last executing test programs:

37.25463383s ago: executing program 1 (id=865):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000c500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x29, 0x0, 0x5000)
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r10 = dup(r9)
ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000080)=ANY=[])
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r11}, 0x38)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f00000000c0)=0x101f, 0x12)
ioctl$SIOCSIFHWADDR(r12, 0x4030582b, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)

36.479354736s ago: executing program 1 (id=868):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x4}})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0xefc1}, &(0x7f0000000380), &(0x7f00000001c0))
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r5 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="c6", 0x33fe0}], 0x1}, 0xc0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
recvmsg(r7, 0x0, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r8, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffe}}}}}}}, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)

32.963152565s ago: executing program 1 (id=870):
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
prctl$PR_GET_DUMPABLE(0x3)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$vhost_msg_v2(r3, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000a00)=""/4096, 0x1000, 0x0}}, 0x16)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000001bc0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000480)="88ffffff0000", 0x0, 0x0, 0x0, 0x0, 0x0})
syz_emit_vhci(0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc9}}}, 0x6)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c80010000c0001000a05"], 0x15)
r4 = socket$inet(0x2, 0x3, 0x6)
setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4)
shutdown(r4, 0x0)
r5 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_setup(0xa94, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0)
r8 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r8, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000440)="5ff17db605ade75363a0530733408850aaf311cbe0", 0x7ffff000}, {&(0x7f0000000600)="8882d1dc72424e1fd8dd4b9a691db9a3f2d539b0ed59d1d1b67695f356653c71087b5fe7c96758a0f47f379517352fe067a0c327617260dcd520", 0x3a}, {&(0x7f0000002c40)='E', 0x1}], 0x3}}], 0x1, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[], 0x148}}, 0x0)
r9 = accept4$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x800)
accept4(r9, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000140)=0x80, 0x0)
syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcd}, "d8ea7d6d0cfac318a27c89f759199ef723cdd32a846bc7db6a0bbef2c6bc7cf5fa718c92b3e5ad237ec8917e121c1eca5ca1cf79a1eb6bda6902dcf4fd2f08fc91765d603811de77ded6e9ac7bd126998bc96e435f92464f6d36262aa6a9bb931bfc724bf65aa846d14a787a837719408d8ae81ee0457a796fe4541d348b663be9a5756251e47dd096f5111c9e9cddeb95c4023abbc4c8d21e1aff151d23c51976e914548231da751633dce5b4abc67ca79e967bc236f06f86f987ebaad7b595c177aefdabb99c8f34bb2144c5"}, 0xd1)
sendmmsg$unix(r8, &(0x7f0000006780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[], 0x90}}], 0x1, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x10000f, 0x74, 0x0, {r0}}, 0x20)

32.286465263s ago: executing program 1 (id=872):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4a902499991171d4256f78cd297849b390f518"})
syz_read_part_table(0x105a, &(0x7f0000002100)="$eJzsz8Fpw0AQBdC/kjZiu9AxRSRVhLSQNqIkBFyLD27DvbgJGRv5oAKMMbx3G/58hgkP9ZJk6pIlrb/Mf4fxrSVtjWuZb5uvw6bY16TLaZz+f2ryfg13yfG3pGTIV7J8Jx+tr2VtjEnm7fXP/Z3fAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICncA4AAP//3nMLeQ==")
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
syz_emit_vhci(&(0x7f0000002dc0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "8159f0e5c0780ef0b120b450683339b3"}}}, 0x1a)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000080))

31.14635637s ago: executing program 1 (id=873):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000140)='./file0\x00', 0x810, &(0x7f0000004800)=ANY=[@ANYBLOB='dmask=00000000000000000000007,utf8,iocharset=iso8859-1,allow_utime=00000000000000000002001,fmask=00000000000000000000002,allow_utime=00000000000000000000005,umask=00000000000000000000001,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX, @ANYRESHEX], 0x1, 0x14fe, &(0x7f0000002a40)="$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")
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='exfat\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f00000000c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@user_xattr}, {@grpjquota_path}, {@bh}, {@prjquota}, {@debug}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x409e}}, {@quota}]}, 0xff, 0x468, &(0x7f0000000780)="$eJzs289vFFUcAPDvzG4BQdmKiIIgVTRp/NHSgsrBxGg08aCJiR7wWNtCkIUaWhMhjVZj8GhIvBuPJv4FnjwZ9WTiFY8mhoQoMQG9uGZ2Z0q77JbWbtlN9/NJBt6befve+3bmzb6dtxtA3xrK/kki7o6IyxFRaWSXFxhq/Hfj2vzk39fmJ5Oo1d78I6mXu35tfrKWK163I69zOI1IP03yRmJgabWz5y+cnqhWp8/l+dG5M++Nzp6/8PSpMxMnp09Onx0/duzokbHnnh1/pkWvf7u01jiz+K7v+3Bm/95X3770+uTxS+/8+E3W3z0HGsezONZa5+0MZYH/2fjbNB97vNONddm/tZtxJuVu94bVKkVEOR+cl6MSpbh58irxyidd7RywobJ79tb2hxdqwCaWRLd7AHRH8Uafff4ttjs09egJV19sfADK4r6Rb40j5UjzMgMb2P5QRBxf+OfLbIum5xC1Fs8NAADW67ts/vNUq/lfGnuWlNuZrw0NRsS9EbErIu6LiN0RcX9EvewDEfHgGtsfasrfOv9Mr/yvwFYpm/89n69tLZ//FbO/GCzluXvq8Q8kJ05Vpw/nf5PhGNia5cdaVV5U8fIvn7drf+n8L9uy9ou5YF7JlXLjAd22Ys/UxNxEpyalVz+O2FduFX+yuBKQRMTeiNi3tqp3FolTT3y9v12h28e/gg6sM9W+KiqZX4im+AvJyuuTo9uiOn14tLgqbvXTzxffaNf+uuLvgOz8b19+/TeVqPyVLF2vnV088MJq27j462dtP1OWV3/9L8qu/y3JW/U13S35vg8m5ubOjUVsSV6r55ftH7/52iJflM/iHz7Uevzvyl+Txf9QRGQX8YGIeDgiDubn7pGIeDQiDq0Q/w8vPfZuu2O9cP6nWt7/Fq//weXnf+2J0unvv23X/uruf0frqeF8T/3+dxvtu1PcRpuuZgAAANjE0vp345N0ZDGdpiMjje/w747taXVmdu7JEzPvn51qfId+MAbS4klXZcnz0LFkIa+xkR/PnxUXx4/kz42/KN1Vz49MzlSnuhw79LsdbcZ/5vdSt3sHbDi/14L+1Tz+0y71A7jzvP9D/zL+oX8Z/9C/Wo3/j5ry1gJgM6pVut0DoHvM/6F/Gf/Qv4x/6Evr+V3/RiXKK/x6X6JXEpH2RDd6JnGwh0ZTuQOju8s3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA75LwAA///foPki")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()

29.786763066s ago: executing program 1 (id=875):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7)
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecomp\a\x00e,decompnsd=\x00'/36, @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000080018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000000000000000000000000000018000000000000000000000000000000bf91000000000000b7020000010000008500000000000000"], 0x0}, 0x90)
syz_emit_ethernet(0x8a, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x690580, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r7 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000))
write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250)

16.172119244s ago: executing program 2 (id=892):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x5, 0x9fd, 0x84, 0x1}, 0x48)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@user_xattr}, {@jqfmt_vfsv1}, {@grpid}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x46f, &(0x7f0000000580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0xaa9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r2, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000040)=0xa3)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
bind$packet(r6, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1}}, 0xe8)
sendmmsg$inet6(r7, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000140007800800114000006bf767b4e06fb0542c71c31e575687000005001500000000000500010007000000050005000a00000005000400000000000900020073797a3100"], 0x58}}, 0x0)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

15.108105004s ago: executing program 0 (id=893):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080))

14.995847194s ago: executing program 4 (id=894):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11}, 0x24}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = timerfd_create(0x0, 0x0)
read(r2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x805, 0x0, 0xfd, 0x0, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', <r3=>0x0})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffff9, '\x00', r3, r4, 0x4, 0x5, 0x2}, 0x48)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="8000b600050002"], 0x30}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
chdir(&(0x7f00000003c0)='./bus\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

13.831118563s ago: executing program 4 (id=895):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x4}})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0xefc1}, &(0x7f0000000380), &(0x7f00000001c0))
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r5 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="c6", 0x33fe0}], 0x1}, 0xc0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
recvmsg(r7, 0x0, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r8, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffe}}}}}}}, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)

13.830174243s ago: executing program 0 (id=904):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x5, 0x9fd, 0x84, 0x1}, 0x48)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@user_xattr}, {@jqfmt_vfsv1}, {@grpid}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x46f, &(0x7f0000000580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0xaa9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r2, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000040)=0xa3)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
bind$packet(r6, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1}}, 0xe8)
sendmmsg$inet6(r7, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000140007800800114000006bf767b4e06fb0542c71c31e575687000005001500000000000500010007000000050005000a00000005000400000000000900020073797a3100"], 0x58}}, 0x0)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

13.829917823s ago: executing program 2 (id=896):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r7, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
sendmsg$nl_generic(r4, 0x0, 0x0)

13.829693263s ago: executing program 3 (id=897):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e000000620a00ff0000000069006419000000009500000000000000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
setpgid(r2, r2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000040))
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f00000000c0)=""/212, &(0x7f00000001c0)=0xd4)
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8)
open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x63b}}, 0x3c3601)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002780)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5f99}, 0x50)

12.094811151s ago: executing program 2 (id=898):
syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3, 0x1bf, &(0x7f0000000680)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xb, &(0x7f0000000480)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}, @alu={0x7, 0x0, 0x0, 0xb, 0x8, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r2}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001f85236ccc4ce75fa61b6d6978d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e501000000000000000007000000", @ANYRES32], 0x38}}, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0))
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x9)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x7f)
syz_usb_control_io(r4, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001a00)='mm_page_alloc\x00', r7}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x2400c806, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
write$binfmt_elf64(r6, &(0x7f00000012c0)=ANY=[], 0x678)

11.947730404s ago: executing program 3 (id=899):
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
prctl$PR_GET_DUMPABLE(0x3)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$vhost_msg_v2(r3, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000a00)=""/4096, 0x1000, 0x0}}, 0x16)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000001bc0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000480)="88ffffff0000", 0x0, 0x0, 0x0, 0x0, 0x0})
syz_emit_vhci(0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc9}}}, 0x6)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c80010000c0001000a051800030001"], 0x15)
r4 = socket$inet(0x2, 0x3, 0x6)
setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4)
shutdown(r4, 0x0)
r5 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_setup(0xa94, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0)
r8 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r8, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000440)="5ff17db605ade75363a0530733408850aaf311cbe0", 0x7ffff000}, {&(0x7f0000000600)="8882d1dc72424e1fd8dd4b9a691db9a3f2d539b0ed59d1d1b67695f356653c71087b5fe7c96758a0f47f379517352fe067a0c327617260dcd520", 0x3a}, {&(0x7f0000002c40)='E', 0x1}], 0x3}}], 0x1, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[], 0x148}}, 0x0)
r9 = accept4$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x800)
accept4(r9, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000140)=0x80, 0x0)
syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcd}, "d8ea7d6d0cfac318a27c89f759199ef723cdd32a846bc7db6a0bbef2c6bc7cf5fa718c92b3e5ad237ec8917e121c1eca5ca1cf79a1eb6bda6902dcf4fd2f08fc91765d603811de77ded6e9ac7bd126998bc96e435f92464f6d36262aa6a9bb931bfc724bf65aa846d14a787a837719408d8ae81ee0457a796fe4541d348b663be9a5756251e47dd096f5111c9e9cddeb95c4023abbc4c8d21e1aff151d23c51976e914548231da751633dce5b4abc67ca79e967bc236f06f86f987ebaad7b595c177aefdabb99c8f34bb2144c5"}, 0xd1)
sendmmsg$unix(r8, &(0x7f0000006780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[], 0x90}}], 0x1, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x10000f, 0x74, 0x0, {r0}}, 0x20)

11.115441884s ago: executing program 0 (id=900):
pipe2(&(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
syz_emit_ethernet(0x17a, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="84000000907800000007ea7022d662fe06e2d4c3d9080a0000000000000000030300051200000000000000000000000000000000fe0df989a7f25e2d8af5a9f5e31312036e02bd128bbd353b424883d1837842007a4ce702e72adac200e7ab3293dc50ecbd19cde7cc7757768067ef46be4ca3f38880d8ecb8d38a4c314a8f94320e4a5a019eae9b7bbbacb8f0193d1fd7d4482497c9ecc148502f16cb8eb5c1cbdaa54a456d9236e58e1ec25202efec5365c7009052eef06b37a0fcf717d10bd65997793f58533216124b62a16f7cd2a70a767445223014f76f11f47cda825d4f5dd21e4245a7a182db5944049e3021de344ce0368ac1716be97ffa48697eb10481b5f06e8750769d960de67bb7de47493b042ec0ecf7ecc702f4096604405067ed15c457c7417bc19eaa6b0a76b1733b4a884288311e7c710edafd1406deaa69076c3a34b3f100000000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x18)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000400)=""/102391, 0x18ff7}], 0x1, 0x0, 0x5)
ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
r5 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f00000002c0), 0x4)
sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000001c0)=@phonet={0x23, 0x0, 0x0, 0x3f}, 0x80, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d031, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
fgetxattr(r6, &(0x7f0000000100)=@known='system.advise\x00', &(0x7f0000000340)=""/109, 0x6d)
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f000090a000/0x1000)=nil, 0x800000})
sendto$inet6(r1, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

6.70736574s ago: executing program 3 (id=901):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x5, 0x9fd, 0x84, 0x1}, 0x48)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@user_xattr}, {@jqfmt_vfsv1}, {@grpid}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x46f, &(0x7f0000000580)="$eJzs289vFFUcAPDvbLvlt62IP/ihVtHY+KOlBZWDF40mXExM9IDHWgpBCjW0JkKIVGPwaPgL1KOJf4EnvRj1pPGqiRcTY0IMF9GDGTO7M7C0u+v+ahfczycZeG/mTd/7zszbfTNvJ4CBNZ79k0Rsj4ifRiJGq9mbC4xX/7t29cLcX1cvzCWRpq/+kVTK/Xn1wlxRtNhvW56ZKEWUPkhib516l86dPzW7sDB/Ns9PLZ9+a2rp3PmnTp6ePTF/Yv7MzOHDhw5OP/vMzNM9iXNH1tY97y7u233k9csvzx29/Ma3n2frt+fba+OoGuu6zvEYv/lY1ng04tc0Tbuu41axoyadDPexIbRlKCKy01XO+n+MxlDcOHmj8dL7fW0csK7SNE03rVk7VCRWUuB/LIl+twDoj+KLPrv/LZYNHH703ZXnqzdAWdzX8qW6ZThKeZnyqvvbXhqPiKMrf3+cLVH3OQQAQG99mY1/nqw3/ivFPTXl7ojq3NBYRNwZETsj4q6I2BURd0dUyt4bEfe1Wf/4qvza8c8PWzoKrEXZ+O+5fG7r5vFfMfqLsaE8t6MSfzk5fnJh/kB+TCaivCnLTzep46sXf/yo0bba8V+2ZPUXY8G8Hb8Pr3pAd2x2ebabmGtdeS9iz3C9+JPrMwFJROyOiD0d/P3smJ18/LN9jbb/d/xN9GCeKf004rHq+V+JVfEXkubzk1ObY2H+wFRxVaz13feXXmlUf1fx90B2/rfWvf6vxz+W1M7XLrVfx6WfP2x4T9Pp9T+SvFZJj+Tr3pldXj47HTGSrKxdP3Nj3yJflM/in9hfv//vjPjnk3y/vRGRXcT3R8QDEfFg3vaHIuLhiNjfJP5vXnjkzc7jX19Z/MfaOv/tJ4ZOff1Fo/pbO/+HKqmJfE0rn3+tNrCbYwcAAAC3i1LlN/BJafJ6ulSanKz+hn9XbC0tLC4tP3F88e0zx6q/lR+Lcql40jVa8zx0On82XORnVuUPVp4bp2mabqnkJ+cWF9ZrTh1ozbYG/T/z21C/Wwesu7bm0Rq90QbclryvCYNL/4fB1Wr/L69zO4CN5/sfBle9/n8x4lofmgJsMN//MLj0fxhc+j8MLv0fBlI37/U3S+w80vHuaVe1b84D63D3X9blaDRLDG1gXb1MRKnupnJE3CItbJIo3RrNqCY2RUSrhS92emG3nejzBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BsAAP//cGjokQ==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0xaa9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r2, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000040)=0xa3)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
bind$packet(r6, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1}}, 0xe8)
sendmmsg$inet6(r7, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000140007800800114000006bf767b4e06fb0542c71c31e575687000005001500000000000500010007000000050005000a00000005000400000000000900020073797a3100"], 0x58}}, 0x0)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

6.4559442s ago: executing program 2 (id=902):
socket(0x11, 0x800000003, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x40010, 0xffffffffffffffff, 0x63a8a000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$tipc(0x1e, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x8, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4)
r4 = dup3(r2, r3, 0x0)
sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x44, 0xfffffffd, 0x3}, 0x33)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000001280)='\f', 0x1)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000002880)={[{@clear_cache}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")

