  453.170533][ T5855] EXT4-fs (loop6): unmounting filesystem.
[  453.830381][ T8279] loop6: detected capacity change from 0 to 4096
[  453.853970][ T8279] ntfs3: Unknown parameter 'hide_dot_files'
[  453.908175][ T4351] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  454.388177][ T8286] lo speed is unknown, defaulting to 1000
[  454.509678][ T8294] loop8: detected capacity change from 0 to 64
[  454.858519][ T8294] hfs: keylen 9474 too large
[  454.906841][ T8294] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  454.948516][ T8294] hfs: get root inode failed
[  454.981546][ T8287] loop7: detected capacity change from 0 to 4096
[  455.378837][ T8281] loop2: detected capacity change from 0 to 32768
[  455.418997][ T8298] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  455.974639][ T8281] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  456.154005][ T8281] XFS (loop2): Mounting V5 Filesystem
[  456.258829][ T8281] XFS (loop2): Ending clean mount
[  456.339501][ T8281] XFS (loop2): Quotacheck needed: Please wait.
[  456.418017][ T8281] XFS (loop2): Quotacheck: Done.
[  456.493361][ T8316] loop8: detected capacity change from 0 to 512
[  456.580452][ T4257] XFS (loop2): Unmounting Filesystem
[  456.715096][ T8316] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  456.762339][ T8316] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.156518][ T8324] loop2: detected capacity change from 0 to 1024
[  457.190954][ T8324] hfsplus: cannot replace xattr
[  457.377035][   T35] hfsplus: b-tree write err: -5, ino 4
[  458.586606][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  458.934590][ T8337] loop8: detected capacity change from 0 to 1024
[  459.635903][ T8337] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  461.575901][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  462.420823][ T8356] loop2: detected capacity change from 0 to 64
[  462.459589][ T8356] hfs: keylen 9474 too large
[  462.465019][ T8356] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  462.471068][ T8356] hfs: get root inode failed
[  462.525546][ T4265] Bluetooth: hci3: command 0x0406 tx timeout
[  463.660859][ T8373] loop2: detected capacity change from 0 to 512
[  464.194205][ T8373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  464.238041][ T8373] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.707393][ T8387] loop8: detected capacity change from 0 to 1024
[  465.827658][ T8387] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  465.868961][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  466.953003][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  467.155015][ T8411] loop8: detected capacity change from 0 to 1024
[  467.290199][ T4324] hfsplus: b-tree write err: -5, ino 4
[  467.759516][ T8420] loop1: detected capacity change from 0 to 64
[  467.768874][ T8420] hfs: keylen 9474 too large
[  467.773609][ T8420] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  467.779438][ T8420] hfs: get root inode failed
[  467.823887][ T4351] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  469.820754][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  469.831287][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  469.840447][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  469.988551][ T4254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  469.997139][ T4254] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  470.004654][ T4254] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  470.818790][ T8430] lo speed is unknown, defaulting to 1000
[  470.920322][ T8436] loop8: detected capacity change from 0 to 512
[  471.009622][   T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.010153][ T8436] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  471.093023][ T8436] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  471.221281][   T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.309370][ T8442] loop6: detected capacity change from 0 to 4096
[  471.335820][ T8442] ntfs3: Unknown parameter 'hide_dot_files'
[  471.391753][   T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.763628][   T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.017263][ T8430] chnl_net:caif_netlink_parms(): no params data found
[  472.025481][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  472.032959][ T4265] Bluetooth: hci4: command 0x0409 tx timeout
[  473.256483][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.304832][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.374064][ T8430] device bridge_slave_0 entered promiscuous mode
[  473.404687][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.411894][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.439646][ T8430] device bridge_slave_1 entered promiscuous mode
[  473.900266][ T8430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  473.971641][ T8430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.147230][ T4265] Bluetooth: hci4: command 0x041b tx timeout
[  474.671178][ T8430] team0: Port device team_slave_0 added
[  474.788126][ T8430] team0: Port device team_slave_1 added
[  475.917982][ T8480] loop8: detected capacity change from 0 to 512
[  475.924851][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.021879][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.300826][ T4265] Bluetooth: hci4: command 0x040f tx timeout
[  476.782310][ T8430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.798059][ T8480] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  476.810219][ T8480] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  476.894505][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.911926][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.937969][    C1] vkms_vblank_simulate: vblank timer overrun
[  476.967941][ T8430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  477.180105][ T8430] device hsr_slave_0 entered promiscuous mode
[  477.187340][ T8430] device hsr_slave_1 entered promiscuous mode
[  477.198147][ T8430] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  477.206025][ T8430] Cannot create hsr debugfs directory
[  477.242879][ T8491] loop2: detected capacity change from 0 to 1024
[  477.290055][ T8491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  478.412333][ T4254] Bluetooth: hci4: command 0x0419 tx timeout
[  478.553158][   T11] IPVS: stopping backup sync thread 6651 ...
[  478.588161][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  480.278430][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  480.432902][ T4254] Bluetooth: hci4: command 0x0405 tx timeout
[  480.532235][ T8509] loop2: detected capacity change from 0 to 1024
[  480.806053][   T11] device hsr_slave_0 left promiscuous mode
[  480.863956][   T11] device hsr_slave_1 left promiscuous mode
[  480.890333][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  480.938059][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.948033][ T7757] hfsplus: b-tree write err: -5, ino 4
[  481.437930][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  481.494893][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.671463][   T11] device bridge_slave_1 left promiscuous mode
[  481.678607][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.959832][   T11] device bridge_slave_0 left promiscuous mode
[  482.041870][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.912360][ T8526] loop2: detected capacity change from 0 to 64
[  483.291979][ T8526] hfs: keylen 9474 too large
[  483.303224][ T8526] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  483.312530][ T8526] hfs: get root inode failed
[  483.335450][   T11] device veth1_macvtap left promiscuous mode
[  483.347226][   T11] device veth0_macvtap left promiscuous mode
[  483.353672][   T11] device veth1_vlan left promiscuous mode
[  483.359593][   T11] device veth0_vlan left promiscuous mode
[  485.084531][ T8536] siw: device registration error -23
[  486.160020][ T8540] loop2: detected capacity change from 0 to 32768
[  486.308513][ T8540] XFS (loop2): Mounting V5 Filesystem
[  486.355374][   T11] team0 (unregistering): Port device team_slave_1 removed
[  486.473838][ T8540] XFS (loop2): Ending clean mount
[  486.512063][   T11] team0 (unregistering): Port device team_slave_0 removed
[  486.581665][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.680206][ T4257] XFS (loop2): Unmounting Filesystem
[  486.701241][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  488.508387][ T8573] loop1: detected capacity change from 0 to 1024
[  488.661876][   T11] bond0 (unregistering): Released all slaves
[  488.683969][ T8573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  490.161001][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  490.196964][ T8430] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  490.297746][ T8430] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  490.386233][ T8430] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  490.554032][ T8430] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  491.055311][ T8430] 8021q: adding VLAN 0 to HW filter on device bond0
[  491.106314][ T8430] 8021q: adding VLAN 0 to HW filter on device team0
[  491.226245][ T8430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  491.285262][ T8430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  491.371441][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  491.393054][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  491.439348][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  491.556614][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  491.615394][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.622588][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  491.806173][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  491.834054][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  492.152462][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.159775][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.213599][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  492.243870][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  492.297639][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  492.340811][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  492.373852][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  492.393290][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  492.429058][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  492.437843][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  492.468812][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  492.523976][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  492.532513][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  492.557423][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  492.573198][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  493.144327][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'.
[  494.403829][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  494.411374][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  494.429730][ T8430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  495.771044][ T8624] loop1: detected capacity change from 0 to 1024
[  495.877263][ T8632] siw: device registration error -23
[  496.591979][ T8624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  496.759168][ T8637] loop6: detected capacity change from 0 to 512
[  496.809024][ T8637] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  496.853776][ T8637] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.946: invalid indirect mapped block 4294967295 (level 0)
[  496.959433][ T8637] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.946: invalid indirect mapped block 4294967295 (level 1)
[  497.097761][ T8637] EXT4-fs (loop6): 1 orphan inode deleted
[  497.218700][ T8637] EXT4-fs (loop6): 1 truncate cleaned up
[  497.693914][ T8637] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  497.724173][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  497.745556][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  498.546188][ T8430] device veth0_vlan entered promiscuous mode
[  498.556662][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  498.566328][ T5855] EXT4-fs (loop6): unmounting filesystem.
[  498.591171][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  498.604827][ T8430] device veth1_vlan entered promiscuous mode
[  498.612455][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  498.621747][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  498.631580][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  498.734159][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  500.499353][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  500.565541][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  500.583417][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  500.628451][ T8430] device veth0_macvtap entered promiscuous mode
[  500.659656][ T8430] device veth1_macvtap entered promiscuous mode
[  501.142203][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.241043][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.317437][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.325116][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  501.758743][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.896790][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  502.041340][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  502.070077][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  502.098041][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  502.111641][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  502.130748][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_0
[  502.167294][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  502.179440][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  502.230285][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  502.265110][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  502.300240][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  502.326693][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  502.340207][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  502.357764][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  502.369943][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  502.439287][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  502.492944][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  502.504816][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_1
[  502.518419][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  502.546745][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  502.576907][ T8430] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.732743][ T8430] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.741508][ T8430] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.833535][ T8430] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  503.112096][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.141439][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.256846][ T5247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.272450][ T5247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.285765][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  503.314841][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  503.513522][ T8687] loop8: detected capacity change from 0 to 4096
[  503.538475][ T8687] ntfs3: Unknown parameter 'hide_dot_files'
[  504.461073][ T8694] loop6: detected capacity change from 0 to 1024
[  504.565192][ T8694] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  506.399150][ T8709] loop8: detected capacity change from 0 to 512
[  506.477883][ T5855] EXT4-fs (loop6): unmounting filesystem.
