last executing test programs:

17m8.375226738s ago: executing program 2 (id=231):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x260140, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = semget$private(0x0, 0x3, 0x144)
semctl$GETVAL(r0, 0x3, 0xc, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semctl$GETPID(0x0, 0x3, 0xb, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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")
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x7}]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r4, 0x5, 0x5}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48)

17m6.536538119s ago: executing program 2 (id=234):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x2000000000000002)
r2 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0))
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x2, 0x7f}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x0, 0x0, 0x6}}, 0x18)
connect$can_j1939(r3, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x80000, 0x4)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r7, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

17m3.681397608s ago: executing program 2 (id=241):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000010000000000000000000000000a04000000050001"], 0x64}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
r6 = memfd_create(&(0x7f0000000640)='\x00\xac=\x9d\xd2\xdb\xe6\xc0\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x97\x95\xa4kP\x99YO\xb8V\xd5p\x90Xf+\x86\xc5\x92\x81\x0f\xc7\x1eo\xaa\x19\x99x\x84*\xdf\xa5DDU\xf4\\\xac}\x1d\xb8(\x19\xe6~b\xd4\xcbR4\x9d>L\xb5\"\x0fdbD\x94\xfb\x13.(:\xda\xf1\x0f\xb3\xaf\x89\xab\xbd\t\x19\xf4r\x00\xa5\x87d$\xf2\xae;[m\x9eZ\xa2\x96\x12\xfelY\xf6\x88\x0fN\x12\xba\x9c\x00'/253, 0x0)
fallocate(r6, 0x0, 0x400000000000000, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3c0, 0x230, 0x43, 0xa0, 0x0, 0x98, 0x328, 0x178, 0x178, 0x328, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1e8, 0x230, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit2={{0x150}, {'macvlan0\x00', {0x7fffffff, 0x6, 0x44, 0x5, 0x3, 0x9, 0x2c, 0x0, 0x120}, {0x7f}}}, @inet=@rpfilter={{0x28}, {0xbb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x420)

16m59.167598801s ago: executing program 2 (id=248):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r0 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000100)={0x98f904, 0x40, @name="3997111cd6a726d25daf479f6b87f359bb6a6248f7627ca0fe236de6c93187bd"})
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000})
creat(&(0x7f0000000e00)='./file0\x00', 0xc)

16m56.372360115s ago: executing program 2 (id=252):
set_mempolicy(0x4003, 0x0, 0x3)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x1000)
ppoll(&(0x7f0000000040)=[{r1, 0x9620}], 0x1, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0)

16m51.065940626s ago: executing program 2 (id=258):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000200)=0x5)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = gettid()
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r4, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

16m35.434087048s ago: executing program 32 (id=258):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000200)=0x5)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = gettid()
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r4, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

9m49.575074501s ago: executing program 3 (id=875):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x21)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e1e, 0x8, @rand_addr=' \x01\x00', 0x6}], 0x1c)
r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee5, 0x1000, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r6, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'})

9m43.587418488s ago: executing program 3 (id=883):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x190, 0x6c, 0x0, 0x0, 0x0, 0x2c0, 0x258, 0x258, 0x2c0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @empty, [], [], 'lo\x00', 'erspan0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3f0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54ddf, 0x70bd2a, 0x0, {0x2, 0x0, 0x10}, [@FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000840)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@uni_xlateno}, {@fat=@check_strict}, {@numtail}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x81}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@rodir}, {@uni_xlate}]}, 0x41, 0x282, &(0x7f00000004c0)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, 0x0)

9m40.181196452s ago: executing program 3 (id=888):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300))
openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0)