5.563782067s ago: executing program 0 (id=903):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0xa3074bfe6145fe33, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r5 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x90)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15)
r9 = dup(0xffffffffffffffff)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002c80)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
read(r10, &(0x7f0000000440)=""/70, 0x46)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x2044020, &(0x7f00000017c0)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES64=r2, @ANYRES32=r8, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB=',nodevm', @ANYRESDEC=r4, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRES16=r9, @ANYRESDEC=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYRES64])
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')
preadv(r11, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="60000000000201040000000000007f0002000000240002801400018008000100e000000108000200ac1414000c000280"], 0x60}}, 0x0)

5.394412421s ago: executing program 4 (id=905):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080))

4.141655928s ago: executing program 3 (id=906):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2402, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000400)=0x8)
socket(0x2b, 0x4, 0xfffffffd)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
unshare(0x20020680)
unshare(0x28011980)
r5 = syz_io_uring_setup(0x3f2c, &(0x7f0000000540)={0x0, 0x2, 0x0, 0xfffffffe}, &(0x7f0000000440)=<r6=>0x0, &(0x7f00000004c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c40)='./file0\x00'})
io_uring_enter(r5, 0x2, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d7265757365f3ab2c686561702a64697361626c655f726f6c6c5f666f72776172642c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6163746976655f6c6f67597450ebf359559911cdca69d328733d362c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6d6f64653d61646170746976652c6772706a71756f74613d255c252f2d275e2c6e6f69"], 0x1, 0x5505, &(0x7f0000002480)="$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")

4.130918339s ago: executing program 0 (id=915):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x5516, &(0x7f0000005a40)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x0, 0x77f, &(0x7f0000000d00)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2004, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x1200, 0x2000402)
lseek(r6, 0x0, 0x3)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)

4.128915409s ago: executing program 2 (id=907):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@nombcache}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@sb={'sb', 0x3d, 0x3ff}}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@orlov}]}, 0x1, 0x44a, &(0x7f0000000400)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0018d35b28274c9473b5922760c233b1f6ab2ba9d3e52e860a5f66bf2e69049cea19f8462de48443cbb4bab12bfa7b4081af07016606069e3f8c62a627c9a0144c6cb0f083fe4a8b3c233235069f3b0c35620947f6180644dd44364b686eaebdbec8d0ebe284959d8e45bbf5d80221220e4da858beb6529ed2184eb695b29061009430c6b42c17ebb254cd19900dc88bb40fe879f719079967b7007ca58a16ca083e9bd069709084573dbbd9df643307ed745eb5d5a325f9140b0339ab75465ad56d2d09e1c87a26d5dbcc58e0bc7200"/230])
read$FUSE(r0, &(0x7f0000009800)={0x2020, 0x0, <r1=>0x0}, 0xfffffd70)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x19, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000280)='GPL\x00', 0x400, 0x13, &(0x7f0000000780)=""/19, 0x40f00, 0x33, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0xf, 0x800, 0x8001}, 0x10, 0x17724}, 0x90)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
read(r3, &(0x7f00000004c0)=""/152, 0x98)
add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x80000001}, {}, 0x0, 0x0, 0x0, 0x1f77104cdd89d482}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}}}, 0xe8)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x8c, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000003}, {}, 0xfffffffc}, {{@in=@multicast2, 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2}}, 0xe8)

3.936932155s ago: executing program 4 (id=908):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], <r1=>0x0, 0xf4, &(0x7f0000000400), 0x0, 0x0, 0x0, &(0x7f0000000500), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000))
sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(r2, &(0x7f00000005c0)='ns/ipc\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x40fb559d7f0000)
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0xc)
ioctl$UI_DEV_CREATE(r5, 0x5501)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000600)={[{@nouid32}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")

1.675441248s ago: executing program 3 (id=909):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800010000d19800000003000000000000000000000000000040000000000000000000000000000000000008"], 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x283, 0x0, &(0x7f0000000140)="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"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x42})
r4 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r4, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
r5 = socket(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
execve(0x0, 0x0, &(0x7f0000000200)=[&(0x7f0000000780)='\\\\B\xc6+\xd5\xb9\x93L\\\x87\x84K\xb9!\x0eX =z\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4moccU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f00000020c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1h\x04\xa8\xe8\x92\xe6\xbc\xe1O\xcf', &(0x7f0000001400)='gcB\xc6+[;\x88\xfe\x97B*[\a\x03\x96l\x1e\b\xd9\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX c\x03\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\n\xa6)\xd9\x10#\xf5b|i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8f_\xda8l\xc8\xa2\xb0\xd1\fg\x00\x00\x00\x00\x00\x00\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{/~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c1\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfe[\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000d00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!3\xf2\x84\xa9H\x92\x1e4\"u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6 \x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJ9\x13V\x1e\b\x16\xf6/\xc3{h\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\x1f\x02)sP%Z\xad\x83\xda\xbe2r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xafd\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91_]\xb26\xbf\x9cA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10`xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0\xd8k\xb7vo?1H\x86\x032\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xf2\a\x00\x00\x00\x00\x00\x00\x00\x00\x13\x9eX$\xe1\x00\x00\x00\x00\x00\x00\x003\xe0\xe3\x0e\xaa\x8e\x9a\x1f\x12\fRw\x11B\x17xO<x6tw\x18\xc4\xf1%\xd8S\xdd\"6\xa3s\x99O\xb0\xf2/0\x1d\x04\xcc\xadVr\x9bP\xd0Z3\xa7\xdd@\xf9a\xe6\xa1\x9c#\xb9\xb8\xb0\xc6r\"\xdd\xc4\xe5\xf8\xb5\xacF\x9aP\xbd\xf0\x94\x99;\x18\xd4\x9d\xf2f\x93\v\xe0\x8c\x91\x87\xd3\xc57\xe2\x11r\xea(\xb7\xd1\xba\x00C\x00(?\xeb34\xea\x865lD\xd4\xc7\x91*\x8e\x0f\xf6Zl^\xe1\x9b\xab}\xe7;\xd3h\xda4\xb5r\xe9l\xd1F\xdepA\x02\x90X\xed\x10\x98\xa2\xfb=\xdb\xba7\xf0Y\xafUt\x12\xe7\x87wbd\x86R\x02\xa7\xa3F\a\x83\x19;\xeb\xba\bm\x84\xba\x90\xd8\x9f\xc2\xb3V\xd0\xd8M\x1eM\x8d\x1a.\xea\xea:A$:/\x96\xf1\xb8\xdd\xa3\b?\x8b%\xce\x8a]\xb4!n \xcd\xdc\xc0\xca$\x8dA\xce\xd4\xab\x1at\x1b\x87\xc1W\xff\x91%6]1\xfb \xc9\xa7\xff\x92I\x91\xed\xed-\x89J7\\\x82\xbe\x8e~$\xafbl/\xf4\xad\xc6\x04\x0fZH\x97C^Y\x12\xcd\xab\x9eS\xdb\xfe\x83\xc3\xbb5,hS\x82\xefR.]\xa9\b\xd4o\x92\xf7\x99\xd2\x0e\xef \x83\xb4\xe7\xb6j\xa4\xe3m\xa4\xd7\xaa\x97\xe3\xc9\xcfP\x9e\xb0vU{\x8b3R\x1a\x06\xc3\ts\x8e\x1f\x8b\xc7\xe3\xbe\xc3j\xb6\x83\x0e\xe9*\xc2r7\x92\x8b\xf2\x02\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\xa2\xf7\xafPK8\x0e1\xcez\x00\x00', &(0x7f00000018c0)='gcB\xc6\xcd\xd6\x18H+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xe4*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xebb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<\x9b\xf8-d\xe2\x13\x8a\x19\xbf;\xe2\x14\x80u\xc9\\:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xef\"_^5\xd1 H\x17[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df\xf2$\xa4m\xbd_\xcax\xbd\xf4m\x1e\x18ocmU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG\x053\xb9\x05\xf0\xae\xfc\x88\f\x96+\xd3\xac\xf3\xef\xa7\xb7\xd1Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\b\xb4\xac%~\x12\x7ft\xa9\v\x99\x7f\xce)dC\xef\xca\xc1\x92\xa7C\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\xfd\xcf\xfdY\\d\x03(\x89\xe7\xe1\xcf\xa4m3SQc\xbaG\xcd\xce\xf5o@\xfdi\xd1w~\xc8\xb9\x04\b\b\x00\x00\x00\x00\x00\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\x87\x02\xcd\xa4\xc0\xa17\x92]_\xa2>\xbb\xc8?\x98\xa6+\xcf^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\x9c|0\xdd\x7f\x85^\xdf\xe0\x84\x17\xe5\xc05\x8av\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xd3o26\x9b\xc9\x90\x1a\x87\x9a\xea0\xc5\x9b\xa8\x8a\xc5\x13\x86\xbd\x86\xbc\x12\xf5\xa2![\x84i\xe1\xb2\xa2\xa1F\xd9{\x95\xdc\xbbc\x8a\xa1B\x10W\x00\x00\x00\x00\x00\x00\x00\x05\xe5.\r\x1dd\xfc\x97\x9dn\xef\xc0\xa6\x9a\xe0\xd5\x98o\x18\xaf\xba\x88\xa4\xbd`Qa\xdc\xcb\xce\xcc\\e\x00\x9f\xd4\xac\xea\xe4\xa3\xfa\x14\x06\xa9\xc0\xbb\x12$\xcf+z\xb0\xc8\x95\xed\xa0&\xafg\xdf\x94\xaaK)\x86~\\\xfd\xb6,\xe1\xe6\xab\x9estQ\x8b\xa0\x8e\x00i\xc3\xb4b)e\x13\xbf\xc1O\x00\xc0\xab\x95\xfa\x12e,\x19 _\xca[\xd1\x9e\xc3N\\1;\xe3t\xaa\xa1\x83\xd1\n\x17\xd2\xd8\x02+\xf1aY\xfb\x00^\x95\xab\x97\x8f#\xeax\r\t\xcb\xb7\xc8\xc7', &(0x7f0000001c40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX cz\xb8\x14\xec*\xed\xa6u\xc4\x14*\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xe6\\h\\\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xc1\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\x82\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occQ\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6z?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\xda@\xc7-\x93\xbc4.C\f\x193\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xad#\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80M\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xb2\xea\br\xfb\xdc\'\xb8\xdbh\x02|\xacW\xd5\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9o\xda3C\xa0\x06\xd4^\x8bQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xe36\xa1\xd3\xb1o\x7f0:}\xad\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44L`\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf\xab', &(0x7f0000002580)='gcB\xc6+\xbf\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0vl\v\x03\b\xadT\a\x14\xd7\xd7\xb5\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m\xb3\fv\xc5\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x16\xf0\xf9s\x9af$\xb3x\x8d\xf1\xe7\xe2\xad\xdd\xdf\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd1\x91]]\xb26\xbfA\x96\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x16\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5^\xf5\x05\xec\xa3\x98\f1\t\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xcex\xdb\xf6zG!3\xb9\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x01\xfd\xb8\x99\x9c\x19\xb4\xac%~\x12\x7ft\xa9A\x1brx\x87\xa16\x93\xd5fap\x83k\xf6O\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\x1b\xd0\xfdY\\d\x03(\x89\xe7\xe1G\xcd\xce\xf5o@\xfdi\xd1w~\xc8\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\xa6+\xcf\n\xd5\xad\x15^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\xe7\xc7X\xeaf\x9cn0\xdd\x7f\x85^\xdf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`DK\x17\xe9s2\xe0\xe2[IZS5\xa9\x00\x00\x00\x00\x00\xd5\x84\xc4\x91d\\L\xa0|o\xa9\"f\x9ah\xbda~H\xdf\xaf\xa1c\x83+\x00\xb5t\xc28\xb9\x15\xb1\r[g\xab\x1f\xe74N\xa1\xbe\'x\xf7\xfe\xd3=\xfa\nP\xf8\x89M\xd2\xefk.\xaa.\xc3\xddmr\xa3f\t\xfcC\xd7\xc8\xde\xbb\xa6\xf0\x06\xca\xbb\xf4\x0f\xfd\xc1\xca\xd9\x1d\xf0\x12\x94\x02\xdc\xe5`\xfc\x92_\xfe\x82\xcf\xc4\xa1\x8f\x95\xf9e\xbd$\x93V\xf0\xd6\xd9iu\x1d\x00\x00\x00\x00\xed\x9f\n\'\x00\x00\x00\x00\x00\x00\x00\x00x(\xbd\xfd.\xb1I<\xc31H\xe37\xecM:\xc0N\xdd\x81\xb0g\xf7<j\xea\xc9\x1cQ\x9e\xb4\xd7\xa9=c\xbec\xf8z\xdfV\xb3fE1\x8e\xb3\x9b_\xda\xb3M:\xe6wr\xd4P\xb9QU\xddV4#6JE\x06\xeccV\xd9@3\xec\xb6\x16\xe3\x88\x10\xb4\x10$\xc6EH\x9e\xe1\xf6\r\x11h\x1a\xdcs1\x90\x89<E@\xc0#\x82\xbba\a\xe0\xe1O\x84\xb8\x87\xb8V\x7f\xc9mX\x8ct\x92\xe6\xb7\x02Y(\xca\x8b22\\7\x84h\x15\xad\xdc\x93,\xc3\xf8\xcc\x82 ?~\x7f\x82\x91+\xcd\x15\x1d\xe0;\xbd\xdc\xf8 \xb2\xe1O1\xf2\xe4\xbaN\xff\xcf\xdbI\x1f\xb2\x01T6\xba\x9f\xb3\xfd(\x1c\xdd\xef5\x84\x01\xa8v9\x9a\xee\x85\xbe0\x95p5\x1a\xc8\xc7\xb2\x85\x96\xd0`5_\xfe_&|\xc6\xff\x1a\xe3c\xe2\x03\x9b\xdav\x1c\xf7!\x1d.[Jh\xea\x05\xac\xd5\x95Q\x13&\xcb\n\x13\xbb\x1b\xfe\xc8\xbd\xdePF\xd0Se\xa1V\x1d\xc2\xe2\x9c\xf7y\xb2<\x81\x9b\xf9\x86\x00\xd3\xe0\x7f\x1aX\xba\xa9\x1b\f\xa1z]H\xea1\xf2\xcf\x1e\x88\xa2\x9e|\x14q\xcb\x10\x7f\xf7Wx\r|\xc2$\x00m!\xb2<\xb3^\xca\x17<\xa29l\xc4\tuk\x15{Xd\x95\xfa\xc5\xb4l\x88\x05\xb7\x84?.\x0f\x80\xaf\x83>;I)\xff\xc0\x8d|\x14D\xb2L2\xa4\xacBg=\xb8\xe9\xd0zh\x1d\x1d\xa0\xc8\xacJ\xf2\xe8W\xd9\xa9+6V!\x94\xbd\xec\xa8\xad\x8cY\x05\xc4e\xdfc\x9a\xa4u\xad\x01\xf8:\xc0\xea\xae\xd4\xf66A\xf9\x15\xb5]\xf9\x18)v%?g6j\xdd\xd4\xe8\x98\xa3\xbaoi\x802\xd1\xfaZ\xf3!\x983\xb1\xfbH\x9a\x94\xf0\xf0l\xdd[\x99\x9f\x8ftPO`z\x94\xdd\x04_-u\x1aP>W3\xbc\xc9\x9fw<\x97C\xa8\x90\xf0\xe7\xfeUN\xeb\xf7\xf06\xc2\xd8l\x14\xd9>\xa27[R\xedJ\x82\x01\x10\x16\x93\'\xafL\x81\x8c\xef\"\x1a\xa8\x15*u\xbb\xbc7u}\x877\xa5s[\x13\xa6\x99Iv~\xf4`+\xdf\xe2\xd1\xfe\x03\b\xcf\x81\xd6\xc5\xcb\xb6\x7f\x8a\xbf#\xc4\xdbq\xd0J\x862iG\xfc\x7fIl\xb9!\x0e\x14\xdcLor\xeb\x16D\x83\xf2f\xfb\at\xd8F\x12\xbe-\n\x04k\x01k\xd7?\x03~h\x9a\b\xae\x1b\xd1\xb2\xbd\xe8\x1c\x8d\xcd\xcbUh\xf6\xfd\xd3\x9c\x06\xd7\x99\t\x0e\xdc\x11\x15\r\x8a\x86X\xdfq\xb2\xc2\x12(\xab\xd2\xca\xd0\x05\xe3u\xfbM\xe0\xf9\xd8\x98\x8b91\x9cJH\xd3\x9c\xd2\xa9\x80M\x96\"\x01\b\xfc\x9a\n\v\x19}?\f\xb6\xd4w\x12r\xba\x90!\xd40\xdaA\x82b\x92\x9f_\xe9\xf5\xba\xf3k\xe4\x9f\xa4\xfd\x15\xa5::\x86\xa7>\xabU\xa5\xe9{Yh\xec\xe9\x14\x12\x19\xb0\x93s\xb6\xe3\x15\xdd\xd4\xf9~$)\xf5\x95\xabU\xec\xc3\xa0!Ac\xe8<u\xda\xe8gp\xb0\xd6w\x93\x8f\xa9\x89\x95\xb9oN5\xdck\xbaK\xec\x89\x86\xd5,w2\xe1\xd77a\x9e\xc9\xc5|\x04\xc5\x1f\xa9:nM(R\xf6\x03gM\xf8\xc7\xae\xb0\xd7\x88da\x99\xa2\x13\xdb\xc70\x12\xaa8[+\xb3\xf6B\xacVs\x93\x02\x88&\xda\x05\xcd@ \xc2^\xa5rLy\xa8?\xc0\xf5\x99\x8f\x16\x81\x14@\xf8l\xf4\xa3kNc\"#?\xf9', 0x0, &(0x7f0000000080)='-#\xe5r/!6\x19fx\x1e\xb6&b\xefk\x17\x81\x00\x8e\x8c\x00\x02|\xd3\xdch\xe5c\xe6\xa4v%\xf5\x98\x92B\xe2P-\x92\f\xa9\f \xee\x00\x025\x11I\x1b=\xa2\xf1A\xc4\x83K\xcb\f\xaflF4\xb6\xb4b\xd6\x8c\x8f%\xc8\xc7\x84\x8f1\xe8\r\xf6\x15\x7fJ\xbc\x18\xed\xd72t\x9c\x19g\x04\x03\xfb\xc7\xc8\"f4e\x89vJ\x9dZ4\x16^<'])
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x40, r2, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x43a}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004800)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000380)={0x1d, 0x0, 0x0, {}, 0xff}, 0x18)
r7 = ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000004c0)=0x400)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.41817298s ago: executing program 4 (id=910):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x5, 0x9fd, 0x84, 0x1}, 0x48)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@user_xattr}, {@jqfmt_vfsv1}, {@grpid}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x46f, &(0x7f0000000580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0xaa9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r2, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000040)=0xa3)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
bind$packet(r6, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1}}, 0xe8)
sendmmsg$inet6(r7, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000140007800800114000006bf767b4e06fb0542c71c31e575687000005001500000000000500010007000000050005000a00000005000400000000000900020073797a3100"], 0x58}}, 0x0)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