[  506.545417][ T8709] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  506.555880][ T8713] random: crng reseeded on system resumption
[  506.569639][ T8696] loop9: detected capacity change from 0 to 32768
[  506.583267][ T8709] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  506.693655][ T8696] XFS (loop9): DAX unsupported by block device. Turning off DAX.
[  506.727724][ T8696] XFS (loop9): Mounting V5 Filesystem
[  506.818776][ T8696] XFS (loop9): Ending clean mount
[  506.843252][ T8696] XFS (loop9): Quotacheck needed: Please wait.
[  506.915222][ T8696] XFS (loop9): Quotacheck: Done.
[  507.101652][ T8430] XFS (loop9): Unmounting Filesystem
[  507.518386][ T8713] Restarting kernel threads ... done.
[  508.614315][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  508.745968][ T8739] loop9: detected capacity change from 0 to 4096
[  508.905448][ T8739] ntfs3: Unknown parameter 'hide_dot_files'
[  509.145842][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.974'.
[  510.325042][ T4351] I/O error, dev loop9, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  511.740807][ T8754] loop8: detected capacity change from 0 to 1024
[  512.626943][ T8754] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  513.539809][ T8779] random: crng reseeded on system resumption
[  513.619927][ T8781] loop9: detected capacity change from 0 to 512
[  513.662836][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  513.714660][ T8781] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  513.770742][ T8781] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  513.986741][ T8763] loop1: detected capacity change from 0 to 32768
[  514.182011][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.8.985'.
[  514.419597][ T8763] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  514.544712][ T8763] XFS (loop1): Mounting V5 Filesystem
[  514.835914][ T8763] XFS (loop1): Ending clean mount
[  514.867397][ T8763] XFS (loop1): Quotacheck needed: Please wait.
[  515.034202][ T8763] XFS (loop1): Quotacheck: Done.
[  515.211331][ T8779] Restarting kernel threads ... done.
[  515.552190][ T4249] XFS (loop1): Unmounting Filesystem
[  515.987973][ T8430] EXT4-fs (loop9): unmounting filesystem.
[  516.477321][ T8809] siw: device registration error -23
[  518.322200][   T52] block nbd1: Attempted send on invalid socket
[  518.328559][   T52] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  518.338622][ T8826] qnx6: unable to read the first superblock
[  518.345925][   T52] block nbd1: Attempted send on invalid socket
[  518.352163][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  518.362693][ T8826] qnx6: unable to read the first superblock
[  518.368788][ T8826] qnx6: unable to read the first superblock
[  519.569737][   T52] block nbd8: Attempted send on invalid socket
[  519.576045][   T52] I/O error, dev nbd8, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  519.585313][ T8828] qnx6: unable to read the first superblock
[  519.591622][   T52] block nbd8: Attempted send on invalid socket
[  519.597926][   T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  519.607339][ T8828] qnx6: unable to read the first superblock
[  519.613379][ T8828] qnx6: unable to read the first superblock
[  519.935776][ T8836] loop1: detected capacity change from 0 to 1024
[  520.068021][ T8838] random: crng reseeded on system resumption
[  520.154277][ T5247] hfsplus: b-tree write err: -5, ino 4
[  525.277292][ T8875] loop6: detected capacity change from 0 to 1024
[  525.564528][   T93] block nbd2: Attempted send on invalid socket
[  525.570807][   T93] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  525.603432][ T8879] qnx6: unable to read the first superblock
[  525.807090][   T93] block nbd2: Attempted send on invalid socket
[  525.860788][   T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  525.876925][ T8879] qnx6: unable to read the first superblock
[  525.883002][ T8879] qnx6: unable to read the first superblock
[  526.785916][ T5661] hfsplus: b-tree write err: -5, ino 4
[  528.241663][ T8898] loop6: detected capacity change from 0 to 64
[  528.574846][ T8898] hfs: keylen 9474 too large
[  528.616051][ T8885] loop2: detected capacity change from 0 to 32768
[  528.658393][ T8898] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  528.836490][ T8898] hfs: get root inode failed
[  530.372099][ T8891] loop1: detected capacity change from 0 to 32768
[  530.458945][ T8891] XFS (loop1): Mounting V5 Filesystem
[  530.461654][ T8917] random: crng reseeded on system resumption
[  530.666818][ T8891] XFS (loop1): Ending clean mount
[  530.761096][ T4249] XFS (loop1): Unmounting Filesystem
[  531.368655][ T8929] loop2: detected capacity change from 0 to 1024
[  531.849829][   T46] hfsplus: b-tree write err: -5, ino 4
[  532.873531][   T93] block nbd8: Attempted send on invalid socket
[  532.879722][   T93] I/O error, dev nbd8, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  532.890958][ T8937] qnx6: unable to read the first superblock
[  532.897604][   T93] block nbd8: Attempted send on invalid socket
[  532.903802][   T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  532.912874][ T8937] qnx6: unable to read the first superblock
[  532.918889][ T8937] qnx6: unable to read the first superblock
[  534.269641][ T8949] siw: device registration error -23
[  534.899375][ T8948] loop8: detected capacity change from 0 to 1024
[  535.075423][ T8948] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  535.176319][ T8957] loop2: detected capacity change from 0 to 4096
[  535.183676][ T8957] ntfs3: Unknown parameter 'hide_dot_files'
[  536.151980][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  536.592071][ T8967] loop1: detected capacity change from 0 to 1024
[  536.808645][ T8955] loop9: detected capacity change from 0 to 32768
[  536.918607][ T8955] XFS (loop9): Mounting V5 Filesystem
[  536.944159][   T75] hfsplus: b-tree write err: -5, ino 4
[  537.187292][ T8955] XFS (loop9): Ending clean mount
[  537.403331][ T8981] loop1: detected capacity change from 0 to 1024
[  537.411500][ T8981] EXT4-fs: Ignoring removed mblk_io_submit option
[  537.418522][ T8981] EXT4-fs: Ignoring removed oldalloc option
[  537.811349][ T8981] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  538.035469][ T8430] XFS (loop9): Unmounting Filesystem
[  539.265620][ T8991] siw: device registration error -23
[  541.109123][ T9002] random: crng reseeded on system resumption
[  542.427260][ T9010] loop9: detected capacity change from 0 to 4096
[  542.434538][ T9010] ntfs3: Unknown parameter 'hide_dot_files'
[  544.050802][ T9031] siw: device registration error -23
[  546.520862][ T9046] siw: device registration error -23
[  547.574484][ T9052] loop2: detected capacity change from 0 to 1024
[  547.908905][ T9052] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  548.476789][ T9061] loop8: detected capacity change from 0 to 4096
[  548.505416][ T9061] ntfs3: Unknown parameter 'hide_dot_files'
[  549.173578][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  549.483529][   T93] block nbd1: Attempted send on invalid socket
[  549.489780][   T93] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  549.501098][ T9071] qnx6: unable to read the first superblock
[  549.513292][   T52] block nbd1: Attempted send on invalid socket
[  549.519526][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  549.529035][ T9071] qnx6: unable to read the first superblock
[  549.536353][ T9071] qnx6: unable to read the first superblock
[  549.740562][ T9077] siw: device registration error -23
[  549.810319][ T9078] loop8: detected capacity change from 0 to 1024
[  549.839846][ T9078] EXT4-fs: Ignoring removed mblk_io_submit option
[  549.847673][ T9078] EXT4-fs: Ignoring removed oldalloc option
[  549.863910][ T9078] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[  555.658412][ T9102] siw: device registration error -23
[  557.012374][ T9109] loop8: detected capacity change from 0 to 4096
[  557.032865][ T9109] ntfs3: Unknown parameter 'hide_dot_files'
[  557.726027][ T9114] loop9: detected capacity change from 0 to 4096
[  557.801727][ T9114] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512)
[  558.928885][ T9128] siw: device registration error -23
[  558.996355][   T52] block nbd9: Attempted send on invalid socket
[  559.003071][   T52] I/O error, dev nbd9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  559.012326][ T9129] qnx6: unable to read the first superblock
[  559.019387][   T52] block nbd9: Attempted send on invalid socket
[  559.025798][   T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  559.058308][ T9129] qnx6: unable to read the first superblock
[  559.064396][ T9129] qnx6: unable to read the first superblock
[  559.482491][ T9133] loop6: detected capacity change from 0 to 1024
[  559.490302][ T9133] EXT4-fs: Ignoring removed mblk_io_submit option
[  559.497537][ T9133] EXT4-fs: Ignoring removed oldalloc option
[  560.390263][ T9133] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[  562.408009][ T9152] siw: device registration error -23
[  562.757612][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  562.764038][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  563.442749][ T9159] overlayfs: conflicting lowerdir path
[  565.616680][ T9170] loop6: detected capacity change from 0 to 2048
[  565.933831][ T9170] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  566.237728][ T9188] loop1: detected capacity change from 0 to 1024
[  566.307144][ T9188] EXT4-fs: Ignoring removed mblk_io_submit option
[  566.377605][ T9188] EXT4-fs: Ignoring removed oldalloc option
[  566.912881][ T9188] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  567.284117][ T4681] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  568.542693][ T4681] EXT4-fs (loop6): Remounting filesystem read-only
[  568.549936][ T9203] siw: device registration error -23
[  568.569099][ T5855] EXT4-fs (loop6): unmounting filesystem.
[  571.396153][ T9212] loop6: detected capacity change from 0 to 32768
[  571.619258][ T9212] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  571.703478][ T9212] XFS (loop6): Mounting V5 Filesystem
[  571.777386][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1104'.
[  571.802958][ T9212] XFS (loop6): Ending clean mount
[  571.826144][ T9212] XFS (loop6): Quotacheck needed: Please wait.
[  571.985989][ T9212] XFS (loop6): Quotacheck: Done.