9m38.871096s ago: executing program 3 (id=892):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$eJzs3U9vI2cZAPBnHDu76QYSoIeC1D+ilbIV1N50aRtxaIuEuFUClfsSZb1RtE68ip2yiVaw+wFQJYSg4tYTFyQ+ABLqjStCqgQXThwQqMAuHCoEHTTjyQZnx43Tje3F/v2kN/N/nue1PePxzJuZAGbWMxHxekTMRcTzEbFUjK8UJW73Sjbfvbu3NrKSRJq++bckkmJcNltSlMyFYrHzvU6pzv7B9fVWq7lbDDe62zcanf2DF7a21zebm82dy5dXX157Ze2ltUslS1eHqNmdvqGsXq9+/U8/fvtn33j1V1/+7h+v/OXi97J8F4vph/UodXGIcAP0XpNa9lrcl2W/+8lX+UiZK+pTO3HOhbHkAwDAx8uO8T8bEV/Mj/+XYm6oY+ueZKSZAQAAAGclfW0x/p1EpAAAAMDUquRtYJNKvWgLsBiVSr3ea8P7eDxWabU73S9da+/tXO21lV2OWuXaVqt5ab7XpnY5akk2vJr3Hw2/eH846WsD/KOlhXx6faPdujq50x4AAAAwUy4c+/3/z6Xe7/+PcSdN03RsCQIAAABnY3nSCQAAAAAj9+Dv/3cnkgcAAAAwOq7/AwAAwFT75htvZCW9d/fWxlxEXH1rf+96+61fR7Nzvb69t1HfaO/eqG+225ut9FzE9knra7XbN74SO3s3G91mp9vo7B9c2W7v7XSvbPU9AhsAAAAYo888/d7vk4i4/dWFvGTmsz9zAxbotRWojC9DYFSG35Bt8jBtBn3NP6g60jyA8bNVw+yq9TrJyXP+yz3/YUqdtAMY2HjnNw8V1oNEAABgjFY+X379v3p0bgCYUq7qw+wqvf5vpwAzwfV/mF21U7QABKbPwhDznO9vAnDUXGDo6/+Hl/rn3QgEAAAmZDEvSaVenPZfjMqHaU8sRy25ttVqXoqIT0fE75Zq57Lh1XzJZJh/GgAAAAAAAAAAAAAAAAAAAAAAAAAA8rtyJ5ECAAAAUy2i8uekeKDXytJzi8fPD8wnHy7l3fzpAG/+5OZ6t7u7mo3/ezE+ovtOMf7F05x58JBhAAAAGJX8d/oPiu7qpLMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNrcu3tr47CMM+4HX4uI5bL41Tifd89HLSIe+0cS1cOFno5IImLuDOLfvhMRT5TFT7K0YrnIoi9+RFQiYiHPYuTxn0zTtDT+hYeODrPtvWz/83rZ9leJZ/Ju+fZfLcrDGrz/q9zf/82VxM/2PJ8aMsYX3v9Fo3zKud70avn+5zB+MiD+s2WrLHlRvvPtg4NBuaXvRqyUfv8kfbEa3e0bjc7+wQtb2+ubzc3mzuXLqy+vvbL20tqlxrWtVrP4Wxrjh0/+8qNB8fPvlgHxl/vrv368/s8druAE/3n/5t3PHYX731XEB3ciLj4bH6Xpg+//E/3x+17aufh+MVdvRSsRb/+1mLZyLP5TP//tU4Nyy+JfHVD/k97/iydXPff8t+73pkMuAgCMUGf/4Pp6q9XcPX3PwumWeidN008c65Q92RHzgEl/+Gmv4mcQKzs+OoOcHx+U6qPc89ppZk7PlX3YzuIt+P/sqT78x6Yy+BN+Rj0T3S0BAAAjcHTQP+lMAAAAAAAAAAAAAAAAAAAAYHaN44Znx2Pe7nXmJ1BdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICB/hsAAP//Nj3bgA==")
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001c40)={'wlan0\x00', &(0x7f0000000180)=@ethtool_stats={0x4a}})
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

9m34.933547017s ago: executing program 3 (id=897):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>r3, {0x1}}, './file0\x00'})
sendto$netrom(r5, &(0x7f0000000100)="4ad2", 0x2, 0x0, &(0x7f00000002c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

9m31.952662079s ago: executing program 3 (id=902):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
poll(&(0x7f00000000c0)=[{r6, 0x4000}], 0x1, 0x7)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)

9m16.704174144s ago: executing program 33 (id=902):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
poll(&(0x7f00000000c0)=[{r6, 0x4000}], 0x1, 0x7)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18.420515012s ago: executing program 1 (id=1716):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@discard}, {@nolargeio}, {@lazytime}, {@nogrpid}, {@bsdgroups}, {@quota}, {@nolazytime}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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")
symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a4a438, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES32, @ANYRES64], 0xb, 0x0, &(0x7f0000000000))
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0)
creat(0x0, 0x37)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"])
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x40, 0x0, 0x0, 0x67a}, {0x6, 0x27, 0x0, 0x80}]}, 0x10)
sendmmsg(r1, &(0x7f0000001c00), 0x0, 0x20000810)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

18.418540612s ago: executing program 0 (id=1725):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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")
io_uring_setup(0x6d8d, &(0x7f0000000080)={0x0, 0x747f, 0x1000, 0x3, 0x312})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000002100)=ANY=[], 0x3, 0x1a9, &(0x7f0000000300)="$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")
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x10)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000ec0)=ANY=[], 0x110)
mmap$usbfs(&(0x7f00004e4000/0x2000)=nil, 0x2000, 0x2000006, 0x8113, 0xffffffffffffffff, 0x4)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26)
r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r5}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}])