161.127617ms ago: executing program 3 (id=911):
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
prctl$PR_GET_DUMPABLE(0x3)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$vhost_msg_v2(r3, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000a00)=""/4096, 0x1000, 0x0}}, 0x16)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000001bc0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000480)="88ffffff0000", 0x0, 0x0, 0x0, 0x0, 0x0})
syz_emit_vhci(0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc9}}}, 0x6)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c80010000c0001000a051800030001"], 0x15)
r4 = socket$inet(0x2, 0x3, 0x6)
setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4)
shutdown(r4, 0x0)
r5 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_setup(0xa94, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0)
r8 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r8, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000440)="5ff17db605ade75363a0530733408850aaf311cbe0", 0x7ffff000}, {&(0x7f0000000600)="8882d1dc72424e1fd8dd4b9a691db9a3f2d539b0ed59d1d1b67695f356653c71087b5fe7c96758a0f47f379517352fe067a0c327617260dcd520", 0x3a}, {&(0x7f0000002c40)='E', 0x1}], 0x3}}], 0x1, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[], 0x148}}, 0x0)
r9 = accept4$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x800)
accept4(r9, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000140)=0x80, 0x0)
syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcd}, "d8ea7d6d0cfac318a27c89f759199ef723cdd32a846bc7db6a0bbef2c6bc7cf5fa718c92b3e5ad237ec8917e121c1eca5ca1cf79a1eb6bda6902dcf4fd2f08fc91765d603811de77ded6e9ac7bd126998bc96e435f92464f6d36262aa6a9bb931bfc724bf65aa846d14a787a837719408d8ae81ee0457a796fe4541d348b663be9a5756251e47dd096f5111c9e9cddeb95c4023abbc4c8d21e1aff151d23c51976e914548231da751633dce5b4abc67ca79e967bc236f06f86f987ebaad7b595c177aefdabb99c8f34bb2144c5"}, 0xd1)
sendmmsg$unix(r8, &(0x7f0000006780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[], 0x90}}], 0x1, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x10000f, 0x74, 0x0, {r0}}, 0x20)

115.513011ms ago: executing program 0 (id=912):
syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3, 0x1bf, &(0x7f0000000680)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xb, &(0x7f0000000480)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}, @alu={0x7, 0x0, 0x0, 0xb, 0x8, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r2}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001f85236ccc4ce75fa61b6d6978d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e501000000000000000007000000", @ANYRES32], 0x38}}, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0))
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x9)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x7f)
syz_usb_control_io(r4, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001a00)='mm_page_alloc\x00', r7}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x2400c806, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
write$binfmt_elf64(r6, &(0x7f00000012c0)=ANY=[], 0x678)

115.051391ms ago: executing program 4 (id=913):
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file1\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x59d, &(0x7f00000009c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10070000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xac, 0x0, 0x400, 0x70bd2b, 0x5, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000080}, 0x810)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10)
semget$private(0x0, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x10}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x55)
syz_emit_vhci(0x0, 0x7)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
syz_read_part_table(0x5fd, &(0x7f0000001a40)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc")
creat(&(0x7f0000000140)='./file1\x00', 0xd)
syz_emit_vhci(0x0, 0xf)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000580)="ea41fdf41451514ea181eeae2ec22c225cd5402272b9b414b08f0719a48af2247a64345c5b8ca209dbb24493c24bc0971484e88e954f41cfa8f63e1e491105de10a51a6b2cc6b0430073761878d3f26aef6f220d91eb2e85dd17102ff8fbddb9bc924b08d99f2c574c54caee9c947c61efaf7ed18d0c7f6c326288f1761885ab8c5208961186085a267756cf2e6f4e2fc3b7795f735da01858b0d9fff28b7a703351901cf50a777413c941", 0xab)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=cp936,dm00000000000230,\x00'/47], 0x1, 0x14d3, &(0x7f00000015c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xa)
renameat2(r5, &(0x7f00000004c0)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0)

0s ago: executing program 2 (id=914):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200000c0000000000feff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = socket$inet(0x2, 0x0, 0xfffffff8)
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@minixdf}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nodelalloc}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x23, 0x44d, &(0x7f0000000980)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
sendfile(r1, r1, 0x0, 0x80000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
write$tun(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, <r4=>0x0})
sched_setscheduler(0x0, 0x0, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000380)=0x4000)
socket(0x0, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[])
keyctl$clear(0x5, 0xffffffffffffffff)
r6 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$clear(0x7, 0x0)
request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='/proc/cpuinfo\x00', r6)

kernel console output (not intermixed with test programs):