[  572.105149][ T5855] XFS (loop6): Unmounting Filesystem
[  572.414066][   T93] block nbd1: Attempted send on invalid socket
[  572.421471][   T93] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  572.439490][ T9236] qnx6: unable to read the first superblock
[  572.451069][   T93] block nbd1: Attempted send on invalid socket
[  572.526383][   T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  572.546435][ T9236] qnx6: unable to read the first superblock
[  572.553970][ T9236] qnx6: unable to read the first superblock
[  576.202520][ T9271] siw: device registration error -23
[  577.117629][ T9275] loop6: detected capacity change from 0 to 512
[  577.162544][ T9275] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  577.285213][ T9275] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.1117: invalid indirect mapped block 4294967295 (level 0)
[  577.319835][ T9275] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.1117: invalid indirect mapped block 4294967295 (level 1)
[  577.357768][ T9275] EXT4-fs (loop6): 1 orphan inode deleted
[  577.363677][ T9275] EXT4-fs (loop6): 1 truncate cleaned up
[  577.370058][ T9275] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  578.035355][ T5855] EXT4-fs (loop6): unmounting filesystem.
[  578.123726][ T9285] loop9: detected capacity change from 0 to 4096
[  578.151331][ T9285] ntfs3: Unknown parameter 'hide_dot_files'
[  578.193760][ T9285] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1120'.
[  578.983362][ T9279] loop8: detected capacity change from 0 to 32768
[  579.178813][ T9279] XFS (loop8): DAX unsupported by block device. Turning off DAX.
[  579.242843][ T9279] XFS (loop8): Mounting V5 Filesystem
[  581.666781][ T9279] XFS (loop8): Ending clean mount
[  581.675437][ T9279] XFS (loop8): Quotacheck needed: Please wait.
[  581.747436][ T9279] XFS (loop8): Quotacheck: Done.
[  581.788571][ T6440] XFS (loop8): Unmounting Filesystem
[  581.852094][ T9316] loop6: detected capacity change from 0 to 1024
[  583.196718][ T9326] siw: device registration error -23
[  583.746050][ T9319] loop1: detected capacity change from 0 to 1024
[  583.783700][ T9316] hfsplus: xattr searching failed
[  583.800202][ T9319] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  583.976719][ T9332] hfsplus: xattr searching failed
[  584.406452][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1132'.
[  585.331836][ T9346] loop2: detected capacity change from 0 to 4096
[  585.349501][ T9346] ntfs3: Unknown parameter 'hide_dot_files'
[  585.385715][ T9346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1134'.
[  586.074851][ T9350] loop1: detected capacity change from 0 to 64
[  586.100001][ T9350] hfs: keylen 9474 too large
[  586.104708][ T9350] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  586.110573][ T9350] hfs: get root inode failed
[  586.174252][ T4619] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  587.189508][ T4464] hfsplus: b-tree write err: -5, ino 3
[  587.295889][ T9359] loop8: detected capacity change from 0 to 512
[  587.425296][ T9359] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  587.437929][ T9359] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.514950][ T9382] siw: device registration error -23
[  591.216685][ T9386] loop1: detected capacity change from 0 to 512
[  591.251590][ T9386] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  591.326643][ T9386] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1144: invalid indirect mapped block 4294967295 (level 0)
[  591.386862][ T9386] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1144: invalid indirect mapped block 4294967295 (level 1)
[  591.439019][ T9386] EXT4-fs (loop1): 1 orphan inode deleted
[  591.458414][ T9386] EXT4-fs (loop1): 1 truncate cleaned up
[  591.790123][ T9386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  591.818766][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  593.271017][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  595.629194][ T4265] Bluetooth: hci4: command 0x0406 tx timeout
[  595.799738][ T9407] loop9: detected capacity change from 0 to 32768
[  596.047722][ T9407] XFS (loop9): Mounting V5 Filesystem
[  596.907596][ T9407] XFS (loop9): Ending clean mount
[  597.033098][ T8430] XFS (loop9): Unmounting Filesystem
[  597.269383][ T9416] loop1: detected capacity change from 0 to 32768
[  597.324837][ T9416] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1149 (9416)
[  597.396922][ T9416] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  597.407803][ T9416] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  597.418763][ T9416] BTRFS info (device loop1): using free space tree
[  597.688294][ T9416] BTRFS error (device loop1): open_ctree failed
[  597.807053][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1159'.
[  599.148174][ T9486] loop9: detected capacity change from 0 to 1024
[  599.157779][ T9486] EXT4-fs: Ignoring removed mblk_io_submit option
[  599.168770][ T9486] EXT4-fs: Ignoring removed oldalloc option
[  599.197408][ T9486] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal
[  599.486594][   T52] block nbd2: Attempted send on invalid socket
[  599.492902][   T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  599.502174][ T9492] qnx6: unable to read the first superblock
[  599.510670][   T52] block nbd2: Attempted send on invalid socket
[  599.516975][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  599.526177][ T9492] qnx6: unable to read the first superblock
[  599.532128][ T9492] qnx6: unable to read the first superblock
[  600.928283][ T9482] loop6: detected capacity change from 0 to 32768
[  601.103031][ T9482] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  602.167816][   T26] audit: type=1800 audit(1737513439.037:9): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1164" name="file1" dev="loop6" ino=17058 res=0 errno=0
[  602.367913][ T5855] ocfs2: Unmounting device (7,6) on (node local)
[  603.689443][ T9500] loop9: detected capacity change from 0 to 32768
[  603.731390][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1172'.
[  605.440083][ T9548] loop9: detected capacity change from 0 to 1024
[  605.472042][ T9548] EXT4-fs: Ignoring removed mblk_io_submit option
[  605.500436][ T9548] EXT4-fs: Ignoring removed oldalloc option
[  605.518855][ T9548] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal
[  608.278994][ T9575] loop2: detected capacity change from 0 to 1024
[  608.443851][ T9575] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  608.513725][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1186'.
[  609.107616][   T26] audit: type=1804 audit(1737513445.977:10): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1185" name="/newroot/238/file1/bus" dev="loop2" ino=18 res=1 errno=0
[  609.204716][   T26] audit: type=1804 audit(1737513446.017:11): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1185" name="/newroot/238/file1/bus" dev="loop2" ino=18 res=1 errno=0
[  610.672462][ T9599] overlayfs: conflicting lowerdir path
[  611.649729][ T9604] loop8: detected capacity change from 0 to 1024
[  611.845422][ T9604] EXT4-fs: Ignoring removed mblk_io_submit option
[  612.187764][ T9604] EXT4-fs: Ignoring removed oldalloc option
[  612.251303][ T9604] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[  614.313726][ T9622] loop9: detected capacity change from 0 to 4096
[  614.496322][ T9620] loop1: detected capacity change from 0 to 1024
[  614.580753][ T9620] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  614.921165][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1201'.
[  616.283948][ T9626] loop8: detected capacity change from 0 to 32768
[  616.412145][ T9626] XFS (loop8): Mounting V5 Filesystem
[  616.431306][ T9641] loop1: detected capacity change from 0 to 512
[  616.457493][ T9641] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  616.499189][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  616.548122][ T9641] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1203: invalid indirect mapped block 4294967295 (level 0)
[  616.632365][ T9641] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1203: invalid indirect mapped block 4294967295 (level 1)
[  616.685602][ T9641] EXT4-fs (loop1): 1 orphan inode deleted
[  616.693966][ T9641] EXT4-fs (loop1): 1 truncate cleaned up
[  616.707323][ T9641] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  616.732183][ T9626] XFS (loop8): Ending clean mount
[  617.374517][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  617.381753][ T6440] XFS (loop8): Unmounting Filesystem
[  618.817042][ T9661] loop6: detected capacity change from 0 to 1024
[  618.860798][ T9661] EXT4-fs: Ignoring removed mblk_io_submit option
[  618.884956][ T9661] EXT4-fs: Ignoring removed oldalloc option
[  619.019678][ T9661] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[  620.051933][ T9669] loop9: detected capacity change from 0 to 128
[  620.087086][ T9669] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  620.269526][ T9669] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  620.497600][ T9674] loop8: detected capacity change from 0 to 4096
[  620.510683][ T9674] ntfs3: Unknown parameter 'windows_names'
[  620.880484][ T9681] loop6: detected capacity change from 0 to 1024
[  620.929155][ T9681] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  621.629976][ T9693] loop2: detected capacity change from 0 to 256
[  623.039110][ T9691] loop9: detected capacity change from 0 to 2048
[  623.905549][ T9691] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  624.147500][ T9702] loop6: detected capacity change from 0 to 1024
[  624.196729][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  624.203451][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  624.265766][ T9702] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  624.711664][ T9718] loop1: detected capacity change from 0 to 1024
[  624.739603][ T9718] EXT4-fs: Ignoring removed mblk_io_submit option
[  624.782432][ T9718] EXT4-fs: Ignoring removed oldalloc option
[  624.836838][ T9718] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  624.905534][ T9721] loop2: detected capacity change from 0 to 128
[  624.974355][ T9721] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  625.103245][ T9721] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  625.477854][ T9716] loop8: detected capacity change from 0 to 4096
[  625.776851][ T9716] ntfs3: Unknown parameter 'hide_dot_files'
[  626.479976][ T9716] Can't find ip_set type hash:ip,p
[  626.946991][ T9737] loop6: detected capacity change from 0 to 64
[  627.155408][ T9737] hfs: keylen 9474 too large
[  627.160091][ T9737] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  627.439664][ T4871] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  627.488387][ T9742] loop8: detected capacity change from 0 to 1024
[  627.523749][ T4871] EXT4-fs (loop9): Remounting filesystem read-only
[  627.547642][ T9742] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  627.581063][ T8430] EXT4-fs (loop9): unmounting filesystem.