17.718331671s ago: executing program 5 (id=1718):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189)
socket$key(0xf, 0x3, 0x2)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
syz_open_dev$tty1(0xc, 0x4, 0x2)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080))
pipe(&(0x7f0000000000))
pipe2(&(0x7f0000000240), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

16.446031066s ago: executing program 4 (id=1719):
r0 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10\x02\x00\x00\x00\xe3c*sgrVex\xbe:\xf2', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0xa}, 0x28)
r4 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=':\x00', r0)
syz_open_procfs(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x21000e, &(0x7f0000000780)={[{@abort}, {@block_validity}, {@init_itable}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@grpquota}, {@oldalloc}, {@grpjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@acl}]}, 0x1, 0x566, &(0x7f0000000080)="$eJzs3U9vHGcZAPBn1t7UblycAodSqSXQoqSCrOOathaHJhGIExWgcA+WvbEsr73Bu25jK6occeCIhBCNxIkTFyQ+ABLKR0CVKtE7AgSqIIEDB2DQzI6dZDO212TXG61/P2m87/x7n+fdtWff+eOZAE6ssxFxOSLGIuK1iJgupleKIXY6Q7bc/Xu3FrMhm3P1b0kkxbSIvLjndLHaROelVGtre3Wh0ahvFOMz7bUbM62t7QsrawvL9eX6+tzc7Jvzb82/MX/xwPy/cCfNHdbOrF1vf+PPP/vxL7/59m+/8t4frv31/PtZ0l8v5hft6M3tnpeMj/Of1ey92DMeERu9V/FUGyvaUx12IgAA9CTr4386Ir6Y9/+nYyzvzeW6u3QTx58dAAAA0A/ppan4dxKRpru79ykAAAAwYi5FxFQklVpxLcBUVCq1Wuca3s/Gs5VGs9X+8vXm5vpSNi+/0rNyfaVRv1hcU3smqkk2PpuXH4y/3jU+FxHPR8RPpyfz8dpis7E05GMfAAAAcFKc7tr//+dOZ/8fAAAAGDFnhp0AAAAAMHDF/v9Y9/RkCLkAAAAAg+H8PwAAAIy077zzTjaku8+/Xnp3a3O1+e6FpXprtba2uVhbbG7cqC03m8v5PfvWDquv0Wze+Gqsb96caddb7ZnW1va1tebmevvaiucHAgAAwLA8//m7HycRsfO1yXzInIqyfwYouFYARkblKAv/aXB5AMdvv695YPSNDzsBYHh2jr7K2UHkAQzNI7f6KOkUPHzxziPHDH43uJwAAID+Ove58vP/+ZP+h50cMFBHOv8PjBTn/+HkOuL5/w8HlQdw/Kp6AHCi/eDS4Y/6KL15x+Q+5/9PlS2cpt11PXOUJAEAgCc2lQ9JpVacC5yKSqVWi3gu/1f/anJ9pVG/GBGfiojfT1efycZn8zUTjwcEAAAAAAAAAAAAAAAAAAAAAAAAgB6laRIpAAAAMNIiKn9JovP8r3PTr051Hx84lfxrOopHer3386sf3JyeaG/MZtP/vje9fefqBzcX2u2N14dxBAMAAADotrufnr/ODjsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEbN/Xu3FneH44z7yZX4dpwpiz8eE/nrRFQj4tl/JDH+0HpJRIz1If7O7Yh4oRP/8iPxkyytOFNk0RX/7rciYrLP8e/fu1V9MGcv/ktpmj7W/kpEnO5DfDjJ7l6JiMtl259KnM1fS//+8/J4H+J/ciX/Iy+Nv7v9G9tn+/dcjzFe/OjXM/vGvx3x4nhZ/GQvfrJP/FfKKix5U77/ve3txyZ2Ko/0FxHnSr9/kkdizbTXbsy0trYvrKwtLNeX6+tzc7Nvzr81/8b8xZnrK4168bO0jT956Tf/7Zr0n7Qjb388Hv9H0flYDmz/q1nhoS12pN1himAf3bz3mU6x2lVFHv/8K+Wf/wsHxM9+J75UfA9k88/tlnc65Ye9/KsPXy5NrIi/tM/7f9jnf36/Sru89t0f/rHHRQGAY9Da2l5daDTqGz0VJo+y8Nb2appG7E65k6bpEVdXOMbCbu9uYCEmnpaW/t+FrPfenwqzvvXQm7N/oR9HtgAAgKfNg05/z6u8P9CEAAAAAAAAAAAAAAAAAAAA4ARqbUXl4PuBpWnEk91OrDvmznCaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwoP8FAAD///Zq2Us=")
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00')
fchdir(r5)
creat(&(0x7f0000000000)='./file0\x00', 0x129)
r6 = inotify_init()
inotify_add_watch(r6, 0x0, 0x40000080)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200200001000000000000000400000000000000100002"], 0x24, 0x0)
keyctl$negate(0xd, r0, 0x3, r4)

