last executing test programs:

9m32.667778685s ago: executing program 3 (id=32):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r0 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

9m31.112617994s ago: executing program 3 (id=34):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open_tree(0xffffffffffffffff, 0x0, 0x101)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x3)
close(0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x3)

9m22.172511578s ago: executing program 3 (id=48):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@fallback, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004080)="cf6dcad1f5c5c712407a3f1d491539b627c8255f86be020a4f0ff8851dc6d8ab33ec6d10e619ed910e4811af9ee1581a1d0687020937fa7005f26bab6e9591923f5c1086ecd154e9bfbec5afd856afe3429448161089fab21bc7b9ab5158aa219761d845b8307b1fc87605dbaa4cf80fc74737d4d4cfc68fe06c16b87b759a91a368c70b2e05ee4acf0f9111df10f30c4e16b7ee3d1cf380273ab8e6ca382e06022f539c0c4e62b1ad827ff576249375b2231e47038c67b3353242c81baaf90b3645ed12504a4ccf4b0e6419804399f9fe7f60df022a12405093264d225e8003061dd690cd169f922da3507717ade8bfa8ae2c45eccd32e14ffc4e11ae939e90fceb53e0bde3916d9e4e36d1de07fbbdd2dbc24145e1e7bc8f3423f4c3426406fa499a6de404e6827db35840a726a1582be4457f0ce0cde1c414e2f497ff8ff4cb606962f6acac00230b2cbce10b09d2f6b33b9f4edc3839a222c4bc5bb3e552056f8c2b7bc84ab62434bcc61f64b74367a9ec857ec7f5a09ab6b16667bdc846434d22dd95f7b8a47a1246a39d135de1ffc2946cf36034ef8d753b7d692aa00c91fc1636c0be309ef4bf345918a386e76edc3680ee574528bf3369741c9104bd77e61aa72d8b82162bb150d4232e21c8c9453d89467f9e00fd5148bee49da206fbe6357bbc31b111e68f0b95c37063a6c5401a094819e28a2104c37db5624fe075d0b2cc50f7140f4f49396b43d14f93ab9f9649e2dc694cea520cc068a3869a3ea4ec599a995f69d936dd62e2b81499f3ed4879d25b90aff3eae74b28ae35f18f0b457a5af35e2ede43786958b127ef76723d6ffe0e7e3346d5a9f0aabcc0d93fc085316516ef79b3e2400ed2946a0d1b2ace13ea7ed39ac51cb9d98cf70feb30d5bad39f6b5903e8ab654f48bfd7e54dcb502b158f68bd96e6beb4392fa59d3e1048803e4749f3ad522414d3180de3a0da1227bfbb704b66ae6a85b1c2c51e484622eeb169760e9ec50e14c014a0cc05aebbee77f31b62834169cb49bec0c43090506c8f34ca6e108e6328ced7a9f11cb3d57398b0b1d84c9e75d5cdf17766d619dc2658aacb900ca0f93aa248d702039417b558b8ab4a41921154153cdc86d999b2e7932eabb55a4e6c8c03029c851a9e84ef84acd9affdff84ffc063bb1ab6c97e169071edbe524462fef9116edd9fbb5032478cd5ad2b2c5527fdf64223dbc952fb528f7b1d817ca787f8a57992b40202ca124cd27eadd6d70351379a6456b697b317d101514d1d5d61002e4f3bcf7555c6b36c4c1d18cba0fd4fd7b3a246b72d47d7c1908cc9c3a29fbf43019b5179b0975d7680ec15720f7fc8b96b13522d058ef009719580227489ea68062cc735cca0b6a60a10c44f2b75d2895be41a278c50e62f979674c9e507dfa7a0c087c4fd43ccc32357e34c0bcc526fe43bed33e99632c84ea59780f78e7954d8e5430c9acb7d9dd28ac3761515cba6064fe81d3b4541dacfd6fb916735833704a5cb1723f867322fa806a20d5029a608986b5019402035bebf3e099547702409815bd1d3c63072fb0fc216c2186048f1e4ae5288a12a5c9b25f7649899f84c8aedc3721334d7bcdb656f8e3c0f2b7e40b837a15c9d6472b6acb58a39babc65d08e529f2f690ea780f43c35698610351fde4615efafba129b2b619135f8af77c7291483262c5555f4d66173b34c5c7f1c415cd6ab15ae4cef34cf5680e11332c6863d2140f00cc3a337b23afb0080fa54360282086b0c0faaf2bc2a9f7335a96fa8af6a52a1e04eed2e7c337d1e378545ded0d0453b8a16b6d0a90860dfe560528515005ba852a314b4540206a8513e73212c65fb4b35f4ac7050d18bd62a6c720cfda30cb2385d3d5217655db1f344fc34361b83b22d31a040366acbdc28d397254b41c3b1f0d20e0a5db4df6338e78ae09b38f82c71fb0208afbb506461384bf578c607e05ad5a6ddb708b9add5d4d363877659a663827136b4dc1b4012c7035a56bb91e14a3d22b3ac3989f91d78808758d1b5bfdbfc66d3389e3362987e13bf9a9747373c90c0c658b7b832eff19aa2f3667f79bcd073765308fbabf2d612d0445fa1be6280cb9d0ba759d218ae971d3dd5d458c10d14f154109bfb2fd03523ac5748bcd8582dc3be5c28ef4be94cb55fdcb12a6271dbb7f11fd33d61382096588167a2b20b02cc43b88729985073a5b21b8e4bb2c43894d7c88bf111576b3b56f905b1f23f0570c07b475d5f86508c3489f4f2e2d0f3b11bfd6c3c58930483f9345f4f755089848c42361d4b0c0e855935d7f6793f78a68b554358b810cdcdec350376c94486c67fc5d11c0a68873312b40b49bb29aca16e1f3e3ce4da7a9e7aaa6ec1d9932b78d9c12c45e61b5f6faa6ffcb21608fc61bc4180f91d26f9db592c98e532d60c28e9fab794ab8a62c21122397193d8b5b72bf050b07f79df5e14069b56359835e3048f182629328e4a72a1fd0530182c802744611637e93deabc6c3ee30041025026be97ac314eaf7b399b0702cf73848e54f355d766121361398609078057473c2aa46b2fbd7e7a7d6d039615eea23fd223c49a9b5b5fd7b0c6f30c9b0e55fbebced3c90ceb668e6dbd5e6511c19d32c29b5fef7d06cf2ffff7872bd541d0fe70e5991ba3c19e72d5533e6fe9652c21338ced211c7d9e912486b4de29998ef4cca892fe94972b31fa33e781386b75b5d6980a9bfb887d7485d71f6744a6f87bc407ccd03281e10eb1bafd5d9bf279d362e2a49e54187e40abb06e21ed8425135a169ba5b8e1a806951352580ae135dfbbe3395e18ccf67fdb891903934739b56dc0e49e258552dc66d46eadfed9a7ceeabf20d02aee2c8ce4060382474252ccd9bab03d7e8eb77195bb712c19e066153bef5a212f2a450d4a1280d243928f3add450c2544c800b507c8b8ffc5d7f3cd9a4526505d05d04fbfdd0fc1f996ba3f4a797c96b24af37c15859b4bcda9234750fb6acef8dc20893ac5051b3d6aee60f01fc34e3b6753848fdca9b18e461c87f08fb8d67ddce234ca56bbe021f468f964ec1416ba6df0434440140090edd222cb9534830fec026788f43899737771e67552df68fb81d90aa90fcc1149149aaa96c1730829c6856407e5194dd2ec7cfe5fa419c2ea6127039ae188649b2cfccb9faf59f45dc9af76f3cb17c8224e68fb5f81b4556980542a928f9563bebcf3db248cff2183fffff15710432f8691041fa8aceb65b6454e9c375402b599503fb4881a3baa5ba58893cac154575ef0ec8efe35a6eeccb98d081f6d4cf2661b484765ce95bca5bda75fc90e630e355d0dd6d22a5d4c7990931ac160da14f211c33b668edb93cd9c87de3881c47e4b0fab746d0e931600478c9cc2e3cc08eab1ee7cb4e3749ab44e7ab4be15e5b031e58d59b294fbe794fb5760a2ceedd1cfc4343b1c2886b0721945a109384cb00fe6e9bdf09e5e406e757a6f24e659495a11a93382d5425d6fcab1d802303aa1531a120b8f30dd17cac7385bb8455503b2ff0daf8b4dc5353f88f34c894fc0b2fd2920c97432aded8b89fba9a9db4c4f3498043f936a1cb0dee7f5d902b1f6d909b637b8e2f05d31a2640eb1ac556ede22006466014d4a407e3486f94ca676ef39be6399ca24bff48b03ab1da71d1a5e3994d0a8723894bfbbc33969923970df3a9fd0b5084a6cbb41f79a0d3338bb61e7dc2cf795f2fa883aa61d7820c4e2215744dd9cf517cc5921850d1d9aaaaede5fb125e663c830c2414655d6af43a90f9b79eccbc2c009b963b503827c7614ab8824b3289ed8e559ed644a163db18fe66789037eb599be39fb66955a27a4831a59322d39b95b6d571d8fffb5352a0297b449719a5246247ec4c24f40b5ace1c8e76fa1029a47065af4adfc03b2732677f81bf9729ba06380a330cb388c9e4f50a0cf4ceb5ea8b6bdda8df0839de274c0c7a57f7a9173d21832b7f19ee8cfc340eea461ce7956f986f828c91697c5a241cb9efec40a1a0f34a2a63821dbd50a111b368a034823191dbd3b7a9fe8bee53cada1902f2a278efe3f10eecbf8279c2f9b2e7bf542076bf0bb41e9f21e766741f3ecfbd5a38158b1ce884255cc227a7b7196f966b631c228fea918d8dfee020dcf4c40231c0ab6fd7ccf4e7444fb360f2be3c1519a577dae770a14cd90df85490995fa8553fb255ee9807e0c7617c582f82ac56a0d902c8cd58244cddcec23cf2a05a79b474c716d9ea92bc28b0132ec48a3c5257dc7e1d9cc3f760d559b5c12ad75c95497962f9a564b0d9ed29f44f63b2c56169b2151d699e8d2d570d94f5f37898d3d8abde9253354fd146af62ccfd171d9014fd4d142e2e390f3ce2370165a01aff0fe566ec44e3084815cecc85540d84d8a11d0504fbd95f2c2709b87083b3cfffe36f611a4a6b9e4237a350d1ad4b1e0239946d86ce535e9f07def01a5e6d2e65ee59f380e55c9f295478c5589425852fd22eec2d6e555828ffb4212b33ad530c38b76254d2baac6bff5f94d3ba19ff4b35cb1c972c0b538e1adb5da70affc99c99c0613bea6111848054b416d26368c90784d845f0507f89fd058381dc7d6c6bb81dae94d11e3a0de778aca82814fec0b63780fb2b4f480da063411cd66356f87e68780448ed0c1f3836a46e536609d672d7cef1cffa0614a4f6286ab7f3fab0baf595b4c3c2e43f979f4f4a89165c24698f71406b4330a333f6c8ee018420b2b47735295043123459fafeb5886fc044a3805b162714a3436f58264c0713a4be82a7550f37f88cd7f61c0ec27d887285da7ecb4eb32963c8205eff6d5bf532b72976c5f0a24d6d4d2bf4030f04a47a15fb4de2631361fe0895aeacd2028401c5c183223647c1e765e6406542eeac4d979e6a493e389a649af7ddb35fadd32cf1edaeaaf0982ae8131084ae4759e2af1dbd007f7ce00900437be6d8d3559210b3011d1fe52e8485cc5c14ad4aab4c03c7dec4302e7f72abb7fcc799899cec17308151a758b810369c4d53c443cb1278709df6336f84fa39e51d208b4507a31e6f06352dbd99d7dadd86215e47ed645a9b89bdce630cf80fc1fe59dc31eae39010a930965b3b0e0f595347158d683de6888f3284c1fd47b3e79e0fcc299cd4f519ce067a007ae7ee906d639789fedc850e60a7b4be9dc525e3e58b01f24b065c4b21b9011e74030aba77931bec74698557b4768ae41eeb4caa2f530578bf1f9379fb623a27561bba03c7623400ef975ca2e2d6881e0f96fe1e7f9ec0e8f6aeac30f70f848399c6dc9c4e58bf50aacbe566965b257943f6c9ffe210af0cb488488d67b09164d98f3254cc313f7cf8dab1f2e1ed3a7e4a86ad85707d4fe0e7fe483c7f311912e92bee9b17819b53a39c374cfbadf8c3641bae4177aafacf3394af12310f222dc0a67eba49c1475da8607c25f3ee7b1e1e0961c7d319b32ab549c002b93852af7146f5e74aab020446d9a446582a2bc19a730bafcca463fbe0cf2664e10746ddbf0966ec1e327e1f8fa6bb67e18cf849fa810c938695de5f8df98d3004065c787181f4bd8324c59b18972ac5ca92f96c51b4a63ea130712d70a51c49def99feb37312fa6a52e188de88f5446fa4688514bf96f195bfdae4b248445ef5a37e5c0169c7ee42a8e613e71793486bfb24e37bd0d9f0cfb3db61b45ed731edd5c4bd7b6b133f5f3f51fb3a12e9e43db5a23a4c6c787c803791341f10aa083760413724031ec83d5d5c03e9d3585e6a6c87f51ad4db6d678cae14936c09e24fba69e90fe4c2ebed615e254b1d2a25c12b07c1226c0e9fa9112a49cffc9238d3303d3a9a293c5bdec80545e76b911aec6f956d2122d0ee2bee424aee05e0a25a7ff72e3e1c10f590380f82f1e693fb45b1466cbc7e8ee741ca97775c2ae15c1ad0f4a8221c55e82b4e4ddbbb3d88516fdc26969707143e3175f56b07ea8a7d40660ee346a511e0985c6cde95b573dab7c53cb9d32eb18bdb67147b562dd99124d744703492a89dc8cf387ad17a992a6870ee683953c70547f2c70ac44ddc4563fb0c0c23ac7b806a0172a3a74db45378568306ab3036b5348f96ddec344a899b6058179c070cb5f3a478a02d94dbd836a0e2223194e406c2296ceb6dd39667ce62b4c191889ea052f382b9c051c272480111fe287b84c10cf7512a6dd0a601a1cb41545915925a63bd09f9d77a1bc156a7d822e204029363b3c713c5cbef590efd01c4ffe00b816745a37d83b27ab05c3a0c2d6ff800276f3fe502bb3bd7b60b38d32376246a3384554072fe63ec409a0182d588b839d319c680f830583db3e4f5071eaa066689e9e19539d9a12fefffe223288b77600dabde9b2bea871cc1ea2b3318a9699d736f02490d76c1e457aaf45ce318445ce10625b43059694e996ace387580589f9f37944b799337fa38ef9292d2276e0f659471134aaef911514212553779be2ba00816187465e278ba2d03e66cd633f9a274ce882ae971f2d07cb4fde38bf88327aea83d5303011b0263f24630916b796d532e5437179882b0470dbf8d693bbae4015ef28b3d57b5e3b643068dc1d1921291f4f1280a8183532298dffc2501cd3ff0bfb6b0e61d2a59c596f21b98db4d730e155936e98c95c96ac6231b1232e4ed89ce65311fe66199e113f9f69084c31444ae9f106e909bc070d83c1cffc514189c1e0b6763c2732a227a6229407af592772c2b843fb944896ff61161449b6df045ba618d117d8361733198f0963850df3e077aa538571efe279f9c7e006e2c882f5301706ee2bbbe769164cf7d9597d0142d0052641eb43a9ffe76d978384ea8c10050a80021d3c9177fcb29652b4906081d926ea23e749c9272731aff7fd0c271ac4859a5829c5b406a1c363752fecb1a76b201a0df467efd6ffe6adc0debe36ec6d1fc84ccebfa07cb136bbea0f1ef74983bdfc087e050430f5aa395cd8786b609941fbce55ab9f304ba11910a0790685cab24847d85f8bc7a5784a4367ba06690cf1a88acfeddcb7cc44c9797f4f0e5daf9d301c6e702652268530c22df26d14da8768a8951f26849fa1e20015878cb6332d033531b8128233e61094cfc5dd71ba9af36ba6aa1c37b24805a45c3dd302bbc1dc8e9348f9a47540e14016bd5357e7978092497b800a97425363a42454eb04c32c9ac959fb37eb00ed6e31f81b2aa67d9f4930eb31dc2260151d845f9865d2b3a301ce3bef54a977492039eb908512a083087961f90ee568c5e5c60d6e726dda2c3f31c072979e09d8fd6f2365f65ef46399a183511904226d8ec72805582107ff5951d2e0d5c028d29e940fa068c0ca1c238420e53297c31d68f70fb543f347d91afb5d66ef1e8460a1431b638a6b0ae259f7fe8eb03aae9ef1ea4cfcfbac7e7b20b5c46ea8b0a2e88527bf54fd866362ab6a99e466bb029259f35711bc376b2f70edd738b48451f20ee404938821419ee5eace0171b3fd73d57bf0a723152933ccb84d567e79737b33e334dab955cdc03298215a2943ee493d815af83d48ee808a5e508903cc574ea4b52de645a18b0f43cd6b81a15a7f089cc7596adde2ea693381c7eaa2e246b9cbec98bb4e8ea3db8b47e57ef8d3a2eace3e2dcc083f6625f4e86bdbe2d6c57fa8ae4902ae9964c847eb292998d485d3326a7076360b85365edd5b733876abb5e26943481a52b10a1c95f34aed88568b873ef481798fbafe036d5d580c7437cb1a651e2a89d98d9002d0bf6418a271f9808df4b2ceaa8508e6c1d7d58e96d87f6db011395a0b74cb39e066411fef6c8ce7942ef8d8bb826be0b06ecada10e46f7ac25eb7ab0e3339752c8d0784659d72a287ea9a5e3a699977456695a6f9fe40eb8f7269b414cda403ba94f512c332fcea82f1927a5695ea2eb2ce7380ae74a0672ffe7fd2c4a19715a984d518b5be67543c31e42962b4c030fbdfedc5977b03d85294db2578d6561fdd9e0f9cfaf7eb1609bfab67105b227ec43189e449c4f2f17b8175b3afb0087f70786673353a3913cd03240761b5ff91a1e6510499c1f4152a759b1ca39ace773a1f27a5a88bb94a4201a91addf5c2c8587547e454d186b562cf89a41a02c36765565c3d753a2d8127d3908853f5ccc1c35346f22284573695c5695a520ace2d0cd13c1138b1fb10f74487b9a2c7a5e01195a1629d3e5d567a77a2aae2e74e24d2936c2618c63eb5cdeb64f5592cb38175d416c05588f03b287c6e16329fee69c8294db5b5bbb81499d7ef18ddb93144c897253e8330cea3be31bab73de42284fce239597ab7cd5b68cfba057b01aaab0f0d4191c31b407fd8f9c7f04eaca31e5d240c7910663bde4ad478f134d09dca902e6acdd292f2745c73cecea2204a56d0098c32da73eeee41b348d5826109ccfd2397bb73a25ebb7e95537df71cce504f14c219ec525795d2fd5027cea9810aadc77e1b874f9fc4e33ed7b90a4007bbc341493302e4e2cbca2a8229fd2c3db7faecec2b8805bde9d92a29f6a7096cfc05ed5b678566e6c079dddfcc0b6c17541047beb477c4493a1588be177490db134d69a225aa6848b27494f17c3882ea2ee436ac1e981256ccaa70ba1f7a621385694b62bda8c4f6b04c61d6798afdc9cec019392d1242a35c3382b09aab4999e1b383714622f2ab80f275ecc8ea67694f020466aef6ed5a4535f32df47f0478e00194b44b9003f6dff232bdecbdf2a06da35246dfbc0d40becfdd5ecf971f0f408913bf094282fa2272cc5683604945e3eba52231f131c81b1035dcbb8a4292059ceaf92f36877aa15049bacc544d2c9bee4eb1bd01d76861557e646082f118454c37bbc7d08a311b4668f2777912cf882439b47e7d3c08bfdefe31e3effcbddf9e5bf175fd7c1ae85f6436cd817580970b3d8303e33ea128d222e8adb1de246fd9583c0385fe89bbf9af2cd82a38083069a997175fc7e96096052d55620554bd723b28de9a177b0aa0a5928d3d991c7da85a3513b1fffb8c75b5bc2874491ac6affc2a71ef1d639a90bb4c53624139ab8764f60e7470592608a520dfa0289c3be27e2a8f6525a31830aaf887213285eeb4286509c4904f2f5c6058e07c9c5c7886e107fc8b6411ea86bef63c88c863c7d7be52424a0126b8642d83946792de32c6150e9ce9be9d20eada4b47bd24fda102ee8cbc3a870743ab1839f979076b79cffac7d2234db5b345de7f994110bbb873a7058e5ad2fe9d9f0527a4a7b3799f81a06c9ee25c1a4a6317c3c454e9b9bb03360775184c37897db2e23dda4fc5cfbbdd477f564ad48416224ab75742d8d2375773c34325b36cead158372821e3db81a2dc99fc4293b39b183f1a71afbd4faa5e66a0d457f15424ca9c39969a85226b03b1ba8a98b0655a4581c7849bad2b1e5eb09236284779235ec2c0f44d547705298a9076bd32cdbb0a1169529a4780629e8cc291bbe25d98eaca72e934b7ef3a26d60dcebb509b8122d9d3de366b1c81c01e1a3f2ec0556d4759917612ba175b48f47534e592293e50e66dfbd0e1d0373cb3f58a43f3c32408ceba4c2614ff35b72a2cc03166f9866904f7ec19650edc06ca73ef63fc759094ae06a8405144dc22a0480155057169e59897eded975544a3e26dc0ba673a803fd35e16f6ef4695fc554e0c92fd97d3287f368b06ebb41e7d9a5956ceac39f27a82dda86f981519e31f544d844109d5ed58c159e7aa1805461149c604f262a1dd0c2f072f8f5b9b9bd4542cff3050c85b981dbf1731805fee07a4f92bb1828842f34395b90b76834a624690bfd431185026fd090c8dce10ac30ea68502dc8d2d85f836eb747c9bb8b6d16da1cb692f33b77f80c05b250496f3a880dca37c6514d5b5e2cf90d0b18bc31fd27a2c96110b9aacbe2afce417c415778e58e0b9ace5f209696980cc45e51bc292b3d5c247e2c8fffecd214d927aab0fecd0f50b359df4971944891fbefd40345e7f14e833486c126df0c1839032e64fa59280d699eed79f03acc206d6a5340cc1c5deb4204cb8780830497f23522b89fc503e6a8a01d11e83de680bbaed65fbd970c71e2087213c3ee64280bcc1f616a274c11d01f0d81f084c3873bc871d50395e05f658a75915118b0da8281a310fc905488ae03aa89726d74d6ed6da76d6dffcdafd7b4d2fa4a867e9b42cdf71db56c542ccf1270974f1efcd80f70fd463d2cfc03c8e111f2d1232bf6e228123c316ecb60eb6d8f650e9281381d540b29b520be3f921bd314eff9ca241b69d95e78256f1bfcbfe37a9f094716d36af6e1ce36184bc6a4dfb88320ee186f52db245dd50d8af51f489f792494c14efffdb88faa1d9ad1d633b327b7ff6523bbfdfe4274b856bbca9e2847499923738207a399dffb514bba855b75d12c9c57aa2e58db0000210f5ad375d3b697f3dda96f5f78c13bfd6d01a5050e01a2e55cc2695a3f2193820286a688cc144fb9043e7c6772bf2cbd7bb5a7a57fee1c18dbdfaadfa5be0d1adfa55dd3a8480807708ee6e11d9f9dfc5bc682e104795928e56af800b42c9c07a25237b092ba1e93a525ed5b5b39ad6e02ac6b41e136c904dd4592370c322f5eb595ed30fa00a277928dfc765930af1c2936f5ad2425c411980b5bb012e0e240c7d50f16ba990540a765cc1fef3809a0344ce6d083ab8705378fabe14a2e63e12eaef453273a78a7d3fabff1fe6a9ba07e208740ab8ed6e50abe2a85b649e1d3ec2f3191e010b50a7ddffdfb25e53e196775655a1ae707daafc4e9709927eb961faaeb1be21ddde0fab9665774086c34af3beac362a5cb712b786a5e1c8811ef574c5b269946939ed530c5bf42306016b69957dd57d83c88cc32a366c0aacc964c693fa7e03c1e89832f2076ec03995f1f9b2cde66acdffa3ca33776b61176369c78e87b2eeb0a14d7cbbaa597c0ae8e1014660baf06e22a6fc4974772975b7d7d003e6bc6a4cdf4cd5f2a95dcfc8194d93b273e59baeb350935aef906bdb94d1fd3c0781aa8fcb17f3f68c9afe090ba059acf599d2934481eae73717c4354c8c2b4d425ef7073968624c5d91e46322cc23091c58643316acff626f160b9cb770e0d9595d33cb6f44915d7efb6747973ffbf34119bba44d074472e661095012ad94af00463520deb45a6b6b7b6a173b23aef637e4cc0363d43c5ddb43c81936143f7db63f7f7771a611930f9f82a12f3c59b0f72de98bbc75ad33f1823fa872be154b19f16f0fba01ac3d64d46cbfc1850d1b4b5790cd86633b1880b86fc34a8b9f31100950ea0bda3abf2b037e21ee348418df67cc1d056d74125f9c73b42b104b6ad322ffebfe658dc3c0a06af44d73324b5ae59e2bd99d4782ec053ea07513a271ecf8651b25bc3e026bc88a4aa1513a2b4d4e173c1e21c77302ce64be8331c4d5b6203bbccd96dfbf9debb29a167753e06c55ca88550ec186bd20b3d94f7c2af719bc638cac3f8cc6c80220fd5f4be03bab9bb975e5effa4c5eac098c531590ec5eeaa90faec3630671d9e1a454577b01b73bfea67456ae187f0e61a9292612f428ab8c5780a3803b7dc2ec8221181db3876f2c00", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x68ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9m19.051336886s ago: executing program 3 (id=55):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000))
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22)
creat(&(0x7f0000000380)='./bus\x00', 0x4a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x0, 0x1a, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]})
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000007c0)='./file0\x00')