[  627.598266][ T9737] hfs: get root inode failed
[  629.162262][ T9751] loop9: detected capacity change from 0 to 4096
[  629.822864][ T9767] vxcan1: tx address claim with dlc 1
[  630.633191][ T9770] loop6: detected capacity change from 0 to 1024
[  630.640395][ T9770] EXT4-fs: Ignoring removed mblk_io_submit option
[  630.664749][ T9770] EXT4-fs: Ignoring removed oldalloc option
[  630.681514][ T8430] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22.
[  630.702649][ T8430] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[  630.717209][ T9770] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[  630.962020][ T9774] loop9: detected capacity change from 0 to 128
[  631.025836][ T9774] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  631.134760][ T9774] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  631.908901][ T9782] loop6: detected capacity change from 0 to 512
[  632.079106][ T9782] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  632.139141][ T9782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  632.147965][ T9782] System zones: 1-12
[  632.163938][ T9782] EXT4-fs (loop6): 1 truncate cleaned up
[  632.169950][ T9782] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  633.881034][ T9789] loop8: detected capacity change from 0 to 2048
[  633.987708][ T9801] loop1: detected capacity change from 0 to 64
[  634.209926][ T9787] syz.9.1243 (9787): drop_caches: 2
[  634.228173][ T9801] hfs: keylen 9474 too large
[  634.251809][ T9789] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  634.267072][ T9801] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  634.285296][ T9801] hfs: get root inode failed
[  634.986724][ T5855] EXT4-fs (loop6): unmounting filesystem.
[  635.271781][ T9813] vxcan1: tx address claim with dlc 1
[  637.276256][ T9819] loop9: detected capacity change from 0 to 512
[  637.348373][ T9819] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  637.409169][ T9819] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #16: comm syz.9.1249: invalid indirect mapped block 4294967295 (level 0)
[  637.503733][ T9823] device syzkaller1 entered promiscuous mode
[  637.519411][ T9819] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #16: comm syz.9.1249: invalid indirect mapped block 4294967295 (level 1)
[  637.580859][ T9819] EXT4-fs (loop9): 1 orphan inode deleted
[  637.592683][ T9819] EXT4-fs (loop9): 1 truncate cleaned up
[  637.612937][ T9819] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  638.386417][ T8430] EXT4-fs (loop9): unmounting filesystem.
[  638.515570][ T9834] loop9: detected capacity change from 0 to 128
[  638.519910][ T9832] loop2: detected capacity change from 0 to 1024
[  638.542914][ T9834] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  638.573449][ T9832] EXT4-fs: Ignoring removed mblk_io_submit option
[  638.580065][ T9832] EXT4-fs: Ignoring removed oldalloc option
[  638.601812][ T9834] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  638.666716][ T9832] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  638.687854][   T35] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  638.700880][ T9836] loop6: detected capacity change from 0 to 4096
[  638.720279][ T9836] ntfs3: Unknown parameter 'hide_dot_files'
[  638.752293][   T35] EXT4-fs (loop8): Remounting filesystem read-only
[  638.853651][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  640.044060][ T9845] overlayfs: failed to decode file handle (len=2, type=2, flags=0, err=-22)
[  640.351071][ T9836] Can't find ip_set type hash:ip,p
[  640.428145][   T93] block nbd8: Attempted send on invalid socket
[  640.434789][   T93] I/O error, dev nbd8, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  640.444743][ T9852] qnx6: unable to read the first superblock
[  640.452223][   T93] block nbd8: Attempted send on invalid socket
[  640.458517][   T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  640.467746][ T9852] qnx6: unable to read the first superblock
[  640.473778][ T9852] qnx6: unable to read the first superblock
[  640.802822][ T4298] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  641.088444][ T9855] loop1: detected capacity change from 0 to 256
[  641.135064][ T4298] usb 9-1: unable to get BOS descriptor or descriptor too short
[  641.148147][ T9855] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  641.163407][ T4298] usb 9-1: not running at top speed; connect to a high speed hub
[  641.215265][ T4298] usb 9-1: config 129 has an invalid interface number: 135 but max is 0
[  641.236127][ T4298] usb 9-1: config 129 has an invalid interface number: 5 but max is 0
[  641.267603][ T4298] usb 9-1: config 129 descriptor has 1 excess byte, ignoring
[  641.280133][ T4298] usb 9-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  641.320027][ T9855] exFAT-fs (loop1): hint_cluster is invalid (17)
[  641.345601][ T4298] usb 9-1: config 129 has no interface number 0
[  641.351879][ T4298] usb 9-1: config 129 has no interface number 1
[  641.380640][ T4298] usb 9-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  641.597721][ T4298] usb 9-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  641.736065][ T4298] usb 9-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  642.001559][ T4298] usb 9-1: config 129 interface 135 has no altsetting 0
[  642.022658][ T4298] usb 9-1: config 129 interface 5 has no altsetting 0
[  642.033820][ T9855] exFAT-fs (loop1): hint_cluster is invalid (17)
[  642.065247][ T4298] usb 9-1: string descriptor 0 read error: -22
[  642.081014][ T4298] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  642.097879][ T4298] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.156043][ T4298] usb 9-1: MIDIStreaming interface descriptor not found
[  642.965965][ T9871] loop2: detected capacity change from 0 to 512
[  643.082355][ T9871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  643.093352][ T9871] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  643.483546][ T4298] usb 9-1: USB disconnect, device number 2
[  643.975011][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  644.302795][ T9886] loop1: detected capacity change from 0 to 128
[  644.310006][ T9886] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  644.370885][ T9886] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  644.404345][ T9887] loop8: detected capacity change from 0 to 2048
[  644.417691][ T9889] loop2: detected capacity change from 0 to 1024
[  644.428487][ T9869] loop9: detected capacity change from 0 to 32768
[  644.439986][ T9889] EXT4-fs: Ignoring removed mblk_io_submit option
[  644.452871][ T9889] EXT4-fs: Ignoring removed oldalloc option
[  644.476171][ T9889] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  644.500734][ T9891] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  644.694132][ T9869] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  645.519472][ T9900] netlink: 'syz.1.1269': attribute type 10 has an invalid length.
[  645.717335][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0
[  645.785472][ T9900] team0: Port device batadv0 added
[  646.150347][ T9905] loop2: detected capacity change from 0 to 1024
[  646.169807][ T9899] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  646.301655][ T9905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  646.516941][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  646.664312][ T8430] ocfs2: Unmounting device (7,9) on (node local)
[  646.753020][ T9891] NILFS (loop8): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[  646.770148][ T9891] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=2)
[  646.771181][ T9914] loop2: detected capacity change from 0 to 256
[  646.828695][ T9891] Remounting filesystem read-only
[  646.845041][ T4653] NILFS (loop8): discard dirty page: offset=4096, ino=6
[  646.852033][ T4653] NILFS (loop8): discard dirty block: blocknr=39, size=1024
[  646.896411][ T4653] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  646.932776][ T4653] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  646.945028][ T9914] FAT-fs (loop2): Directory bread(block 64) failed
[  646.951639][ T9914] FAT-fs (loop2): Directory bread(block 65) failed
[  646.962147][ T4653] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  646.976852][ T9914] FAT-fs (loop2): Directory bread(block 66) failed
[  646.982475][ T4653] NILFS (loop8): discard dirty page: offset=0, ino=2
[  646.998733][ T9914] FAT-fs (loop2): Directory bread(block 67) failed
[  647.022148][ T9914] FAT-fs (loop2): Directory bread(block 68) failed
[  647.039141][ T9914] FAT-fs (loop2): Directory bread(block 69) failed
[  647.058903][ T4653] NILFS (loop8): discard dirty block: blocknr=18, size=1024
[  647.069169][ T9914] FAT-fs (loop2): Directory bread(block 70) failed
[  647.089302][ T4653] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  647.101626][ T9914] FAT-fs (loop2): Directory bread(block 71) failed
[  647.169638][ T9914] FAT-fs (loop2): Directory bread(block 72) failed
[  647.182878][ T4653] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  647.191826][ T4653] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  647.219063][ T9914] FAT-fs (loop2): Directory bread(block 73) failed
[  647.553582][ T4653] NILFS (loop8): discard dirty page: offset=0, ino=5
[  647.741481][ T4653] NILFS (loop8): discard dirty block: blocknr=41, size=1024
[  647.917469][ T4653] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  647.989816][ T4653] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  648.020823][ T4653] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  648.031174][ T6440] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  648.040976][ T6440] NILFS (loop8): discard dirty page: offset=0, ino=6
[  648.047836][ T6440] NILFS (loop8): discard dirty block: blocknr=35, size=1024
[  648.055349][ T6440] NILFS (loop8): discard dirty block: blocknr=36, size=1024
[  648.064019][ T6440] NILFS (loop8): discard dirty block: blocknr=37, size=1024
[  648.071363][ T6440] NILFS (loop8): discard dirty block: blocknr=38, size=1024
[  648.400936][ T9929] loop8: detected capacity change from 0 to 1024
[  648.408284][ T9929] EXT4-fs: Ignoring removed mblk_io_submit option
[  648.414957][ T9929] EXT4-fs: Ignoring removed oldalloc option
[  648.415839][ T9927] loop9: detected capacity change from 0 to 128
[  648.455184][ T9929] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[  649.299482][   T52] block nbd2: Attempted send on invalid socket
[  649.505122][   T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  649.515351][ T9935] qnx6: unable to read the first superblock
[  649.522737][   T52] block nbd2: Attempted send on invalid socket
[  649.529383][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  649.538762][ T9935] qnx6: unable to read the first superblock
[  649.544808][ T9935] qnx6: unable to read the first superblock
[  649.660580][ T9927] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  649.688149][ T9927] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  651.968331][ T9943] loop9: detected capacity change from 0 to 32768
[  652.178477][ T9943] XFS (loop9): Mounting V5 Filesystem
[  653.089474][ T9952] loop8: detected capacity change from 0 to 1024
[  653.137980][ T9952] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  653.234158][ T9943] XFS (loop9): Ending clean mount
[  653.540049][ T8430] XFS (loop9): Unmounting Filesystem
[  653.551223][ T9980] loop1: detected capacity change from 0 to 128
[  653.560484][ T9980] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  653.593699][ T9980] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  655.109036][T10003] loop8: detected capacity change from 0 to 64
[  655.156466][T10003] hfs: keylen 9474 too large
[  655.166313][T10003] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  655.173471][T10003] hfs: get root inode failed
[  656.539350][T10015] overlayfs: conflicting lowerdir path
[  658.112953][ T9468] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  658.162677][ T4298] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  658.332657][ T9468] usb 10-1: Using ep0 maxpacket: 16
[  658.340010][ T9468] usb 10-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  658.365861][T10029] loop1: detected capacity change from 0 to 1024
[  658.381892][T10029] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  658.389101][ T9468] usb 10-1: config 0 interface 0 has no altsetting 0
[  658.422696][ T4298] usb 7-1: Using ep0 maxpacket: 8
[  658.432764][ T9468] usb 10-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  658.456960][ T4298] usb 7-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  658.464579][ T9468] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.548809][ T9468] usb 10-1: config 0 descriptor??