16.444847176s ago: executing program 0 (id=1729):
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x600, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x2, 0xc4)
socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x13, r0, 0x0)
readlink(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs/file0\x00', &(0x7f0000000500)=""/250, 0xfa)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080))
mprotect(&(0x7f0000387000/0x4000)=nil, 0x4000, 0x5)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000002540)=0x1)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0xffffffff, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/if_inet6\x00')
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000030301018521570d0e0000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000080)={0x7, 'vlan0\x00', {0xa}, 0x6})

14.138983852s ago: executing program 1 (id=1720):
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
r5 = socket(0x18, 0x800, 0x0)
connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'wg2\x00'}}, 0x1e)
sendfile(r5, r4, 0x0, 0x8)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x1, 0x2, "fcd1ca9a0967216a"}}}, 0x10)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a010400000000000000000a0000020900010073797a3100000000080005400000001d0900020073797a31e1ff000008000a4000000000080003400000001408000c400080000314000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)

13.909406725s ago: executing program 0 (id=1721):
r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x44090)
fchdir(r1)
munmap(&(0x7f0000003000/0x2000)=nil, 0x2000)
syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, 0x0, 0x20000041)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x16a)
getdents64(r7, &(0x7f0000001f80)=""/4111, 0xfffffffffffffef9)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000500)='./file0\x00')

12.400459153s ago: executing program 5 (id=1722):
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x74ed00, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x404, &(0x7f0000000300), 0x3, 0x434, &(0x7f0000000680)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0xffffff91}}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100080, 0x0)
dup(0xffffffffffffffff)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

12.366690106s ago: executing program 4 (id=1724):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}, {0x1, 0x4}}}}, 0x11)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004)
recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40002101, 0x0)
ioctl$TCFLSH(r0, 0x400455c8, 0x400000009)

11.363097955s ago: executing program 0 (id=1726):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group', @ANYRESDEC=0x0])
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x7}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
read$FUSE(r4, &(0x7f0000006300)={0x2020}, 0x2020)
read$FUSE(r4, &(0x7f00000004c0)={0x2020}, 0x2020)
move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00', 0x146)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='^', 0x1}], 0x1)

8.800422146s ago: executing program 4 (id=1727):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000540))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x40880)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, 0x0, 0x8000)
r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x59555956, 0x2, 0x1, [{0x1, 0x1}, {0x3, 0xa}, {0x10001, 0x200}, {0xc061, 0x5}, {0xfffffff8, 0x7}, {0x1}, {0x4, 0x8}, {0x3, 0x400}], 0x0, 0x9b, 0x0, 0x0, 0x5}})

8.796739566s ago: executing program 1 (id=1736):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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")
io_uring_setup(0x6d8d, &(0x7f0000000080)={0x0, 0x747f, 0x1000, 0x3, 0x312})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000002100)=ANY=[], 0x3, 0x1a9, &(0x7f0000000300)="$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")
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x10)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000ec0)=ANY=[], 0x110)
mmap$usbfs(&(0x7f00004e4000/0x2000)=nil, 0x2000, 0x2000006, 0x8113, 0xffffffffffffffff, 0x4)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26)
r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r5}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}])

8.790650147s ago: executing program 0 (id=1728):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x98400, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x400080, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x2a4, 0x8, 0x0, 0x4000000000000005})
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397)

8.789811767s ago: executing program 5 (id=1730):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
unshare(0xa020480)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
unshare(0x6020400)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, 0x0, &(0x7f0000000640)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040))
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)={0x0, <r5=>0x0})
ptrace$ARCH_GET_FS(0x1e, r5, 0x0, 0x1003)
r6 = io_uring_setup(0x1694, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

6.295419442s ago: executing program 4 (id=1731):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000280))
fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x2, 0x2, 0x8c86, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x1d, 0x2, 0x6)
r3 = add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, r3)
pipe2$watch_queue(&(0x7f0000001100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
r5 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x10, 0xc, 0x7a, 0x2}, {0x9, 0x5, 0x2, 0x2, 0x3ff, 0x3, 0x3, 0x7}, {0x9, 0x5, 0x6, 0x3, 0x3ff, 0x7, 0xda, 0x1a}}}}}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xc2)
write$cgroup_devices(r4, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa)
timer_create(0x4, &(0x7f0000000140)={0x0, 0x20, 0x1}, &(0x7f0000000180))
close_range(r0, 0xffffffffffffffff, 0x0)