9m14.629233227s ago: executing program 3 (id=64):
syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x20000000000002)
syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @remote}}}}}}}}, 0x0)
capget(0x0, &(0x7f00000026c0)={0x3ff, 0x0, 0x4, 0x100, 0x5, 0x2})
rename(0x0, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)

9m8.463320261s ago: executing program 3 (id=74):
prctl$PR_SET_FP_MODE(0x2d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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")

9m6.737527095s ago: executing program 32 (id=74):
prctl$PR_SET_FP_MODE(0x2d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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")

3m31.043050436s ago: executing program 1 (id=780):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000009c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000100)="27030200590200000100002f1eafaef706e1050000004305000f110186cee84400000008000000001900000000000200", 0x30}, {&(0x7f0000000c40)}], 0x2}, 0x0)

3m28.645140507s ago: executing program 1 (id=786):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)='\\', 0x1)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0x2, 0x20000000000000b, 0x1, 0x201, 0x3, 0x28, 0x4, 0x78d35fd38012d97d})
ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f00000002c0))

3m27.671479931s ago: executing program 1 (id=787):
mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
rmdir(&(0x7f0000000540)='./config/usb_gadget/g1/functions/gser.usb0/file0\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x40, @empty, 0xfffffff9}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
shutdown(r0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00', 0x1eb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x166)
ioctl$TCXONC(r1, 0x540a, 0x2)

3m27.532167575s ago: executing program 1 (id=788):
syz_emit_ethernet(0x2ee, &(0x7f0000000440)=ANY=[], 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40080d4)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a")
r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
fsync(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)
ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f00000000c0)={0xb, 0x8})

3m25.755316059s ago: executing program 1 (id=795):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m21.623323962s ago: executing program 1 (id=807):
mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
rmdir(&(0x7f0000000540)='./config/usb_gadget/g1/functions/gser.usb0/file0\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x40, @empty, 0xfffffff9}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
shutdown(r0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00', 0x1eb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x166)
ioctl$TCXONC(r1, 0x540a, 0x2)

3m21.036412987s ago: executing program 33 (id=807):
mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
rmdir(&(0x7f0000000540)='./config/usb_gadget/g1/functions/gser.usb0/file0\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x40, @empty, 0xfffffff9}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
shutdown(r0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00', 0x1eb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x166)
ioctl$TCXONC(r1, 0x540a, 0x2)

1m6.819510753s ago: executing program 5 (id=1264):
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="41cd35", 0x3}], 0x1}}], 0x1, 0x20008000)
shutdown(0xffffffffffffffff, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000001640)=""/249, 0xf9, 0x40000161, 0x0, 0x0)

1m6.639742848s ago: executing program 5 (id=1265):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = dup(r0)
recvmmsg$unix(r1, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0)

1m6.495681491s ago: executing program 5 (id=1268):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
r3 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000680)='::\x05J\xa6\xaa\x90\xa8K\xc6\xa3\x13\x8d\xba\x88\x1b\xf63k.\x9c\x02E,K\x1aX\'\x86j^L>\xd7\xe7\xed\x16\xf1x\xd8*\bF\xdd\x1cS\xaa\xd8\x19\x86)Y\n\x06C\x10\xce\x9c\xcf\xd01,\xa8\xc7\x90\x87\x8a\x03u\xebg\x91\xc4\xf4\x1e\x83,\x81t\x80/\"\x81O\x9a\x06\xff\xa2\xa1\xb1,\xdbO\x95\xba-\x17\xa93\xdf4\x19\x1a\xd5 \xce\xce\x9bA\xe4\xb3\xbb(PV\xa7sz\xd3\xfa\xecZ\xe4HBc6\xc6\xcc\x8c7+GM\xb1\x18`J`\xa2\xa57@M@\xe8D\xb6R\"\x03\x11\xd7w\xf1\x98\xecP n\x0eD\xa5\xf9\xe54\xa9E\xd6\x87,\xc3\xb2.\xe3\xc9c&~\xbfPI\xda\xd9\xb1\x00\x1c`;\xc75\x0eRMv|', 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000000)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
unshare(0x400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000f40)}], 0x1}}], 0x1, 0x800)

1m5.160424685s ago: executing program 5 (id=1270):
syz_emit_ethernet(0x2ee, &(0x7f0000000440)=ANY=[], 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40080d4)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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")
r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
fsync(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)
ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f00000000c0)={0xb, 0x8})

1m4.679385237s ago: executing program 2 (id=1276):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0)
splice(r6, 0x0, r9, 0x0, 0x25a5, 0x4)
vmsplice(r7, &(0x7f0000000600)=[{&(0x7f00000000c0)='*', 0x1}, {&(0x7f0000000100)="f0a3", 0x2}], 0x2, 0xd)

1m1.579428795s ago: executing program 2 (id=1281):
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f00000002c0))

1m0.238910558s ago: executing program 5 (id=1285):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0)

58.385415555s ago: executing program 2 (id=1291):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000008000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)

58.228576299s ago: executing program 2 (id=1293):
syz_emit_ethernet(0x2ee, &(0x7f0000000440)=ANY=[], 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40080d4)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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")
r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
fsync(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)
ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f00000000c0)={0xb, 0x8})

57.278591603s ago: executing program 2 (id=1295):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8a", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

57.091327318s ago: executing program 5 (id=1297):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
r3 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000680)='::\x05J\xa6\xaa\x90\xa8K\xc6\xa3\x13\x8d\xba\x88\x1b\xf63k.\x9c\x02E,K\x1aX\'\x86j^L>\xd7\xe7\xed\x16\xf1x\xd8*\bF\xdd\x1cS\xaa\xd8\x19\x86)Y\n\x06C\x10\xce\x9c\xcf\xd01,\xa8\xc7\x90\x87\x8a\x03u\xebg\x91\xc4\xf4\x1e\x83,\x81t\x80/\"\x81O\x9a\x06\xff\xa2\xa1\xb1,\xdbO\x95\xba-\x17\xa93\xdf4\x19\x1a\xd5 \xce\xce\x9bA\xe4\xb3\xbb(PV\xa7sz\xd3\xfa\xecZ\xe4HBc6\xc6\xcc\x8c7+GM\xb1\x18`J`\xa2\xa57@M@\xe8D\xb6R\"\x03\x11\xd7w\xf1\x98\xecP n\x0eD\xa5\xf9\xe54\xa9E\xd6\x87,\xc3\xb2.\xe3\xc9c&~\xbfPI\xda\xd9\xb1\x00\x1c`;\xc75\x0eRMv|', 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000000)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
unshare(0x400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000f40)="d920560560c0b65f8cd584e1cdd7114131d278fcaac8458b7ec27f1de644af1ba2b1d8df86bde8c80c1ffa432d2d07a9824e40ee3d86b40e968966a7ed93bdf8c8240f0327a3d08f272e9e8f0e9c9a6db4ebb137aba3ca3cb685d43cffacd37533", 0x61}], 0x1}}], 0x1, 0x800)

56.677586698s ago: executing program 34 (id=1297):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
r3 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000680)='::\x05J\xa6\xaa\x90\xa8K\xc6\xa3\x13\x8d\xba\x88\x1b\xf63k.\x9c\x02E,K\x1aX\'\x86j^L>\xd7\xe7\xed\x16\xf1x\xd8*\bF\xdd\x1cS\xaa\xd8\x19\x86)Y\n\x06C\x10\xce\x9c\xcf\xd01,\xa8\xc7\x90\x87\x8a\x03u\xebg\x91\xc4\xf4\x1e\x83,\x81t\x80/\"\x81O\x9a\x06\xff\xa2\xa1\xb1,\xdbO\x95\xba-\x17\xa93\xdf4\x19\x1a\xd5 \xce\xce\x9bA\xe4\xb3\xbb(PV\xa7sz\xd3\xfa\xecZ\xe4HBc6\xc6\xcc\x8c7+GM\xb1\x18`J`\xa2\xa57@M@\xe8D\xb6R\"\x03\x11\xd7w\xf1\x98\xecP n\x0eD\xa5\xf9\xe54\xa9E\xd6\x87,\xc3\xb2.\xe3\xc9c&~\xbfPI\xda\xd9\xb1\x00\x1c`;\xc75\x0eRMv|', 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000000)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
unshare(0x400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000f40)="d920560560c0b65f8cd584e1cdd7114131d278fcaac8458b7ec27f1de644af1ba2b1d8df86bde8c80c1ffa432d2d07a9824e40ee3d86b40e968966a7ed93bdf8c8240f0327a3d08f272e9e8f0e9c9a6db4ebb137aba3ca3cb685d43cffacd37533", 0x61}], 0x1}}], 0x1, 0x800)

56.1794467s ago: executing program 2 (id=1301):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000008000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="00000000000000009500000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)

55.581299795s ago: executing program 35 (id=1301):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000008000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="00000000000000009500000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)

41.628013325s ago: executing program 7 (id=1302):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0)
ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
setpriority(0x1, 0x0, 0x8)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0xd, 0x8}, {0x8, 0xa6, 0x10, 0x5}}}}, 0x15)
accept$alg(r3, 0x0, 0x0)

40.987378341s ago: executing program 7 (id=1334):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100000000421b211f6cdffaa7c8ec2255bab0013c8b691dcac75fea9077145128cff65a23abc9e4f9d08e3cf514f5fcb3982131b9c12564e90a"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

36.576928912s ago: executing program 7 (id=1344):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000000e0601"], 0x6c}}, 0x4000c080)

35.439396411s ago: executing program 7 (id=1345):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
socket(0x10, 0x80002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

34.227336461s ago: executing program 7 (id=1349):
r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @vbi={0x1ff, 0x8, 0x8, 0x30385056, [0x7fff, 0x9d], [0x218d3fe2, 0x37d], 0x108}})

33.4565612s ago: executing program 7 (id=1353):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0})

32.522611324s ago: executing program 36 (id=1353):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0})