[  658.558500][ T4298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.566741][ T4298] usb 7-1: Product: syz
[  658.572344][ T4298] usb 7-1: Manufacturer: syz
[  658.580825][ T4298] usb 7-1: SerialNumber: syz
[  658.846939][ T9468] usbhid 10-1:0.0: can't add hid device: -71
[  658.860509][ T9468] usbhid: probe of 10-1:0.0 failed with error -71
[  658.937604][ T9468] usb 10-1: USB disconnect, device number 2
[  658.999954][ T4298] mxuport 7-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4)
[  659.021904][ T4298] mxuport: probe of 7-1:254.0 failed with error -5
[  659.309767][ T4298] usb 7-1: USB disconnect, device number 4
[  660.279577][T10036] loop9: detected capacity change from 0 to 128
[  660.293928][T10036] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  660.335637][T10036] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  662.659566][T10065] loop6: detected capacity change from 0 to 64
[  662.867598][T10065] hfs: keylen 9474 too large
[  662.880417][T10065] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  662.889221][T10065] hfs: get root inode failed
[  665.710401][   T52] block nbd8: Attempted send on invalid socket
[  665.882649][   T52] I/O error, dev nbd8, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  665.892026][T10080] qnx6: unable to read the first superblock
[  665.931214][   T52] block nbd8: Attempted send on invalid socket
[  665.937478][   T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  665.947045][T10080] qnx6: unable to read the first superblock
[  665.953233][T10080] qnx6: unable to read the first superblock
[  667.703141][ T9469] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  669.294348][ T9469] usb 9-1: device descriptor read/all, error -71
[  669.494462][T10095] loop8: detected capacity change from 0 to 512
[  669.516800][T10097] loop9: detected capacity change from 0 to 512
[  669.549712][T10095] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  669.550486][T10097] EXT4-fs: Ignoring removed bh option
[  669.611934][T10097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  669.796927][T10095] EXT4-fs (loop8): 1 truncate cleaned up
[  669.807905][T10095] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  670.773293][T10097] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  670.793514][T10097] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  671.216475][T10095] autofs4:pid:10095:autofs_fill_super: called with bogus options
[  671.238244][T10114] loop1: detected capacity change from 0 to 128
[  671.274985][T10111] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz.8.1324: corrupted in-inode xattr
[  671.351833][T10114] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  671.449585][T10111] EXT4-fs (loop8): Remounting filesystem read-only
[  671.449618][T10114] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  671.456418][T10111] EXT4-fs warning (device loop8): ext4_xattr_set_entry:1723: inode #15: comm syz.8.1324: unable to update i_inline_off
[  671.482918][ T8430] EXT4-fs (loop9): unmounting filesystem.
[  671.670217][T10115] loop2: detected capacity change from 0 to 2048
[  671.797915][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  671.834335][T10115] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  672.735734][   T93] block nbd9: Attempted send on invalid socket
[  672.742033][   T93] I/O error, dev nbd9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  672.841321][T10137] qnx6: unable to read the first superblock
[  672.848704][   T93] block nbd9: Attempted send on invalid socket
[  672.856783][   T93] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  672.869406][T10137] qnx6: unable to read the first superblock
[  672.875438][T10137] qnx6: unable to read the first superblock
[  673.512709][ T5948] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  673.725683][ T5948] usb 10-1: unable to get BOS descriptor or descriptor too short
[  673.740214][ T5948] usb 10-1: not running at top speed; connect to a high speed hub
[  673.746292][T10127] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  673.764999][ T5948] usb 10-1: config 129 has an invalid interface number: 135 but max is 0
[  673.786162][ T5948] usb 10-1: config 129 has an invalid interface number: 5 but max is 0
[  673.802799][ T5948] usb 10-1: config 129 descriptor has 1 excess byte, ignoring
[  673.810475][ T5948] usb 10-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  673.833838][ T5948] usb 10-1: config 129 has no interface number 0
[  673.843947][T10127] EXT4-fs (loop2): Remounting filesystem read-only
[  673.844012][ T5948] usb 10-1: config 129 has no interface number 1
[  673.874155][ T5948] usb 10-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  673.912310][T10142] device syzkaller1 entered promiscuous mode
[  673.912798][ T5948] usb 10-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  674.010306][ T5948] usb 10-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  674.058258][ T5948] usb 10-1: config 129 interface 135 has no altsetting 0
[  674.071335][ T5948] usb 10-1: config 129 interface 5 has no altsetting 0
[  674.115887][ T5948] usb 10-1: string descriptor 0 read error: -22
[  674.156886][ T5948] usb 10-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  674.180106][ T5948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.298457][ T5948] usb 10-1: MIDIStreaming interface descriptor not found
[  674.857703][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  675.359797][T10153] loop1: detected capacity change from 0 to 1024
[  675.914146][T10153] EXT4-fs: Ignoring removed mblk_io_submit option
[  675.920739][T10153] EXT4-fs: Ignoring removed oldalloc option
[  675.932661][ T5948] usb 10-1: USB disconnect, device number 3
[  676.034896][T10153] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  676.134014][ T4351] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  676.406059][T10165] loop2: detected capacity change from 0 to 64
[  676.764589][T10165] hfs: keylen 9474 too large
[  676.769326][T10165] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  676.778558][T10165] hfs: get root inode failed
[  676.993713][ T4441] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  677.156505][T10169] loop9: detected capacity change from 0 to 256
[  677.707107][T10173] loop8: detected capacity change from 0 to 1024
[  678.087601][T10173] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  678.088641][T10179] overlayfs: conflicting lowerdir path
[  678.140495][T10184] device syzkaller1 entered promiscuous mode
[  679.648486][T10193] loop1: detected capacity change from 0 to 128
[  679.727134][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  679.741819][T10193] FAT-fs (loop1): Directory bread(block 32) failed
[  679.782855][T10193] FAT-fs (loop1): Directory bread(block 33) failed
[  679.789538][T10193] FAT-fs (loop1): Directory bread(block 34) failed
[  679.827606][T10193] FAT-fs (loop1): Directory bread(block 35) failed
[  679.868844][T10193] FAT-fs (loop1): Directory bread(block 36) failed
[  680.029997][T10193] FAT-fs (loop1): Directory bread(block 37) failed
[  680.351414][T10193] FAT-fs (loop1): Directory bread(block 38) failed
[  681.361785][T10193] FAT-fs (loop1): Directory bread(block 39) failed
[  681.405559][T10193] FAT-fs (loop1): Directory bread(block 40) failed
[  681.519697][T10193] FAT-fs (loop1): Directory bread(block 41) failed
[  681.661529][T10203] loop9: detected capacity change from 0 to 1024
[  681.712163][T10203] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  682.058295][T10215] loop8: detected capacity change from 0 to 64
[  682.405368][T10215] hfs: keylen 9474 too large
[  682.410560][T10215] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  682.428692][T10215] hfs: get root inode failed
[  684.209847][T10229] overlayfs: conflicting lowerdir path
[  685.190049][   T52] block nbd1: Attempted send on invalid socket
[  685.196415][   T52] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  685.205830][T10232] qnx6: unable to read the first superblock
[  685.213320][   T52] block nbd1: Attempted send on invalid socket
[  685.219554][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  685.263682][T10232] qnx6: unable to read the first superblock
[  685.269767][T10232] qnx6: unable to read the first superblock
[  685.637088][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  685.643478][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  686.089873][T10248] loop2: detected capacity change from 0 to 2048
[  686.529524][T10252] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  689.543532][T10248] siw: device registration error -23
[  690.637369][T10252] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[  690.666705][T10252] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2)
[  690.764532][T10252] Remounting filesystem read-only
[  690.771167][ T4678] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  690.790696][ T4678] NILFS (loop2): discard dirty block: blocknr=39, size=1024
[  690.796955][T10275] loop9: detected capacity change from 0 to 64
[  690.931491][T10275] hfs: keylen 9474 too large
[  690.936402][T10275] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  690.943198][T10275] hfs: get root inode failed
[  690.952107][ T4678] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  690.968093][ T4678] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  691.213026][ T4678] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  691.385246][ T4678] NILFS (loop2): discard dirty page: offset=0, ino=2
[  691.416188][ T4678] NILFS (loop2): discard dirty block: blocknr=18, size=1024
[  691.437825][ T4678] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  691.449626][ T4678] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  691.464335][ T4678] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  691.787565][ T4678] NILFS (loop2): discard dirty page: offset=0, ino=5
[  691.805195][ T4678] NILFS (loop2): discard dirty block: blocknr=41, size=1024
[  691.817011][ T4678] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  692.630064][ T4678] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  692.652930][ T4678] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  692.703218][T10291] device syzkaller1 entered promiscuous mode
[  692.719847][ T4257] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  692.743020][ T4257] NILFS (loop2): discard dirty page: offset=0, ino=6
[  692.803063][ T4257] NILFS (loop2): discard dirty block: blocknr=35, size=1024
[  692.810379][ T4257] NILFS (loop2): discard dirty block: blocknr=36, size=1024
[  692.862794][ T4257] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  692.870162][ T4257] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  693.202835][T10295] siw: device registration error -23
[  696.957347][T10316] loop9: detected capacity change from 0 to 1024
[  697.003979][T10316] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  699.303559][T10338] device syzkaller1 entered promiscuous mode
[  699.502879][T10340] loop1: detected capacity change from 0 to 64
[  699.512418][T10340] hfs: keylen 9474 too large
[  699.518562][T10340] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  699.524533][T10340] hfs: get root inode failed
[  699.794621][T10344] siw: device registration error -23
[  701.834416][T10356] loop8: detected capacity change from 0 to 2048
[  702.754979][T10356] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  704.095605][T10380] loop2: detected capacity change from 0 to 512
[  704.158787][T10380] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  704.245197][T10380] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.1401: invalid indirect mapped block 4294967295 (level 0)
[  704.531151][T10380] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.1401: invalid indirect mapped block 4294967295 (level 1)
[  704.553918][T10380] EXT4-fs (loop2): 1 orphan inode deleted
[  704.568249][T10380] EXT4-fs (loop2): 1 truncate cleaned up
[  704.576463][T10380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  705.885155][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  706.239387][T10397] loop1: detected capacity change from 0 to 1024
[  706.265269][T10398] loop9: detected capacity change from 0 to 64
[  706.338323][T10398] hfs: keylen 9474 too large
[  706.343066][T10398] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  706.348916][T10398] hfs: get root inode failed
[  706.370877][T10397] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  706.467741][T10369] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  706.702433][T10369] EXT4-fs (loop8): Remounting filesystem read-only
[  706.787216][ T6440] EXT4-fs (loop8): unmounting filesystem.