: inode #13: comm syz.4.663: attempt to clear invalid blocks 2 len 1
[  467.249569][ T7580] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  467.327526][ T7586] loop1: detected capacity change from 0 to 512
[  467.434616][ T7586] EXT4-fs: Ignoring removed nobh option
[  467.439072][ T7580] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.663: invalid indirect mapped block 1819239214 (level 0)
[  467.469226][ T7580] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.663: invalid indirect mapped block 1819239214 (level 1)
[  467.493703][ T7580] EXT4-fs (loop4): 1 truncate cleaned up
[  467.502135][ T7586] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  467.612682][ T7580] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  467.631435][ T7586] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.664: attempt to clear invalid blocks 2 len 1
[  469.122583][ T7586] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  469.159367][ T4684] syz-executor: attempt to access beyond end of device
[  469.159367][ T4684] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  469.173692][ T7586] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.664: invalid indirect mapped block 1819239214 (level 0)
[  469.385893][ T7581] loop2: detected capacity change from 0 to 40427
[  469.475049][ T7581] F2FS-fs (loop2): Found nat_bits in checkpoint
[  469.661873][ T7581] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  469.693126][ T7586] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.664: invalid indirect mapped block 1819239214 (level 1)
[  469.708978][ T6720] EXT4-fs (loop4): unmounting filesystem.
[  469.775218][ T7586] EXT4-fs (loop1): 1 truncate cleaned up
[  469.814198][ T7586] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  470.681217][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  471.015195][ T7614] loop1: detected capacity change from 0 to 256
[  471.125987][ T7616] loop0: detected capacity change from 0 to 512
[  471.151038][ T7616] EXT4-fs: Ignoring removed nobh option
[  471.327085][ T7614] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  471.391509][   T26] audit: type=1800 audit(1724443228.390:182): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.670" name="file1" dev="loop1" ino=1048673 res=0 errno=0
[  471.690929][ T4078] syz-executor: attempt to access beyond end of device
[  471.690929][ T4078] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  471.779125][ T7616] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  471.788216][ T7616] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.678: attempt to clear invalid blocks 2 len 1
[  471.802977][ T7616] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  471.821807][ T7616] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.678: invalid indirect mapped block 1819239214 (level 0)
[  471.844201][ T7616] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.678: invalid indirect mapped block 1819239214 (level 1)
[  471.873124][ T7616] EXT4-fs (loop0): 1 truncate cleaned up
[  471.878830][ T7616] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  472.094170][ T3652] Bluetooth: hci0: unexpected event for opcode 0x041b
[  472.130381][ T7625] loop1: detected capacity change from 0 to 2364
[  472.209082][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'.
[  472.319713][   T26] audit: type=1326 audit(1724443229.320:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.3.673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03f1179e79 code=0x0
[  472.345445][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  472.518216][ T7630] loop2: detected capacity change from 0 to 512
[  472.536724][ T7630] EXT4-fs: Ignoring removed nobh option
[  472.591750][ T7630] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  472.613012][ T7630] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.671: attempt to clear invalid blocks 2 len 1
[  472.627254][ T7610] loop4: detected capacity change from 0 to 40427
[  472.768839][ T7630] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  472.818409][ T7630] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.671: invalid indirect mapped block 1819239214 (level 0)
[  472.899222][ T7638] 9pnet_fd: Insufficient options for proto=fd
[  473.233051][ T7630] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.671: invalid indirect mapped block 1819239214 (level 1)
[  473.431332][ T7610] F2FS-fs (loop4): Found nat_bits in checkpoint
[  473.453016][ T7630] EXT4-fs (loop2): 1 truncate cleaned up
[  473.484320][ T7630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  473.581883][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.677'.
[  473.594913][ T7640] netlink: 32 bytes leftover after parsing attributes in process `syz.1.677'.
[  473.640686][ T7643] loop3: detected capacity change from 0 to 256
[  473.855770][ T7640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.677'.
[  474.383859][ T3652] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260
[  474.450979][ T4078] EXT4-fs (loop2): unmounting filesystem.
[  474.961868][ T7655] loop1: detected capacity change from 0 to 512
[  475.004152][ T7655] EXT4-fs: Ignoring removed nobh option
[  475.074415][ T7655] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  475.124612][ T7628] loop0: detected capacity change from 0 to 40427
[  475.151503][ T7655] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.681: attempt to clear invalid blocks 2 len 1
[  475.223894][ T7628] F2FS-fs (loop0): Found nat_bits in checkpoint
[  475.306150][ T7665] loop4: detected capacity change from 0 to 512
[  475.317782][ T7655] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  475.374539][ T7665] EXT4-fs: Ignoring removed nobh option
[  475.380563][ T7655] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.681: invalid indirect mapped block 1819239214 (level 0)
[  475.412097][ T7628] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  475.451866][ T7665] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  475.466681][ T7665] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.679: attempt to clear invalid blocks 2 len 1
[  475.467458][ T7655] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.681: invalid indirect mapped block 1819239214 (level 1)
[  475.500497][ T7655] EXT4-fs (loop1): 1 truncate cleaned up
[  475.521696][ T7665] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  475.530831][ T7655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  475.600971][ T7665] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.679: invalid indirect mapped block 1819239214 (level 0)
[  475.672473][ T7665] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.679: invalid indirect mapped block 1819239214 (level 1)
[  475.715352][ T7665] EXT4-fs (loop4): 1 truncate cleaned up
[  475.721212][ T7665] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  475.743242][ T7656] loop3: detected capacity change from 0 to 40427
[  476.902527][ T4684] syz-executor: attempt to access beyond end of device
[  476.902527][ T4684] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  476.986289][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  477.183575][ T7656] F2FS-fs (loop3): Found nat_bits in checkpoint
[  477.448238][ T7681] binder: 7675:7681 ioctl c0306201 20000680 returned -14
[  477.469820][ T6720] EXT4-fs (loop4): unmounting filesystem.
[  477.764987][ T7688] loop4: detected capacity change from 0 to 512
[  477.765557][ T7688] EXT4-fs: Ignoring removed nobh option
[  477.824034][ T7656] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  477.831228][ T7688] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  477.887104][ T7688] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.686: attempt to clear invalid blocks 2 len 1
[  478.386009][ T7688] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  478.582730][ T7688] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.686: invalid indirect mapped block 1819239214 (level 0)
[  478.758913][ T7688] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.686: invalid indirect mapped block 1819239214 (level 1)
[  479.296218][ T6653] syz-executor: attempt to access beyond end of device
[  479.296218][ T6653] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  479.331541][ T7688] EXT4-fs (loop4): 1 truncate cleaned up
[  479.351760][ T7688] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  479.468959][ T7697] loop0: detected capacity change from 0 to 256
[  481.553900][ T6720] EXT4-fs (loop4): unmounting filesystem.
[  481.973916][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'.
[  482.050816][ T7710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.691'.
[  482.127985][ T7714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.691'.
[  482.798640][ T7723] loop4: detected capacity change from 0 to 256
[  483.035135][ T7723] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  483.115458][   T26] audit: type=1800 audit(1724443239.370:184): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.687" name="file1" dev="loop4" ino=1048677 res=0 errno=0
[  483.831143][ T7730] loop3: detected capacity change from 0 to 512
[  483.886853][ T4238] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  483.894627][ T7730] EXT4-fs: Ignoring removed nobh option
[  483.934602][ T7730] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  483.944231][ T7705] loop2: detected capacity change from 0 to 40427
[  484.034906][ T7730] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.695: attempt to clear invalid blocks 2 len 1
[  484.272978][ T4238] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  484.294513][ T7705] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12)
[  484.328999][ T7730] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  484.376650][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.532198][ T7730] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.695: invalid indirect mapped block 1819239214 (level 0)
[  484.536892][ T4238] usb 2-1: config 0 descriptor??
[  484.559689][ T7730] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.695: invalid indirect mapped block 1819239214 (level 1)
[  484.596210][ T7730] EXT4-fs (loop3): 1 truncate cleaned up
[  484.604418][ T7730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  484.698525][ T4238] cp210x 2-1:0.0: cp210x converter detected
[  484.853969][ T7739] loop4: detected capacity change from 0 to 512
[  485.051146][ T7739] EXT4-fs: Ignoring removed nobh option
[  485.170304][ T7739] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  485.217123][ T7739] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.697: attempt to clear invalid blocks 2 len 1
[  485.303369][ T7739] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  485.390217][ T7739] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.697: invalid indirect mapped block 1819239214 (level 0)
[  485.415394][ T7746] loop2: detected capacity change from 0 to 512
[  485.443845][ T7746] EXT4-fs: Ignoring removed nobh option
[  485.448610][ T7739] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.697: invalid indirect mapped block 1819239214 (level 1)
[  485.479812][ T6653] EXT4-fs (loop3): unmounting filesystem.
[  485.492372][ T7739] EXT4-fs (loop4): 1 truncate cleaned up
[  485.498157][ T7739] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  485.530438][ T7746] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  485.714680][ T7746] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.696: attempt to clear invalid blocks 2 len 1
[  485.734981][ T4238] usb 2-1: cp210x converter now attached to ttyUSB0
[  485.751285][ T7746] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  485.769161][ T7746] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.696: invalid indirect mapped block 1819239214 (level 0)
[  485.769337][ T7726] loop0: detected capacity change from 0 to 40427
[  486.003007][ T7746] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.696: invalid indirect mapped block 1819239214 (level 1)
[  486.077629][ T7726] F2FS-fs (loop0): Found nat_bits in checkpoint
[  486.119046][ T7746] EXT4-fs (loop2): 1 truncate cleaned up
[  486.155440][ T7746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  486.374600][ T6720] EXT4-fs (loop4): unmounting filesystem.
[  486.432223][ T7726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  486.844294][   T22] usb 2-1: USB disconnect, device number 5
[  487.007670][ T7761] loop3: detected capacity change from 0 to 2048
[  487.025074][ T7761] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  487.065149][ T7761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  487.193829][   T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  487.523395][   T22] cp210x 2-1:0.0: device disconnected
[  487.585480][ T4078] EXT4-fs (loop2): unmounting filesystem.
[  487.737785][ T7765] loop3: detected capacity change from 0 to 2048
[  487.788638][ T7765] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  487.814375][ T7768] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  487.839475][ T7768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  487.858162][ T7768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  487.926124][ T3649] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  487.936172][ T3649] CPU: 0 PID: 3649 Comm: kworker/u5:4 Not tainted 6.1.106-syzkaller #0
[  487.944440][ T3649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  487.954512][ T3649] Workqueue: hci2 hci_rx_work
[  487.959213][ T3649] Call Trace:
[  487.962496][ T3649]  <TASK>
[  487.965435][ T3649]  dump_stack_lvl+0x1e3/0x2cb
[  487.970131][ T3649]  ? nf_tcp_handle_invalid+0x642/0x642
[  487.975613][ T3649]  ? panic+0x764/0x764
[  487.979729][ T3649]  sysfs_create_dir_ns+0x2c6/0x390
[  487.984869][ T3649]  ? sysfs_warn_dup+0xa0/0xa0
[  487.989570][ T3649]  kobject_add_internal+0x6df/0xd10
[  487.994794][ T3649]  kobject_add+0x14e/0x210
[  487.999225][ T3649]  ? device_add+0x3c2/0xfd0
[  488.003751][ T3649]  ? kobject_init+0x1d0/0x1d0
[  488.008442][ T3649]  ? __raw_spin_lock_init+0x41/0x100
[  488.013747][ T3649]  ? get_device_parent+0x128/0x400
[  488.018887][ T3649]  device_add+0x476/0xfd0
[  488.023252][ T3649]  hci_conn_add_sysfs+0xe4/0x1f0
[  488.028201][ T3649]  le_conn_complete_evt+0xcc6/0x1320
[  488.033488][ T3649]  ? hci_le_big_info_adv_report_evt+0x390/0x390
[  488.039719][ T3649]  ? __mutex_unlock_slowpath+0x218/0x750
[  488.045359][ T3649]  ? mutex_unlock+0x10/0x10
[  488.049854][ T3649]  ? skb_pull_data+0x10e/0x220
[  488.054609][ T3649]  hci_le_enh_conn_complete_evt+0x181/0x410
[  488.060496][ T3649]  hci_event_packet+0xa40/0x1510
[  488.065429][ T3649]  ? hci_remote_host_features_evt+0x210/0x210
[  488.071578][ T3649]  ? bis_list+0x290/0x290
[  488.075897][ T3649]  ? do_raw_spin_unlock+0x137/0x8a0
[  488.081090][ T3649]  ? kcov_remote_start+0x4ae/0x7c0
[  488.086282][ T3649]  ? lockdep_hardirqs_on+0x80/0x130
[  488.091474][ T3649]  ? hci_send_to_monitor+0x99/0x4d0
[  488.096664][ T3649]  hci_rx_work+0x3cd/0xce0
[  488.101074][ T3649]  ? do_raw_spin_unlock+0x137/0x8a0
[  488.106266][ T3649]  ? process_one_work+0x7a9/0x11d0
[  488.111368][ T3649]  process_one_work+0x8a9/0x11d0
[  488.116303][ T3649]  ? worker_detach_from_pool+0x260/0x260
[  488.121932][ T3649]  ? _raw_spin_lock_irqsave+0x120/0x120
[  488.127469][ T3649]  ? kthread_data+0x4e/0xc0
[  488.131967][ T3649]  ? wq_worker_running+0x97/0x190
[  488.136986][ T3649]  worker_thread+0xa47/0x1200
[  488.141662][ T3649]  ? release_firmware_map_entry+0x186/0x186
[  488.147562][ T3649]  kthread+0x28d/0x320
[  488.151617][ T3649]  ? worker_clr_flags+0x190/0x190
[  488.156629][ T3649]  ? kthread_blkcg+0xd0/0xd0
[  488.161208][ T3649]  ret_from_fork+0x1f/0x30
[  488.165625][ T3649]  </TASK>
[  488.168757][ T3652] Bluetooth: hci5: command 0x0406 tx timeout
[  488.192385][ T3649] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  488.205907][ T3649] Bluetooth: hci2: failed to register connection device
[  488.873885][ T7780] 9pnet_fd: Insufficient options for proto=fd
[  488.900302][ T7781] loop4: detected capacity change from 0 to 256
[  488.935606][ T6653] EXT4-fs (loop3): unmounting filesystem.
[  489.016029][ T7768] rose0: tun_chr_ioctl cmd 1074812117
[  489.105277][ T7788] loop3: detected capacity change from 0 to 512
[  489.124116][ T7788] ext4: Unknown parameter 'noacl'
[  489.505029][ T4809] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  490.207886][ T7795] loop2: detected capacity change from 0 to 256
[  490.257161][ T7795] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  490.340751][   T26] audit: type=1800 audit(1724443246.120:185): pid=7795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.705" name="file1" dev="loop2" ino=1048681 res=0 errno=0
[  490.841719][ T4238] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  491.028685][ T7801] loop2: detected capacity change from 0 to 512
[  491.095531][ T7801] EXT4-fs (loop2): 1 orphan inode deleted
[  491.096282][ T7785] loop0: detected capacity change from 0 to 40427
[  491.139855][ T7801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  491.152504][ T7801] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038 (0x7fffffff)
[  491.212276][ T4238] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  491.236056][ T7785] F2FS-fs (loop0): Found nat_bits in checkpoint
[  491.247955][ T4238] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99
[  491.261392][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.336688][ T7785] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  491.444357][ T4238] usb 2-1: config 0 descriptor??
[  491.502592][ T4238] usb 2-1: can't set config #0, error -71
[  491.518555][ T4238] usb 2-1: USB disconnect, device number 6
[  491.829887][   T26] audit: type=1804 audit(1724443247.430:186): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.707" name="/newroot/131/file1/bus" dev="loop2" ino=18 res=1 errno=0
[  492.087877][ T7797] loop4: detected capacity change from 0 to 32768
[  492.147301][   T26] audit: type=1804 audit(1724443247.610:187): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.707" name="/newroot/131/file1/bus" dev="loop2" ino=18 res=1 errno=0
[  492.183959][ T4078] EXT4-fs (loop2): unmounting filesystem.
[  492.252007][ T7797] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  492.292181][ T7797] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  492.332456][ T7797] BTRFS error (device loop4): support for check_integrity* not compiled in!
[  492.336769][ T7813] loop1: detected capacity change from 0 to 512
[  492.374683][ T7797] BTRFS error (device loop4): open_ctree failed
[  492.384852][ T4684] F2FS-fs (loop0): access invalid blkaddr:2048
[  492.391058][ T4684] CPU: 1 PID: 4684 Comm: syz-executor Not tainted 6.1.106-syzkaller #0
[  492.399312][ T4684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  492.409367][ T4684] Call Trace:
[  492.412638][ T4684]  <TASK>
[  492.415555][ T4684]  dump_stack_lvl+0x1e3/0x2cb
[  492.420231][ T4684]  ? nf_tcp_handle_invalid+0x642/0x642
[  492.425702][ T4684]  ? f2fs_get_next_page_offset+0x6c0/0x6c0
[  492.431554][ T4684]  f2fs_is_valid_blkaddr+0xca6/0x1270
[  492.436938][ T4684]  f2fs_map_blocks+0x15fd/0x3ab0
[  492.441898][ T4684]  ? f2fs_do_map_lock+0x70/0x70
[  492.446757][ T4684]  ? page_index+0xff/0x4b0
[  492.451162][ T4684]  f2fs_mpage_readpages+0xbd5/0x2b90
[  492.456460][ T4684]  ? dquot_release_reservation_block+0x90/0x90
[  492.462606][ T4684]  ? folio_add_lru+0x34d/0xd70
[  492.467370][ T4684]  ? f2fs_is_compress_backend_ready+0x9d/0x130
[  492.473522][ T4684]  ? f2fs_readahead+0x18a/0x3a0
[  492.478359][ T4684]  ? blk_start_plug+0x95/0x110
[  492.483113][ T4684]  read_pages+0x17f/0x830
[  492.487434][ T4684]  ? folio_add_lru+0x34d/0xd70
[  492.492181][ T4684]  ? folio_add_lru+0x34d/0xd70
[  492.496933][ T4684]  ? page_cache_ra_unbounded+0x7b0/0x7b0
[  492.502561][ T4684]  ? __filemap_add_folio+0x1ba0/0x1ba0
[  492.508013][ T4684]  ? page_cache_ra_order+0xb2a/0xd80
[  492.513292][ T4684]  page_cache_ra_unbounded+0x68b/0x7b0
[  492.518751][ T4684]  f2fs_readdir+0x5ae/0xc30
[  492.523267][ T4684]  ? __might_sleep+0xb0/0xb0
[  492.527857][ T4684]  ? f2fs_fill_dentries+0xd60/0xd60
[  492.533051][ T4684]  ? iterate_dir+0x10a/0x560
[  492.537631][ T4684]  ? __fdget_pos+0x2ba/0x360
[  492.542211][ T4684]  ? common_file_perm+0x17d/0x1d0
[  492.547227][ T4684]  ? fsnotify_perm+0x439/0x590
[  492.551984][ T4684]  iterate_dir+0x224/0x560
[  492.556384][ T4684]  ? f2fs_fill_dentries+0xd60/0xd60
[  492.561575][ T4684]  __se_sys_getdents64+0x209/0x4f0
[  492.566676][ T4684]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  492.572649][ T4684]  ? __x64_sys_getdents64+0x80/0x80
[  492.577831][ T4684]  ? filldir+0x6f0/0x6f0
[  492.582064][ T4684]  ? syscall_enter_from_user_mode+0x2e/0x230
[  492.588031][ T4684]  ? lockdep_hardirqs_on+0x94/0x130
[  492.593216][ T4684]  ? syscall_enter_from_user_mode+0x2e/0x230
[  492.599187][ T4684]  do_syscall_64+0x3b/0xb0
[  492.603606][ T4684]  ? clear_bhb_loop+0x45/0xa0
[  492.608273][ T4684]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  492.614167][ T4684] RIP: 0033:0x7f00c3dac013
[  492.618570][ T4684] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  492.638165][ T4684] RSP: 002b:00007fff0a8d8c48 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  492.646569][ T4684] RAX: ffffffffffffffda RBX: 0000555555e67600 RCX: 00007f00c3dac013
[  492.654529][ T4684] RDX: 0000000000008000 RSI: 0000555555e67600 RDI: 0000000000000005
[  492.662490][ T4684] RBP: 0000555555e675d4 R08: 0000000000000000 R09: 0000000000000000
[  492.670450][ T4684] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  492.678496][ T4684] R13: 0000000000000010 R14: 0000555555e675d0 R15: 00007fff0a8daef0
[  492.686467][ T4684]  </TASK>
[  492.692566][ T7815] loop2: detected capacity change from 0 to 512
[  492.699461][ T7815] EXT4-fs: Ignoring removed nobh option
[  492.736273][ T4809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4809)
[  492.742868][ T7813] EXT4-fs: Ignoring removed nobh option
[  492.754296][ T4684] syz-executor: attempt to access beyond end of device
[  492.754296][ T4684] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  492.776363][ T4684] syz-executor: attempt to access beyond end of device
[  492.776363][ T4684] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  492.796420][ T7813] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  492.805886][ T4684] syz-executor: attempt to access beyond end of device
[  492.805886][ T4684] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  492.807459][ T7815] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  492.835851][ T7813] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.710: attempt to clear invalid blocks 2 len 1
[  492.862529][ T7815] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.709: attempt to clear invalid blocks 2 len 1
[  492.875423][ T7813] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  492.892352][ T7813] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.710: invalid indirect mapped block 1819239214 (level 0)
[  492.909840][ T7815] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  493.034554][ T7813] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.710: invalid indirect mapped block 1819239214 (level 1)
[  493.038962][ T7815] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.709: invalid indirect mapped block 1819239214 (level 0)
[  493.073262][ T7813] EXT4-fs (loop1): 1 truncate cleaned up
[  493.078962][ T7813] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  493.312560][ T7815] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.709: invalid indirect mapped block 1819239214 (level 1)
[  493.367789][ T7815] EXT4-fs (loop2): 1 truncate cleaned up
[  493.403183][ T7815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  493.500908][ T7799] loop3: detected capacity change from 0 to 40427
[  494.292440][ T7799] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12)
[  495.543042][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  496.133821][ T4756] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  496.160104][ T4078] EXT4-fs (loop2): unmounting filesystem.
[  498.607240][ T7831] loop0: detected capacity change from 0 to 512
[  498.652885][ T7831] journal_path: Lookup failure for './file0'
[  498.658940][ T7831] EXT4-fs: error: could not find journal device path
[  498.676921][ T7839] loop1: detected capacity change from 0 to 2048
[  498.775463][ T7843] loop4: detected capacity change from 0 to 256
[  498.776546][ T7839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  499.004834][ T3679] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  499.044331][ T7852] loop2: detected capacity change from 0 to 2048
[  499.298493][ T7852] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.718: bad orphan inode 8192
[  499.583178][ T7852] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  499.815762][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  499.827417][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'.