11.311482016s ago: executing program 0 (id=1419):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ae1000/0x4000)=nil, 0x4000, 0x9})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10)
r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/\xd15)\xeatn\xa3\x88\x13i\xb6\x7ft\x95\xd7\x01o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x94\x00\x00\x00\x00\x00\x00\x00g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xef\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xba\xec\x99@\xd2\t\n\xb1o', 0x0)
userfaultfd(0x80001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), 0xffffffffffffffff)
r7 = socket$netlink(0x10, 0x3, 0x4)
write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0)

9.277289687s ago: executing program 0 (id=1423):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0)

8.435460468s ago: executing program 4 (id=1431):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

7.361890495s ago: executing program 4 (id=1433):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
move_mount(r2, &(0x7f00000000c0)='./mnt\x00', r2, &(0x7f0000000000)='./mnt\x00', 0x137)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d98", 0xd9}], 0x1, 0x0, 0x0, 0x4048810}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000002c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa13fd664a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d658ef286087e0", 0x60}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c9", 0x59}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a13024", 0xcf}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r4 = socket$alg(0x26, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000046ad00201d680000ac1e0001ffff02009404016011f3305280f125e6"], 0x2e)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

7.217185009s ago: executing program 6 (id=1435):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write(r0, &(0x7f0000000280)='1', 0x1)

6.088554187s ago: executing program 4 (id=1441):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"})

5.778411725s ago: executing program 0 (id=1443):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000004c0)}}], 0x1, 0x20008000)
shutdown(r0, 0x0)
recvfrom(r0, &(0x7f0000001640)=""/249, 0xf9, 0x40000161, 0x0, 0x0)

5.778285885s ago: executing program 8 (id=1444):
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, 0x0)

5.037668674s ago: executing program 4 (id=1445):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
shutdown(r0, 0x1)

4.975463235s ago: executing program 8 (id=1446):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4.900255927s ago: executing program 0 (id=1447):
io_setup(0x8, 0x0)
io_submit(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2)
r5 = dup(r4)
read(r5, &(0x7f0000000040), 0x0)

4.810170949s ago: executing program 4 (id=1448):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff)

4.77686s ago: executing program 8 (id=1449):
epoll_create1(0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

4.471374448s ago: executing program 8 (id=1450):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x25, 0x1d, 0x4d, 0x8, 0x4e8, 0x6601, 0x310a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0xd, 0x0, 0x86, 0xb3, 0x4c, 0xf8}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cf70f5f1bf1e4312b85337e339f73730d02bd30902aee137a6c643ced74e45eca5cc0b591c615712f57fcda82dd4dd85a9268ecbb79a1995a20fa0b9e79c2b17a1072b272f"], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000000c0)=0x7, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file2\x00'})

3.816826144s ago: executing program 4 (id=1451):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1})
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002980)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff1, 0xffff}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x7e}]}}]}, 0x38}}, 0x0)

3.810984974s ago: executing program 6 (id=1452):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x1b, 0x19, "7d55080d9da72995d8b041fbad4536943c3aa8341a5fe0"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

3.775960605s ago: executing program 0 (id=1453):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"})

2.77637992s ago: executing program 0 (id=1454):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000b00)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0})
r6 = socket(0x10, 0x2, 0x0)
write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fd", 0x1d)
recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

2.567101825s ago: executing program 6 (id=1455):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x20008000)
shutdown(r0, 0x0)
recvfrom(r0, &(0x7f0000001640)=""/249, 0xf9, 0x40000161, 0x0, 0x0)

2.506585867s ago: executing program 6 (id=1456):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
shutdown(r0, 0x1)

2.064582648s ago: executing program 6 (id=1457):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.847096683s ago: executing program 6 (id=1458):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f", 0x30}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd6662", 0x54}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

61.618798ms ago: executing program 8 (id=1459):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff)

0s ago: executing program 8 (id=1460):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0})
write(r0, &(0x7f0000000280)='1', 0x1)

kernel console output (not intermixed with test programs):