6.294637222s ago: executing program 0 (id=1740):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioperm(0x6, 0x88, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0xdc0450e999c92311, 0x1})
io_uring_enter(r6, 0x40047f6, 0x80ffff, 0x20, 0x0, 0x0)
ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x2, "3eccd8000200000500"})
close_range(r0, 0xffffffffffffffff, 0x0)

6.2143888s ago: executing program 1 (id=1732):
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000f80), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00')
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x24040800)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r3)
r5 = syz_io_uring_setup(0x2bd7, &(0x7f0000000200)={0x0, 0x9e3e, 0x80, 0x80000, 0x19b}, &(0x7f0000000100), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000580), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x20000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond0\x00'})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="9400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0003010c0002800500010000000000080007400000000030000e802c00018014000300fe8000000000000000000000000000aa040004"], 0x94}}, 0x48000)

5.050585364s ago: executing program 1 (id=1733):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x28060400)
memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x189, &(0x7f0000000080)={0x0, 0x0, 0x11000, 0x10}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000140)={0x5, r3, 0x1c, {0x9, 0x1}, 0x6}, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40804}, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x503, 0x0, 0x200, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010101}]}}}, @IFLA_MTU={0x8}]}, 0x40}}, 0x588c0)

5.050363464s ago: executing program 5 (id=1734):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)
ptrace(0x10, r4)
ptrace$cont(0x20, r4, 0x1000000ffffffff, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x40000032, r5, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
ptrace(0x9, r4)

3.335742873s ago: executing program 5 (id=1735):
r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x44090)
fchdir(r1)
munmap(&(0x7f0000003000/0x2000)=nil, 0x2000)
syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, 0x0, 0x20000041)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x16a)
getdents64(r7, &(0x7f0000001f80)=""/4111, 0xfffffffffffffef9)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000500)='./file0\x00')

2.304471474s ago: executing program 4 (id=1737):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
statx(r0, 0x0, 0x6000, 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r4 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, "c54f8ce8ea93ece54cbf29e7035c17f52e65dab7bdd012e05b067838bda1bd2e4e1bd932568c7fae502e8602586175e59f4dca5cfb2f6619c1156ab58fc26d08", 0x30}, 0x48, 0xffffffffffffffff)
keyctl$update(0x2, r4, 0x0, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r4, 0xaf}, &(0x7f0000000380)={'enc=', 'raw', ' hash=', {'sha384-arm64\x00'}}, &(0x7f00000004c0)="1739ec70ee15e43bbc9708d475fcec62db9b606b3daef9ca9bc83ffbe3de27330a5e33131a12e5c7b9a1af92b1992df46449a8f96ff98b37bf4a332e89765d777ee3a3d40d0511c5df21e506858831ad0f5e5d0b3ff6a020ef9ffb00e37f3e3b4cdf567a17ef681fe581c76262f6d9b90a3187dada1610e694928e1b40950de0371460e5c66213458794fb35779fdda304f62d722c5221d097322db0058affa684bc35be95dd9af706adc7fea2d56f", &(0x7f0000000280))
getpgid(r1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmmsg(r5, &(0x7f0000001000), 0x0, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

1.261705946s ago: executing program 1 (id=1738):
epoll_create1(0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000293e13bd7000ffdbdf25380700000c00990000000000450000000c005800070000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000)
syz_io_uring_setup(0x2ced, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x2, 0x11f}, &(0x7f0000000040), &(0x7f0000000280))
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000580)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f00000003c0)=0xffb, 0x0, 0x4)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xdffffff8]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000001b00))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
r6 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x2, 0x2, 0x2, {0x5, @vbi={0x0, 0x400, 0x0, 0x0, [0x3], [0x8200, 0x7], 0x1}}, 0x2})

1.260416987s ago: executing program 5 (id=1739):
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r2, 0x0, 0x0, 0x20044000)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74)
openat$snapshot(0xffffffffffffff9c, 0x0, 0xc2d41, 0x0)
r5 = getpid()
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x23}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4040854}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