[  499.881262][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'.
[  501.368661][ T1260] ieee802154 phy0 wpan0: encryption failed: -22
[  501.376404][ T1260] ieee802154 phy1 wpan1: encryption failed: -22
[  501.660118][ T7866] loop1: detected capacity change from 0 to 16
[  501.758372][ T3679] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  501.782633][ T3679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.803467][ T3679] usb 4-1: config 0 descriptor??
[  501.813116][ T7864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.719'.
[  501.832067][ T3679] usb 4-1: can't set config #0, error -71
[  501.838792][ T3679] usb 4-1: USB disconnect, device number 9
[  501.882400][ T7866] erofs: (device loop1): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  501.952552][ T4078] EXT4-fs (loop2): unmounting filesystem.
[  502.315460][ T7880] loop2: detected capacity change from 0 to 256
[  502.355143][ T7880] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  502.415573][   T26] audit: type=1800 audit(1724443258.110:188): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.721" name="file1" dev="loop2" ino=1048685 res=0 errno=0
[  502.437797][ T3680] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  502.609903][ T7876] loop4: detected capacity change from 0 to 512
[  502.761460][ T7876] EXT4-fs: Ignoring removed nobh option
[  502.832306][ T3680] usb 2-1: Using ep0 maxpacket: 16
[  503.019529][ T7876] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  503.023099][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  503.041460][ T7876] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.724: attempt to clear invalid blocks 2 len 1
[  503.102003][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  503.113177][ T7876] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  503.142008][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  503.152116][ T7876] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.724: invalid indirect mapped block 1819239214 (level 0)
[  503.172547][ T7876] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.724: invalid indirect mapped block 1819239214 (level 1)
[  503.191952][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.212660][ T3680] usb 2-1: config 0 descriptor??
[  503.236949][ T7876] EXT4-fs (loop4): 1 truncate cleaned up
[  503.264445][ T7876] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  503.380035][ T7885] loop2: detected capacity change from 0 to 512
[  503.398117][ T7885] EXT4-fs: Ignoring removed nobh option
[  503.477136][ T7885] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  503.507013][ T7885] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.726: attempt to clear invalid blocks 2 len 1
[  503.539906][ T7885] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  503.684259][ T7885] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.726: invalid indirect mapped block 1819239214 (level 0)
[  503.819505][ T7885] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.726: invalid indirect mapped block 1819239214 (level 1)
[  503.864636][ T3680] usbhid 2-1:0.0: can't add hid device: -71
[  503.870671][ T3680] usbhid: probe of 2-1:0.0 failed with error -71
[  503.888806][ T7885] EXT4-fs (loop2): 1 truncate cleaned up
[  503.931098][ T3680] usb 2-1: USB disconnect, device number 7
[  503.941108][ T7885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  504.092598][ T6720] EXT4-fs (loop4): unmounting filesystem.
[  504.651822][ T7894] loop4: detected capacity change from 0 to 256
[  504.720116][ T7894] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  504.778274][ T4078] EXT4-fs (loop2): unmounting filesystem.
[  504.784210][ T7894] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  504.806158][ T7879] loop0: detected capacity change from 0 to 40427
[  504.859103][ T7894] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  505.027108][   T26] audit: type=1800 audit(1724443260.710:189): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.729" name="bus" dev="loop4" ino=1048686 res=0 errno=0
[  505.083557][ T7879] F2FS-fs (loop0): Found nat_bits in checkpoint
[  505.552187][ T7905] loop2: detected capacity change from 0 to 2048
[  505.822463][ T7905] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  505.830268][ T7905] UDF-fs: Scanning with blocksize 512 failed
[  505.868017][ T7905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  506.135049][ T7887] loop3: detected capacity change from 0 to 40427
[  506.321618][ T7887] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12)
[  506.496326][ T7912] loop2: detected capacity change from 0 to 512
[  506.522207][ T7912] journal_path: Lookup failure for './file0'
[  506.528256][ T7912] EXT4-fs: error: could not find journal device path
[  506.704766][ T7896] loop1: detected capacity change from 0 to 32768
[  506.786170][ T7896] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  506.826300][ T7896] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  506.914516][ T7896] BTRFS error (device loop1): support for check_integrity* not compiled in!
[  507.002947][ T7896] BTRFS error (device loop1): open_ctree failed
[  507.829696][ T7923] netlink: 'syz.0.734': attribute type 5 has an invalid length.
[  508.016659][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'.
[  508.030495][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'.
[  508.152460][ T3649] Bluetooth: Unexpected start frame (len 16)
[  508.158742][ T3649] Bluetooth: Frame is too long (len 16, expected len 4)
[  508.755527][   T26] audit: type=1326 audit(1724443264.460:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.0.734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00c3d79e79 code=0x0
[  508.847793][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'.
[  508.901447][ T7931] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  508.908576][ T7931] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  508.965666][ T7931] vhci_hcd vhci_hcd.0: Device attached
[  509.029409][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'.
[  509.243150][ T7931] netlink: 'syz.0.734': attribute type 1 has an invalid length.
[  509.251129][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.734'.
[  509.323344][ T7938] loop1: detected capacity change from 0 to 2048
[  509.346407][ T7938] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  509.395145][ T7931] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  509.404183][ T7931] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  509.420567][ T7931] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  509.431112][ T7931] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  509.575123][ T7933] vhci_hcd: connection closed
[  509.579539][  T102] vhci_hcd: stop threads
[  510.443518][  T102] vhci_hcd: release socket
[  511.728646][ T7951] loop4: detected capacity change from 0 to 16
[  512.712496][ T7951] erofs: (device loop4): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  513.715679][  T102] vhci_hcd: disconnect device
[  513.952722][ T7954] loop1: detected capacity change from 0 to 1024
[  514.082597][ T7958] loop0: detected capacity change from 0 to 512
[  514.120570][ T7958] ext2: Unknown parameter 'smackfsdef'
[  514.183070][ T4809] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  518.189785][ T3728] hfsplus: b-tree write err: -5, ino 4
[  518.425596][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.748'.
[  518.467876][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'.
[  518.477970][ T7990] loop2: detected capacity change from 0 to 1024
[  518.494915][ T7991] loop1: detected capacity change from 0 to 512
[  518.530309][ T7990] hfsplus: unable to parse mount options
[  518.564826][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.748'.
[  518.932223][ T7992] usb usb3: usbfs: process 7992 (syz.3.749) did not claim interface 0 before use
[  519.078144][ T7991] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  519.102345][ T7991] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038 (0x7fffffff)
[  519.557477][ T7991] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.747: Directory hole found for htree leaf block 0
[  519.673830][ T8001] loop3: detected capacity change from 0 to 16
[  519.684441][ T8003] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.747: Directory hole found for htree leaf block 0
[  519.782191][ T8001] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  520.858488][ T8013] loop2: detected capacity change from 0 to 40427
[  521.225920][ T7991] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.747: Directory hole found for htree leaf block 0
[  521.290934][ T4238] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  521.552037][ T4238] usb 4-1: Using ep0 maxpacket: 16
[  521.732780][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  521.829182][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  522.179020][ T4238] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  522.264341][ T8043] loop0: detected capacity change from 0 to 256
[  522.278681][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.286890][ T8043] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  522.322433][ T8043] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  522.351860][ T4238] usb 4-1: config 0 descriptor??
[  522.367458][ T8043] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  522.518117][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  522.531505][ T8047] loop4: detected capacity change from 0 to 512
[  522.562480][   T26] audit: type=1800 audit(1724443278.270:191): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.756" name="bus" dev="loop0" ino=1048687 res=0 errno=0
[  522.862449][ T4238] usbhid 4-1:0.0: can't add hid device: -71
[  523.364870][ T4238] usbhid: probe of 4-1:0.0 failed with error -71
[  523.380909][ T8047] EXT4-fs (loop4): failed to initialize system zone (-117)
[  523.392163][ T4238] usb 4-1: USB disconnect, device number 10
[  523.417840][ T8047] EXT4-fs (loop4): mount failed
[  523.606748][ T8056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'.
[  523.952129][ T3680] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  523.979886][ T8044] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer.
[  524.332244][ T3680] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  524.351970][ T3680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.387989][ T3680] usb 1-1: config 0 descriptor??
[  524.545670][ T8051] loop1: detected capacity change from 0 to 40427
[  524.565884][ T8054] loop3: detected capacity change from 0 to 40427
[  524.619621][ T8051] F2FS-fs (loop1): Found nat_bits in checkpoint
[  524.640846][ T8054] F2FS-fs (loop3): Found nat_bits in checkpoint
[  524.746922][ T8051] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  524.749945][ T8054] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  526.370897][ T3680] [drm] vendor descriptor length:b9 data:20 30 c4 a4 1b 38 94 62 92 09 29
[  526.381054][ T3680] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  526.402834][ T3680] [drm:udl_init] *ERROR* Selecting channel failed
[  526.687820][ T3680] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  526.720150][ T3680] [drm] Initialized udl on minor 2
[  526.755690][ T6653] syz-executor: attempt to access beyond end of device
[  526.755690][ T6653] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  526.778571][ T5717] syz-executor: attempt to access beyond end of device
[  526.778571][ T5717] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  526.800015][ T3680] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  526.833964][ T3680] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  526.869799][ T3680] usb 1-1: USB disconnect, device number 7
[  526.916118][ T8083] loop4: detected capacity change from 0 to 512
[  526.955982][ T8083] EXT4-fs: Ignoring removed nobh option
[  527.005058][ T8083] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  527.025506][ T8083] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.766: attempt to clear invalid blocks 2 len 1
[  527.077365][ T8086] loop0: detected capacity change from 0 to 256
[  527.100760][ T8086] FAT-fs (loop0): Directory bread(block 64) failed
[  527.107805][ T8086] FAT-fs (loop0): Directory bread(block 65) failed
[  527.114524][ T8086] FAT-fs (loop0): Directory bread(block 66) failed
[  527.121151][ T8086] FAT-fs (loop0): Directory bread(block 67) failed
[  527.127820][ T8086] FAT-fs (loop0): Directory bread(block 68) failed
[  527.134522][ T8086] FAT-fs (loop0): Directory bread(block 69) failed
[  527.141297][ T8086] FAT-fs (loop0): Directory bread(block 70) failed
[  527.153174][ T8086] FAT-fs (loop0): Directory bread(block 71) failed
[  527.160062][ T8086] FAT-fs (loop0): Directory bread(block 72) failed
[  527.168457][ T8086] FAT-fs (loop0): Directory bread(block 73) failed
[  527.195113][ T8083] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  527.233188][ T8083] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.766: invalid indirect mapped block 1819239214 (level 0)
[  527.268381][ T8083] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.766: invalid indirect mapped block 1819239214 (level 1)
[  527.291157][ T8083] EXT4-fs (loop4): 1 truncate cleaned up
[  527.298433][ T8083] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  527.550405][ T8089] syz.0.767[8089] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  527.550837][ T8089] syz.0.767[8089] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  528.931664][ T8081] loop2: detected capacity change from 0 to 40427
[  529.052620][ T8081] F2FS-fs (loop2): Found nat_bits in checkpoint
[  529.117811][ T8102] loop3: detected capacity change from 0 to 512
[  529.142517][ T8102] EXT4-fs: Ignoring removed orlov option
[  529.332273][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'.
[  529.349263][ T8102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e01c, mo2=0002]
[  529.414785][ T8107] mkiss: ax0: crc mode is auto.
[  529.416661][ T8102] System zones: 1-12
[  529.428968][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'.
[  529.439104][ T8102] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.769: casefold flag without casefold feature
[  529.469128][ T8081] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  529.494524][ T8102] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.769: missing EA_INODE flag
[  529.567441][ T8102] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.769: error while reading EA inode 12 err=-117
[  529.585751][ T8107] IPVS: rr: TCP 172.20.20.170:0 - no destination available
[  529.588418][ T8104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.764'.
[  529.610307][ T8102] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.769: missing EA_INODE flag
[  529.649998][ T8102] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.769: error while reading EA inode 12 err=-117
[  529.736349][ T8102] EXT4-fs (loop3): 1 orphan inode deleted
[  529.757380][ T8102] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  530.002182][   T26] audit: type=1326 audit(1724443285.700:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.1.771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68fbb79e79 code=0x0
[  530.088444][ T8115] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.769: Directory hole found for htree leaf block 0
[  530.722487][    C1] IPVS: rr: TCP 172.20.20.170:0 - no destination available
[  530.816570][ T6720] EXT4-fs (loop4): unmounting filesystem.
[  530.860160][ T6653] EXT4-fs (loop3): unmounting filesystem.
[  530.990519][ T8120] loop4: detected capacity change from 0 to 16
[  531.008827][ T8120] erofs: (device loop4): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  531.322146][ T3682] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  531.442134][ T3680] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  531.682089][ T3682] usb 4-1: Using ep0 maxpacket: 32
[  531.814422][ T8139] input: syz0 as /devices/virtual/input/input14
[  531.911562][ T8140] loop2: detected capacity change from 0 to 512
[  531.942315][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.953789][ T3680] usb 5-1: Using ep0 maxpacket: 16
[  531.993374][ T8140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  532.092350][ T3680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  532.186369][ T8140] EXT4-fs (loop2): 1 truncate cleaned up
[  532.192272][ T8140] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  532.235510][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  532.245164][ T8138] loop0: detected capacity change from 0 to 2048
[  532.245858][ T3680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  532.262106][ T3682] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  532.271291][ T3680] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  532.281048][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.289708][ T3680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.299948][ T3682] usb 4-1: config 0 descriptor??
[  532.307282][ T3680] usb 5-1: config 0 descriptor??
[  532.317320][ T8124] loop1: detected capacity change from 0 to 40427
[  532.343024][ T3682] hub 4-1:0.0: USB hub found
[  532.381512][ T8138] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.776: bad orphan inode 8192
[  532.430325][ T8138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  532.487359][ T4078] EXT4-fs (loop2): unmounting filesystem.
[  532.490335][ T8124] F2FS-fs (loop1): Found nat_bits in checkpoint
[  532.547518][ T8124] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  532.567832][ T8122] netlink: 104 bytes leftover after parsing attributes in process `syz.3.772'.
[  532.662186][ T3682] hub 4-1:0.0: 1 port detected
[  533.236456][   T26] audit: type=1326 audit(1724443288.940:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.2.777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcabd79e79 code=0x0
[  533.261366][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  533.303083][ T3680] usbhid 5-1:0.0: can't add hid device: -71
[  533.311255][ T3680] usbhid: probe of 5-1:0.0 failed with error -71
[  533.727143][ T3680] usb 5-1: USB disconnect, device number 14
[  533.802122][ T3682] hub 4-1:0.0: activate --> -90
[  533.837872][ T5717] syz-executor: attempt to access beyond end of device
[  533.837872][ T5717] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  533.945488][ T8161] loop0: detected capacity change from 0 to 512
[  534.010404][ T8161] EXT4-fs: Ignoring removed nobh option
[  534.043911][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'.
[  534.087463][ T8161] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  534.114525][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'.
[  534.151431][ T8161] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.778: attempt to clear invalid blocks 2 len 1
[  534.162054][ T7773] Bluetooth: hci1: command 0x0406 tx timeout
[  534.216097][ T8161] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  534.216286][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.781'.
[  534.242610][ T8161] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.778: invalid indirect mapped block 1819239214 (level 0)
[  534.357911][ T8161] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.778: invalid indirect mapped block 1819239214 (level 1)
[  534.386329][ T8167] loop4: detected capacity change from 0 to 512
[  534.412567][ T8161] EXT4-fs (loop0): 1 truncate cleaned up
[  534.424354][ T8161] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  534.436052][ T8167] EXT4-fs: Ignoring removed i_version option
[  534.445384][ T8167] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  534.462136][ T3682] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  534.503054][ T3682] usb 4-1-port1: cannot reset (err = -71)
[  534.515820][ T3682] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad?
[  534.531161][ T8167] EXT4-fs (loop4): 1 truncate cleaned up
[  534.542205][ T8167] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  534.580251][ T8173] loop2: detected capacity change from 0 to 512
[  534.604625][ T3682] usb 4-1-port1: cannot disable (err = -71)
[  534.609894][ T8174] loop1: detected capacity change from 0 to 256
[  534.612590][ T8173] EXT4-fs: Ignoring removed nobh option
[  534.727409][   T26] audit: type=1800 audit(1724443290.430:194): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.780" name="bus" dev="loop4" ino=18 res=0 errno=0
[  534.762113][ T3682] usb 4-1-port1: cannot reset (err = -71)
[  535.543422][ T3682] usb 4-1-port1: cannot reset (err = -71)
[  535.583532][ T8174] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  535.647359][ T3682] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad?
[  535.654392][ T8173] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  535.662148][ T3053] usb 4-1: USB disconnect, device number 11
[  535.677790][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  535.682003][ T3682] usb 4-1-port1: cannot disable (err = -71)
[  535.689952][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'.
[  535.699631][   T26] audit: type=1804 audit(1724443291.350:195): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.780" name="/newroot/52/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  535.720857][ T3682] usb 4-1-port1: attempt power cycle
[  535.729515][ T8173] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.782: attempt to clear invalid blocks 2 len 1
[  535.825569][ T8173] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  535.825884][ T6720] EXT4-fs (loop4): unmounting filesystem.
[  535.903966][ T8173] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.782: invalid indirect mapped block 1819239214 (level 0)
[  535.947917][ T8184] loop0: detected capacity change from 0 to 512
[  535.957227][ T8173] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.782: invalid indirect mapped block 1819239214 (level 1)
[  535.980118][ T8184] EXT4-fs: Ignoring removed orlov option
[  536.011053][ T8173] EXT4-fs (loop2): 1 truncate cleaned up
[  536.032012][ T8173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  536.052305][ T8184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e01c, mo2=0002]
[  536.307589][ T8184] System zones: 1-12
[  536.323425][ T8184] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.783: casefold flag without casefold feature
[  537.683395][ T8184] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.783: missing EA_INODE flag
[  537.768561][ T8184] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.783: error while reading EA inode 12 err=-117
[  537.845752][ T8184] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.783: missing EA_INODE flag
[  537.899507][ T8191] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  537.917865][ T8184] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.783: error while reading EA inode 12 err=-117
[  537.943411][ T8191] overlayfs: failed to set xattr on upper
[  537.971292][ T8184] EXT4-fs (loop0): 1 orphan inode deleted
[  537.987848][ T8184] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  538.073666][ T4078] EXT4-fs (loop2): unmounting filesystem.
[  538.080452][ T8191] overlayfs: ...falling back to index=off,metacopy=off.
[  538.092794][ T8183] loop3: detected capacity change from 0 to 40427
[  538.259741][ T8191] overlayfs: failed to resolve './file0': -2
[  538.368987][ T8198] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.783: Directory hole found for htree leaf block 0
[  538.975103][ T8183] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12)
[  539.070619][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  539.155127][ T8203] loop2: detected capacity change from 0 to 256
[  539.187942][ T8203] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  539.197543][ T8202] loop4: detected capacity change from 0 to 2048
[  539.286916][ T8207] loop1: detected capacity change from 0 to 16
[  539.316644][ T8202] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.788: bad orphan inode 8192
[  539.352655][ T8207] erofs: (device loop1): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  539.383106][ T8202] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  539.417626][    C1] eth0: bad gso: type: 1, size: 1408
[  539.561627][ T8217] loop2: detected capacity change from 0 to 512
[  540.143472][ T4659] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  540.151205][ T4809] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  540.208195][ T6720] EXT4-fs (loop4): unmounting filesystem.
[  540.449827][ T8217] loop2: detected capacity change from 0 to 512
[  540.657911][ T3649] Bluetooth: hci2: unexpected event for opcode 0x0c13
[  540.672229][ T4659] usb 2-1: Using ep0 maxpacket: 16
[  540.684327][   T26] audit: type=1400 audit(1724443296.380:196): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8222 comm="syz.4.793"
[  540.763034][ T8224] loop4: detected capacity change from 0 to 512