e_branches:1030: inode #11: comm syz.1.424: invalid indirect mapped block 2 (level 2)
[  322.513849][ T7555] EXT4-fs (loop1): 1 truncate cleaned up
[  322.520774][ T7555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  322.621802][ T7555] Bluetooth: hci0: unsupported parameter 255
[  322.651647][ T7555] Bluetooth: hci0: unsupported parameter 255
[  322.839154][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  325.872061][ T7577] process 'syz.2.432' launched './file0' with NULL argv: empty string added
[  328.067693][ T7591] loop2: detected capacity change from 0 to 512
[  328.151681][ T7591] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  328.262412][ T7591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  328.270587][ T7591] System zones: 1-12
[  328.392057][ T7591] EXT4-fs (loop2): orphan cleanup on readonly fs
[  328.431759][ T7591] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.437: attempt to clear invalid blocks 1024 len 1
[  328.515049][ T7591] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.437: bg 0: block 361: padding at end of block bitmap is not set
[  329.792484][ T7591] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  331.052987][ T7591] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.437: invalid indirect mapped block 1811939328 (level 0)
[  331.993007][ T7591] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.437: invalid indirect mapped block 2 (level 2)
[  332.007182][ T7591] EXT4-fs (loop2): 1 truncate cleaned up
[  332.014545][ T7591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  332.132573][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  338.599572][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'.
[  338.652998][ T7640] bridge_slave_1: left allmulticast mode
[  338.658854][ T7640] bridge_slave_1: left promiscuous mode
[  338.726264][ T7640] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.824359][ T7640] bridge_slave_0: left allmulticast mode
[  338.830274][ T7640] bridge_slave_0: left promiscuous mode
[  338.837196][ T7640] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.667746][ T7659] loop4: detected capacity change from 0 to 512
[  340.729008][ T7659] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  340.767449][ T7659] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  340.871669][ T7659] System zones: 1-12
[  340.876043][ T7659] EXT4-fs (loop4): orphan cleanup on readonly fs
[  340.894324][ T7659] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.452: attempt to clear invalid blocks 1024 len 1
[  341.061667][ T7659] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.452: bg 0: block 361: padding at end of block bitmap is not set
[  341.081882][ T7659] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  341.124341][ T7659] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.452: invalid indirect mapped block 1811939328 (level 0)
[  341.142641][ T7659] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.452: invalid indirect mapped block 2 (level 2)
[  341.242413][ T7659] EXT4-fs (loop4): 1 truncate cleaned up
[  341.263042][ T7659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  342.122726][ T7659] Bluetooth: hci0: unsupported parameter 255
[  342.128993][ T7659] Bluetooth: hci0: unsupported parameter 255
[  342.333555][ T6134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  347.242530][ T7693] loop2: detected capacity change from 0 to 512
[  347.293528][ T7693] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  347.374556][ T7693] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  347.499706][ T7693] System zones: 1-12
[  347.504488][ T7693] EXT4-fs (loop2): orphan cleanup on readonly fs
[  348.842366][ T7693] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.468: attempt to clear invalid blocks 1024 len 1
[  349.032672][ T7693] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.468: bg 0: block 361: padding at end of block bitmap is not set
[  349.093687][ T7693] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  349.153914][ T7693] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.468: invalid indirect mapped block 1811939328 (level 0)
[  349.271770][ T7693] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.468: invalid indirect mapped block 2 (level 2)
[  349.316167][ T7693] EXT4-fs (loop2): 1 truncate cleaned up
[  349.343297][ T7693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  350.669150][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  354.532707][ T7741] loop4: detected capacity change from 0 to 512
[  354.579684][ T7741] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  354.616447][ T7741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  354.637242][ T7741] System zones: 1-12
[  355.422385][ T7741] EXT4-fs (loop4): orphan cleanup on readonly fs
[  355.522458][ T7741] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.485: attempt to clear invalid blocks 1024 len 1
[  355.582331][ T7741] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.485: bg 0: block 361: padding at end of block bitmap is not set
[  355.628630][ T7741] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  355.676803][ T7741] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.485: invalid indirect mapped block 1811939328 (level 0)
[  355.721564][ T7741] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.485: invalid indirect mapped block 2 (level 2)
[  355.783422][ T7741] EXT4-fs (loop4): 1 truncate cleaned up
[  355.825001][ T7741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  356.948755][ T6134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  363.232782][ T5810] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  363.437873][ T7799] loop4: detected capacity change from 0 to 512
[  363.450317][ T7799] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  363.463908][ T7799] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  363.473612][ T5810] usb 1-1: Using ep0 maxpacket: 32
[  363.483253][ T7799] System zones: 1-12
[  363.488106][ T5810] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  363.497311][ T5810] usb 1-1: config 0 has no interface number 0
[  363.505060][ T5810] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[  363.505960][ T7799] EXT4-fs (loop4): orphan cleanup on readonly fs
[  363.516245][ T5810] usb 1-1: config 0 interface 184 has no altsetting 0
[  363.540819][ T5810] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  363.553101][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.561578][ T5810] usb 1-1: Product: syz
[  363.565857][ T5810] usb 1-1: Manufacturer: syz
[  363.570537][ T5810] usb 1-1: SerialNumber: syz
[  363.586795][ T5810] usb 1-1: config 0 descriptor??
[  363.593814][ T7795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  363.603905][ T5810] smsc75xx v1.0.0
[  363.612280][ T7799] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.499: attempt to clear invalid blocks 1024 len 1
[  363.633956][ T7799] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.499: bg 0: block 361: padding at end of block bitmap is not set
[  363.665017][ T7799] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  363.696050][ T7799] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.499: invalid indirect mapped block 1811939328 (level 0)
[  363.807721][ T7795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  363.816006][ T7799] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.499: invalid indirect mapped block 2 (level 2)
[  363.881716][ T7799] EXT4-fs (loop4): 1 truncate cleaned up
[  363.901420][ T7799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  365.455534][ T5810] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  365.474996][ T5810] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  365.508185][ T6134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  366.976719][ T5810] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  366.999601][ T5810] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  367.020845][ T5810] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  367.063354][ T5810] smsc75xx: probe of 1-1:0.184 failed with error -71
[  367.088649][ T5810] usb 1-1: USB disconnect, device number 2
[  369.977476][ T7841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.147272][ T7846] loop0: detected capacity change from 0 to 512
[  370.173822][ T7846] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  370.196372][ T7846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  370.238640][ T7846] System zones: 1-12
[  370.257574][ T7846] EXT4-fs (loop0): orphan cleanup on readonly fs
[  370.272867][ T7846] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.518: attempt to clear invalid blocks 1024 len 1
[  370.317301][ T7846] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.518: bg 0: block 361: padding at end of block bitmap is not set
[  370.389447][ T7846] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  370.399393][ T7846] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.518: invalid indirect mapped block 1811939328 (level 0)
[  370.442505][ T7846] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.518: invalid indirect mapped block 2 (level 2)
[  370.472193][ T7846] EXT4-fs (loop0): 1 truncate cleaned up
[  370.493621][ T7846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  370.756145][ T7852] syz.2.526 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  370.807257][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  372.338929][ T7876] loop1: detected capacity change from 0 to 512
[  372.387674][ T7876] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  372.426316][ T7876] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  372.440372][ T7876] System zones: 1-12
[  372.450738][ T7876] EXT4-fs (loop1): orphan cleanup on readonly fs
[  372.499034][ T7876] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.537: attempt to clear invalid blocks 1024 len 1
[  372.655677][ T7876] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.537: bg 0: block 361: padding at end of block bitmap is not set
[  372.715893][ T7876] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  372.733287][ T7876] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.537: invalid indirect mapped block 1811939328 (level 0)
[  373.572786][ T7876] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.537: invalid indirect mapped block 2 (level 2)
[  373.696615][ T7876] EXT4-fs (loop1): 1 truncate cleaned up
[  373.723250][ T7876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  373.993213][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  378.349447][ T7935] program syz.4.558 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  379.066198][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  379.072670][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  381.903633][ T7966] program syz.4.568 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  384.498298][ T7989] program syz.1.579 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  394.949708][ T8090] program syz.4.616 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  395.663177][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  397.990160][ T8112] program syz.1.626 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  401.892652][ T8145] program syz.0.636 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  402.921738][    T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  404.591984][    T8] usb 2-1: Using ep0 maxpacket: 32
[  404.602581][    T8] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  404.618528][    T8] usb 2-1: config 0 has no interface number 0
[  404.639144][    T8] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 65280, setting to 1024
[  404.671810][    T8] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024
[  404.691839][    T8] usb 2-1: config 0 interface 184 has no altsetting 0
[  404.712607][    T8] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  404.731541][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.750103][    T8] usb 2-1: Product: syz
[  404.760264][    T8] usb 2-1: Manufacturer: syz
[  404.771223][    T8] usb 2-1: SerialNumber: syz
[  404.794212][    T8] usb 2-1: config 0 descriptor??
[  404.812753][ T8147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  404.822836][    T8] smsc75xx v1.0.0
[  405.516527][ T8170] program syz.2.648 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  406.525368][    T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  406.547887][    T8] smsc75xx: probe of 2-1:0.184 failed with error -71
[  406.594917][    T8] usb 2-1: USB disconnect, device number 2
[  409.068568][ T8194] program syz.4.658 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  409.951569][    T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  410.148082][    T8] usb 1-1: Using ep0 maxpacket: 8
[  410.156748][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  410.170633][    T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping
[  410.191413][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  410.200168][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  410.257824][    T8] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  410.280442][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  410.296306][    T8] usb 1-1: Product: syz
[  410.303139][    T8] usb 1-1: Manufacturer: syz
[  410.307866][    T8] usb 1-1: SerialNumber: syz
[  410.329220][    T8] usb 1-1: config 0 descriptor??
[  410.347208][    T8] radio-si470x 1-1:0.0: could not find interrupt in endpoint
[  410.364111][    T8] radio-si470x: probe of 1-1:0.0 failed with error -5
[  410.374250][    T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  410.407610][   T23] usb 2-1: Using ep0 maxpacket: 16
[  410.417644][   T23] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.441733][   T23] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.461956][   T23] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  410.490885][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  411.690784][   T23] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  411.705840][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.004178][   T23] usb 2-1: config 0 descriptor??
[  412.023580][    T8] usb 1-1: USB disconnect, device number 3
[  412.840565][ T8220] program syz.0.667 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  413.864912][   T23] usbhid 2-1:0.0: can't add hid device: -71
[  413.870994][   T23] usbhid: probe of 2-1:0.0 failed with error -71
[  413.899285][   T23] usb 2-1: USB disconnect, device number 3
[  416.253343][ T8241] program syz.1.677 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  419.597294][ T8263] program syz.0.686 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  420.481577][   T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  420.719694][   T23] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  420.731795][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.754821][   T23] usb 5-1: Product: syz
[  420.759053][   T23] usb 5-1: Manufacturer: syz
[  420.787290][   T23] usb 5-1: SerialNumber: syz
[  420.817292][   T23] usb 5-1: config 0 descriptor??
[  422.880578][   T23] usb 5-1: f81604_read: reg: 105 failed: -EPROTO
[  423.166489][   T23] f81604 5-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  423.175544][   T23] f81604: probe of 5-1:0.0 failed with error -71
[  423.194979][   T23] usb 5-1: USB disconnect, device number 3
[  423.963709][ T8292] program syz.2.695 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  428.809141][ T8335] Invalid argument reading file caps for ./file0
[  429.324978][ T8347] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  429.334352][ T8349] input: syz0 as /devices/virtual/input/input6
[  433.551557][    T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  433.753737][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  433.764370][    T8] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  433.787948][    T8] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  433.807902][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.837633][    T8] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19!
[  436.502529][ T5837] usb 1-1: USB disconnect, device number 4
[  441.323978][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  441.330333][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  443.264704][ T8468] loop0: detected capacity change from 0 to 512
[  443.324795][ T8468] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.751: invalid indirect mapped block 256 (level 2)
[  443.498718][ T8468] EXT4-fs (loop0): 2 truncates cleaned up
[  443.510163][ T8468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.862363][ T8470] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  447.470691][ T8485] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  447.576872][ T8485] EXT4-fs (loop0): This should not happen!! Data will be lost
[  447.576872][ T8485] 
[  447.635863][ T8485] EXT4-fs (loop0): Total free blocks count 0
[  447.676187][ T8485] EXT4-fs (loop0): Free/Dirty block details
[  447.725809][ T8485] EXT4-fs (loop0): free_blocks=0
[  447.730889][ T8485] EXT4-fs (loop0): dirty_blocks=946
[  447.801570][ T8485] EXT4-fs (loop0): Block reservation details
[  447.842018][ T8485] EXT4-fs (loop0): i_reserved_data_blocks=946
[  448.074667][   T60] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 940 with error 28
[  454.735776][ T8547] loop1: detected capacity change from 0 to 512
[  454.860124][ T8547] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.769: invalid indirect mapped block 256 (level 2)
[  455.602524][ T8547] EXT4-fs (loop1): 2 truncates cleaned up
[  455.609139][ T8547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.916048][ T5917] IPVS: starting estimator thread 0...
[  455.944516][ T8560] IPVS: lc: FWM 3 0x00000003 - no destination available
[  456.071840][ T8561] IPVS: using max 20 ests per chain, 48000 per kthread
[  456.079768][ T8552] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  461.258349][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.372196][ T8598] IPVS: lc: FWM 3 0x00000003 - no destination available
[  463.207462][ T8622] loop1: detected capacity change from 0 to 512
[  463.284657][ T8622] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.788: invalid indirect mapped block 256 (level 2)
[  463.321911][ T8622] EXT4-fs (loop1): 2 truncates cleaned up
[  463.378670][ T8628] IPVS: lc: FWM 3 0x00000003 - no destination available
[  463.387070][ T8622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  466.726736][ T8642] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.788: bg 0: block 5: invalid block bitmap
[  466.774537][ T8642] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  466.842812][ T8642] EXT4-fs (loop1): This should not happen!! Data will be lost
[  466.842812][ T8642] 
[  466.881759][ T8642] EXT4-fs (loop1): Total free blocks count 0
[  466.901533][ T8642] EXT4-fs (loop1): Free/Dirty block details
[  466.907468][ T8642] EXT4-fs (loop1): free_blocks=0
[  466.961540][ T8642] EXT4-fs (loop1): dirty_blocks=2082
[  466.966896][ T8642] EXT4-fs (loop1): Block reservation details
[  466.977304][ T8665] loop2: detected capacity change from 0 to 512
[  467.022574][ T8642] EXT4-fs (loop1): i_reserved_data_blocks=2082
[  467.048463][ T8665] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.803: invalid indirect mapped block 256 (level 2)
[  467.063841][ T8665] EXT4-fs (loop2): 2 truncates cleaned up
[  467.070324][ T8665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.075014][   T38] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[  468.115550][   T38] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  468.128074][   T38] EXT4-fs (loop2): This should not happen!! Data will be lost
[  468.128074][   T38] 
[  468.142032][   T38] EXT4-fs (loop2): Total free blocks count 0
[  468.148260][   T38] EXT4-fs (loop2): Free/Dirty block details
[  468.154794][   T38] EXT4-fs (loop2): free_blocks=0
[  468.159788][   T38] EXT4-fs (loop2): dirty_blocks=16002
[  468.165890][   T38] EXT4-fs (loop2): Block reservation details
[  468.172788][   T38] EXT4-fs (loop2): i_reserved_data_blocks=16002
[  468.228574][ T8669] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  468.447711][ T8642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.175426][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  470.205313][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  470.263549][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  470.312697][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  470.331848][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  470.364659][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  471.070065][ T8684] chnl_net:caif_netlink_parms(): no params data found
[  471.096655][ T8701] loop2: detected capacity change from 0 to 512
[  471.125309][ T8701] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.814: invalid indirect mapped block 256 (level 2)
[  471.141727][ T8701] EXT4-fs (loop2): 2 truncates cleaned up
[  471.148757][ T8701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.144088][   T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:1: bg 0: block 5: invalid block bitmap
[  472.243692][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  472.317616][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  472.317616][   T12] 
[  472.342047][   T12] EXT4-fs (loop2): Total free blocks count 0
[  472.350112][   T12] EXT4-fs (loop2): Free/Dirty block details
[  472.356833][   T12] EXT4-fs (loop2): free_blocks=0
[  472.362360][   T12] EXT4-fs (loop2): dirty_blocks=16002
[  472.367845][   T12] EXT4-fs (loop2): Block reservation details
[  472.376568][   T12] EXT4-fs (loop2): i_reserved_data_blocks=16002
[  472.433795][ T8707] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  472.469864][ T5773] Bluetooth: hci3: command tx timeout
[  472.536795][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.571938][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'.
[  472.610747][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.619450][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'.
[  472.629066][ T8684] bridge_slave_0: entered allmulticast mode
[  472.637793][ T8684] bridge_slave_0: entered promiscuous mode
[  472.657401][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.677006][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.698094][ T8684] bridge_slave_1: entered allmulticast mode
[  472.707335][ T8684] bridge_slave_1: entered promiscuous mode
[  472.786103][ T8684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  472.798651][ T8684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.897754][ T8684] team0: Port device team_slave_0 added
[  472.909393][ T8720] process '/newroot/189/file0' started with executable stack
[  472.912583][ T8684] team0: Port device team_slave_1 added
[  472.984432][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_0
[  472.998874][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.034111][ T8684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  473.050790][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_1
[  473.067394][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.102985][ T8684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  473.118579][ T8725] loop4: detected capacity change from 0 to 512
[  473.135815][ T8725] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.823: invalid indirect mapped block 256 (level 2)
[  473.156674][ T8725] EXT4-fs (loop4): 2 truncates cleaned up
[  473.163284][ T8725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  474.189533][ T8704] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  474.213104][ T1007] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:6: bg 0: block 5: invalid block bitmap