0s ago: executing program 4 (id=1741):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x98400, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x400080, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x2a4, 0x8, 0x0, 0x4000000000000005})
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397)

kernel console output (not intermixed with test programs):

omedi comedi3: 8255: I/O port conflict (0x6,4)
[  737.101170][T10892] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  737.108536][T10892] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  737.115491][T10892] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  737.123645][T10892] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  739.109884][ T6978] kworker/u4:16: attempt to access beyond end of device
[  739.109884][ T6978] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  739.124102][ T6978] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  739.131815][ T6978] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  739.138842][ T6978] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  739.280687][T10914] loop1: detected capacity change from 0 to 1024
[  739.380926][T10914] EXT4-fs: Ignoring removed bh option
[  739.386896][T10914] EXT4-fs: Ignoring removed nobh option
[  739.540991][T10914] EXT4-fs: Ignoring removed bh option
[  739.908054][T10914] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  740.276675][T10499] Bluetooth: hci0: link tx timeout
[  740.289845][T10499] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  740.472769][T10914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  741.128308][T10933] tmpfs: Unknown parameter 'trans'
[  742.139364][T10941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.996'.
[  742.385933][T10499] Bluetooth: hci0: command 0x0406 tx timeout
[  743.948234][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.333305][T10971] bond_slave_0: entered promiscuous mode
[  744.339055][T10971] bond_slave_1: entered promiscuous mode
[  744.353391][T10971] macsec1: entered promiscuous mode
[  744.358751][T10971] bond0: entered promiscuous mode
[  744.366009][T10971] macsec1: entered allmulticast mode
[  744.373365][T10971] bond0: entered allmulticast mode
[  744.378649][T10971] bond_slave_0: entered allmulticast mode
[  744.393804][T10971] bond_slave_1: entered allmulticast mode
[  744.439864][   T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  744.561266][T10969] loop4: detected capacity change from 0 to 40427
[  744.727498][T10969] F2FS-fs (loop4): invalid crc value
[  744.747862][T10969] F2FS-fs (loop4): Found nat_bits in checkpoint
[  744.789923][T10969] F2FS-fs (loop4): Start checkpoint disabled!
[  744.907460][T10969] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  745.157336][   T27] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  745.186460][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.206380][   T27] usb 1-1: Product: syz
[  745.219432][   T27] usb 1-1: Manufacturer: syz
[  745.253094][   T27] usb 1-1: SerialNumber: syz
[  745.311870][T10978] syz.4.1000: attempt to access beyond end of device
[  745.311870][T10978] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  745.826432][ T5795] Bluetooth: hci0: unexpected Set CIG Parameters response data
[  745.853360][ T5795] Bluetooth: hci0: unexpected event for opcode 0x2062
[  745.957370][ T6986] kworker/u4:20: attempt to access beyond end of device
[  745.957370][ T6986] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  745.972111][ T6986] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  745.979532][ T6986] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  745.987968][ T6986] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  746.249130][   T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32
[  746.285228][   T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  747.148292][   T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  747.203737][   T27] lan78xx: probe of 1-1:1.0 failed with error -32
[  747.365172][ T5839] usb 1-1: USB disconnect, device number 3
[  748.450776][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  748.457216][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  749.364152][T11027] loop5: detected capacity change from 0 to 32768
[  749.399973][T11027] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1008 (11027)
[  749.455236][T11027] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  749.465475][T11027] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  749.474513][T11027] BTRFS info (device loop5): using free space tree
[  749.739896][T11027] BTRFS info (device loop5): enabling ssd optimizations
[  749.746913][T11027] BTRFS info (device loop5): auto enabling async discard
[  750.999114][T11050] tipc: Started in network mode
[  751.004060][T11050] tipc: Node identity ac14141b, cluster identity 4711
[  751.011278][T11050] tipc: New replicast peer: 255.255.255.255
[  751.019188][T11050] tipc: Enabled bearer <udp:syz2>, priority 10
[  751.071407][ T5795] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  751.082314][ T5795] Bluetooth: hci0: Injecting HCI hardware error event
[  751.096456][T10499] Bluetooth: hci0: hardware error 0x00
[  751.531726][   T28] audit: type=1800 audit(1761251589.986:68): pid=11063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1008" name="file2" dev="loop5" ino=261 res=0 errno=0
[  752.010134][ T5869] tipc: Node number set to 2886997019
[  752.648298][T11068] loop4: detected capacity change from 0 to 1024
[  752.698241][T11068] EXT4-fs: Ignoring removed bh option
[  752.720733][T11068] EXT4-fs: Ignoring removed nobh option
[  752.726351][T11068] EXT4-fs: Ignoring removed bh option
[  752.768720][T10496] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  752.807083][T11068] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  752.961189][T11068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  753.267483][T10499] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  753.627164][T11082] loop5: detected capacity change from 0 to 512
[  753.664678][T11082] EXT4-fs: Ignoring removed nobh option
[  753.720305][T11082] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1013: iget: bad i_size value: 38620345925642
[  753.815701][T11082] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1013: couldn't read orphan inode 15 (err -117)
[  753.920352][T11082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  754.927672][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  756.004245][T11105] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  756.253266][ T5852] IPVS: starting estimator thread 0...