[  540.813652][ T8224] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  540.837349][ T4659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  540.931430][ T4659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  540.941394][ T4659] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  540.967272][ T8227] loop2: detected capacity change from 0 to 512
[  540.971944][ T4659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.989738][ T4659] usb 2-1: config 0 descriptor??
[  540.989961][ T8227] EXT4-fs: Ignoring removed nobh option
[  541.073988][ T8227] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  541.112784][ T8227] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.794: attempt to clear invalid blocks 2 len 1
[  541.187953][ T8205] loop0: detected capacity change from 0 to 40427
[  541.219170][ T8227] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  541.235960][ T8232] loop3: detected capacity change from 0 to 512
[  541.243482][ T8232] EXT4-fs: Ignoring removed nobh option
[  541.259893][ T8232] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  541.270570][ T8205] F2FS-fs (loop0): Found nat_bits in checkpoint
[  541.273958][ T8227] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.794: invalid indirect mapped block 1819239214 (level 0)
[  541.290789][ T8232] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.795: attempt to clear invalid blocks 2 len 1
[  541.312131][ T8232] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  541.312350][ T8227] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.794: invalid indirect mapped block 1819239214 (level 1)
[  541.327939][ T8232] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.795: invalid indirect mapped block 1819239214 (level 0)
[  541.354341][ T8227] EXT4-fs (loop2): 1 truncate cleaned up
[  541.364353][ T8227] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  541.400224][ T8232] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.795: invalid indirect mapped block 1819239214 (level 1)
[  541.403076][ T8205] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  541.489160][ T8232] EXT4-fs (loop3): 1 truncate cleaned up
[  541.495324][ T8232] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  542.099507][ T4659] usbhid 2-1:0.0: can't add hid device: -71
[  542.105698][ T4659] usbhid: probe of 2-1:0.0 failed with error -71
[  542.110850][ T4078] EXT4-fs (loop2): unmounting filesystem.
[  542.114164][ T4659] usb 2-1: USB disconnect, device number 8
[  542.606659][ T8247] loop1: detected capacity change from 0 to 512
[  542.664805][ T8247] EXT4-fs: Ignoring removed nobh option
[  542.664874][ T6653] EXT4-fs (loop3): unmounting filesystem.
[  542.773063][ T8247] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  542.870215][ T8247] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.798: attempt to clear invalid blocks 2 len 1
[  542.912556][ T8247] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  542.927805][ T8247] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.798: invalid indirect mapped block 1819239214 (level 0)
[  542.953389][ T8247] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.798: invalid indirect mapped block 1819239214 (level 1)
[  542.972315][ T8247] EXT4-fs (loop1): 1 truncate cleaned up
[  542.978016][ T8247] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  543.270451][ T4684] syz-executor: attempt to access beyond end of device
[  543.270451][ T4684] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  543.301362][ T8259] loop4: detected capacity change from 0 to 16
[  543.321312][ T8258] loop3: detected capacity change from 0 to 512
[  543.336203][ T8259] erofs: (device loop4): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  543.362922][ T8258] EXT4-fs: Ignoring removed nobh option
[  543.479677][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  543.488860][ T8258] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  543.519210][ T8258] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.809: attempt to clear invalid blocks 2 len 1
[  543.535016][ T8258] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  543.551370][ T8258] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.809: invalid indirect mapped block 1819239214 (level 0)
[  543.713741][ T8258] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.809: invalid indirect mapped block 1819239214 (level 1)
[  543.717574][ T8265] loop1: detected capacity change from 0 to 512
[  543.787403][ T8258] EXT4-fs (loop3): 1 truncate cleaned up
[  543.788849][ T8265] EXT4-fs: Ignoring removed orlov option
[  543.803376][ T8258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  543.833798][ T8265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e01c, mo2=0002]
[  543.841825][ T8265] System zones: 1-12
[  543.851948][ T3680] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  543.860843][ T8265] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.801: casefold flag without casefold feature
[  543.909361][ T8265] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.801: missing EA_INODE flag
[  543.980527][ T8265] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.801: error while reading EA inode 12 err=-117
[  544.027740][ T8265] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.801: missing EA_INODE flag
[  544.059039][ T8265] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.801: error while reading EA inode 12 err=-117
[  544.080462][ T8265] EXT4-fs (loop1): 1 orphan inode deleted
[  544.090895][ T8265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  544.302363][ T3680] usb 5-1: Using ep0 maxpacket: 16
[  544.996714][ T8260] loop2: detected capacity change from 0 to 40427
[  545.063709][ T8260] F2FS-fs (loop2): Found nat_bits in checkpoint
[  545.155933][ T6653] EXT4-fs (loop3): unmounting filesystem.
[  545.274594][ T8260] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  545.612375][ T8278] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.801: Directory hole found for htree leaf block 0
[  545.759563][ T3680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  545.900006][ T3680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  545.925907][ T3680] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  545.950168][ T3680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.189831][ T3680] usb 5-1: config 0 descriptor??
[  546.197219][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  546.353031][ T8284] loop0: detected capacity change from 0 to 2048
[  546.416395][ T8284] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.803: bad orphan inode 8192
[  546.446034][ T8291] loop4: detected capacity change from 0 to 256
[  546.452969][ T8291] exfat: Deprecated parameter 'utf8'
[  546.459111][ T3680] usbhid 5-1:0.0: can't add hid device: -71
[  546.465765][ T3680] usbhid: probe of 5-1:0.0 failed with error -71
[  546.480226][ T3680] usb 5-1: USB disconnect, device number 15
[  546.489687][ T8291] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d)
[  546.502476][ T3053] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  546.509954][ T8284] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  546.912883][ T4238] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  548.011377][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  548.320177][ T4078] syz-executor: attempt to access beyond end of device
[  548.320177][ T4078] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  548.390858][ T8302] loop0: detected capacity change from 0 to 512
[  548.422201][ T3053] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  548.431282][ T3053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.464974][ T8302] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  548.474794][ T3053] usb 4-1: config 0 descriptor??
[  548.494061][ T8302] EXT4-fs (loop0): 1 truncate cleaned up
[  548.504795][ T8302] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  548.622293][ T4238] usb 2-1: config 0 has an invalid interface number: 5 but max is 0
[  548.630340][ T4238] usb 2-1: config 0 has no interface number 0
[  548.642944][ T4238] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  548.652791][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.665446][ T4238] usb 2-1: config 0 descriptor??
[  548.703177][ T4238] cp210x 2-1:0.5: cp210x converter detected
[  548.795176][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  548.812190][ T3053] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  548.820742][ T3053] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  548.872047][ T3053] [drm:udl_init] *ERROR* Selecting channel failed
[  548.913038][ T3053] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  548.920558][ T3053] [drm] Initialized udl on minor 2
[  548.936620][ T8308] loop2: detected capacity change from 0 to 512
[  548.966160][ T8308] EXT4-fs: Ignoring removed nobh option
[  548.972493][ T3053] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  548.988123][ T3053] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  549.005085][ T3053] usb 4-1: USB disconnect, device number 16
[  549.013434][ T8308] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  549.034348][ T8308] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.808: attempt to clear invalid blocks 2 len 1
[  549.095831][ T8308] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  549.116505][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  549.132235][ T8308] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.808: invalid indirect mapped block 1819239214 (level 0)
[  549.146597][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.159367][ T8287] loop1: detected capacity change from 0 to 256
[  549.165847][ T8308] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.808: invalid indirect mapped block 1819239214 (level 1)
[  549.218052][ T8308] EXT4-fs (loop2): 1 truncate cleaned up
[  549.225405][ T8308] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  549.302221][ T4238] cp210x 2-1:0.5: failed to get vendor val 0x000e size 3: -71
[  549.313613][ T4238] usb 2-1: cp210x converter now attached to ttyUSB0
[  549.481023][ T4238] usb 2-1: USB disconnect, device number 9
[  549.489883][ T4238] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  549.498923][ T4238] cp210x 2-1:0.5: device disconnected
[  550.004210][ T4078] EXT4-fs (loop2): unmounting filesystem.
[  551.026657][ T8309] loop0: detected capacity change from 0 to 40427
[  551.151512][ T8309] F2FS-fs (loop0): Found nat_bits in checkpoint
[  551.161981][ T4659] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  551.176203][ T8331] loop1: detected capacity change from 0 to 1024
[  551.223684][ T8331] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  551.236994][ T8309] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  551.869038][ T4659] usb 3-1: Using ep0 maxpacket: 16
[  552.032183][ T4659] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[  552.051706][ T4659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.078160][ T4659] usb 3-1: config 0 descriptor??
[  552.158595][ T4659] usb 3-1: invalid MIDI EP
[  552.175484][ T4659] usb 3-1: snd-bcd2000: error during probing
[  552.197340][ T4659] snd-bcd2000: probe of 3-1:0.0 failed with error -22
[  552.259292][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  552.287850][ T8342] loop3: detected capacity change from 0 to 16
[  552.318706][ T8342] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  552.592448][ T3827] usb 3-1: USB disconnect, device number 7
[  553.562172][ T6210] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  553.600756][ T4684] syz-executor: attempt to access beyond end of device
[  553.600756][ T4684] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  553.811986][ T3053] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  553.842417][ T6210] usb 4-1: Using ep0 maxpacket: 16
[  553.997369][ T6210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.021555][ T6210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.047516][ T6210] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  554.103526][ T6210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.121101][ T8357] loop2: detected capacity change from 0 to 256
[  554.129956][ T6210] usb 4-1: config 0 descriptor??
[  554.192247][ T3053] usb 2-1: Using ep0 maxpacket: 16
[  554.212318][ T8358] netlink: 3 bytes leftover after parsing attributes in process `syz.0.819'.
[  554.380708][ T3053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  554.538400][ T3053] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  554.866404][ T3053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.879584][ T3053] usb 2-1: config 0 descriptor??
[  555.052519][ T6210] usbhid 4-1:0.0: can't add hid device: -71
[  555.058545][ T6210] usbhid: probe of 4-1:0.0 failed with error -71
[  555.094054][ T6210] usb 4-1: USB disconnect, device number 17
[  555.343907][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.377446][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.403171][ T3053] hid (null): unknown global tag 0xc
[  555.411152][ T3053] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1
[  555.439907][ T3053] hid-generic 0003:0158:0100.0005: unexpected long global item
[  555.440140][ T8362] loop0: detected capacity change from 0 to 40427
[  555.462499][ T3053] hid-generic: probe of 0003:0158:0100.0005 failed with error -22
[  555.536277][ T8362] F2FS-fs (loop0): Found nat_bits in checkpoint
[  555.566489][ T8367] loop2: detected capacity change from 0 to 256
[  555.612665][ T8367] exfat: Deprecated parameter 'namecase'
[  555.638141][ T8367] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  555.665439][ T3053] usb 2-1: USB disconnect, device number 10
[  555.690693][ T8362] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  557.875375][ T4684] syz-executor: attempt to access beyond end of device
[  557.875375][ T4684] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  558.651695][   T26] audit: type=1400 audit(1724443314.350:197): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8385 comm="syz.1.825"
[  558.822808][ T8386] loop1: detected capacity change from 0 to 512
[  558.924321][ T8386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  558.942674][ T8386] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038 (0x7fffffff)
[  558.993564][ T8386] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.825: Directory hole found for htree leaf block 0
[  559.122901][ T8386] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.825: Directory hole found for htree leaf block 0
[  559.266591][ T8386] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.825: Directory hole found for htree leaf block 0
[  559.279842][  T102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.351736][ T7773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  559.385710][ T7773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  559.394899][ T7773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  559.413477][ T7773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  559.421195][ T7773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  559.432478][ T7773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  559.541650][ T8394] loop0: detected capacity change from 0 to 512
[  559.588542][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  559.592590][ T8384] loop3: detected capacity change from 0 to 32768
[  559.618436][ T8394] EXT4-fs: Ignoring removed nobh option
[  559.668320][ T8384] XFS (loop3): Mounting V5 Filesystem
[  559.693331][ T8394] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  559.701500][  T102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.702864][ T8394] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.823: attempt to clear invalid blocks 2 len 1
[  559.726511][ T8394] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  559.845172][ T8394] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.823: invalid indirect mapped block 1819239214 (level 0)
[  559.899756][ T8405] loop1: detected capacity change from 0 to 512
[  559.914209][ T8384] XFS (loop3): Ending clean mount
[  559.938156][  T102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.943417][ T8405] EXT4-fs: Ignoring removed nobh option
[  559.968703][ T8394] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.823: invalid indirect mapped block 1819239214 (level 1)
[  560.187570][ T8394] EXT4-fs (loop0): 1 truncate cleaned up
[  560.195731][ T8405] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  560.217559][ T8394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  560.223879][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  560.240350][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  560.242863][ T8405] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.830: attempt to clear invalid blocks 2 len 1
[  560.260818][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  560.269192][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  560.273218][  T102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.297351][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  560.318407][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  560.349225][ T8405] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  560.365265][ T8405] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.830: invalid indirect mapped block 1819239214 (level 0)
[  560.445365][ T8405] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.830: invalid indirect mapped block 1819239214 (level 1)
[  560.492243][ T8390] chnl_net:caif_netlink_parms(): no params data found
[  560.573359][ T8405] EXT4-fs (loop1): 1 truncate cleaned up
[  560.612764][ T8405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  561.201519][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  561.543424][ T7773] Bluetooth: hci2: command tx timeout
[  561.603060][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  561.683617][ T8422] loop0: detected capacity change from 0 to 512
[  561.712817][ T8422] EXT4-fs: Ignoring removed nobh option
[  561.761009][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.772100][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.811023][ T8422] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  561.822117][ T8390] device bridge_slave_0 entered promiscuous mode
[  561.835579][ T8426] loop1: detected capacity change from 0 to 16
[  561.891031][ T8390] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.908924][ T8422] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.831: attempt to clear invalid blocks 2 len 1
[  561.925490][ T8426] erofs: (device loop1): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  561.978112][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.992272][ T8422] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  562.008328][ T8390] device bridge_slave_1 entered promiscuous mode
[  562.010947][ T4809] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  562.043621][ T8422] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.831: invalid indirect mapped block 1819239214 (level 0)
[  562.090203][ T8422] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.831: invalid indirect mapped block 1819239214 (level 1)
[  562.116440][ T8408] chnl_net:caif_netlink_parms(): no params data found
[  562.138967][ T8422] EXT4-fs (loop0): 1 truncate cleaned up
[  562.238685][ T8422] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  562.296546][ T8390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  562.362045][ T4659] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  562.472557][ T7773] Bluetooth: hci3: command tx timeout
[  562.539020][ T8390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.803512][ T1260] ieee802154 phy0 wpan0: encryption failed: -22
[  562.809911][ T1260] ieee802154 phy1 wpan1: encryption failed: -22
[  563.111820][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  563.122113][ T4659] usb 2-1: Using ep0 maxpacket: 16
[  563.138818][ T6653] XFS (loop3): Unmounting Filesystem
[  563.262166][ T4659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.287111][ T8448] loop0: detected capacity change from 0 to 512
[  563.300963][ T4659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.311629][ T4659] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  563.348098][ T4659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.367108][ T8448] EXT4-fs (loop0): 1 truncate cleaned up
[  563.379088][ T8448] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  563.427554][ T4659] usb 2-1: config 0 descriptor??
[  563.630819][ T3649] Bluetooth: hci2: command tx timeout
[  563.766942][ T8390] team0: Port device team_slave_0 added
[  564.354876][ T8390] team0: Port device team_slave_1 added
[  564.483824][ T3649] Bluetooth: hci3: command tx timeout
[  564.490897][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  564.602167][ T4659] usbhid 2-1:0.0: can't add hid device: -71
[  564.608328][ T4659] usbhid: probe of 2-1:0.0 failed with error -71
[  564.624830][ T4659] usb 2-1: USB disconnect, device number 11
[  564.760889][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  564.768245][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  564.805386][ T8390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  564.857960][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.865268][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.873907][ T8408] device bridge_slave_0 entered promiscuous mode
[  565.414891][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.444759][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.668180][ T8390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  565.683418][ T3649] Bluetooth: hci2: command tx timeout
[  565.714703][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.721845][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.783042][ T8408] device bridge_slave_1 entered promiscuous mode
[  565.917209][ T8470] ubi0: attaching mtd0
[  565.961313][ T8470] ubi0: scanning is finished
[  565.968824][ T8470] ubi0: empty MTD device detected
[  566.007571][ T8462] ALSA: seq fatal error: cannot create timer (-19)
[  566.052167][ T6210] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  566.061562][ T8390] device hsr_slave_0 entered promiscuous mode
[  566.100231][ T8390] device hsr_slave_1 entered promiscuous mode
[  566.184445][ T8390] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  566.217952][ T8390] Cannot create hsr debugfs directory
[  566.243435][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  566.258719][ T8470] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  566.266365][ T8470] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  566.274170][ T8470] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  566.281455][ T8470] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  566.289057][ T8470] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  566.296047][ T8470] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  566.301973][ T6210] usb 1-1: Using ep0 maxpacket: 16
[  566.315538][ T8470] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1115710494
[  566.326133][ T8470] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  566.338835][ T8476] ubi0: background thread "ubi_bgt0d" started, PID 8476
[  566.421283][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  566.472182][ T6210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  566.510177][ T6210] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  566.561313][ T6210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.569721][ T3649] Bluetooth: hci3: command tx timeout
[  566.630408][ T6210] usb 1-1: config 0 descriptor??
[  566.873801][ T8484] loop1: detected capacity change from 0 to 16
[  566.893313][ T8484] erofs: Unknown parameter 'ÿÿÿÿ'
[  566.907238][ T8408] team0: Port device team_slave_0 added
[  566.942239][ T4809] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  566.966218][ T8408] team0: Port device team_slave_1 added
[  566.996129][ T8486] 9pnet_fd: Insufficient options for proto=fd
[  567.101217][ T8466] loop3: detected capacity change from 0 to 40427
[  567.157963][ T8466] F2FS-fs (loop3): Found nat_bits in checkpoint
[  567.188157][  T102] device hsr_slave_0 left promiscuous mode
[  567.205246][  T102] device hsr_slave_1 left promiscuous mode
[  567.218570][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.232459][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.240496][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  567.256497][  T102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  567.269844][ T6210] hid (null): unknown global tag 0xc
[  567.291008][ T8466] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  567.297389][ T6210] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1
[  567.338299][ T6210] hid-generic 0003:0158:0100.0006: unexpected long global item
[  567.351353][ T6210] hid-generic: probe of 0003:0158:0100.0006 failed with error -22
[  567.386497][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  567.406433][  T102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  567.541165][  T102] device bridge_slave_1 left promiscuous mode