[  474.252636][ T1007] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 117
[  474.291341][ T1007] EXT4-fs (loop4): This should not happen!! Data will be lost
[  474.291341][ T1007] 
[  474.308080][ T8684] hsr_slave_0: entered promiscuous mode
[  474.393847][ T8730] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  474.406952][ T8730] EXT4-fs (loop4): This should not happen!! Data will be lost
[  474.406952][ T8730] 
[  474.417012][ T8730] EXT4-fs (loop4): Total free blocks count 0
[  474.423425][ T8730] EXT4-fs (loop4): Free/Dirty block details
[  474.429328][ T8730] EXT4-fs (loop4): free_blocks=0
[  474.434616][ T8730] EXT4-fs (loop4): dirty_blocks=15997
[  474.440073][ T8730] EXT4-fs (loop4): Block reservation details
[  474.490175][ T8684] hsr_slave_1: entered promiscuous mode
[  474.502298][ T8684] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  474.520862][ T8684] Cannot create hsr debugfs directory
[  474.543459][ T5773] Bluetooth: hci3: command tx timeout
[  475.051502][ T8684] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  476.621569][ T5773] Bluetooth: hci3: command tx timeout
[  477.572564][ T8684] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  477.611659][ T8684] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  477.651180][ T8684] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  477.906317][ T8684] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.977177][ T8684] 8021q: adding VLAN 0 to HW filter on device team0
[  478.021025][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.028769][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.086916][ T8760] loop2: detected capacity change from 0 to 512
[  478.123711][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.131265][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.132506][ T8760] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.833: invalid indirect mapped block 256 (level 2)
[  478.159995][ T8760] EXT4-fs (loop2): 2 truncates cleaned up
[  478.166738][ T8760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  479.178672][ T1007] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:6: bg 0: block 5: invalid block bitmap
[  479.192458][ T5773] Bluetooth: hci3: command tx timeout
[  479.284272][ T8684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  479.291846][ T1007] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  479.294993][ T8684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  479.340622][ T1007] EXT4-fs (loop2): This should not happen!! Data will be lost
[  479.340622][ T1007] 
[  479.351244][ T1007] EXT4-fs (loop2): Total free blocks count 0
[  479.367135][ T1007] EXT4-fs (loop2): Free/Dirty block details
[  479.377127][ T1007] EXT4-fs (loop2): free_blocks=0
[  479.385933][ T1007] EXT4-fs (loop2): dirty_blocks=16002
[  479.396608][ T1007] EXT4-fs (loop2): Block reservation details
[  479.406248][ T1007] EXT4-fs (loop2): i_reserved_data_blocks=16002
[  479.466743][ T8766] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  479.572437][ T5837] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  479.656475][ T8684] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.771963][ T5837] usb 5-1: Using ep0 maxpacket: 16
[  479.783380][ T5837] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  479.799705][ T5837] usb 5-1: config 0 has no interface number 0
[  479.820725][ T5837] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  479.840908][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.860187][ T5837] usb 5-1: Product: syz
[  479.866691][ T5837] usb 5-1: Manufacturer: syz
[  479.871341][ T5837] usb 5-1: SerialNumber: syz
[  479.897395][ T5837] usb 5-1: config 0 descriptor??
[  479.911102][ T5837] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  480.063733][ T8684] veth0_vlan: entered promiscuous mode
[  480.103975][ T8684] veth1_vlan: entered promiscuous mode
[  480.186512][ T8684] veth0_macvtap: entered promiscuous mode
[  480.254582][ T8684] veth1_macvtap: entered promiscuous mode
[  480.308843][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.321728][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.332748][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.343967][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.355997][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.370766][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.388275][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_0
[  480.413472][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.424450][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.436803][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.447752][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.458355][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.469275][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.481141][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_1
[  480.518988][ T8684] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.532417][ T8684] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.541213][ T8684] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.565900][ T8684] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.775176][ T6351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.801512][ T6351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.889251][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.901149][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.914016][ T8797] loop2: detected capacity change from 0 to 512
[  480.936427][ T8797] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.843: invalid indirect mapped block 256 (level 2)
[  480.952891][ T5837] gspca_spca1528: reg_w err -71
[  480.961129][ T8797] EXT4-fs (loop2): 2 truncates cleaned up
[  480.968069][ T8797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.670159][ T5837] spca1528: probe of 5-1:0.1 failed with error -71
[  481.682605][ T1007] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:6: bg 0: block 5: invalid block bitmap
[  481.718480][ T5837] usb 5-1: USB disconnect, device number 4
[  481.739345][ T1007] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  481.778008][ T1007] EXT4-fs (loop2): This should not happen!! Data will be lost
[  481.778008][ T1007] 
[  481.801364][ T1007] EXT4-fs (loop2): Total free blocks count 0
[  481.831216][ T1007] EXT4-fs (loop2): Free/Dirty block details
[  481.851638][ T1007] EXT4-fs (loop2): free_blocks=0
[  481.856991][ T1007] EXT4-fs (loop2): dirty_blocks=16002
[  481.864074][ T1007] EXT4-fs (loop2): Block reservation details
[  481.871162][ T1007] EXT4-fs (loop2): i_reserved_data_blocks=16002
[  482.807266][ T8802] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  486.463930][ T8873] binder: BINDER_SET_CONTEXT_MGR already set
[  486.519979][ T8873] binder: 8872:8873 ioctl 4018620d 200000000100 returned -16
[  486.951697][ T5809] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  487.141906][ T5809] usb 3-1: Using ep0 maxpacket: 16
[  487.164132][ T5809] usb 3-1: unable to get BOS descriptor or descriptor too short
[  487.172537][ T5837] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  487.202171][ T5809] usb 3-1: config 1 has an invalid interface number: 17 but max is 0
[  487.211061][ T5809] usb 3-1: config 1 has no interface number 0
[  487.217719][ T5809] usb 3-1: config 1 interface 17 has no altsetting 0
[  487.230453][ T5809] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84
[  487.241760][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.270471][ T5809] usb 3-1: Product: syz
[  487.282821][ T5809] usb 3-1: Manufacturer: syz
[  487.287483][ T5809] usb 3-1: SerialNumber: syz
[  487.376084][ T8891] comedi: valid board names for 8255 driver are:
[  487.385785][ T8891]  8255
[  487.388748][ T8891] comedi: valid board names for vmk80xx driver are:
[  487.396538][ T5837] usb 1-1: Using ep0 maxpacket: 8
[  487.408947][ T8891]  vmk80xx
[  487.417676][ T8891] comedi: valid board names for usbduxsigma driver are:
[  487.426325][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  487.441584][ T5837] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  487.452402][ T8891]  usbduxsigma
[  487.456281][ T8891] comedi: valid board names for usbduxfast driver are:
[  487.464162][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.477986][ T8891]  usbduxfast
[  487.489292][ T5837] usb 1-1: config 0 descriptor??
[  487.499529][ T8891] comedi: valid board names for usbdux driver are:
[  487.522915][ T5837] gspca_main: vc032x-2.14.0 probing 046d:0892
[  487.536026][ T5809] pcwd_usb: The device isn't a Human Interface Device
[  487.546031][ T8891]  usbdux
[  487.549837][ T8891] comedi: valid board names for ni6501 driver are:
[  487.568500][ T5809] usb 3-1: USB disconnect, device number 3
[  487.575190][ T8891]  ni6501
[  487.591333][ T8891] comedi: valid board names for dt9812 driver are:
[  487.619532][ T8891]  dt9812
[  487.626372][ T8891] comedi: valid board names for ni_labpc_cs driver are:
[  487.635130][ T8891]  ni_labpc_cs
[  487.638780][ T8891] comedi: valid board names for ni_daq_700 driver are:
[  487.659271][ T8891]  ni_daq_700
[  487.672256][ T8891] comedi: valid board names for labpc_pci driver are:
[  487.679993][ T8891]  labpc_pci
[  487.688805][ T8891] comedi: valid board names for adl_pci9118 driver are:
[  487.697188][ T8891]  pci9118dg
[  487.700782][ T8891]  pci9118hg
[  487.705780][ T8891]  pci9118hr
[  487.710012][ T8891] comedi: valid board names for 8255_pci driver are:
[  487.726318][ T8891]  8255_pci
[  487.729945][ T8891] comedi: valid board names for s526 driver are:
[  487.737937][ T8891]  s526
[  487.741038][ T8891] comedi: valid board names for multiq3 driver are:
[  487.760475][ T8891]  multiq3
[  487.772014][ T8891] comedi: valid board names for pcmuio driver are:
[  487.780434][ T8891]  pcmuio48
[  487.784255][ T8891]  pcmuio96
[  487.790069][ T8891] comedi: valid board names for pcmmio driver are:
[  487.799953][ T8891]  pcmmio
[  487.803383][ T8891] comedi: valid board names for pcmda12 driver are:
[  487.811203][ T8891]  pcmda12
[  487.816724][ T8891] comedi: valid board names for pcmad driver are:
[  487.826469][ T8891]  pcmad12
[  487.829719][ T8891]  pcmad16
[  487.833484][ T8891] comedi: valid board names for ni_labpc driver are:
[  487.844379][ T8891]  lab-pc-1200
[  487.851194][ T8891]  lab-pc-1200ai
[  487.857246][ T8891]  lab-pc+
[  487.860617][ T8891] comedi: valid board names for atmio16 driver are:
[  487.871156][ T8891]  atmio16
[  487.875260][ T8891]  atmio16d
[  487.878988][ T8891] comedi: valid board names for ni_at_ao driver are:
[  487.886548][ T8891]  at-ao-6
[  487.889865][ T8891]  at-ao-10
[  487.894262][ T8891] comedi: valid board names for ni_at_a2150 driver are:
[  487.908758][ T8891]  ni_at_a2150
[  487.918898][ T8891] comedi: valid board names for adq12b driver are:
[  487.926276][ T5837] gspca_vc032x: reg_w err -71
[  487.935655][ T5837] vc032x: probe of 1-1:0.0 failed with error -71
[  487.946026][ T8891]  adq12b
[  487.961184][ T8891] comedi: valid board names for mpc624 driver are:
[  487.972189][ T5837] usb 1-1: USB disconnect, device number 5
[  487.988854][ T8891]  mpc624
[  487.995502][ T8891] comedi: valid board names for c6xdigio driver are:
[  488.011947][ T8891]  c6xdigio
[  488.015924][ T8891] comedi: valid board names for aio_iiro_16 driver are:
[  488.023657][ T8891]  aio_iiro_16
[  488.028475][ T8891] comedi: valid board names for aio_aio12_8 driver are:
[  488.043015][ T8891]  aio_aio12_8
[  488.046678][ T8891]  aio_ai12_8
[  488.050229][ T8891]  aio_ao12_4
[  488.064437][ T8891] comedi: valid board names for fl512 driver are:
[  488.098973][ T8891]  fl512
[  488.103393][ T8891] comedi: valid board names for dmm32at driver are:
[  488.128920][ T8891]  dmm32at
[  488.151339][ T8891] comedi: valid board names for dt282x driver are:
[  488.164161][ T8891]  dt2821
[  488.167274][ T8891]  dt2821-f
[  488.170835][ T8891]  dt2821-g
[  488.195773][ T8891]  dt2823
[  488.198859][ T8891]  dt2824-pgh
[  488.205260][ T8891]  dt2824-pgl
[  488.221812][ T8891]  dt2825
[  488.225310][ T8891]  dt2827
[  488.228535][ T8891]  dt2828
[  488.244979][ T8891]  dt2829
[  488.251598][ T8891]  dt21-ez
[  488.254678][ T8891]  dt23-ez
[  488.280655][ T8891]  dt24-ez
[  488.286910][ T8891]  dt24-ez-pgl
[  488.292224][ T8891] comedi: valid board names for dt2817 driver are:
[  488.335301][ T8891]  dt2817
[  488.338411][ T8891] comedi: valid board names for dt2815 driver are:
[  488.391549][ T8891]  dt2815
[  488.394758][ T8891] comedi: valid board names for dt2814 driver are:
[  488.426498][ T8891]  dt2814
[  488.429605][ T8891] comedi: valid board names for dt2811 driver are:
[  488.461816][ T8891]  dt2811-pgh
[  488.465261][ T8891]  dt2811-pgl
[  488.468565][ T8891] comedi: valid board names for dt2801 driver are:
[  488.511464][ T8891]  dt2801
[  488.514482][ T8891] comedi: valid board names for das6402 driver are:
[  488.554405][ T8891]  das6402-12
[  488.558209][ T8891]  das6402-16
[  488.563534][ T8901] IPVS: lc: FWM 3 0x00000003 - no destination available
[  488.571477][ T8891] comedi: valid board names for das1800 driver are:
[  488.578203][ T8891]  das-1701st
[  488.590612][ T8891]  das-1701st-da
[  488.601623][ T8891]  das-1702st
[  488.605232][ T8891]  das-1702st-da
[  488.608816][ T8891]  das-1702hr
[  488.630287][ T8891]  das-1702hr-da
[  488.649138][ T8891]  das-1701ao
[  488.668328][ T8891]  das-1702ao
[  488.683782][ T8891]  das-1801st
[  488.687311][ T8891]  das-1801st-da
[  488.690970][ T8891]  das-1802st
[  488.711806][ T8891]  das-1802st-da
[  488.715730][ T8891]  das-1802hr
[  488.729264][ T8891]  das-1802hr-da
[  488.741833][ T8891]  das-1801hc
[  488.745284][ T8891]  das-1802hc
[  488.748822][ T8891]  das-1801ao
[  488.776326][ T8891]  das-1802ao
[  488.779789][ T8891] comedi: valid board names for das800 driver are:
[  488.809262][ T8891]  das-800
[  488.827302][ T8891]  cio-das800
[  488.830749][ T8891]  das-801
[  488.851580][ T8891]  cio-das801
[  488.855284][ T8891]  das-802
[  488.858930][ T8891]  cio-das802
[  488.891498][ T8891]  cio-das802/16
[  488.895199][ T8891] comedi: valid board names for isa-das08 driver are:
[  488.920575][ T8891]  isa-das08
[  488.931673][ T8891]  das08-pgm
[  488.943838][ T8891]  das08-pgh
[  488.947282][ T8891]  das08-pgl
[  488.950514][ T8891]  das08-aoh
[  488.989537][ T8891]  das08-aol
[  488.993350][ T8891]  das08-aom
[  488.996632][ T8891]  das08/jr-ao
[  489.000372][ T8891]  das08jr-16-ao
[  489.058984][ T8891]  pc104-das08
[  489.081517][ T8891]  das08jr/16
[  489.084873][ T8891] comedi: valid board names for das16m1 driver are:
[  489.141600][ T8891]  das16m1
[  489.151803][ T8891] comedi: valid board names for dac02 driver are:
[  489.167067][ T8891]  dac02
[  489.170089][ T8891] comedi: valid board names for rti802 driver are:
[  490.408138][ T8891]  rti802
[  490.439765][ T8891] comedi: valid board names for rti800 driver are:
[  490.471755][ T8891]  rti800
[  490.474998][ T8891]  rti815
[  490.519561][ T8891] comedi: valid board names for pcm3724 driver are:
[  490.541798][ T8891]  pcm3724
[  490.544976][ T8891] comedi: valid board names for pcl818 driver are:
[  490.622544][ T8891]  pcl818l
[  490.634684][ T8891]  pcl818h
[  490.671463][ T8891]  pcl818hd
[  490.674665][ T8891]  pcl818hg
[  490.709599][ T8891]  pcl818
[  490.713153][ T8891]  pcl718
[  490.716536][ T8891]  pcm3718
[  490.719927][ T8891] comedi: valid board names for pcl816 driver are:
[  490.732143][ T8891]  pcl816
[  490.751471][ T8891]  pcl814b
[  490.754773][ T8891] comedi: valid board names for pcl812 driver are:
[  490.761959][ T8891]  pcl812
[  490.771656][ T8891]  pcl812pg
[  490.774845][ T8891]  acl8112pg
[  490.791432][ T8891]  acl8112dg
[  490.794961][ T8891]  acl8112hg
[  490.798192][ T8891]  a821pgl
[  490.834292][ T8891]  a821pglnda
[  490.837990][ T8891]  a821pgh
[  490.841040][ T8891]  a822pgl
[  490.845840][ T8891]  a822pgh
[  490.854640][ T8891]  a823pgl
[  490.858078][ T8891]  a823pgh
[  490.861235][ T8891]  pcl813
[  490.866858][ T8891]  pcl813b
[  490.869943][ T8891]  acl8113
[  490.894335][ T8891]  iso813
[  490.897611][ T8891]  acl8216
[  490.900733][ T8891]  a826pg
[  490.910565][ T8891] comedi: valid board names for pcl730 driver are:
[  490.917629][ T8891]  pcl730
[  490.920670][ T8891]  iso730
[  490.921536][ T5860] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  490.928885][ T8891]  acl7130
[  490.937974][ T8891]  pcm3730
[  490.941079][ T8891]  pcl725
[  490.961525][ T8891]  p8r8dio
[  490.969945][ T8891]  acl7225b
[  490.975952][ T8891]  p16r16dio
[  490.989418][ T8891]  pcl733
[  491.001800][ T8891]  pcl734
[  491.004833][ T8891]  opmm-1616-xt
[  491.017216][ T8891]  pearl-mm-p
[  491.032092][ T8891]  ir104-pbf
[  491.035362][ T8891] comedi: valid board names for pcl726 driver are:
[  491.057189][ T8891]  pcl726
[  491.060200][ T8891]  pcl727
[  491.066934][ T8891]  pcl728
[  491.069923][ T8891]  acl6126
[  491.082188][ T8891]  acl6128
[  491.085382][ T8891] comedi: valid board names for pcl724 driver are:
[  491.106281][ T8891]  pcl724
[  491.109519][ T8891]  pcl722
[  491.118454][ T8891]  pcl731
[  491.122243][ T8891]  acl7122
[  491.126586][ T8891]  acl7124
[  491.129866][ T8891]  pet48dio
[  491.136901][ T8891]  pcmio48
[  491.140275][ T8891]  onyx-mm-dio
[  491.144467][ T8891] comedi: valid board names for pcl711 driver are:
[  491.152642][ T8891]  pcl711
[  491.155638][ T8891]  pcl711b
[  491.158654][ T8891]  acl8112hg
[  491.165812][ T8891]  acl8112dg
[  491.169061][ T8891] comedi: valid board names for amplc_pc263 driver are:
[  491.177801][ T8891]  pc263
[  491.178017][ T5860] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  491.180790][ T8891] comedi: valid board names for amplc_pc236 driver are:
[  491.209911][ T8891]  pc36at
[  491.223455][ T5860] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  491.224744][ T8891] comedi: valid board names for amplc_dio200 driver are:
[  491.244188][ T8891]  pc212e
[  491.251752][ T8891]  pc214e
[  491.254976][ T8891]  pc215e
[  491.263927][ T8891]  pc218e
[  491.268806][ T8891]  pc272e
[  491.277481][ T8891] comedi: valid board names for comedi_parport driver are:
[  491.282204][ T5860] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40
[  491.301556][ T8891]  comedi_parport
[  491.305350][ T8891] comedi: valid board names for comedi_test driver are:
[  491.319961][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.323539][ T8891]  comedi_test
[  491.341932][ T5860] usb 3-1: Product: syz
[  491.351373][ T5860] usb 3-1: Manufacturer: syz
[  491.352119][ T8891] comedi: valid board names for comedi_bond driver are:
[  491.363765][ T5860] usb 3-1: SerialNumber: syz
[  491.381612][ T8891]  comedi_bond
[  491.654867][ T5860] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  491.708405][ T5860] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  491.750943][ T5860] snd-usb-audio: probe of 3-1:1.2 failed with error -22
[  491.781279][ T5860] usb 3-1: USB disconnect, device number 4
[  491.964312][ T8287] udevd[8287]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  492.657209][ T8947] loop2: detected capacity change from 0 to 512
[  492.675930][ T8947] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.904: invalid indirect mapped block 256 (level 2)
[  492.691186][ T8947] EXT4-fs (loop2): 2 truncates cleaned up
[  492.698067][ T8947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  493.710438][ T6006] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:19: bg 0: block 5: invalid block bitmap
[  493.736354][ T6006] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  493.781719][ T6006] EXT4-fs (loop2): This should not happen!! Data will be lost
[  493.781719][ T6006] 
[  493.835153][ T6006] EXT4-fs (loop2): Total free blocks count 0
[  493.858341][ T6006] EXT4-fs (loop2): Free/Dirty block details
[  493.886636][ T6006] EXT4-fs (loop2): free_blocks=0
[  493.898687][ T6006] EXT4-fs (loop2): dirty_blocks=16002
[  493.922733][ T6006] EXT4-fs (loop2): Block reservation details
[  493.929062][ T6006] EXT4-fs (loop2): i_reserved_data_blocks=16002
[  493.943109][ T8955] synth uevent: /devices/platform/pcspkr: unknown uevent action string
[  494.001299][ T8951] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  494.059466][ T8955] platform pcspkr: uevent: failed to send synthetic uevent: -22
[  494.736069][ T8972] loop0: detected capacity change from 0 to 512
[  494.773049][ T8972] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.914: invalid indirect mapped block 256 (level 2)
[  494.793066][ T8972] EXT4-fs (loop0): 2 truncates cleaned up
[  494.800194][ T8972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.829482][ T5986] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:12: bg 0: block 5: invalid block bitmap
[  495.868241][ T5986] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  495.911683][ T5986] EXT4-fs (loop0): This should not happen!! Data will be lost
[  495.911683][ T5986] 
[  495.931606][ T5986] EXT4-fs (loop0): Total free blocks count 0
[  495.941624][ T5986] EXT4-fs (loop0): Free/Dirty block details
[  495.952066][ T5986] EXT4-fs (loop0): free_blocks=0
[  495.957057][ T5986] EXT4-fs (loop0): dirty_blocks=16002
[  495.981519][ T5986] EXT4-fs (loop0): Block reservation details
[  495.987632][ T5986] EXT4-fs (loop0): i_reserved_data_blocks=16002
[  496.060311][ T8975] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  496.161485][ T5809] IPVS: starting estimator thread 0...
[  496.241791][  T173] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  496.261592][ T8980] IPVS: using max 23 ests per chain, 55200 per kthread
[  496.473860][  T173] usb 5-1: Using ep0 maxpacket: 32
[  496.517946][  T173] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  496.551513][  T173] usb 5-1: config 0 has no interface number 0
[  496.609383][  T173] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  496.651479][  T173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.659653][  T173] usb 5-1: Product: syz
[  496.701531][  T173] usb 5-1: Manufacturer: syz
[  496.706546][  T173] usb 5-1: SerialNumber: syz
[  496.739500][  T173] usb 5-1: config 0 descriptor??
[  496.822300][  T173] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  497.113598][  T173] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  497.165115][  T173] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  497.217035][ T9000] loop5: detected capacity change from 0 to 512
[  497.263214][ T9000] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.925: invalid indirect mapped block 256 (level 2)
[  497.278161][ T9000] EXT4-fs (loop5): 2 truncates cleaned up
[  497.284943][ T9000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  498.408770][ T6351] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm kworker/u4:29: bg 0: block 5: invalid block bitmap
[  498.451938][ T6351] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  500.011984][ T6351] EXT4-fs (loop5): This should not happen!! Data will be lost
[  500.011984][ T6351] 
[  500.090997][ T6351] EXT4-fs (loop5): Total free blocks count 0
[  500.118836][ T6351] EXT4-fs (loop5): Free/Dirty block details
[  500.120691][ T5770] EXT4-fs: 23 callbacks suppressed
[  500.120706][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.146239][ T6351] EXT4-fs (loop5): free_blocks=0
[  500.172162][ T6351] EXT4-fs (loop5): dirty_blocks=16002
[  500.204183][ T6351] EXT4-fs (loop5): Block reservation details
[  500.230514][ T6351] EXT4-fs (loop5): i_reserved_data_blocks=16002
[  500.303242][ T9003] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  500.351050][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  500.354850][ T2180] usb 5-1: USB disconnect, device number 5