[  756.379204][T11107] IPVS: using max 21 ests per chain, 50400 per kthread
[  757.131605][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  757.567336][T11122] loop5: detected capacity change from 0 to 2048
[  757.962239][T11127] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  759.495463][T11137] loop4: detected capacity change from 0 to 64
[  762.006242][T11152] loop4: detected capacity change from 0 to 1024
[  762.121060][T11152] EXT4-fs: Ignoring removed bh option
[  762.134310][T11152] EXT4-fs: Ignoring removed nobh option
[  762.179923][T11152] EXT4-fs: Ignoring removed bh option
[  762.205269][T11152] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  762.823240][T11164] ubi31: attaching mtd0
[  762.882447][T11164] ubi31: scanning is finished
[  763.173620][T11152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  763.189330][T11164] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  764.492409][T11180] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.1024: Allocating blocks 497-513 which overlap fs metadata
[  764.550600][T11127] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  764.575076][T11127] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  764.598492][T11127] Remounting filesystem read-only
[  764.617414][ T6978] NILFS (loop5): discard dirty page: offset=4096, ino=6
[  764.630674][T11180] EXT4-fs (loop4): pa ffff88805b910d98: logic 256, phys. 385, len 8
[  764.638766][T11180] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[  764.700294][ T6978] NILFS (loop5): discard dirty block: blocknr=39, size=1024
[  764.707812][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  764.900075][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  765.030504][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  765.380367][T11192] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  765.600373][ T6978] NILFS (loop5): discard dirty page: offset=0, ino=3
[  765.619884][ T6978] NILFS (loop5): discard dirty block: blocknr=42, size=1024
[  765.665084][ T6978] NILFS (loop5): discard dirty block: blocknr=43, size=1024
[  765.703607][ T6978] NILFS (loop5): discard dirty block: blocknr=44, size=1024
[  765.746467][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  765.795780][ T6978] NILFS (loop5): discard dirty page: offset=65536, ino=3
[  765.842066][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  765.911230][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  765.999896][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  766.022495][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  766.507827][ T6978] NILFS (loop5): discard dirty page: offset=98304, ino=3
[  766.519409][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  766.529409][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  766.538454][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  766.545901][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  766.553299][ T6978] NILFS (loop5): discard dirty page: offset=102400, ino=3
[  766.562702][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  766.586014][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  766.732492][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  766.752746][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  766.899863][ T6978] NILFS (loop5): discard dirty page: offset=106496, ino=3
[  766.917548][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  766.926663][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  766.945403][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  766.958773][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  766.976374][ T6978] NILFS (loop5): discard dirty page: offset=110592, ino=3
[  766.998030][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.015722][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.038878][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.065635][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.092517][ T6978] NILFS (loop5): discard dirty page: offset=114688, ino=3
[  767.149857][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.168300][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.206363][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.244991][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.274206][ T6978] NILFS (loop5): discard dirty page: offset=118784, ino=3
[  767.296710][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.327302][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.362312][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.419656][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.483561][ T6978] NILFS (loop5): discard dirty page: offset=122880, ino=3
[  767.512102][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.519396][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.527909][ T6978] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  767.535818][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  767.544904][ T6978] NILFS (loop5): discard dirty page: offset=196608, ino=3
[  767.552149][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  767.563226][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  767.572406][ T6978] NILFS (loop5): discard dirty block: blocknr=49, size=1024
[  767.574466][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  767.589811][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  767.606485][ T6978] NILFS (loop5): discard dirty page: offset=0, ino=5
[  767.619887][ T6978] NILFS (loop5): discard dirty block: blocknr=41, size=1024
[  767.632781][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  767.652125][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  767.689608][ T6978] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  767.714998][T10496] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  767.768573][T10496] NILFS (loop5): discard dirty page: offset=0, ino=6
[  767.775434][T10496] NILFS (loop5): discard dirty block: blocknr=35, size=1024
[  767.788532][T10496] NILFS (loop5): discard dirty block: blocknr=36, size=1024
[  767.796076][T10496] NILFS (loop5): discard dirty block: blocknr=37, size=1024
[  767.807501][T10496] NILFS (loop5): discard dirty block: blocknr=38, size=1024
[  767.819134][T10496] NILFS (loop5): discard dirty page: offset=0, ino=4
[  767.829815][T10496] NILFS (loop5): discard dirty block: blocknr=40, size=1024
[  767.837134][T10496] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  767.851029][T10496] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  767.862652][T10496] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  769.026316][T11232] netlink: 'syz.4.1037': attribute type 21 has an invalid length.