[  708.972998][T10416] loop2: detected capacity change from 0 to 4096
[  708.980143][T10416] ntfs3: Unknown parameter 'hide_dot_files'
[  710.576440][T10438] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1419'.
[  710.593908][T10431] loop8: detected capacity change from 0 to 4096
[  711.112800][ T6440] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22.
[  711.122953][ T6440] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  715.048601][T10468] loop6: detected capacity change from 0 to 2048
[  716.045878][T10474] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  717.612318][T10482] loop2: detected capacity change from 0 to 4096
[  717.670729][T10482] ntfs3: Unknown parameter 'hide_dot_files'
[  717.722394][T10474] NILFS (loop6): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[  717.747117][T10474] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=2)
[  717.801859][T10474] Remounting filesystem read-only
[  717.831483][ T4332] NILFS (loop6): discard dirty page: offset=4096, ino=6
[  717.847529][ T4332] NILFS (loop6): discard dirty block: blocknr=39, size=1024
[  717.862520][ T4332] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  717.872495][ T4332] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  717.942463][ T4332] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  718.815680][ T4332] NILFS (loop6): discard dirty page: offset=0, ino=2
[  718.822457][ T4332] NILFS (loop6): discard dirty block: blocknr=18, size=1024
[  718.992625][ T4332] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  720.150520][ T4332] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  720.190588][ T4332] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  720.212190][ T4332] NILFS (loop6): discard dirty page: offset=0, ino=5
[  720.237379][ T4332] NILFS (loop6): discard dirty block: blocknr=41, size=1024
[  720.256543][ T4332] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  720.288995][ T4332] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  720.309535][ T4332] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024
[  720.338589][ T5855] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  720.363485][ T5855] NILFS (loop6): discard dirty page: offset=0, ino=6
[  720.380488][ T5855] NILFS (loop6): discard dirty block: blocknr=35, size=1024
[  720.404778][ T5855] NILFS (loop6): discard dirty block: blocknr=36, size=1024
[  720.414915][ T5855] NILFS (loop6): discard dirty block: blocknr=37, size=1024
[  720.432605][ T5855] NILFS (loop6): discard dirty block: blocknr=38, size=1024
[  721.590372][T10512] loop6: detected capacity change from 0 to 4096
[  723.769567][ T5855] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22.
[  723.786754][ T5855] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  724.579199][T10532] loop2: detected capacity change from 0 to 2048
[  724.681681][T10533] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  725.413454][T10537] loop1: detected capacity change from 0 to 1024
[  725.660077][T10533] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[  725.692205][T10533] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2)
[  726.371144][T10533] Remounting filesystem read-only
[  726.413889][ T4871] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  726.420991][ T4871] NILFS (loop2): discard dirty block: blocknr=39, size=1024
[  726.564193][ T4871] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.584309][ T4871] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.603622][T10537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  726.682239][ T4871] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.742017][ T4871] NILFS (loop2): discard dirty page: offset=0, ino=2
[  726.784835][ T4871] NILFS (loop2): discard dirty block: blocknr=18, size=1024
[  726.832681][ T4871] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.858842][T10554] device syzkaller1 entered promiscuous mode
[  726.885874][ T4871] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.924589][ T4871] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.972812][ T4871] NILFS (loop2): discard dirty page: offset=0, ino=5
[  727.013647][ T4871] NILFS (loop2): discard dirty block: blocknr=41, size=1024
[  727.031469][ T4871] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  727.042251][ T4871] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  727.058147][ T4871] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  727.098196][ T4257] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  727.117784][ T4257] NILFS (loop2): discard dirty page: offset=0, ino=6
[  727.137530][ T4257] NILFS (loop2): discard dirty block: blocknr=35, size=1024
[  727.144995][ T4257] NILFS (loop2): discard dirty block: blocknr=36, size=1024
[  727.152939][ T4257] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  727.160666][ T4257] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  728.098263][ T4871] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  728.121095][ T4871] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 508 with error 28
[  728.136668][ T4871] EXT4-fs (loop1): This should not happen!! Data will be lost
[  728.136668][ T4871] 
[  728.146911][ T4871] EXT4-fs (loop1): Total free blocks count 0
[  729.680803][ T4871] EXT4-fs (loop1): Free/Dirty block details
[  729.776453][ T4871] EXT4-fs (loop1): free_blocks=68451041280
[  729.933863][ T4871] EXT4-fs (loop1): dirty_blocks=512
[  729.992830][ T4871] EXT4-fs (loop1): Block reservation details
[  729.999046][ T4871] EXT4-fs (loop1): i_reserved_data_blocks=32
[  731.459012][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  731.858535][T10576] syz.6.1455 (10576): drop_caches: 2
[  731.973848][T10595] loop1: detected capacity change from 0 to 128
[  732.024932][T10595] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  732.048135][T10595] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  732.063193][T10597] device syzkaller1 entered promiscuous mode
[  734.072742][ T6051] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  736.609171][T10639] siw: device registration error -23
[  736.940346][T10641] loop9: detected capacity change from 0 to 64
[  736.996283][T10641] hfs: keylen 9474 too large
[  737.002023][T10641] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  737.009727][T10641] hfs: get root inode failed
[  738.701408][ T6051] usb 2-1: device descriptor read/all, error -71
[  738.956990][T10651] loop9: detected capacity change from 0 to 128
[  738.998833][T10654] device syzkaller1 entered promiscuous mode
[  739.005794][T10651] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  739.089290][T10651] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  739.892732][ T5953] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  740.158693][ T5953] usb 10-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  740.221934][ T5953] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.286943][ T5953] usb 10-1: config 0 descriptor??
[  741.887208][T10659] loop9: detected capacity change from 0 to 4096
[  742.026597][ T5953] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  742.043791][ T5953] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  742.069901][ T5953] asix: probe of 10-1:0.0 failed with error -71
[  742.092426][ T5953] usb 10-1: USB disconnect, device number 4
[  742.444912][T10682] siw: device registration error -23
[  744.166321][T10688] loop2: detected capacity change from 0 to 64
[  744.180645][T10692] loop1: detected capacity change from 0 to 128
[  744.206451][T10690] device syzkaller1 entered promiscuous mode
[  744.345108][T10692] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  744.364175][T10688] hfs: keylen 9474 too large
[  744.368925][T10688] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  744.679347][T10692] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  746.143977][T10688] hfs: get root inode failed
[  746.542716][ T4239] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  746.874990][ T4239] usb 7-1: unable to get BOS descriptor or descriptor too short
[  746.886077][ T4239] usb 7-1: not running at top speed; connect to a high speed hub
[  746.901706][ T4239] usb 7-1: config 129 has an invalid interface number: 135 but max is 0
[  746.967852][ T4239] usb 7-1: config 129 has an invalid interface number: 5 but max is 0
[  746.977828][ T4239] usb 7-1: config 129 descriptor has 1 excess byte, ignoring
[  747.803141][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  747.809846][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  747.918141][ T4239] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  747.927529][ T4239] usb 7-1: config 129 has no interface number 0
[  747.934078][ T4239] usb 7-1: config 129 has no interface number 1
[  747.940621][ T4239] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  747.957772][ T4239] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  747.970982][ T4239] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  747.991623][ T4239] usb 7-1: config 129 interface 135 has no altsetting 0
[  748.044095][ T4239] usb 7-1: config 129 interface 5 has no altsetting 0
[  748.649623][ T4239] usb 7-1: string descriptor 0 read error: -22
[  748.674339][ T4239] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  748.729248][ T4239] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.752183][T10726] loop2: detected capacity change from 0 to 1024
[  748.972741][ T4239] usb 7-1: can't set config #129, error -71
[  749.092722][ T4239] usb 7-1: USB disconnect, device number 5
[  749.863505][ T4653] hfsplus: b-tree write err: -5, ino 4
[  750.840119][T10737] loop6: detected capacity change from 0 to 128
[  751.019068][T10737] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  751.063788][T10737] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  751.982819][T10744] loop2: detected capacity change from 0 to 256
[  752.020271][T10735] loop8: detected capacity change from 0 to 1024
[  752.081020][T10735] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  752.450610][T10749] loop9: detected capacity change from 0 to 64
[  752.460201][T10749] hfs: keylen 9474 too large
[  752.465343][T10749] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  752.472265][T10749] hfs: get root inode failed
[  754.959921][T10765] loop2: detected capacity change from 0 to 256
[  759.184581][T10790] loop2: detected capacity change from 0 to 128
[  759.191639][T10790] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  759.242363][T10790] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  759.406491][T10802] loop1: detected capacity change from 0 to 2048
[  759.507378][T10802] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=26504, location=26504
[  759.579505][T10802] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  759.631983][T10799] loop8: detected capacity change from 0 to 64
[  759.842808][T10799] hfs: keylen 9474 too large
[  759.851151][T10799] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  759.858719][T10799] hfs: get root inode failed
[  761.672708][ T6051] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  761.885093][ T6051] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  761.916587][ T6051] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.332716][ T5948] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  762.385475][    C0] raw-gadget.1 gadget.6: ignoring, device is not running
[  762.543373][ T5948] usb 7-1: device descriptor read/64, error -32
[  762.811864][ T6051] usb 9-1: config 0 descriptor??