[  500.417865][ T2180] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  500.479842][ T2180] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  500.512853][ T2180] quatech2 5-1:0.51: device disconnected
[  501.404492][ T9027] loop5: detected capacity change from 0 to 512
[  501.452811][ T9027] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.935: invalid indirect mapped block 256 (level 2)
[  501.494571][ T9027] EXT4-fs (loop5): 2 truncates cleaned up
[  501.501293][ T9027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  502.497353][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  502.504002][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  502.514729][ T6006] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm kworker/u4:19: bg 0: block 5: invalid block bitmap
[  502.530780][ T6006] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  502.548244][ T6006] EXT4-fs (loop5): This should not happen!! Data will be lost
[  502.548244][ T6006] 
[  502.558788][ T6006] EXT4-fs (loop5): Total free blocks count 0
[  502.567826][ T6006] EXT4-fs (loop5): Free/Dirty block details
[  503.782891][ T6006] EXT4-fs (loop5): free_blocks=0
[  503.792497][ T6006] EXT4-fs (loop5): dirty_blocks=16002
[  503.797957][ T6006] EXT4-fs (loop5): Block reservation details
[  503.856604][ T6006] EXT4-fs (loop5): i_reserved_data_blocks=16002
[  503.932630][ T9034] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  504.459244][ T9050] capability: warning: `syz.4.945' uses 32-bit capabilities (legacy support in use)
[  504.649584][ T9054] loop4: detected capacity change from 0 to 512
[  504.684256][ T9054] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.947: invalid indirect mapped block 256 (level 2)
[  504.698585][ T9054] EXT4-fs (loop4): 2 truncates cleaned up
[  504.705738][ T9054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  505.735601][   T38] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[  505.798120][   T38] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  505.813490][   T38] EXT4-fs (loop4): This should not happen!! Data will be lost
[  505.813490][   T38] 
[  505.828212][   T38] EXT4-fs (loop4): Total free blocks count 0
[  505.844121][   T38] EXT4-fs (loop4): Free/Dirty block details
[  505.858831][   T38] EXT4-fs (loop4): free_blocks=0
[  505.864828][   T38] EXT4-fs (loop4): dirty_blocks=16002
[  505.870347][   T38] EXT4-fs (loop4): Block reservation details
[  505.888235][   T38] EXT4-fs (loop4): i_reserved_data_blocks=16002
[  505.960886][ T9057] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  507.989219][ T9085] loop0: detected capacity change from 0 to 512
[  508.015627][ T9085] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.957: invalid indirect mapped block 256 (level 2)
[  508.030128][ T9085] EXT4-fs (loop0): 2 truncates cleaned up
[  508.036643][ T9085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  509.055564][   T60] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:5: bg 0: block 5: invalid block bitmap
[  510.402311][   T60] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  510.451866][   T60] EXT4-fs (loop0): This should not happen!! Data will be lost
[  510.451866][   T60] 
[  510.495083][   T60] EXT4-fs (loop0): Total free blocks count 0
[  510.501240][   T60] EXT4-fs (loop0): Free/Dirty block details
[  510.532379][   T60] EXT4-fs (loop0): free_blocks=0
[  510.537669][   T60] EXT4-fs (loop0): dirty_blocks=16002
[  510.571858][   T60] EXT4-fs (loop0): Block reservation details
[  510.577911][   T60] EXT4-fs (loop0): i_reserved_data_blocks=16002
[  510.662809][ T9090] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  510.725941][ T6006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.968755][ T6006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.165261][ T6006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.356178][ T6006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.054292][ T9105] autofs4:pid:9105:autofs_fill_super: called with bogus options
[  516.306058][ T9152] loop0: detected capacity change from 0 to 512
[  516.358171][ T9152] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.968: invalid indirect mapped block 256 (level 2)
[  516.411811][ T9152] EXT4-fs (loop0): 2 truncates cleaned up
[  516.418410][ T9152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  517.428025][ T6351] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:29: bg 0: block 5: invalid block bitmap
[  517.509070][ T9158] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  517.561559][ T6351] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  517.601837][  T173] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  517.625036][ T6006] hsr_slave_0: left promiscuous mode
[  517.640366][ T6351] EXT4-fs (loop0): This should not happen!! Data will be lost
[  517.640366][ T6351] 
[  518.951612][ T6351] EXT4-fs (loop0): Total free blocks count 0
[  518.957686][ T6351] EXT4-fs (loop0): Free/Dirty block details
[  518.984883][ T6351] EXT4-fs (loop0): free_blocks=0
[  518.990009][ T6351] EXT4-fs (loop0): dirty_blocks=16002
[  519.011578][ T6351] EXT4-fs (loop0): Block reservation details
[  519.020786][ T6006] hsr_slave_1: left promiscuous mode
[  519.027364][ T9173] binder: 9172:9173 ioctl 4018620d 0 returned -22
[  519.031533][  T173] usb 3-1: Using ep0 maxpacket: 32
[  519.039628][ T6351] EXT4-fs (loop0): i_reserved_data_blocks=16002
[  519.104388][ T9162] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  519.145082][  T173] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  520.370991][  T173] usb 3-1: config 0 has no interface number 0
[  520.392382][  T173] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[  520.421427][  T173] usb 3-1: config 0 interface 184 has no altsetting 0
[  520.433921][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  520.463552][  T173] usb 3-1: string descriptor 0 read error: -71
[  520.476742][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0
[  520.504042][  T173] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  520.552955][  T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.588047][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  520.593460][  T173] usb 3-1: config 0 descriptor??
[  520.622234][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1
[  520.622282][  T173] usb 3-1: can't set config #0, error -71
[  520.662285][ T6006] bridge_slave_1: left allmulticast mode
[  520.668000][ T6006] bridge_slave_1: left promiscuous mode
[  520.711838][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.722139][  T173] usb 3-1: USB disconnect, device number 5
[  520.781172][ T6006] bridge_slave_0: left allmulticast mode
[  520.811899][ T6006] bridge_slave_0: left promiscuous mode
[  520.817790][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.113164][ T6006] veth1_macvtap: left promiscuous mode
[  521.119676][ T6006] veth0_macvtap: left promiscuous mode
[  521.161638][ T6006] veth1_vlan: left promiscuous mode
[  521.168117][ T6006] veth0_vlan: left promiscuous mode
[  521.561083][ T5770] EXT4-fs: 7 callbacks suppressed
[  521.561100][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.972968][ T2180] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  522.172506][ T2180] usb 1-1: Using ep0 maxpacket: 8
[  522.188657][ T2180] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  522.202047][ T2180] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  523.478305][ T2180] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  523.510808][ T2180] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  523.529383][ T2180] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  523.543394][ T2180] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  523.545323][ T9205] binder: 9204:9205 ioctl 4018620d 0 returned -22
[  523.552971][ T2180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.443514][ T9209] usbtmc 1-1:16.0: simple usb_control_msg returned 0
[  524.640307][  T173] usb 1-1: USB disconnect, device number 6
[  524.879502][ T6006] team0 (unregistering): Port device team_slave_1 removed
[  524.985038][ T6006] team0 (unregistering): Port device team_slave_0 removed
[  525.171935][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  525.304444][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  527.350955][ T9236] fuse: blksize only supported for fuseblk
[  527.845914][ T6006] bond0 (unregistering): Released all slaves
[  528.279547][ T9245] binder: 9244:9245 ioctl 4018620d 0 returned -22
[  529.759648][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  532.452158][ T9332] syzkaller1: entered promiscuous mode
[  532.475875][ T9332] syzkaller1: entered allmulticast mode
[  533.081495][ T5917] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  533.233986][ T9354] binder: BINDER_SET_CONTEXT_MGR already set
[  533.271639][ T9354] binder: 9351:9354 ioctl 4018620d 200000000100 returned -16
[  533.289625][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  533.327665][ T5917] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  533.350429][ T5917] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  533.393701][ T5917] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  533.420003][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.464711][ T5917] usb 1-1: Product: syz
[  533.511858][ T5917] usb 1-1: Manufacturer: syz
[  533.522963][ T5917] usb 1-1: SerialNumber: syz
[  533.810873][ T5917] usb 1-1: 0:2 : does not exist
[  533.910202][ T5917] usb 1-1: USB disconnect, device number 7
[  535.852040][ T9412] syz.2.1047 uses obsolete (PF_INET,SOCK_PACKET)
[  538.591583][ T5809] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  538.831821][ T5809] usb 3-1: Using ep0 maxpacket: 16
[  538.848496][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  538.917527][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  538.938946][ T5809] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  538.980969][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.041949][ T5809] usb 3-1: config 0 descriptor??
[  539.483412][ T5809] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0
[  539.530808][ T5809] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0
[  539.551774][ T5809] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0
[  539.601527][ T5809] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0
[  539.609133][ T5809] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0
[  539.714193][ T5809] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0
[  540.024283][ T5809] usb 3-1: USB disconnect, device number 6
[  555.615592][ T9577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1084'.
[  555.656734][ T9577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1084'.
[  556.384397][ T9577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1084'.
[  556.784892][ T9584] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  557.604468][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0419
[  558.766123][ T9616] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1095'.
[  558.800288][ T9616] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1095'.
[  558.859545][ T9620] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1095'.
[  561.410097][ T9652] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1105'.
[  561.444991][ T9652] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1105'.
[  561.477431][ T9652] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1105'.
[  563.562016][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  563.568387][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  564.993573][ T9686] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1115'.
[  565.061811][ T9686] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1115'.
[  565.110617][ T9688] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1115'.
[  565.622836][ T9696] Invalid argument reading file caps for ./file0
[  567.322389][ T9722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1127'.
[  567.384362][ T9722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1127'.
[  567.423779][ T9722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1127'.
[  575.023387][ T9837] Invalid argument reading file caps for ./file0
[  575.447886][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1158'.
[  576.736638][ T9871] Invalid argument reading file caps for ./file0
[  580.358364][  T173] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  580.686679][  T173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  580.905288][  T173] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  581.006487][  T173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.084871][  T173] usb 5-1: config 0 descriptor??
[  581.486023][ T2180] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  581.579469][  T173] usb 5-1: string descriptor 0 read error: -71
[  581.604980][  T173] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected
[  581.630396][  T173] earthmate ttyUSB0: required endpoint is missing
[  581.668032][  T173] usb 5-1: USB disconnect, device number 6
[  581.699101][  T173] cypress_m8 5-1:0.0: device disconnected
[  581.709134][ T2180] usb 6-1: unable to get BOS descriptor or descriptor too short
[  581.736955][ T2180] usb 6-1: not running at top speed; connect to a high speed hub
[  581.764885][ T2180] usb 6-1: config 241 has an invalid descriptor of length 211, skipping remainder of the config
[  581.801567][ T2180] usb 6-1: config 241 has 0 interfaces, different from the descriptor's value: 1
[  581.829083][ T2180] usb 6-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[  581.852075][ T2180] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  581.898186][ T2180] usb 6-1: Manufacturer: syz
[  581.921504][ T2180] usb 6-1: SerialNumber: syz
[  583.922448][ T2180] usb 6-1: USB disconnect, device number 2
[  584.311465][    T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  584.426282][ T5781] Bluetooth: hci1: hcon ffff88807a086000 sent 0 < count 65279
[  584.434712][ T5781] Bluetooth: hci1: hcon ffff88807a086000 sent 0 < count 5
[  584.497767][    T8] usb 3-1: config 160 has an invalid interface number: 200 but max is 0
[  584.512218][    T8] usb 3-1: config 160 has no interface number 0
[  584.525242][    T8] usb 3-1: config 160 interface 200 has no altsetting 0
[  584.536425][    T8] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  584.545894][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.554504][    T8] usb 3-1: Product: syz
[  584.558859][    T8] usb 3-1: Manufacturer: syz
[  584.564108][    T8] usb 3-1: SerialNumber: syz
[  584.804132][ T2180] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  585.098234][    T8] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  585.124255][    T8] usb 3-1: MIDIStreaming interface descriptor not found
[  585.172023][    T8] usb 3-1: USB disconnect, device number 7
[  585.251928][ T8276] udevd[8276]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  587.314831][ T2180] usb 1-1: unable to get BOS descriptor or descriptor too short
[  587.350577][ T2180] usb 1-1: unable to read config index 0 descriptor/start: -71
[  587.383551][ T2180] usb 1-1: can't read configurations, error -71
[  589.223466][   T27] audit: type=1800 audit(1785537754.424:4): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1192" name="/" dev="fuse" ino=1 res=0 errno=0
[  589.341716][    T8] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  589.706733][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 959, setting to 64
[  589.719323][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  589.746024][    T8] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  589.993810][T10033] xt_hashlimit: size too large, truncated to 1048576
[  590.360735][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.368963][    T8] usb 6-1: Product: syz
[  590.373249][    T8] usb 6-1: Manufacturer: syz
[  590.474766][    T8] usb 6-1: SerialNumber: syz
[  590.482733][    T8] usb 6-1: config 0 descriptor??
[  590.489072][T10010] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  590.720214][ T5860] usb 6-1: USB disconnect, device number 3
[  596.011833][T10100] Invalid argument reading file caps for ./file0
[  596.144345][ T5773] Bluetooth: hci3: command 0x0406 tx timeout
[  596.520803][T10115] syzkaller0: entered promiscuous mode
[  596.539915][T10115] syzkaller0: entered allmulticast mode
[  598.174899][T10133] Invalid argument reading file caps for ./file0
[  598.301992][    T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  598.494256][    T8] usb 5-1: unable to get BOS descriptor or descriptor too short
[  598.508306][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  598.531579][    T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  598.545699][    T8] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  598.563037][    T8] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0
[  598.581003][    T8] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  598.601719][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.610771][    T8] usb 5-1: Product: syz
[  598.632089][    T8] usb 5-1: Manufacturer: syz
[  598.637196][    T8] usb 5-1: SerialNumber: syz
[  598.962760][    T8] usb 5-1: USB disconnect, device number 7
[  599.063398][ T8276] udevd[8276]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  599.251452][T10004] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  599.456512][T10004] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  599.483943][T10004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.500970][T10004] usb 1-1: Product: syz
[  599.507162][T10004] usb 1-1: Manufacturer: syz
[  599.515840][T10004] usb 1-1: SerialNumber: syz
[  599.561490][T10004] usb 1-1: config 0 descriptor??
[  601.251689][T10004] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  601.677616][T10170] loop4: detected capacity change from 0 to 512
[  601.727232][T10170] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1261: invalid indirect mapped block 256 (level 2)
[  601.742968][T10170] EXT4-fs (loop4): 2 truncates cleaned up
[  601.749761][T10170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  602.485586][ T6351] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:29: bg 0: block 5: invalid block bitmap
[  602.596186][ T6351] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28
[  602.690737][ T6351] EXT4-fs (loop4): This should not happen!! Data will be lost
[  602.690737][ T6351] 
[  602.728002][ T6351] EXT4-fs (loop4): Total free blocks count 0
[  602.737500][ T6351] EXT4-fs (loop4): Free/Dirty block details
[  602.746236][ T6351] EXT4-fs (loop4): free_blocks=0
[  602.759999][ T6351] EXT4-fs (loop4): dirty_blocks=16001
[  602.766601][ T6351] EXT4-fs (loop4): Block reservation details
[  602.782963][ T6351] EXT4-fs (loop4): i_reserved_data_blocks=16001
[  602.852070][T10173] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  603.129016][T10004] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  603.169573][T10004] usb 1-1: USB disconnect, device number 10
[  603.856993][T10189] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10189]
[  605.241282][T10198] binder: 10197:10198 ioctl c00c620f 200000000080 returned -22
[  605.271768][ T5860] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  605.471456][ T5860] usb 5-1: Using ep0 maxpacket: 8
[  605.495624][ T5860] usb 5-1: unable to get BOS descriptor or descriptor too short
[  605.514790][ T5860] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[  605.526013][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.546848][ T5860] usb 5-1: Product: syz
[  605.551152][ T5860] usb 5-1: Manufacturer: syz
[  605.562223][ T5860] usb 5-1: SerialNumber: syz
[  608.521414][ T5773] Bluetooth: hci3: command 0x0406 tx timeout
[  608.613619][ T5860] usb 5-1: USB disconnect, device number 8
[  608.694232][ T8287] udevd[8287]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  608.959745][T10225] loop5: detected capacity change from 0 to 512
[  608.978414][T10225] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1270: invalid indirect mapped block 256 (level 2)
[  609.000721][T10225] EXT4-fs (loop5): 2 truncates cleaned up
[  609.007317][T10225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  610.227071][T10227] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  612.039089][T10229] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  612.081608][T10229] EXT4-fs (loop5): This should not happen!! Data will be lost
[  612.081608][T10229] 
[  612.111651][T10229] EXT4-fs (loop5): Total free blocks count 0
[  612.126211][T10257] loop2: detected capacity change from 0 to 512
[  612.140833][T10257] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1293: invalid indirect mapped block 256 (level 2)
[  612.155928][T10257] EXT4-fs (loop2): 2 truncates cleaned up
[  612.162558][T10257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  612.308975][T10229] EXT4-fs (loop5): Free/Dirty block details
[  612.340068][T10229] EXT4-fs (loop5): free_blocks=0
[  612.369822][T10229] EXT4-fs (loop5): dirty_blocks=2666
[  612.402364][T10229] EXT4-fs (loop5): Block reservation details
[  612.408609][T10229] EXT4-fs (loop5): i_reserved_data_blocks=2666
[  612.692460][T10259] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  612.993876][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  613.025384][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  613.025384][   T12] 
[  613.035856][   T12] EXT4-fs (loop2): Total free blocks count 0
[  613.052989][   T12] EXT4-fs (loop2): Free/Dirty block details
[  613.059020][   T12] EXT4-fs (loop2): free_blocks=0
[  613.088434][T10229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.103689][   T12] EXT4-fs (loop2): dirty_blocks=370
[  613.109740][   T12] EXT4-fs (loop2): Block reservation details
[  613.136454][   T12] EXT4-fs (loop2): i_reserved_data_blocks=370
[  613.152621][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 364 with error 28
[  614.794333][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  614.803870][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  614.814351][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  614.828208][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  614.839526][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  614.847953][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  614.900575][T10284] loop4: detected capacity change from 0 to 512
[  614.927792][T10284] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1304: invalid indirect mapped block 256 (level 2)
[  614.945541][T10284] EXT4-fs (loop4): 2 truncates cleaned up
[  614.958636][T10284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  615.567119][ T6006] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:19: bg 0: block 5: invalid block bitmap
[  615.601627][ T6006] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  615.643400][ T6006] EXT4-fs (loop4): This should not happen!! Data will be lost
[  615.643400][ T6006] 
[  615.652890][T10004] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  615.667594][ T6006] EXT4-fs (loop4): Total free blocks count 0
[  615.680050][ T6006] EXT4-fs (loop4): Free/Dirty block details
[  615.692989][ T6006] EXT4-fs (loop4): free_blocks=0
[  615.698014][ T6006] EXT4-fs (loop4): dirty_blocks=16002
[  615.706060][ T6006] EXT4-fs (loop4): Block reservation details
[  615.714360][ T6006] EXT4-fs (loop4): i_reserved_data_blocks=16002
[  615.774300][T10288] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  615.913368][T10004] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.941401][T10004] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  615.961472][T10004] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  615.971093][T10004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.992730][T10004] usb 1-1: config 0 descriptor??