[  567.550998][  T102] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.588731][  T102] device bridge_slave_0 left promiscuous mode
[  567.602893][  T102] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.808216][ T3649] Bluetooth: hci2: command tx timeout
[  568.096204][  T102] device veth1_macvtap left promiscuous mode
[  568.142175][  T102] device veth0_macvtap left promiscuous mode
[  568.168341][  T102] device veth1_vlan left promiscuous mode
[  568.192103][  T102] device veth0_vlan left promiscuous mode
[  568.192869][ T6653] syz-executor: attempt to access beyond end of device
[  568.192869][ T6653] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  568.248013][ T8499] loop1: detected capacity change from 0 to 512
[  568.293913][ T8499] EXT4-fs: Ignoring removed nobh option
[  568.334079][ T8499] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  568.362826][ T8499] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.840: attempt to clear invalid blocks 2 len 1
[  568.382748][ T8499] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  568.397935][ T8499] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.840: invalid indirect mapped block 1819239214 (level 0)
[  568.417127][ T8499] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.840: invalid indirect mapped block 1819239214 (level 1)
[  568.440727][ T8499] EXT4-fs (loop1): 1 truncate cleaned up
[  568.446786][ T8499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  568.652101][ T7773] Bluetooth: hci3: command tx timeout
[  569.314075][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  570.047287][  T102] team0 (unregistering): Port device team_slave_1 removed
[  570.123901][  T102] team0 (unregistering): Port device team_slave_0 removed
[  570.218114][  T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  570.310418][  T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  570.470704][ T8512] loop1: detected capacity change from 0 to 512
[  570.483134][ T8512] EXT4-fs: Ignoring removed nobh option
[  570.524366][ T8512] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  570.542875][ T8512] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.843: attempt to clear invalid blocks 2 len 1
[  570.578788][ T8512] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  570.624368][ T8512] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.843: invalid indirect mapped block 1819239214 (level 0)
[  570.665000][ T8512] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.843: invalid indirect mapped block 1819239214 (level 1)
[  570.703909][ T8512] EXT4-fs (loop1): 1 truncate cleaned up
[  570.733530][ T8512] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  571.559068][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  572.049112][  T102] bond0 (unregistering): Released all slaves
[  572.369081][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0
[  572.381985][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  572.400824][ T3626] usb 1-1: USB disconnect, device number 8
[  572.411319][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  573.080084][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.101818][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.140493][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.218502][ T8408] device hsr_slave_0 entered promiscuous mode
[  573.245046][ T8408] device hsr_slave_1 entered promiscuous mode
[  573.269635][ T8408] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  573.280997][ T8408] Cannot create hsr debugfs directory
[  573.297215][ T8506] netlink: 'syz.3.841': attribute type 10 has an invalid length.
[  573.315934][ T8506] device hsr0 entered promiscuous mode
[  573.354082][ T8506] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  573.490024][ T8506] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  573.629110][ T8506] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  573.736756][ T8506] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  573.797188][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'.
[  574.466513][ T8390] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.522122][ T8537] Process accounting resumed
[  574.795828][ T8390] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.026431][ T8390] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.237396][ T8390] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.254947][ T8529] loop3: detected capacity change from 0 to 40427
[  575.394958][ T8529] F2FS-fs (loop3): Found nat_bits in checkpoint
[  575.599211][ T8529] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  575.960087][ T8534] loop1: detected capacity change from 0 to 40427
[  576.483723][ T8534] F2FS-fs (loop1): Found nat_bits in checkpoint
[  576.512673][ T6653] syz-executor: attempt to access beyond end of device
[  576.512673][ T6653] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  576.636093][ T8534] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  577.575019][ T5717] syz-executor: attempt to access beyond end of device
[  577.575019][ T5717] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  577.802519][ T8569] loop0: detected capacity change from 0 to 512
[  577.809413][ T8569] EXT4-fs: Ignoring removed nobh option
[  577.862235][ T8569] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  577.880821][ T8569] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.852: attempt to clear invalid blocks 2 len 1
[  577.905525][ T8390] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  578.044677][ T8573] loop3: detected capacity change from 0 to 128
[  578.057471][ T8569] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  578.107889][ T8390] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  578.111210][ T8569] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.852: invalid indirect mapped block 1819239214 (level 0)
[  578.150598][ T8390] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  578.172776][ T8569] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.852: invalid indirect mapped block 1819239214 (level 1)
[  578.208212][ T8390] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  578.255571][ T8569] EXT4-fs (loop0): 1 truncate cleaned up
[  578.282034][ T8569] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  578.398249][ T8408] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  578.505760][ T8408] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  579.304572][ T8408] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  579.362033][ T8408] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  579.578062][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  579.619163][ T8390] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.719772][ T8587] loop3: detected capacity change from 0 to 512
[  579.732528][ T8587] ext2: Unknown parameter 'smackfsdef'
[  579.737044][ T8390] 8021q: adding VLAN 0 to HW filter on device team0
[  579.779570][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  579.800587][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  579.801410][ T4809] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  579.830479][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  580.665415][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  580.682441][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.689638][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state
[  580.748810][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  580.770381][ T8593] loop0: detected capacity change from 0 to 40427
[  580.783547][ T8591] loop1: detected capacity change from 0 to 1024
[  581.124674][ T4806] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  581.139061][ T4809] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  581.332467][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  581.561531][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  581.622201][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.629334][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.637047][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  581.655886][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  581.843134][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.850907][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  581.889149][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  581.971527][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  582.021597][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  582.078831][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  584.016337][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  586.573768][ T8609] Falling back ldisc for ptm0.
[  586.582745][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  586.631793][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  586.680798][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  586.718725][ T8408] 8021q: adding VLAN 0 to HW filter on device team0
[  586.802980][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  586.823842][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  586.849542][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  586.893317][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  586.978665][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  587.190445][ T8624] usb usb3: usbfs: process 8624 (syz.1.857) did not claim interface 0 before use
[  587.803120][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.810303][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.966224][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  587.995542][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  587.996007][ T7773] Bluetooth: Wrong link type (-71)
[  588.011177][ T7773] Bluetooth: hci0: link tx timeout
[  588.016639][ T7773] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  588.132516][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  588.148520][ T8630] loop0: detected capacity change from 0 to 512
[  588.208967][ T8630] EXT4-fs (loop0): 1 orphan inode deleted
[  588.215277][ T8630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  588.232755][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.239923][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.288181][ T8630] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038 (0x7fffffff)
[  588.292969][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  588.362092][ T8622] bridge0: port 3(team0) entered blocking state
[  588.506271][ T8622] bridge0: port 3(team0) entered disabled state
[  588.826961][   T26] audit: type=1804 audit(1724443344.360:198): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.859" name="/newroot/149/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  589.196328][   T26] audit: type=1804 audit(1724443344.520:199): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.859" name="/newroot/149/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  589.229310][ T8622] device team0 entered promiscuous mode
[  589.246733][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  589.254257][ T8622] device team_slave_0 entered promiscuous mode
[  589.282214][ T8622] device team_slave_1 entered promiscuous mode
[  589.448932][ T8622] bridge0: port 3(team0) entered blocking state
[  589.457239][ T8622] bridge0: port 3(team0) entered forwarding state
[  589.480527][ T8649] loop1: detected capacity change from 0 to 512
[  589.509743][ T8649] EXT4-fs: Ignoring removed nobh option
[  589.521017][ T8649] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  589.532091][ T8649] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.862: attempt to clear invalid blocks 2 len 1
[  589.552630][ T8649] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  589.639648][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  589.648330][ T8649] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.862: invalid indirect mapped block 1819239214 (level 0)
[  589.672058][ T8649] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.862: invalid indirect mapped block 1819239214 (level 1)
[  589.697967][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  589.712916][ T8649] EXT4-fs (loop1): 1 truncate cleaned up
[  589.738941][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  589.751196][ T8649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  589.777753][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  589.982393][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  590.472758][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  590.571659][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  590.600132][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  590.638376][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  590.702654][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  590.749641][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  590.794069][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  590.819128][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  590.844062][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  591.808545][ T8651] loop0: detected capacity change from 0 to 40427
[  591.828615][ T8390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  591.982940][ T8651] F2FS-fs (loop0): Found nat_bits in checkpoint
[  593.546784][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  593.593145][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  593.669791][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0
[  593.788180][ T7773] Bluetooth: hci5: unexpected event for opcode 0x0403
[  593.838265][ T8408] device veth0_vlan entered promiscuous mode
[  593.852299][ T8408] device veth1_vlan entered promiscuous mode
[  593.910713][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  593.944538][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  594.131330][ T8709] loop0: detected capacity change from 0 to 128
[  594.283697][ T8709] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  594.293986][ T8709] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038 (0x7fffffff)
[  594.371119][ T8709] syz.0.866 (pid 8709) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  594.582221][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  594.735892][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  594.762533][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  594.781121][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  594.801437][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  594.967754][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  596.932746][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  596.959761][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  596.961584][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  596.999992][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  597.023620][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  597.046704][ T8408] device veth0_macvtap entered promiscuous mode
[  597.069212][ T8719] loop0: detected capacity change from 0 to 16
[  597.077700][ T8719] erofs: (device loop0): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  597.128511][ T8408] device veth1_macvtap entered promiscuous mode
[  597.157201][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  597.173006][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  597.218321][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  597.258483][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  597.284157][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  597.326888][ T8390] device veth0_vlan entered promiscuous mode
[  597.343221][ T7773] Bluetooth: Wrong link type (-71)
[  597.348570][ T7773] Bluetooth: hci0: link tx timeout
[  597.358464][ T7773] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  597.385239][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.398146][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.408172][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.420984][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.430991][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.442200][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.452749][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.463858][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.475707][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_0
[  597.485361][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  597.504015][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  597.551998][ T4238] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  597.557961][ T8390] device veth1_vlan entered promiscuous mode
[  597.604351][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  597.616517][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.651971][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  597.681968][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.702498][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  597.722601][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.732959][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  597.758164][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.780259][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_1
[  597.800827][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  597.813369][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  597.841481][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  597.851331][ T4238] usb 1-1: Using ep0 maxpacket: 16
[  597.877659][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  597.901328][ T8408] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  597.931469][ T8408] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  597.947509][ T8408] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  597.959181][ T8408] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  597.984559][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  597.997053][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  598.008040][ T4238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  598.028201][ T4238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  598.044076][ T4238] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  598.056792][ T8738] loop1: detected capacity change from 0 to 128
[  598.069866][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.096764][ T4238] usb 1-1: config 0 descriptor??
[  598.115951][ T8390] device veth0_macvtap entered promiscuous mode
[  598.133131][ T8738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  598.172386][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  598.196956][ T8738] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038 (0x7fffffff)
[  598.259386][ T8390] device veth1_macvtap entered promiscuous mode
[  598.360424][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.391506][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.420507][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.451560][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.481992][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.513552][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.543918][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.578850][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.609216][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.647597][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.657681][ T8732] loop3: detected capacity change from 0 to 40427
[  598.672314][ T4238] usbhid 1-1:0.0: can't add hid device: -71
[  598.678338][ T4238] usbhid: probe of 1-1:0.0 failed with error -71
[  598.692532][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  598.724395][ T4238] usb 1-1: USB disconnect, device number 9
[  598.731417][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  598.743877][  T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.765762][ T8732] F2FS-fs (loop3): Found nat_bits in checkpoint
[  598.767493][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  598.790111][  T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.805669][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.826712][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.868287][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.892425][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.926550][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.947539][ T8732] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  598.950319][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.985620][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  599.003374][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.014846][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  599.026388][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.039536][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  599.056819][ T5717] EXT4-fs (loop1): unmounting filesystem.
[  599.064441][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  599.082680][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  599.119970][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  599.158717][ T4506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.201834][ T4506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.264509][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  599.286077][ T8390] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  599.347312][ T8759] loop1: detected capacity change from 0 to 256
[  599.354311][ T8759] exfat: Deprecated parameter 'utf8'
[  599.369035][ T8390] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  599.421822][ T8759] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d)
[  599.425595][ T8390] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  599.526024][ T8390] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  599.585135][ T8763] loop0: detected capacity change from 0 to 1024
[  599.793259][ T8763] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1024)!
[  600.245905][ T8763] EXT4-fs (loop0): group descriptors corrupted!
[  600.386140][    C1] eth0: bad gso: type: 1, size: 1408
[  600.446114][ T4809] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  600.503777][  T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.556648][  T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.595294][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.608051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  600.640467][   T26] audit: type=1326 audit(1724443356.340:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.2.829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e24d79e79 code=0x0
[  600.672292][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.725397][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  601.416463][ T8792] netlink: 'syz.4.826': attribute type 15 has an invalid length.
[  601.424314][ T8792] netlink: 719 bytes leftover after parsing attributes in process `syz.4.826'.
[  601.443337][   T26] audit: type=1326 audit(1724443357.100:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55eb79e79 code=0x7ffc0000
[  601.847467][   T26] audit: type=1326 audit(1724443357.100:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55eb79e79 code=0x7ffc0000
[  601.967794][   T26] audit: type=1326 audit(1724443357.100:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc55eb79e79 code=0x7ffc0000
[  602.022986][   T26] audit: type=1326 audit(1724443357.100:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55eb79e79 code=0x7ffc0000
[  602.039906][ T8794] loop0: detected capacity change from 0 to 1024
[  602.112064][   T26] audit: type=1326 audit(1724443357.100:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55eb79e79 code=0x7ffc0000
[  602.206992][ T8794] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  602.418081][   T26] audit: type=1326 audit(1724443357.100:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc55eb79e79 code=0x7ffc0000
[  602.748463][   T26] audit: type=1326 audit(1724443357.100:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55eb79e79 code=0x7ffc0000
[  603.927145][ T8809] loop2: detected capacity change from 0 to 128
[  603.929202][   T26] audit: type=1326 audit(1724443357.110:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55eb79e79 code=0x7ffc0000
[  604.200822][ T6653] syz-executor: attempt to access beyond end of device
[  604.200822][ T6653] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  604.269014][   T26] audit: type=1326 audit(1724443357.110:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc55eb79e79 code=0x7ffc0000
[  604.687803][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  610.685566][ T8840] loop0: detected capacity change from 0 to 512
[  610.976304][ T8840] EXT4-fs: Ignoring removed nobh option
[  612.618049][ T8840] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  612.663518][ T8840] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.887: attempt to clear invalid blocks 2 len 1
[  612.720307][ T8840] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  612.802342][ T8840] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.887: invalid indirect mapped block 1819239214 (level 0)