[  762.872652][ T5948] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  763.091919][ T5948] usb 7-1: unable to get BOS descriptor or descriptor too short
[  763.120153][ T5948] usb 7-1: not running at top speed; connect to a high speed hub
[  763.159638][ T5948] usb 7-1: config 129 has an invalid interface number: 135 but max is 0
[  763.197529][ T5948] usb 7-1: config 129 has an invalid interface number: 5 but max is 0
[  763.215441][ T5948] usb 7-1: config 129 descriptor has 1 excess byte, ignoring
[  763.239430][ T5948] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  763.268135][ T5948] usb 7-1: config 129 has no interface number 0
[  763.287639][ T5948] usb 7-1: config 129 has no interface number 1
[  763.293674][ T6051] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0
[  763.307502][ T5948] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  763.359373][ T5948] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  763.399550][ T5948] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  763.450435][ T5948] usb 7-1: config 129 interface 135 has no altsetting 0
[  763.474774][ T5948] usb 7-1: config 129 interface 5 has no altsetting 0
[  763.497969][ T5948] usb 7-1: string descriptor 0 read error: -22
[  763.507736][ T6051] usb 9-1: USB disconnect, device number 5
[  763.529785][ T5948] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  763.571639][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.604157][ T5948] usb 7-1: MIDIStreaming interface descriptor not found
[  765.182743][ T6047] usb 7-1: USB disconnect, device number 7
[  765.350836][T10846] loop9: detected capacity change from 0 to 512
[  765.394114][T10846] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  765.452035][T10849] loop8: detected capacity change from 0 to 128
[  765.520776][T10846] EXT4-fs (loop9): 1 truncate cleaned up
[  765.543468][T10846] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  765.549240][T10849] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  765.628499][T10849] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  765.725902][T10846] ==================================================================
[  765.734030][T10846] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ca/0x1f30
[  765.741821][T10846] Read of size 18446744073709551572 at addr ffff888056989850 by task syz.9.1534/10846
[  765.751387][T10846] 
[  765.753749][T10846] CPU: 0 PID: 10846 Comm: syz.9.1534 Not tainted 6.1.126-syzkaller #0
[  765.761930][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  765.772015][T10846] Call Trace:
[  765.775314][T10846]  <TASK>
[  765.778273][T10846]  dump_stack_lvl+0x1e3/0x2cb
[  765.783003][T10846]  ? nf_tcp_handle_invalid+0x642/0x642
[  765.788507][T10846]  ? panic+0x764/0x764
[  765.792611][T10846]  ? _printk+0xd1/0x111
[  765.796797][T10846]  ? __virt_addr_valid+0x17f/0x530
[  765.801941][T10846]  ? __virt_addr_valid+0x17f/0x530
[  765.807133][T10846]  print_report+0x15f/0x4f0
[  765.811665][T10846]  ? __virt_addr_valid+0x17f/0x530
[  765.816809][T10846]  ? __virt_addr_valid+0x17f/0x530
[  765.821945][T10846]  ? __virt_addr_valid+0x45b/0x530
[  765.827083][T10846]  ? __phys_addr+0xb6/0x170
[  765.831616][T10846]  ? ext4_xattr_set_entry+0x8ca/0x1f30
[  765.837102][T10846]  kasan_report+0x136/0x160
[  765.841629][T10846]  ? __x64_sys_unlink+0x45/0x50
[  765.846505][T10846]  ? ext4_xattr_set_entry+0x8ca/0x1f30
[  765.851991][T10846]  ? ext4_xattr_set_entry+0x8ca/0x1f30
[  765.857495][T10846]  kasan_check_range+0x27f/0x290
[  765.862472][T10846]  ? ext4_xattr_set_entry+0x8ca/0x1f30
[  765.867964][T10846]  memmove+0x25/0x60
[  765.871903][T10846]  ext4_xattr_set_entry+0x8ca/0x1f30
[  765.877214][T10846]  ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0
[  765.883675][T10846]  ? ext4_xattr_block_set+0x884/0x3920
[  765.889172][T10846]  ? kmemdup+0x41/0x60
[  765.893268][T10846]  ? memcpy+0x3c/0x60
[  765.897276][T10846]  ext4_xattr_block_set+0xa58/0x3920
[  765.902586][T10846]  ? __getblk_gfp+0x50/0xa20
[  765.907196][T10846]  ? _raw_spin_unlock+0x24/0x40
[  765.912099][T10846]  ? ext4_xattr_block_find+0x510/0x510
[  765.917590][T10846]  ? ext4_xattr_block_find+0x468/0x510
[  765.923084][T10846]  ext4_expand_extra_isize_ea+0x10d5/0x1bb0
[  765.929037][T10846]  ? ext4_xattr_set+0x3d0/0x3d0
[  765.933917][T10846]  ? rwsem_write_trylock+0x166/0x210
[  765.939244][T10846]  ? clear_nonspinnable+0x60/0x60
[  765.944304][T10846]  ? ext4_reserve_inode_write+0x2b3/0x360
[  765.950062][T10846]  ? dquot_initialize_needed+0x128/0x320
[  765.955735][T10846]  __ext4_expand_extra_isize+0x2f7/0x3d0
[  765.961403][T10846]  __ext4_mark_inode_dirty+0x54f/0x920
[  765.966899][T10846]  ? ext4_blocks_for_truncate+0x270/0x270
[  765.972656][T10846]  ? current_time+0x1ba/0x300
[  765.977392][T10846]  ? atime_needs_update+0x7b0/0x7b0
[  765.982621][T10846]  __ext4_unlink+0x6ed/0xba0
[  765.987298][T10846]  ? __ext4_read_dirblock+0x890/0x890
[  765.992707][T10846]  ? rwsem_write_trylock+0x166/0x210
[  765.998020][T10846]  ? inode_permission+0xf7/0x450
[  766.002988][T10846]  ? clear_nonspinnable+0x60/0x60
[  766.008060][T10846]  ext4_unlink+0x1d5/0x670
[  766.012505][T10846]  vfs_unlink+0x359/0x5f0
[  766.016885][T10846]  do_unlinkat+0x4a5/0x820
[  766.021337][T10846]  ? fsnotify_link_count+0xf0/0xf0
[  766.026478][T10846]  __x64_sys_unlink+0x45/0x50
[  766.031180][T10846]  do_syscall_64+0x3b/0xb0
[  766.035667][T10846]  ? clear_bhb_loop+0x45/0xa0
[  766.040380][T10846]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  766.046281][T10846] RIP: 0033:0x7fdd90f85d29
[  766.050697][T10846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  766.070299][T10846] RSP: 002b:00007fdd91d48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  766.078709][T10846] RAX: ffffffffffffffda RBX: 00007fdd91175fa0 RCX: 00007fdd90f85d29
[  766.085509][   T52] block nbd2: Attempted send on invalid socket
[  766.086665][T10846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[  766.093457][   T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  766.100761][T10846] RBP: 00007fdd91001b08 R08: 0000000000000000 R09: 0000000000000000
[  766.100779][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  766.100793][T10846] R13: 0000000000000000 R14: 00007fdd91175fa0 R15: 00007fff180749e8
[  766.111823][T10856] qnx6: unable to read the first superblock
[  766.117848][T10846]  </TASK>
[  766.117860][T10846] 
[  766.117864][T10846] Allocated by task 10846:
[  766.117875][T10846]  kasan_set_track+0x4b/0x70
[  766.117898][T10846]  __kasan_kmalloc+0x97/0xb0
[  766.126425][   T52] block nbd2: Attempted send on invalid socket
[  766.133836][T10846]  __kmalloc_node_track_caller+0xb1/0x220
[  766.133877][T10846]  kmemdup+0x26/0x60
[  766.133895][T10846]  ext4_xattr_block_set+0x884/0x3920
[  766.133914][T10846]  ext4_expand_extra_isize_ea+0x10d5/0x1bb0
[  766.133934][T10846]  __ext4_expand_extra_isize+0x2f7/0x3d0
[  766.133960][T10846]  __ext4_mark_inode_dirty+0x54f/0x920
[  766.133983][T10846]  __ext4_unlink+0x6ed/0xba0
[  766.134005][T10846]  ext4_unlink+0x1d5/0x670
[  766.134037][T10846]  vfs_unlink+0x359/0x5f0
[  766.134058][T10846]  do_unlinkat+0x4a5/0x820
[  766.134079][T10846]  __x64_sys_unlink+0x45/0x50
[  766.134102][T10846]  do_syscall_64+0x3b/0xb0
[  766.145323][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  766.149724][T10846]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  766.149761][T10846] 
[  766.149766][T10846] Last potentially related work creation:
[  766.149773][T10846]  kasan_save_stack+0x3b/0x60
[  766.154484][T10856] qnx6: unable to read the first superblock
[  766.158915][T10846]  __kasan_record_aux_stack+0xb0/0xc0