[  616.029578][T10280] chnl_net:caif_netlink_parms(): no params data found
[  616.133881][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  616.145100][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  616.153935][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  616.162795][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  616.170990][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  616.179039][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  616.277110][T10280] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.285063][T10280] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.293189][T10280] bridge_slave_0: entered allmulticast mode
[  616.302254][T10280] bridge_slave_0: entered promiscuous mode
[  616.315440][T10280] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.323254][T10280] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.330726][T10280] bridge_slave_1: entered allmulticast mode
[  616.338690][T10280] bridge_slave_1: entered promiscuous mode
[  616.406885][T10280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  616.420835][T10004] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0
[  616.434951][T10004] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0
[  616.449431][T10004] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0
[  616.462002][T10004] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0
[  616.471833][T10280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  616.481171][T10004] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0
[  616.491816][T10004] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0
[  616.499095][T10004] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0
[  616.535335][T10004] konepure 0003:1E7D:2DBE.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.0-1/input0
[  616.592745][T10280] team0: Port device team_slave_0 added
[  616.616264][T10280] team0: Port device team_slave_1 added
[  616.654968][ T5860] usb 1-1: USB disconnect, device number 11
[  616.660603][T10280] batman_adv: batadv0: Adding interface: batadv_slave_0
[  616.669046][T10280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  616.695463][T10280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  616.709671][T10280] batman_adv: batadv0: Adding interface: batadv_slave_1
[  616.716798][T10280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  616.761612][T10280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  616.777108][T10297] fido_id[10297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  616.895457][T10280] hsr_slave_0: entered promiscuous mode
[  616.924004][T10280] hsr_slave_1: entered promiscuous mode
[  616.937917][T10280] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  616.947477][ T5781] Bluetooth: hci0: command tx timeout
[  616.962147][T10280] Cannot create hsr debugfs directory
[  617.116947][T10292] chnl_net:caif_netlink_parms(): no params data found
[  617.407170][T10317] loop0: detected capacity change from 0 to 512
[  617.424048][T10317] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1311: invalid indirect mapped block 256 (level 2)
[  617.564908][T10317] EXT4-fs (loop0): 2 truncates cleaned up
[  617.572540][T10317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  618.298256][ T5781] Bluetooth: hci2: unexpected event for opcode 0x1408
[  618.305624][ T5781] Bluetooth: hci3: command tx timeout
[  618.745983][ T5986] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:12: bg 0: block 5: invalid block bitmap
[  618.797795][ T5986] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  618.816113][ T5986] EXT4-fs (loop0): This should not happen!! Data will be lost
[  618.816113][ T5986] 
[  618.827266][ T5986] EXT4-fs (loop0): Total free blocks count 0
[  618.835502][ T5986] EXT4-fs (loop0): Free/Dirty block details
[  618.841903][ T5986] EXT4-fs (loop0): free_blocks=0
[  618.846911][ T5986] EXT4-fs (loop0): dirty_blocks=16002
[  618.853480][ T5986] EXT4-fs (loop0): Block reservation details
[  618.859561][ T5986] EXT4-fs (loop0): i_reserved_data_blocks=16002
[  618.864475][T10292] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.921241][T10322] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  618.982557][T10292] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.997566][T10292] bridge_slave_0: entered allmulticast mode
[  619.006755][T10292] bridge_slave_0: entered promiscuous mode
[  619.021862][ T5781] Bluetooth: hci0: command tx timeout
[  619.068524][T10292] bridge0: port 2(bridge_slave_1) entered blocking state
[  619.111609][T10292] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.118966][T10292] bridge_slave_1: entered allmulticast mode
[  619.143074][T10292] bridge_slave_1: entered promiscuous mode
[  619.225728][T10292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  619.249902][T10292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  619.273932][T10280] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  619.308627][T10280] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  619.332043][T10280] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  619.355521][T10292] team0: Port device team_slave_0 added
[  619.366252][T10292] team0: Port device team_slave_1 added
[  619.372871][T10280] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  619.421720][ T5860] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  619.426720][T10292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  619.438105][T10292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.464675][    C1] vkms_vblank_simulate: vblank timer overrun
[  619.472184][T10292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  619.485485][T10292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  619.494015][T10292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.520197][    C1] vkms_vblank_simulate: vblank timer overrun
[  619.527703][T10292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  619.643817][ T5860] usb 5-1: config 0 has an invalid interface number: 70 but max is 0
[  619.655396][ T5860] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  619.667776][ T5860] usb 5-1: config 0 has no interface number 0
[  619.679285][T10292] hsr_slave_0: entered promiscuous mode
[  619.683197][ T5860] usb 5-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e
[  619.695927][T10292] hsr_slave_1: entered promiscuous mode
[  619.710129][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.719756][ T5860] usb 5-1: Product: syz
[  619.724910][ T5860] usb 5-1: Manufacturer: syz
[  619.730580][ T5860] usb 5-1: SerialNumber: syz
[  619.730696][T10292] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  619.749572][ T5860] usb 5-1: config 0 descriptor??
[  619.758319][T10292] Cannot create hsr debugfs directory
[  620.781638][ T5781] Bluetooth: hci3: command tx timeout
[  620.835247][ T5860] ti_usb_3410_5052 5-1:0.70: required endpoints missing
[  620.850824][ T5860] usb 5-1: USB disconnect, device number 9
[  620.917437][T10280] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.002123][T10280] 8021q: adding VLAN 0 to HW filter on device team0
[  621.054820][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.062054][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.078801][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.086267][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.101808][ T5781] Bluetooth: hci0: command tx timeout
[  621.307683][T10292] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  621.377510][T10292] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  621.405677][T10292] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  621.427245][T10292] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  621.688842][T10292] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.780074][T10292] 8021q: adding VLAN 0 to HW filter on device team0
[  621.810809][T10280] 8021q: adding VLAN 0 to HW filter on device batadv0
[  621.824306][T10347] loop0: detected capacity change from 0 to 512
[  621.855640][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.863217][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.888172][T10347] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1319: invalid indirect mapped block 256 (level 2)
[  621.905289][T10347] EXT4-fs (loop0): 2 truncates cleaned up
[  621.912523][T10347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  622.505642][   T49] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:3: bg 0: block 5: invalid block bitmap
[  622.558016][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.565320][ T6351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  622.583411][   T49] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  622.596889][   T49] EXT4-fs (loop0): This should not happen!! Data will be lost
[  622.596889][   T49] 
[  622.608511][   T49] EXT4-fs (loop0): Total free blocks count 0
[  622.614783][   T49] EXT4-fs (loop0): Free/Dirty block details
[  622.620810][   T49] EXT4-fs (loop0): free_blocks=0
[  622.626434][   T49] EXT4-fs (loop0): dirty_blocks=16002
[  622.631940][   T49] EXT4-fs (loop0): Block reservation details
[  622.637948][   T49] EXT4-fs (loop0): i_reserved_data_blocks=16002
[  622.709983][T10352] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  622.861631][ T5781] Bluetooth: hci3: command tx timeout
[  623.981546][ T5781] Bluetooth: hci0: command tx timeout
[  624.113517][T10292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  624.227189][T10280] veth0_vlan: entered promiscuous mode
[  624.261805][T10280] veth1_vlan: entered promiscuous mode
[  624.324887][T10280] veth0_macvtap: entered promiscuous mode
[  624.354566][T10280] veth1_macvtap: entered promiscuous mode
[  624.408331][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.437100][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.462574][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.489960][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.500573][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.512282][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.527712][T10280] batman_adv: batadv0: Interface activated: batadv_slave_0
[  624.575316][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.621387][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.641983][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.653137][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.663903][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.676632][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.688681][T10280] batman_adv: batadv0: Interface activated: batadv_slave_1
[  624.702673][T10280] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  624.731899][T10280] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  624.752996][T10280] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  624.773723][T10280] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  624.791222][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  624.793813][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  624.943327][ T5781] Bluetooth: hci3: command tx timeout
[  625.090197][ T5986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.112982][ T5986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.148383][T10382] loop0: detected capacity change from 0 to 512
[  625.167157][T10382] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1326: invalid indirect mapped block 256 (level 2)
[  625.182355][T10382] EXT4-fs (loop0): 2 truncates cleaned up
[  625.192667][T10382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  625.805025][ T9091] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:0: bg 0: block 5: invalid block bitmap
[  625.869881][ T9091] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  625.901064][ T9091] EXT4-fs (loop0): This should not happen!! Data will be lost
[  625.901064][ T9091] 
[  625.921088][T10292] veth0_vlan: entered promiscuous mode
[  625.927334][ T9091] EXT4-fs (loop0): Total free blocks count 0
[  625.932660][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.954394][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.963047][ T9091] EXT4-fs (loop0): Free/Dirty block details
[  625.969278][ T9091] EXT4-fs (loop0): free_blocks=0
[  625.986924][T10292] veth1_vlan: entered promiscuous mode
[  625.997653][ T9091] EXT4-fs (loop0): dirty_blocks=16002
[  626.035905][ T9091] EXT4-fs (loop0): Block reservation details
[  626.053656][ T9091] EXT4-fs (loop0): i_reserved_data_blocks=16002
[  626.122801][T10386] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  626.229255][T10292] veth0_macvtap: entered promiscuous mode
[  626.275330][T10292] veth1_macvtap: entered promiscuous mode
[  626.335795][T10395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  626.338448][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.401562][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.422338][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.439692][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.451637][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.471864][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.494942][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.510953][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.526676][T10292] batman_adv: batadv0: Interface activated: batadv_slave_0
[  626.565519][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  626.584207][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.601299][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  626.616873][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.628546][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  626.639725][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.650829][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  626.668032][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  627.543710][T10292] batman_adv: batadv0: Interface activated: batadv_slave_1
[  627.576421][T10292] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  627.601504][T10292] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  627.621463][T10292] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  627.641024][T10292] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  628.410867][ T5986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.439673][ T5986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.519980][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.548943][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  629.257451][T10413] loop0: detected capacity change from 0 to 512
[  629.322116][T10413] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1333: invalid indirect mapped block 256 (level 2)
[  629.339178][T10413] EXT4-fs (loop0): 2 truncates cleaned up
[  629.346036][T10413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  629.959134][   T49] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:3: bg 0: block 5: invalid block bitmap
[  630.044339][   T49] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  630.104668][   T49] EXT4-fs (loop0): This should not happen!! Data will be lost
[  630.104668][   T49] 
[  630.127137][   T49] EXT4-fs (loop0): Total free blocks count 0
[  630.140066][   T49] EXT4-fs (loop0): Free/Dirty block details
[  630.161815][   T49] EXT4-fs (loop0): free_blocks=0
[  630.166828][   T49] EXT4-fs (loop0): dirty_blocks=16002
[  630.187427][   T49] EXT4-fs (loop0): Block reservation details
[  630.201839][   T49] EXT4-fs (loop0): i_reserved_data_blocks=16002
[  630.261236][T10419] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  630.649213][T10422] Console: switching to colour VGA+ 80x25
[  630.862090][T10417] syz.7.1334: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1
[  630.907279][T10417] CPU: 0 PID: 10417 Comm: syz.7.1334 Not tainted syzkaller #0
[  630.914896][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  630.925265][T10417] Call Trace:
[  630.928657][T10417]  <TASK>
[  630.931612][T10417]  dump_stack_lvl+0x18c/0x250
[  630.936433][T10417]  ? show_regs_print_info+0x20/0x20
[  630.941672][T10417]  ? load_image+0x420/0x420
[  630.946604][T10417]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  630.953183][T10417]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  630.959771][T10417]  warn_alloc+0x246/0x340
[  630.964186][T10417]  ? zone_watermark_ok_safe+0x230/0x230
[  630.970053][T10417]  ? _raw_spin_unlock+0x28/0x40
[  630.975059][T10417]  ? netlink_rcv_skb+0x235/0x4c0
[  630.980195][T10417]  __vmalloc_node_range+0x661/0x1320
[  630.985611][T10417]  ? __asan_memset+0x22/0x40
[  630.990399][T10417]  ? free_vm_area+0x50/0x50
[  630.995311][T10417]  ? kvmalloc_node+0x70/0x180
[  631.000115][T10417]  ? rcu_is_watching+0x15/0xb0
[  631.004925][T10417]  ? kvmalloc_node+0x70/0x180
[  631.009633][T10417]  ? trace_kmalloc+0x1f/0xa0
[  631.014233][T10417]  kvmalloc_node+0x13f/0x180
[  631.018845][T10417]  ? hash_ipportnet4_resize+0x253/0x1a40
[  631.024863][T10417]  hash_ipportnet4_resize+0x253/0x1a40
[  631.030445][T10417]  ? hash_ipportnet4_uadt+0x13b0/0x13b0
[  631.036031][T10417]  ? hash_ipportnet4_kadt+0x620/0x620
[  631.041461][T10417]  call_ad+0x42a/0xb30
[  631.045593][T10417]  ? ip_set_ad+0x9c0/0x9c0
[  631.050129][T10417]  ? __nla_parse+0x40/0x50
[  631.054792][T10417]  ip_set_ad+0x81a/0x9c0
[  631.059080][T10417]  ? ip_set_dump_done+0x320/0x320
[  631.064193][T10417]  ? rcu_is_watching+0x15/0xb0
[  631.068990][T10417]  nfnetlink_rcv_msg+0xcaf/0x1290
[  631.074120][T10417]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  631.080551][T10417]  ? nfnetlink_rcv_msg+0x228/0x1290
[  631.085770][T10417]  ? nfnetlink_unbind+0x160/0x160
[  631.090836][T10417]  ? __dev_queue_xmit+0x198c/0x3630
[  631.096314][T10417]  ? __netlink_deliver_tap+0x579/0x7f0
[  631.101787][T10417]  ? netlink_deliver_tap+0x19c/0x1b0
[  631.107161][T10417]  ? netlink_unicast+0x77b/0x930
[  631.112284][T10417]  ? netlink_sendmsg+0x8d0/0xbf0
[  631.117230][T10417]  ? ____sys_sendmsg+0x61b/0x980
[  631.122269][T10417]  ? ___sys_sendmsg+0x2a6/0x360
[  631.127222][T10417]  ? __se_sys_sendmsg+0x1d0/0x2c0
[  631.132275][T10417]  ? do_syscall_64+0x55/0xb0
[  631.136891][T10417]  netlink_rcv_skb+0x235/0x4c0
[  631.141674][T10417]  ? nfnetlink_unbind+0x160/0x160
[  631.147040][T10417]  ? netlink_ack+0x1160/0x1160
[  631.151844][T10417]  ? apparmor_capable+0x137/0x1a0
[  631.156968][T10417]  ? bpf_lsm_capable+0x9/0x10
[  631.161875][T10417]  ? security_capable+0x89/0xb0
[  631.166779][T10417]  nfnetlink_rcv+0x2c9/0x2490
[  631.171647][T10417]  ? __local_bh_enable_ip+0x13a/0x1c0
[  631.177173][T10417]  ? lockdep_hardirqs_on+0x98/0x150
[  631.182552][T10417]  ? __local_bh_enable_ip+0x13a/0x1c0
[  631.187948][T10417]  ? _local_bh_enable+0xa0/0xa0
[  631.193002][T10417]  ? __dev_queue_xmit+0x275/0x3630
[  631.198244][T10417]  ? __dev_queue_xmit+0x1bc2/0x3630
[  631.203457][T10417]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  631.209100][T10417]  ? __dev_queue_xmit+0x275/0x3630
[  631.214231][T10417]  ? ref_tracker_free+0x686/0x830
[  631.219270][T10417]  ? refcount_inc+0x70/0x70
[  631.223787][T10417]  ? __asan_memcpy+0x40/0x70
[  631.228582][T10417]  ? __skb_clone+0x5c/0x6c0
[  631.233106][T10417]  ? __skb_clone+0x446/0x6c0
[  631.237731][T10417]  ? netlink_deliver_tap+0x2e/0x1b0
[  631.242946][T10417]  ? __lock_acquire+0x7d80/0x7d80
[  631.247999][T10417]  ? netlink_deliver_tap+0x2e/0x1b0
[  631.253333][T10417]  netlink_unicast+0x7b1/0x930
[  631.258222][T10417]  netlink_sendmsg+0x8d0/0xbf0
[  631.263097][T10417]  ? netlink_getsockopt+0x590/0x590
[  631.268649][T10417]  ? apparmor_socket_sendmsg+0x170/0x330
[  631.274317][T10417]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  631.279635][T10417]  ? security_socket_sendmsg+0x80/0xa0
[  631.285382][T10417]  ? netlink_getsockopt+0x590/0x590
[  631.290867][T10417]  ____sys_sendmsg+0x61b/0x980
[  631.295733][T10417]  ? __asan_memset+0x22/0x40
[  631.300446][T10417]  ? __sys_sendmsg_sock+0x30/0x30
[  631.305495][T10417]  ? __import_iovec+0x5f2/0x850
[  631.310399][T10417]  ? import_iovec+0x73/0xa0
[  631.314915][T10417]  ___sys_sendmsg+0x2a6/0x360
[  631.319602][T10417]  ? __sys_sendmsg+0x2b0/0x2b0
[  631.324577][T10417]  __se_sys_sendmsg+0x1d0/0x2c0
[  631.329541][T10417]  ? __x64_sys_sendmsg+0x80/0x80
[  631.334492][T10417]  ? lockdep_hardirqs_on+0x98/0x150
[  631.339720][T10417]  do_syscall_64+0x55/0xb0
[  631.344160][T10417]  ? clear_bhb_loop+0x40/0x90
[  631.348936][T10417]  ? clear_bhb_loop+0x40/0x90
[  631.353643][T10417]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  631.359589][T10417] RIP: 0033:0x7ff7f599e019
[  631.364106][T10417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  631.384241][T10417] RSP: 002b:00007ff7f68d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  631.392743][T10417] RAX: ffffffffffffffda RBX: 00007ff7f5c25fa0 RCX: 00007ff7f599e019
[  631.400815][T10417] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000003
[  631.408843][T10417] RBP: 00007ff7f5a3500c R08: 0000000000000000 R09: 0000000000000000
[  631.416919][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  631.425102][T10417] R13: 00007ff7f5c26038 R14: 00007ff7f5c25fa0 R15: 00007ffcaa11c458
[  631.433481][T10417]  </TASK>
[  631.473443][T10417] Mem-Info:
[  631.476721][T10417] active_anon:7116 inactive_anon:0 isolated_anon:0
[  631.476721][T10417]  active_file:18114 inactive_file:40250 isolated_file:0
[  631.476721][T10417]  unevictable:768 dirty:72 writeback:0
[  631.476721][T10417]  slab_reclaimable:14983 slab_unreclaimable:95591
[  631.476721][T10417]  mapped:24858 shmem:1513 pagetables:707
[  631.476721][T10417]  sec_pagetables:0 bounce:0
[  631.476721][T10417]  kernel_misc_reclaimable:0
[  631.476721][T10417]  free:1334179 free_pcp:9343 free_cma:0
[  632.810260][T10417] Node 0 active_anon:104524kB inactive_anon:0kB active_file:72456kB inactive_file:160796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99432kB dirty:280kB writeback:0kB shmem:80568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11288kB pagetables:2828kB sec_pagetables:0kB all_unreclaimable? no
[  632.886280][T10417] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  632.920686][T10417] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  632.971880][T10417] lowmem_reserve[]: 0 2521 2522 2522 2522
[  632.997966][T10417] Node 0 DMA32 free:1340140kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:92084kB inactive_anon:0kB active_file:72456kB inactive_file:159976kB unevictable:1536kB writepending:280kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:34448kB local_pcp:18808kB free_cma:0kB
[  633.055355][T10417] lowmem_reserve[]: 0 0 0 0 0
[  633.060324][T10417] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  633.093847][T10417] lowmem_reserve[]: 0 0 0 0 0
[  633.099086][T10417] Node 1 Normal free:3902968kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17156kB local_pcp:9764kB free_cma:0kB
[  633.132004][T10417] lowmem_reserve[]: 0 0 0 0 0
[  633.136937][T10417] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  633.164658][T10417] Node 0 DMA32: 81*4kB (UME) 708*8kB (UME) 384*16kB (ME) 147*32kB (UME) 118*64kB (UME) 424*128kB (UME) 250*256kB (UM) 130*512kB (UM) 88*1024kB (UME) 32*2048kB (ME) 242*4096kB (UM) = 1356100kB
[  633.218157][T10417] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  633.235603][T10417] Node 1 Normal: 264*4kB (UME) 75*8kB (UME) 44*16kB (UME) 152*32kB (UME) 39*64kB (UME) 10*128kB (UME) 3*256kB (UME) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3902968kB
[  633.258673][T10417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  633.269338][T10417] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  633.280730][T10417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  633.317686][T10417] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  633.352850][T10417] 65120 total pagecache pages