[  612.862380][ T8840] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.887: invalid indirect mapped block 1819239214 (level 1)
[  612.899813][ T8840] EXT4-fs (loop0): 1 truncate cleaned up
[  612.926403][ T8840] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  613.068277][ T8864] tmpfs: Unknown parameter 'usrquota'
[  613.946283][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  614.143078][ T3649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  614.155733][ T3649] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  614.325832][ T8876] loop2: detected capacity change from 0 to 512
[  614.332484][ T3653] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  614.352634][ T8876] EXT4-fs: Ignoring removed nobh option
[  614.452227][ T8880] tipc: Started in network mode
[  614.457292][ T8880] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  614.473264][ T8880] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  614.482981][ T8880] tipc: Enabled bearer <udp:syz1>, priority 10
[  614.609074][ T3653] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  614.637899][ T3653] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  614.661199][ T3653] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  614.861118][ T8876] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  614.888380][ T8876] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.892: attempt to clear invalid blocks 2 len 1
[  615.079600][ T8876] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  615.221416][ T8876] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.892: invalid indirect mapped block 1819239214 (level 0)
[  615.298844][ T8876] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.892: invalid indirect mapped block 1819239214 (level 1)
[  615.349204][ T8876] EXT4-fs (loop2): 1 truncate cleaned up
[  615.355071][ T8876] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  615.394607][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'.
[  615.423850][ T8873] chnl_net:caif_netlink_parms(): no params data found
[  615.614721][ T4238] tipc: Node number set to 1
[  616.170769][ T8408] EXT4-fs (loop2): unmounting filesystem.
[  616.232421][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.242485][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.273191][ T8873] device bridge_slave_0 entered promiscuous mode
[  616.290332][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.307798][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.333064][ T8873] device bridge_slave_1 entered promiscuous mode
[  616.417515][ T8896] loop0: detected capacity change from 0 to 512
[  616.624622][ T8873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  616.626821][ T8896] EXT4-fs: Ignoring removed nobh option
[  616.805835][ T3653] Bluetooth: hci6: command tx timeout
[  617.747540][ T8873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  617.948464][ T8896] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  618.089485][ T8896] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.904: attempt to clear invalid blocks 2 len 1
[  618.114583][ T8896] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  618.139683][ T8896] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.904: invalid indirect mapped block 1819239214 (level 0)
[  618.202616][ T8896] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.904: invalid indirect mapped block 1819239214 (level 1)
[  618.243197][ T8911] loop2: detected capacity change from 0 to 16
[  618.253903][ T8896] EXT4-fs (loop0): 1 truncate cleaned up
[  618.259605][ T8896] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  618.281050][ T8911] erofs: (device loop2): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  618.483767][ T8873] team0: Port device team_slave_0 added
[  618.632948][ T3653] Bluetooth: hci5: link tx timeout
[  618.638677][ T3653] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  618.784749][ T8873] team0: Port device team_slave_1 added
[  619.048597][ T3653] Bluetooth: hci6: command tx timeout
[  621.122088][ T3653] Bluetooth: hci6: command tx timeout
[  621.250968][ T4684] EXT4-fs (loop0): unmounting filesystem.
[  623.202186][ T3653] Bluetooth: hci6: command tx timeout
[  623.531071][ T8926] loop3: detected capacity change from 0 to 512
[  623.586528][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  623.601677][ T8926] EXT4-fs: Ignoring removed nobh option
[  623.643271][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  623.685956][ T8926] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  623.777756][ T8926] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.901: attempt to clear invalid blocks 2 len 1
[  624.250971][ T8932] loop2: detected capacity change from 0 to 32768
[  624.252297][ T1260] ieee802154 phy0 wpan0: encryption failed: -22
[  624.264225][ T1260] ieee802154 phy1 wpan1: encryption failed: -22
[  624.271734][ T8932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.902 (8932)
[  624.310285][ T8873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  624.324539][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  624.327793][ T8926] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  624.341931][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  624.397370][ T8932] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  624.408120][ T8932] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  624.416981][ T8932] BTRFS info (device loop2): force clearing of disk cache
[  624.424130][ T8932] BTRFS info (device loop2): using free space tree
[  624.462208][ T8926] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.901: invalid indirect mapped block 1819239214 (level 0)
[  624.575202][ T8926] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.901: invalid indirect mapped block 1819239214 (level 1)
[  624.729898][ T8926] EXT4-fs (loop3): 1 truncate cleaned up
[  624.736132][ T8926] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  624.789433][ T8873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  624.959171][ T8932] BTRFS info (device loop2): enabling ssd optimizations
[  625.371082][ T8960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.903'.
[  625.625845][ T8932] BTRFS info (device loop2): rebuilding free space tree
[  626.043774][ T8408] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  626.083289][ T6653] EXT4-fs (loop3): unmounting filesystem.
[  626.190022][ T8873] device hsr_slave_0 entered promiscuous mode
[  626.263660][ T8873] device hsr_slave_1 entered promiscuous mode
[  626.294243][ T8873] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  626.336063][ T8873] Cannot create hsr debugfs directory
[  627.331739][ T8971] loop3: detected capacity change from 0 to 40427
[  627.694754][ T8979] input: syz0 as /devices/virtual/input/input16
[  628.901587][ T8996] loop2: detected capacity change from 0 to 512
[  628.933094][ T8996] EXT4-fs: Ignoring removed orlov option
[  628.939095][ T8996] EXT4-fs (loop2): unable to read superblock
[  629.128187][ T8965] loop0: detected capacity change from 0 to 40427
[  629.506615][ T8965] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12)
[  630.212109][ T8873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.213052][ T3649] Bluetooth: hci5: link tx timeout
[  630.242369][ T3649] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  630.324507][ T9010] loop2: detected capacity change from 0 to 512
[  630.433212][ T9010] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  630.450911][ T8873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.592764][ T9010] EXT4-fs (loop2): 1 truncate cleaned up
[  630.599949][ T9010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  630.667651][ T9017] loop0: detected capacity change from 0 to 16
[  631.271096][ T9017] erofs: (device loop0): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  631.352081][   T26] kauditd_printk_skb: 33 callbacks suppressed
[  631.352097][   T26] audit: type=1800 audit(1724443387.010:243): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.914" name="file1" dev="loop2" ino=15 res=0 errno=0
[  631.415899][ T9010] 
[  631.418268][ T9010] ======================================================
[  631.425296][ T9010] WARNING: possible circular locking dependency detected
[  631.432406][ T9010] 6.1.106-syzkaller #0 Not tainted
[  631.437516][ T9010] ------------------------------------------------------
[  631.444537][ T9010] syz.2.914/9010 is trying to acquire lock:
[  631.450441][ T9010] ffff88814bf0a170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b0/0x380
[  631.460990][ T9010] 
[  631.460990][ T9010] but task is already holding lock:
[  631.468353][ T9010] ffff88814bf08b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0
[  631.479684][ T9010] 
[  631.479684][ T9010] which lock already depends on the new lock.
[  631.479684][ T9010] 
[  631.490099][ T9010] 
[  631.490099][ T9010] the existing dependency chain (in reverse order) is:
[  631.499125][ T9010] 
[  631.499125][ T9010] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  631.507586][ T9010]        lock_acquire+0x1f8/0x5a0
[  631.512644][ T9010]        percpu_down_write+0x50/0x2f0
[  631.518022][ T9010]        ext4_ind_migrate+0x254/0x760
[  631.523401][ T9010]        ext4_fileattr_set+0xe9b/0x1770
[  631.528964][ T9010]        vfs_fileattr_set+0x8f3/0xd30
[  631.534351][ T9010]        do_vfs_ioctl+0x1cd1/0x2a90
[  631.539549][ T9010]        __se_sys_ioctl+0x81/0x160
[  631.543321][ T8873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.544654][ T9010]        do_syscall_64+0x3b/0xb0
[  631.559814][ T9010]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  631.566245][ T9010] 
[  631.566245][ T9010] -> #2 (&sb->s_type->i_mutex_key#8){++++}-{3:3}:
[  631.574863][ T9010]        lock_acquire+0x1f8/0x5a0
[  631.579896][ T9010]        down_read+0xad/0xa30
[  631.584572][ T9010]        ext4_bmap+0x4b/0x410
[  631.589257][ T9010]        bmap+0xa1/0xd0
[  631.593416][ T9010]        jbd2_journal_flush+0x5b5/0xc40
[  631.598970][ T9010]        ext4_ioctl+0x3986/0x5f60
[  631.603995][ T9010]        __se_sys_ioctl+0xf1/0x160
[  631.609111][ T9010]        do_syscall_64+0x3b/0xb0
[  631.614055][ T9010]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  631.620474][ T9010] 
[  631.620474][ T9010] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}:
[  631.629256][ T9010]        lock_acquire+0x1f8/0x5a0
[  631.634288][ T9010]        mutex_lock_io_nested+0x134/0xab0
[  631.640005][ T9010]        jbd2_journal_flush+0x29b/0xc40
[  631.645558][ T9010]        ext4_ioctl+0x3986/0x5f60
[  631.650589][ T9010]        __se_sys_ioctl+0xf1/0x160
[  631.655710][ T9010]        do_syscall_64+0x3b/0xb0
[  631.660648][ T9010]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  631.667074][ T9010] 
[  631.667074][ T9010] -> #0 (&journal->j_barrier){+.+.}-{3:3}:
[  631.675088][ T9010]        validate_chain+0x1661/0x5950
[  631.680465][ T9010]        __lock_acquire+0x125b/0x1f80
[  631.685852][ T9010]        lock_acquire+0x1f8/0x5a0
[  631.690899][ T9010]        __mutex_lock+0x132/0xd80
[  631.695951][ T9010]        jbd2_journal_lock_updates+0x2b0/0x380
[  631.702115][ T9010]        ext4_change_inode_journal_flag+0x1a8/0x6e0
[  631.708713][ T9010]        ext4_fileattr_set+0xe04/0x1770
[  631.714265][ T9010]        vfs_fileattr_set+0x8f3/0xd30
[  631.719645][ T9010]        do_vfs_ioctl+0x1cd1/0x2a90
[  631.724842][ T9010]        __se_sys_ioctl+0x81/0x160
[  631.729957][ T9010]        do_syscall_64+0x3b/0xb0
[  631.734897][ T9010]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  631.741312][ T9010] 
[  631.741312][ T9010] other info that might help us debug this:
[  631.741312][ T9010] 
[  631.751536][ T9010] Chain exists of:
[  631.751536][ T9010]   &journal->j_barrier --> &sb->s_type->i_mutex_key#8 --> &sbi->s_writepages_rwsem
[  631.751536][ T9010] 
[  631.766687][ T9010]  Possible unsafe locking scenario:
[  631.766687][ T9010] 
[  631.774131][ T9010]        CPU0                    CPU1
[  631.779488][ T9010]        ----                    ----
[  631.784846][ T9010]   lock(&sbi->s_writepages_rwsem);
[  631.790044][ T9010]                                lock(&sb->s_type->i_mutex_key#8);
[  631.797949][ T9010]                                lock(&sbi->s_writepages_rwsem);
[  631.805672][ T9010]   lock(&journal->j_barrier);
[  631.810436][ T9010] 
[  631.810436][ T9010]  *** DEADLOCK ***
[  631.810436][ T9010] 
[  631.818578][ T9010] 4 locks held by syz.2.914/9010:
[  631.823604][ T9010]  #0: ffff88814bf06460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0
[  631.833290][ T9010]  #1: ffff8880752a8400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_fileattr_set+0x135/0xd30
[  631.844018][ T9010]  #2: ffff8880752a85a0 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x115/0x6e0
[  631.855694][ T9010]  #3: ffff88814bf08b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0
[  631.867455][ T9010] 
[  631.867455][ T9010] stack backtrace:
[  631.873337][ T9010] CPU: 1 PID: 9010 Comm: syz.2.914 Not tainted 6.1.106-syzkaller #0
[  631.881317][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  631.891378][ T9010] Call Trace:
[  631.894661][ T9010]  <TASK>
[  631.897598][ T9010]  dump_stack_lvl+0x1e3/0x2cb
[  631.902288][ T9010]  ? nf_tcp_handle_invalid+0x642/0x642
[  631.907756][ T9010]  ? print_circular_bug+0x12b/0x1a0
[  631.912958][ T9010]  check_noncircular+0x2fa/0x3b0
[  631.917899][ T9010]  ? add_chain_block+0x850/0x850
[  631.922842][ T9010]  ? lockdep_lock+0x11f/0x2a0
[  631.927531][ T9010]  ? do_raw_spin_unlock+0x137/0x8a0
[  631.932736][ T9010]  ? _find_first_zero_bit+0xd0/0x100
[  631.938030][ T9010]  validate_chain+0x1661/0x5950
[  631.942884][ T9010]  ? _raw_spin_unlock+0x40/0x40
[  631.947748][ T9010]  ? __lock_acquire+0x125b/0x1f80
[  631.952781][ T9010]  ? reacquire_held_locks+0x660/0x660
[  631.958171][ T9010]  ? mark_lock+0x9a/0x340
[  631.962507][ T9010]  __lock_acquire+0x125b/0x1f80
[  631.967375][ T9010]  lock_acquire+0x1f8/0x5a0
[  631.971882][ T9010]  ? jbd2_journal_lock_updates+0x2b0/0x380
[  631.977696][ T9010]  ? read_lock_is_recursive+0x10/0x10
[  631.983078][ T9010]  ? __might_sleep+0xb0/0xb0
[  631.987670][ T9010]  ? release_firmware_map_entry+0x186/0x186
[  631.993582][ T9010]  __mutex_lock+0x132/0xd80
[  631.998096][ T9010]  ? jbd2_journal_lock_updates+0x2b0/0x380
[  632.003908][ T9010]  ? preempt_schedule+0xd9/0xe0
[  632.008763][ T9010]  ? preempt_schedule_common+0xa6/0xd0
[  632.014231][ T9010]  ? preempt_schedule+0xd9/0xe0
[  632.019089][ T9010]  ? jbd2_journal_lock_updates+0x2b0/0x380
[  632.024898][ T9010]  ? schedule_preempt_disabled+0x20/0x20
[  632.030536][ T9010]  ? mutex_lock_nested+0x10/0x10
[  632.035489][ T9010]  ? preempt_schedule_thunk+0x16/0x18
[  632.040875][ T9010]  jbd2_journal_lock_updates+0x2b0/0x380
[  632.046513][ T9010]  ? jbd2_journal_wait_updates+0x2d0/0x2d0
[  632.052325][ T9010]  ? rcu_is_watching+0x11/0xb0
[  632.057094][ T9010]  ? _find_next_bit+0x11b/0x120
[  632.061953][ T9010]  ? percpu_down_write+0x2b7/0x2f0
[  632.067067][ T9010]  ? rcu_is_watching+0x11/0xb0
[  632.071829][ T9010]  ext4_change_inode_journal_flag+0x1a8/0x6e0
[  632.077900][ T9010]  ext4_fileattr_set+0xe04/0x1770
[  632.082941][ T9010]  ? ext4_fileattr_get+0x200/0x200
[  632.088057][ T9010]  ? rwsem_write_trylock+0x166/0x210
[  632.093349][ T9010]  ? clear_nonspinnable+0x60/0x60
[  632.098380][ T9010]  ? memset+0x1f/0x40
[  632.102364][ T9010]  ? fileattr_fill_flags+0x1d0/0x300
[  632.107653][ T9010]  ? fscrypt_prepare_setflags+0x5d/0x220
[  632.113294][ T9010]  vfs_fileattr_set+0x8f3/0xd30
[  632.118156][ T9010]  ? copy_fsxattr_to_user+0x3a0/0x3a0
[  632.123540][ T9010]  do_vfs_ioctl+0x1cd1/0x2a90
[  632.128224][ T9010]  ? __x64_compat_sys_ioctl+0x80/0x80
[  632.133595][ T9010]  ? __lock_acquire+0x1f80/0x1f80
[  632.138620][ T9010]  ? lockdep_hardirqs_on+0x94/0x130
[  632.143820][ T9010]  ? __kmem_cache_free+0x25c/0x3c0
[  632.148932][ T9010]  ? tomoyo_path_number_perm+0x61b/0x7f0
[  632.154572][ T9010]  ? tomoyo_path_number_perm+0x68a/0x7f0
[  632.160208][ T9010]  ? tomoyo_path_number_perm+0x1f2/0x7f0
[  632.165845][ T9010]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  632.171320][ T9010]  ? __fget_files+0x28/0x4a0
[  632.175910][ T9010]  ? __fget_files+0x435/0x4a0
[  632.180587][ T9010]  ? __fget_files+0x28/0x4a0
[  632.185179][ T9010]  ? bpf_lsm_file_ioctl+0x5/0x10
[  632.190120][ T9010]  ? security_file_ioctl+0x7d/0xa0
[  632.195239][ T9010]  __se_sys_ioctl+0x81/0x160
[  632.199840][ T9010]  do_syscall_64+0x3b/0xb0
[  632.204263][ T9010]  ? clear_bhb_loop+0x45/0xa0
[  632.208942][ T9010]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  632.214839][ T9010] RIP: 0033:0x7f5e24d79e79
[  632.219255][ T9010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  632.238868][ T9010] RSP: 002b:00007f5e25ab8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  632.247290][ T9010] RAX: ffffffffffffffda RBX: 00007f5e24f15f80 RCX: 00007f5e24d79e79
[  632.255429][ T9010] RDX: 0000000020000380 RSI: 0000000040086602 RDI: 000000000000000b
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe)
[  632.263409][ T9010] RBP: 00007f5e24de793e R08: 0000000000000000 R09: 0000000000000000
[  632.271394][ T9010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  632.279376][ T9010] R13: 0000000000000000 R14: 00007f5e24f15f80 R15: 00007ffcca67c708
[  632.287362][ T9010]  </TASK>
[  632.296852][ T8982] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  632.416449][ T8873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.428286][ T8408] EXT4-fs (loop2): unmounting filesystem.
[  632.701970][ T8987] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  633.041956][ T3649] Bluetooth: hci2: command tx timeout
[  633.131655][   T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.268648][   T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.366298][   T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.435612][   T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.171907][   T34] device hsr_slave_0 left promiscuous mode
[  634.178284][   T34] device hsr_slave_1 left promiscuous mode
[  634.192463][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  634.199998][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  634.232452][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  634.239915][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  634.264426][   T34] device bridge_slave_1 left promiscuous mode
[  634.270649][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.292836][   T34] device bridge_slave_0 left promiscuous mode
[  634.299077][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.335321][   T34] device veth1_macvtap left promiscuous mode
[  634.341394][   T34] device veth0_macvtap left promiscuous mode
[  634.362048][   T34] device veth1_vlan left promiscuous mode
[  634.367904][   T34] device veth0_vlan left promiscuous mode
[  634.813255][   T34] team0 (unregistering): Port device team_slave_1 removed
[  634.883728][   T34] team0 (unregistering): Port device team_slave_0 removed
[  634.952684][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  635.022639][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  635.157553][   T34] bond0 (unregistering): Released all slaves
[  636.290137][   T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.387421][   T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.468014][   T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.525509][   T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.675853][   T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.700167][   T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  636.773202][   T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.792861][   T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  636.876577][   T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.904669][   T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  636.976107][   T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.003405][   T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  637.128470][   T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.187439][   T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.265995][   T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.335452][   T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.498066][   T34] tipc: Disabling bearer <udp:syz1>
[  637.504052][   T34] tipc: Left network mode
[  638.981060][   T34] device hsr_slave_0 left promiscuous mode
[  638.992385][   T34] device hsr_slave_1 left promiscuous mode
[  639.022076][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  639.029526][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  639.052460][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  639.059884][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  639.082382][   T34] device bridge_slave_1 left promiscuous mode
[  639.088584][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.114488][   T34] device bridge_slave_0 left promiscuous mode
[  639.122433][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.142985][   T34] device hsr_slave_0 left promiscuous mode
[  639.154421][   T34] device hsr_slave_1 left promiscuous mode
[  639.174181][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  639.181633][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  639.202422][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  639.209840][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  639.232665][   T34] device bridge_slave_1 left promiscuous mode
[  639.238896][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.262757][   T34] device bridge_slave_0 left promiscuous mode
[  639.268950][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.295061][   T34] device hsr_slave_0 left promiscuous mode
[  639.311933][   T34] device hsr_slave_1 left promiscuous mode
[  639.322179][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  639.342487][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  639.350074][   T34] device bridge_slave_1 left promiscuous mode
[  639.356661][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.367029][   T34] device bridge_slave_0 left promiscuous mode
[  639.373303][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.385674][   T34] device hsr_slave_0 left promiscuous mode
[  639.392131][   T34] device hsr_slave_1 left promiscuous mode
[  639.398382][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  639.407876][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  639.415721][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  639.425459][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  639.452575][   T34] device team0 left promiscuous mode
[  639.457888][   T34] device team_slave_0 left promiscuous mode
[  639.471968][   T34] device team_slave_1 left promiscuous mode
[  639.478055][   T34] bridge0: port 3(team0) entered disabled state
[  639.493262][   T34] device bridge_slave_1 left promiscuous mode
[  639.499445][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.522730][   T34] device bridge_slave_0 left promiscuous mode
[  639.529347][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.546939][   T34] device veth1_macvtap left promiscuous mode
[  639.553025][   T34] device veth0_macvtap left promiscuous mode
[  639.559080][   T34] device veth1_vlan left promiscuous mode
[  639.565900][   T34] device veth0_vlan left promiscuous mode
[  639.572846][   T34] device veth1_macvtap left promiscuous mode
[  639.578858][   T34] device veth0_macvtap left promiscuous mode
[  639.585364][   T34] device veth1_vlan left promiscuous mode
[  639.592538][   T34] device veth1_macvtap left promiscuous mode
[  639.598556][   T34] device veth0_macvtap left promiscuous mode
[  639.608996][   T34] device veth1_vlan left promiscuous mode
[  639.614950][   T34] device veth0_vlan left promiscuous mode
[  640.165053][   T34] team0 (unregistering): Port device team_slave_1 removed
[  640.242812][   T34] team0 (unregistering): Port device team_slave_0 removed
[  640.324166][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  640.402526][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  640.518461][   T34] bond0 (unregistering): Released all slaves
[  640.714330][   T34] team0 (unregistering): Port device team_slave_1 removed
[  640.752910][   T34] team0 (unregistering): Port device team_slave_0 removed
[  640.786015][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  640.820723][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  640.939643][   T34] bond0 (unregistering): Released all slaves
[  641.129267][   T34] team0 (unregistering): Port device team_slave_1 removed
[  641.146481][   T34] team0 (unregistering): Port device team_slave_0 removed
[  641.184493][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  641.220699][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  641.312622][   T34] bond0 (unregistering): Released all slaves