[  766.158943][T10846]  kvfree_call_rcu+0x116/0x8c0
[  766.158963][T10846]  neigh_periodic_work+0x3c5/0xd40
[  766.158986][T10846]  process_one_work+0x8a9/0x11d0
[  766.159010][T10846]  worker_thread+0xa47/0x1200
[  766.165182][T10856] qnx6: unable to read the first superblock
[  766.170844][T10846]  kthread+0x28d/0x320
[  766.291837][T10846]  ret_from_fork+0x1f/0x30
[  766.296285][T10846] 
[  766.298607][T10846] The buggy address belongs to the object at ffff888056989800
[  766.298607][T10846]  which belongs to the cache kmalloc-1k of size 1024
[  766.312673][T10846] The buggy address is located 80 bytes inside of
[  766.312673][T10846]  1024-byte region [ffff888056989800, ffff888056989c00)
[  766.325963][T10846] 
[  766.328280][T10846] The buggy address belongs to the physical page:
[  766.334698][T10846] page:ffffea00015a6200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56988
[  766.344850][T10846] head:ffffea00015a6200 order:3 compound_mapcount:0 compound_pincount:0
[  766.353168][T10846] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  766.361155][T10846] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017c41dc0
[  766.369734][T10846] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  766.378307][T10846] page dumped because: kasan: bad access detected
[  766.384715][T10846] page_owner tracks the page as allocated
[  766.390420][T10846] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4301, tgid 4301 (kworker/1:6), ts 73096226046, free_ts 20748298274
[  766.411086][T10846]  post_alloc_hook+0x18d/0x1b0
[  766.415850][T10846]  get_page_from_freelist+0x3731/0x38d0
[  766.421394][T10846]  __alloc_pages+0x28d/0x770
[  766.426006][T10846]  alloc_slab_page+0x6a/0x150
[  766.430686][T10846]  new_slab+0x84/0x2d0
[  766.434760][T10846]  ___slab_alloc+0xc20/0x1270
[  766.439437][T10846]  __kmem_cache_alloc_node+0x19f/0x260
[  766.444894][T10846]  __kmalloc_node_track_caller+0xa0/0x220
[  766.450613][T10846]  __alloc_skb+0x135/0x670
[  766.455031][T10846]  ndisc_alloc_skb+0xee/0x2c0
[  766.459704][T10846]  ndisc_send_rs+0x269/0x6a0
[  766.464289][T10846]  addrconf_dad_completed+0x788/0xcb0
[  766.469654][T10846]  addrconf_dad_work+0xd8e/0x16b0
[  766.474684][T10846]  process_one_work+0x8a9/0x11d0
[  766.479621][T10846]  worker_thread+0xa47/0x1200
[  766.484301][T10846]  kthread+0x28d/0x320
[  766.488373][T10846] page last free stack trace:
[  766.493219][T10846]  free_unref_page_prepare+0x12a6/0x15b0
[  766.498860][T10846]  free_unref_page+0x33/0x3e0
[  766.503533][T10846]  free_contig_range+0x9a/0x150
[  766.508392][T10846]  destroy_args+0xfe/0x997
[  766.512819][T10846]  debug_vm_pgtable+0x416/0x46b
[  766.517668][T10846]  do_one_initcall+0x265/0x8f0
[  766.522430][T10846]  do_initcall_level+0x157/0x207
[  766.527370][T10846]  do_initcalls+0x49/0x86
[  766.531719][T10846]  kernel_init_freeable+0x45c/0x60f
[  766.536920][T10846]  kernel_init+0x19/0x290
[  766.541254][T10846]  ret_from_fork+0x1f/0x30
[  766.545671][T10846] 
[  766.547992][T10846] Memory state around the buggy address:
[  766.553614][T10846]  ffff888056989700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  766.561670][T10846]  ffff888056989780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  766.569726][T10846] >ffff888056989800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.577789][T10846]                                                  ^
[  766.584487][T10846]  ffff888056989880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.592549][T10846]  ffff888056989900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.600617][T10846] ==================================================================
[  766.660921][T10846] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  766.668166][T10846] CPU: 1 PID: 10846 Comm: syz.9.1534 Not tainted 6.1.126-syzkaller #0
[  766.676438][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  766.686515][T10846] Call Trace:
[  766.689808][T10846]  <TASK>
[  766.692758][T10846]  dump_stack_lvl+0x1e3/0x2cb
[  766.697481][T10846]  ? nf_tcp_handle_invalid+0x642/0x642
[  766.702982][T10846]  ? panic+0x764/0x764
[  766.707081][T10846]  ? preempt_schedule_common+0xa6/0xd0
[  766.712568][T10846]  ? vscnprintf+0x59/0x80
[  766.716926][T10846]  panic+0x318/0x764
[  766.720852][T10846]  ? check_panic_on_warn+0x1d/0xa0
[  766.726029][T10846]  ? memcpy_page_flushcache+0xfc/0xfc
[  766.731427][T10846]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  766.737412][T10846]  ? _raw_spin_unlock+0x40/0x40
[  766.742309][T10846]  check_panic_on_warn+0x7e/0xa0
[  766.747258][T10846]  ? ext4_xattr_set_entry+0x8ca/0x1f30
[  766.752723][T10846]  end_report+0x66/0x110
[  766.756986][T10846]  kasan_report+0x143/0x160
[  766.761494][T10846]  ? __x64_sys_unlink+0x45/0x50
[  766.766356][T10846]  ? ext4_xattr_set_entry+0x8ca/0x1f30
[  766.771837][T10846]  ? ext4_xattr_set_entry+0x8ca/0x1f30
[  766.777297][T10846]  kasan_check_range+0x27f/0x290
[  766.782233][T10846]  ? ext4_xattr_set_entry+0x8ca/0x1f30
[  766.787688][T10846]  memmove+0x25/0x60
[  766.791600][T10846]  ext4_xattr_set_entry+0x8ca/0x1f30
[  766.796974][T10846]  ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0
[  766.803386][T10846]  ? ext4_xattr_block_set+0x884/0x3920
[  766.808867][T10846]  ? kmemdup+0x41/0x60
[  766.812948][T10846]  ? memcpy+0x3c/0x60
[  766.816949][T10846]  ext4_xattr_block_set+0xa58/0x3920
[  766.822236][T10846]  ? __getblk_gfp+0x50/0xa20
[  766.826825][T10846]  ? _raw_spin_unlock+0x24/0x40
[  766.831683][T10846]  ? ext4_xattr_block_find+0x510/0x510
[  766.837145][T10846]  ? ext4_xattr_block_find+0x468/0x510
[  766.842610][T10846]  ext4_expand_extra_isize_ea+0x10d5/0x1bb0
[  766.848518][T10846]  ? ext4_xattr_set+0x3d0/0x3d0
[  766.853369][T10846]  ? rwsem_write_trylock+0x166/0x210
[  766.858661][T10846]  ? clear_nonspinnable+0x60/0x60
[  766.863704][T10846]  ? ext4_reserve_inode_write+0x2b3/0x360
[  766.869430][T10846]  ? dquot_initialize_needed+0x128/0x320
[  766.875070][T10846]  __ext4_expand_extra_isize+0x2f7/0x3d0
[  766.880713][T10846]  __ext4_mark_inode_dirty+0x54f/0x920
[  766.886186][T10846]  ? ext4_blocks_for_truncate+0x270/0x270
[  766.891912][T10846]  ? current_time+0x1ba/0x300
[  766.896596][T10846]  ? atime_needs_update+0x7b0/0x7b0
[  766.901805][T10846]  __ext4_unlink+0x6ed/0xba0
[  766.906417][T10846]  ? __ext4_read_dirblock+0x890/0x890
[  766.911793][T10846]  ? rwsem_write_trylock+0x166/0x210
[  766.917086][T10846]  ? inode_permission+0xf7/0x450
[  766.922023][T10846]  ? clear_nonspinnable+0x60/0x60
[  766.927064][T10846]  ext4_unlink+0x1d5/0x670
[  766.931483][T10846]  vfs_unlink+0x359/0x5f0
[  766.935821][T10846]  do_unlinkat+0x4a5/0x820
[  766.940255][T10846]  ? fsnotify_link_count+0xf0/0xf0
[  766.945389][T10846]  __x64_sys_unlink+0x45/0x50
[  766.950081][T10846]  do_syscall_64+0x3b/0xb0
[  766.954531][T10846]  ? clear_bhb_loop+0x45/0xa0
[  766.959213][T10846]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  766.965140][T10846] RIP: 0033:0x7fdd90f85d29
[  766.969574][T10846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  766.989184][T10846] RSP: 002b:00007fdd91d48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  766.997605][T10846] RAX: ffffffffffffffda RBX: 00007fdd91175fa0 RCX: 00007fdd90f85d29
[  767.005580][T10846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[  767.013551][T10846] RBP: 00007fdd91001b08 R08: 0000000000000000 R09: 0000000000000000
[  767.021518][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  767.029505][T10846] R13: 0000000000000000 R14: 00007fdd91175fa0 R15: 00007fff180749e8
[  767.037482][T10846]  </TASK>
[  767.040815][T10846] Kernel Offset: disabled
[  767.045137][T10846] Rebooting in 86400 seconds..