[  633.357602][T10417] 0 pages in swap cache
[  633.372293][T10417] Free swap  = 124716kB
[  633.386629][T10417] Total swap = 124996kB
[  633.390848][T10417] 2097051 pages RAM
[  633.397996][T10417] 0 pages HighMem/MovableOnly
[  633.418303][T10417] 416955 pages reserved
[  633.422859][T10417] 0 pages cma reserved
[  634.502971][T10438] (null): rxe_set_mtu: Set mtu to 1024
[  634.571338][    C1] sched: RT throttling activated
[  634.602753][T10441] loop4: detected capacity change from 0 to 512
[  634.623745][T10438] infiniband syz2: set down
[  634.628592][T10438] infiniband syz2: added ipvlan0
[  634.646222][T10444] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1344'.
[  634.692780][T10438] RDS/IB: syz2: added
[  634.697612][T10438] smc: adding ib device syz2 with port count 1
[  634.704218][T10438] smc:    ib device syz2 port 1 has pnetid 
[  634.788878][T10441] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1343: invalid indirect mapped block 256 (level 2)
[  634.807188][T10441] EXT4-fs (loop4): 2 truncates cleaned up
[  634.825716][T10441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  635.938417][ T5986] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:12: bg 0: block 5: invalid block bitmap
[  636.046519][ T5986] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28
[  636.109869][ T5986] EXT4-fs (loop4): This should not happen!! Data will be lost
[  636.109869][ T5986] 
[  636.138495][ T5986] EXT4-fs (loop4): Total free blocks count 0
[  636.146300][ T5986] EXT4-fs (loop4): Free/Dirty block details
[  636.159176][ T5986] EXT4-fs (loop4): free_blocks=0
[  636.168730][ T5986] EXT4-fs (loop4): dirty_blocks=16001
[  636.174295][ T5986] EXT4-fs (loop4): Block reservation details
[  636.180312][ T5986] EXT4-fs (loop4): i_reserved_data_blocks=16001
[  636.257498][ T5986] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[  637.428253][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.451721][    T8] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  637.642975][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.710277][    T8] usb 7-1: no configurations
[  637.738868][    T8] usb 7-1: can't read configurations, error -22
[  637.846552][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.268925][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.948043][ T5781] Bluetooth: hci2: unexpected event for opcode 0x1408
[  640.638864][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  640.650245][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  640.659311][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  640.667589][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  640.681812][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  640.689526][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  641.137862][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'.
[  643.201617][ T5781] Bluetooth: hci3: command tx timeout
[  644.455969][T10521] fuse: Bad value for 'fd'
[  645.291428][ T5781] Bluetooth: hci3: command tx timeout
[  647.361387][ T5781] Bluetooth: hci3: command tx timeout
[  647.461780][T10513] tipc: Enabling <eth:lo> not permitted
[  647.468114][T10513] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  647.606916][T10546] Bluetooth: (null): Invalid header checksum
[  647.695550][T10483] chnl_net:caif_netlink_parms(): no params data found
[  648.441708][T10483] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.479695][T10483] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.586164][T10483] bridge_slave_0: entered allmulticast mode
[  648.627229][T10483] bridge_slave_0: entered promiscuous mode
[  648.720108][T10483] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.800081][T10483] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.841959][T10483] bridge_slave_1: entered allmulticast mode
[  648.863263][T10483] bridge_slave_1: entered promiscuous mode
[  649.134326][T10483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  649.513366][ T5781] Bluetooth: hci3: command tx timeout
[  649.691581][T10483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  649.865199][T10599] xt_hashlimit: size too large, truncated to 1048576
[  649.915659][T10483] team0: Port device team_slave_0 added
[  650.049206][T10483] team0: Port device team_slave_1 added
[  650.759955][   T12] hsr_slave_0: left promiscuous mode
[  650.772018][   T12] hsr_slave_1: left promiscuous mode
[  650.781908][ T5917] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  650.828584][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  650.851587][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  650.933563][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  650.941569][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  650.960771][   T12] bridge_slave_1: left allmulticast mode
[  650.980387][   T12] bridge_slave_1: left promiscuous mode
[  650.990691][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.011408][ T5917] usb 1-1: Using ep0 maxpacket: 8
[  651.034868][ T5917] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  651.057201][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.072448][   T12] bridge_slave_0: left allmulticast mode
[  651.087699][   T12] bridge_slave_0: left promiscuous mode
[  651.101712][ T5917] usb 1-1: Product: syz
[  651.105958][ T5917] usb 1-1: Manufacturer: syz
[  651.111042][ T5917] usb 1-1: SerialNumber: syz
[  651.121573][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.160330][ T5917] usb 1-1: config 0 descriptor??
[  651.184387][ T5917] gspca_main: sq930x-2.14.0 probing 2770:930c
[  651.336980][   T12] veth1_macvtap: left promiscuous mode
[  651.351872][   T12] veth0_macvtap: left promiscuous mode
[  651.357920][   T12] veth1_vlan: left promiscuous mode
[  651.391069][   T12] veth0_vlan: left promiscuous mode
[  651.501428][ T5860] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  651.706836][ T5860] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  651.714645][ T5917] gspca_sq930x: reg_r 001f failed -110
[  651.731577][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.744787][ T5917] sq930x: probe of 1-1:0.0 failed with error -110
[  651.781252][ T5860] usb 5-1: config 0 descriptor??
[  651.796824][ T5860] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  652.620480][ T5860] usb 5-1: USB disconnect, device number 10
[  652.980458][   T12] team0 (unregistering): Port device team_slave_1 removed
[  653.059475][   T12] team0 (unregistering): Port device team_slave_0 removed
[  653.127219][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  653.278931][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  653.944958][   T12] bond0 (unregistering): Released all slaves
[  654.087676][T10483] batman_adv: batadv0: Adding interface: batadv_slave_0
[  654.096534][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  654.124472][T10483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  654.188524][T10483] batman_adv: batadv0: Adding interface: batadv_slave_1
[  654.200968][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  654.235509][T10483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  654.382461][ T5810] usb 1-1: USB disconnect, device number 12
[  654.443809][T10483] hsr_slave_0: entered promiscuous mode
[  654.494963][T10483] hsr_slave_1: entered promiscuous mode
[  654.514838][T10483] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  654.542257][T10483] Cannot create hsr debugfs directory
[  654.872713][ T5810] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  655.061661][ T5810] usb 1-1: Using ep0 maxpacket: 8
[  655.080476][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  655.085655][T10483] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  655.107754][ T5810] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  655.108861][T10483] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  655.122101][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.145243][T10483] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  655.164137][T10483] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  655.167763][ T5810] usb 1-1: config 0 descriptor??
[  655.318239][T10483] 8021q: adding VLAN 0 to HW filter on device bond0
[  655.346608][T10483] 8021q: adding VLAN 0 to HW filter on device team0
[  655.376944][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.384322][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  655.403171][ T5810] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  655.428772][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.436438][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  655.690381][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1403'.
[  655.832908][ T5810] usb 1-1: USB disconnect, device number 13
[  656.790472][T10483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  658.190940][T10483] veth0_vlan: entered promiscuous mode
[  658.231174][T10483] veth1_vlan: entered promiscuous mode
[  658.356831][T10483] veth0_macvtap: entered promiscuous mode
[  658.382497][T10483] veth1_macvtap: entered promiscuous mode
[  658.428116][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.444686][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.459832][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.476324][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.488517][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.499756][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.510153][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.521284][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.559081][T10483] batman_adv: batadv0: Interface activated: batadv_slave_0
[  658.580495][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.593011][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.604525][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.615743][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.626767][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.644514][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.658185][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.675901][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.693574][T10483] batman_adv: batadv0: Interface activated: batadv_slave_1
[  658.710611][T10483] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  658.719891][T10483] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.739208][T10483] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.769157][T10483] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  658.996389][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.013804][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.128949][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.155014][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.984724][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.237554][T10744] syz.4.1420 (10744): drop_caches: 2
[  661.258085][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.473896][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.693783][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.614535][T10842] Bluetooth: MGMT ver 1.22
[  666.823768][   T12] hsr_slave_0: left promiscuous mode
[  666.837905][   T12] hsr_slave_1: left promiscuous mode
[  666.852452][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  666.900647][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  666.971780][ T5860] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  667.635233][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  667.711663][ T5860] usb 9-1: Using ep0 maxpacket: 8
[  667.716941][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  667.837821][ T5860] usb 9-1: unable to get BOS descriptor or descriptor too short
[  667.991521][ T5860] usb 9-1: config 8 interface 0 has no altsetting 0
[  668.155085][   T12] bridge_slave_1: left allmulticast mode
[  668.161228][   T12] bridge_slave_1: left promiscuous mode
[  668.188507][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.197995][ T5860] usb 9-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=31.0a
[  668.219665][ T5860] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.239312][   T12] bridge_slave_0: left allmulticast mode
[  668.245175][ T5860] usb 9-1: Product: syz
[  668.249487][   T12] bridge_slave_0: left promiscuous mode
[  668.255807][ T5860] usb 9-1: Manufacturer: syz
[  668.260816][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.270165][ T5860] usb 9-1: SerialNumber: syz
[  668.294129][ T5860] usb 9-1: active config #8 != 1 ??
[  668.369752][   T12] veth1_macvtap: left promiscuous mode
[  668.376472][   T12] veth0_macvtap: left promiscuous mode
[  668.386417][   T12] veth1_vlan: left promiscuous mode
[  668.392414][   T12] veth0_vlan: left promiscuous mode
[  670.223731][ T5809] usb 9-1: USB disconnect, device number 2
[  670.510033][T10893] ==================================================================
[  670.510049][T10893] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x4e2/0xa70
[  670.510110][T10893] Read of size 256 at addr ffff88805bb84760 by task syz.8.1460/10893
[  670.510125][T10893] 
[  670.510130][T10893] CPU: 1 PID: 10893 Comm: syz.8.1460 Not tainted syzkaller #0
[  670.510147][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  670.510157][T10893] Call Trace:
[  670.510162][T10893]  <TASK>
[  670.510169][T10893]  dump_stack_lvl+0x18c/0x250
[  670.510189][T10893]  ? __lock_acquire+0x7d80/0x7d80
[  670.510210][T10893]  ? show_regs_print_info+0x20/0x20
[  670.510225][T10893]  ? load_image+0x420/0x420
[  670.510247][T10893]  ? atomic_notifier_call_chain+0x26/0x180
[  670.510267][T10893]  ? __virt_addr_valid+0x10c/0x380
[  670.510292][T10893]  ? __virt_addr_valid+0x10c/0x380
[  670.510310][T10893]  ? __virt_addr_valid+0x10c/0x380
[  670.510329][T10893]  print_report+0xa8/0x210
[  670.510344][T10893]  ? fbcon_prepare_logo+0x4e2/0xa70
[  670.510362][T10893]  kasan_report+0x117/0x150
[  670.510384][T10893]  ? fbcon_prepare_logo+0x4e2/0xa70
[  670.510405][T10893]  kasan_check_range+0x241/0x290
[  670.510423][T10893]  ? fbcon_prepare_logo+0x4e2/0xa70
[  670.510442][T10893]  __asan_memcpy+0x29/0x70
[  670.510463][T10893]  fbcon_prepare_logo+0x4e2/0xa70
[  670.510496][T10893]  fbcon_init+0x1380/0x2460
[  670.510521][T10893]  visual_init+0x2dd/0x650
[  670.510557][T10893]  do_bind_con_driver+0x859/0x1030
[  670.510578][T10893]  ? sysfs_kf_read+0x360/0x360
[  670.510607][T10893]  store_bind+0x798/0xa20
[  670.510628][T10893]  ? sysfs_kf_read+0x360/0x360
[  670.510642][T10893]  kernfs_fop_write_iter+0x3a4/0x520
[  670.510667][T10893]  vfs_write+0x474/0x9a0
[  670.510689][T10893]  ? file_end_write+0x250/0x250
[  670.510711][T10893]  ? __fget_files+0x3fc/0x460
[  670.510740][T10893]  ? __fdget_pos+0x2a3/0x330
[  670.510759][T10893]  ? ksys_write+0x74/0x260
[  670.510779][T10893]  ksys_write+0x151/0x260
[  670.510799][T10893]  ? __ia32_sys_read+0x90/0x90
[  670.510820][T10893]  ? lockdep_hardirqs_on+0x98/0x150
[  670.510840][T10893]  do_syscall_64+0x55/0xb0
[  670.510857][T10893]  ? clear_bhb_loop+0x40/0x90
[  670.510875][T10893]  ? clear_bhb_loop+0x40/0x90
[  670.510891][T10893]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  670.510908][T10893] RIP: 0033:0x7fb07d79e019
[  670.510923][T10893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  670.510937][T10893] RSP: 002b:00007fb07b9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  670.510955][T10893] RAX: ffffffffffffffda RBX: 00007fb07da26090 RCX: 00007fb07d79e019
[  670.510967][T10893] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003
[  670.510977][T10893] RBP: 00007fb07d83500c R08: 0000000000000000 R09: 0000000000000000
[  670.510987][T10893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  670.510997][T10893] R13: 00007fb07da26128 R14: 00007fb07da26090 R15: 00007ffe6ccafd98
[  670.511015][T10893]  </TASK>
[  670.511021][T10893] 
[  670.511024][T10893] Allocated by task 49:
[  670.511031][T10893]  kasan_set_track+0x4e/0x70
[  670.511048][T10893]  __kasan_kmalloc+0x8f/0xa0
[  670.511063][T10893]  __kmalloc+0xb7/0x240
[  670.511082][T10893]  ieee802_11_parse_elems_full+0xb9/0x20c0
[  670.511181][T10893]  ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0
[  670.511242][T10893]  ieee80211_iface_work+0x730/0xc90
[  670.511257][T10893]  cfg80211_wiphy_work+0x228/0x260
[  670.511305][T10893]  process_scheduled_works+0xa60/0x1600
[  670.511325][T10893]  worker_thread+0xa5e/0xfe0
[  670.511340][T10893]  kthread+0x2fa/0x390
[  670.511354][T10893]  ret_from_fork+0x48/0x80
[  670.511379][T10893]  ret_from_fork_asm+0x11/0x20
[  670.511408][T10893] 
[  670.511411][T10893] Freed by task 49:
[  670.511418][T10893]  kasan_set_track+0x4e/0x70
[  670.511432][T10893]  kasan_save_free_info+0x28/0x40
[  670.511451][T10893]  ____kasan_slab_free+0x126/0x1f0
[  670.511467][T10893]  slab_free_freelist_hook+0x130/0x1a0
[  670.511480][T10893]  __kmem_cache_free+0xba/0x1f0
[  670.511508][T10893]  ieee80211_ibss_rx_queued_mgmt+0x1ae8/0x2dc0
[  670.511524][T10893]  ieee80211_iface_work+0x730/0xc90
[  670.511540][T10893]  cfg80211_wiphy_work+0x228/0x260
[  670.511555][T10893]  process_scheduled_works+0xa60/0x1600
[  670.511572][T10893]  worker_thread+0xa5e/0xfe0
[  670.511587][T10893]  kthread+0x2fa/0x390
[  670.511600][T10893]  ret_from_fork+0x48/0x80
[  670.511616][T10893]  ret_from_fork_asm+0x11/0x20
[  670.511633][T10893] 
[  670.511636][T10893] The buggy address belongs to the object at ffff88805bb84000
[  670.511636][T10893]  which belongs to the cache kmalloc-1k of size 1024
[  670.511650][T10893] The buggy address is located 864 bytes to the right of
[  670.511650][T10893]  allocated 1024-byte region [ffff88805bb84000, ffff88805bb84400)
[  670.511668][T10893] 
[  670.511671][T10893] The buggy address belongs to the physical page:
[  670.511685][T10893] page:ffffea00016ee000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bb80
[  670.511702][T10893] head:ffffea00016ee000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  670.511716][T10893] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  670.511730][T10893] page_type: 0xffffffff()
[  670.511745][T10893] raw: 00fff00000000840 ffff888017c41dc0 dead000000000100 dead000000000122
[  670.511759][T10893] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  670.511766][T10893] page dumped because: kasan: bad access detected
[  670.511778][T10893] page_owner tracks the page as allocated
[  670.511783][T10893] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6013, tgid 6013 (kworker/u4:22), ts 115922825014, free_ts 100964285648
[  670.511811][T10893]  post_alloc_hook+0x1c1/0x200
[  670.511833][T10893]  get_page_from_freelist+0x2181/0x22a0
[  670.511847][T10893]  __alloc_pages+0x1f0/0x460
[  670.511860][T10893]  alloc_slab_page+0x5d/0x180
[  670.511873][T10893]  new_slab+0x87/0x2d0
[  670.511885][T10893]  ___slab_alloc+0xc5c/0x12f0
[  670.511898][T10893]  __kmem_cache_alloc_node+0x11f/0x250
[  670.511917][T10893]  __kmalloc+0xa7/0x240
[  670.511935][T10893]  ieee802_11_parse_elems_full+0xb9/0x20c0
[  670.511950][T10893]  ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0
[  670.511966][T10893]  ieee80211_iface_work+0x730/0xc90
[  670.511981][T10893]  cfg80211_wiphy_work+0x228/0x260
[  670.511998][T10893]  process_scheduled_works+0xa60/0x1600
[  670.512014][T10893]  worker_thread+0xa5e/0xfe0
[  670.512030][T10893]  kthread+0x2fa/0x390
[  670.512044][T10893]  ret_from_fork+0x48/0x80
[  670.512059][T10893] page last free stack trace:
[  670.512064][T10893]  free_unref_page_prepare+0x7d7/0x8f0
[  670.512078][T10893]  free_unref_page+0x32/0x2e0
[  670.512090][T10893]  free_large_kmalloc+0x101/0x1b0
[  670.512108][T10893]  kmem_cache_free_bulk+0x390/0x470
[  670.512127][T10893]  kvfree_rcu_bulk+0x1eb/0x470
[  670.512142][T10893]  kfree_rcu_monitor+0x7d3/0xf70
[  670.512156][T10893]  process_scheduled_works+0xa60/0x1600
[  670.512173][T10893]  worker_thread+0xa5e/0xfe0
[  670.512188][T10893]  kthread+0x2fa/0x390
[  670.512201][T10893]  ret_from_fork+0x48/0x80
[  670.512217][T10893]  ret_from_fork_asm+0x11/0x20
[  670.512235][T10893] 
[  670.512238][T10893] Memory state around the buggy address:
[  670.512246][T10893]  ffff88805bb84600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  670.512257][T10893]  ffff88805bb84680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  670.512267][T10893] >ffff88805bb84700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  670.512274][T10893]                                                        ^
[  670.512283][T10893]  ffff88805bb84780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  670.512293][T10893]  ffff88805bb84800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  670.512300][T10893] ==================================================================
[  670.524046][T10893] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  670.524061][T10893] CPU: 1 PID: 10893 Comm: syz.8.1460 Not tainted syzkaller #0
[  670.524082][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  670.524093][T10893] Call Trace:
[  670.524102][T10893]  <TASK>
[  670.524110][T10893]  dump_stack_lvl+0x18c/0x250
[  670.524139][T10893]  ? show_regs_print_info+0x20/0x20
[  670.524158][T10893]  ? load_image+0x420/0x420
[  670.524187][T10893]  panic+0x2ca/0x720
[  670.524209][T10893]  ? bpf_jit_dump+0xd0/0xd0
[  670.524226][T10893]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  670.524254][T10893]  ? _raw_spin_unlock+0x40/0x40
[  670.524276][T10893]  ? print_memory_metadata+0x314/0x400
[  670.524296][T10893]  ? fbcon_prepare_logo+0x4e2/0xa70
[  670.524319][T10893]  check_panic_on_warn+0x84/0xa0
[  670.524342][T10893]  ? fbcon_prepare_logo+0x4e2/0xa70
[  670.524364][T10893]  end_report+0x6f/0x130
[  670.524383][T10893]  kasan_report+0x128/0x150
[  670.524399][T10893]  ? fbcon_prepare_logo+0x4e2/0xa70
[  670.524419][T10893]  kasan_check_range+0x241/0x290
[  670.524435][T10893]  ? fbcon_prepare_logo+0x4e2/0xa70
[  670.524453][T10893]  __asan_memcpy+0x29/0x70
[  670.524472][T10893]  fbcon_prepare_logo+0x4e2/0xa70
[  670.524494][T10893]  fbcon_init+0x1380/0x2460
[  670.524516][T10893]  visual_init+0x2dd/0x650
[  670.524535][T10893]  do_bind_con_driver+0x859/0x1030
[  670.524554][T10893]  ? sysfs_kf_read+0x360/0x360
[  670.524568][T10893]  store_bind+0x798/0xa20
[  670.524589][T10893]  ? sysfs_kf_read+0x360/0x360
[  670.524601][T10893]  kernfs_fop_write_iter+0x3a4/0x520
[  670.524623][T10893]  vfs_write+0x474/0x9a0
[  670.524644][T10893]  ? file_end_write+0x250/0x250
[  670.524675][T10893]  ? __fget_files+0x3fc/0x460
[  670.524705][T10893]  ? __fdget_pos+0x2a3/0x330
[  670.524722][T10893]  ? ksys_write+0x74/0x260
[  670.524740][T10893]  ksys_write+0x151/0x260
[  670.524760][T10893]  ? __ia32_sys_read+0x90/0x90
[  670.524779][T10893]  ? lockdep_hardirqs_on+0x98/0x150
[  670.524798][T10893]  do_syscall_64+0x55/0xb0
[  670.524812][T10893]  ? clear_bhb_loop+0x40/0x90
[  670.524829][T10893]  ? clear_bhb_loop+0x40/0x90
[  670.524844][T10893]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  670.524860][T10893] RIP: 0033:0x7fb07d79e019
[  670.524874][T10893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  670.524887][T10893] RSP: 002b:00007fb07b9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  670.524904][T10893] RAX: ffffffffffffffda RBX: 00007fb07da26090 RCX: 00007fb07d79e019
[  670.524915][T10893] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003
[  670.524925][T10893] RBP: 00007fb07d83500c R08: 0000000000000000 R09: 0000000000000000
[  670.524934][T10893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  670.524943][T10893] R13: 00007fb07da26128 R14: 00007fb07da26090 R15: 00007ffe6ccafd98
[  670.524959][T10893]  </TASK>
[  670.533630][T10893] Kernel Offset: disabled