[  769.314485][T11230] loop1: detected capacity change from 0 to 1024
[  769.426541][T11230] EXT4-fs: Ignoring removed bh option
[  769.481631][T11234] loop5: detected capacity change from 0 to 16
[  769.493922][T11234] erofs: (device loop5): mounted with root inode @ nid 36.
[  769.960075][T11230] EXT4-fs: Ignoring removed nobh option
[  770.007291][T11230] EXT4-fs: Ignoring removed bh option
[  770.103119][T11230] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  770.802609][T11246] tmpfs: Unknown parameter 'trans'
[  771.008416][T11230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  772.921851][T11254] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.1045: Allocating blocks 497-513 which overlap fs metadata
[  773.258131][T11254] EXT4-fs (loop1): pa ffff888076fab740: logic 256, phys. 385, len 8
[  773.266533][T11254] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[  774.187422][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  777.533643][T11290] loop1: detected capacity change from 0 to 32768
[  777.542213][T11290] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1048 (11290)
[  777.615021][T11290] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  777.626059][T11290] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  777.634862][T11290] BTRFS info (device loop1): using free space tree
[  777.702487][T11290] BTRFS info (device loop1): enabling ssd optimizations
[  777.709677][T11290] BTRFS info (device loop1): auto enabling async discard
[  778.278601][   T28] audit: type=1800 audit(1761251616.596:69): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1048" name="file2" dev="loop1" ino=261 res=0 errno=0
[  779.315531][T11319] syz.5.1049 (11319) used greatest stack depth: 16392 bytes left
[  779.464356][ T5784] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  779.559497][T11321] Bluetooth: MGMT ver 1.22
[  779.604369][T11321] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  779.623731][T11321] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1050'.
[  779.977232][ T5797] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5797)
[  780.386254][T11334] tmpfs: Unknown parameter 'trans'
[  783.014902][T11321] bond0 (unregistering): left allmulticast mode
[  783.043023][T11321] bond_slave_0: left allmulticast mode
[  783.054663][T11321] bond_slave_1: left allmulticast mode
[  783.072544][T11321] bond0 (unregistering): left promiscuous mode
[  783.079162][T11321] bond_slave_0: left promiscuous mode
[  783.086579][T11321] bond_slave_1: left promiscuous mode
[  783.187784][T11321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  783.232200][T11321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  783.260122][T11321] bond0 (unregistering): Released all slaves
[  783.330283][T11324] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1052'.
[  785.581097][T11377] Can't find a SQUASHFS superblock on nullb0
[  788.662766][T11404] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  790.126265][T11420] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  790.136868][T11420] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  790.146492][T11420] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  790.156024][T11420] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  790.168690][T11420] geneve2: entered promiscuous mode
[  790.175401][T11420] geneve2: entered allmulticast mode
[  790.657926][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1070'.
[  790.773883][T11425] comedi comedi3: 8255: I/O port conflict (0x4f27,4)
[  790.781136][T11425] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  790.787826][T11425] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  790.794886][T11425] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  790.801905][T11425] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  790.809182][T11425] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  790.816026][T11425] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  790.823303][T11425] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  790.829951][T11425] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  790.836531][T11425] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  790.843504][T11425] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  790.850341][T11425] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  790.857112][T11425] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  790.864401][T11425] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  790.872453][T11425] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  791.600083][T11421] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  792.175056][T11412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1069'.
[  792.505791][T10499] Bluetooth: hci2: unexpected event for opcode 0x0000
[  792.544687][T11438] loop1: detected capacity change from 0 to 1024
[  792.744928][T11438] EXT4-fs: Ignoring removed bh option
[  792.760486][T11438] EXT4-fs: Ignoring removed nobh option
[  792.766097][T11438] EXT4-fs: Ignoring removed bh option
[  794.404530][T11438] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  794.553472][T11438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  795.085714][T11462] Can't find a SQUASHFS superblock on nullb0
[  796.331622][T11461] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.1080: Allocating blocks 497-513 which overlap fs metadata
[  796.369465][T11461] EXT4-fs (loop1): pa ffff88805b910828: logic 256, phys. 385, len 8
[  796.377606][T11461] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[  796.540274][T10499] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  796.549076][T10499] Bluetooth: hci2: Injecting HCI hardware error event
[  796.560760][T10499] Bluetooth: hci2: hardware error 0x00
[  797.626818][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  799.376687][T10499] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  801.019892][  T788] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  801.759832][  T788] usb 2-1: Using ep0 maxpacket: 16
[  801.784059][  T788] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  801.810022][  T788] usb 2-1: config 0 has no interface number 0
[  801.822600][  T788] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  801.847517][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.872804][  T788] usb 2-1: Product: syz
[  801.893320][  T788] usb 2-1: Manufacturer: syz
[  801.909962][  T788] usb 2-1: SerialNumber: syz
[  801.955092][  T788] usb 2-1: config 0 descriptor??
[  801.976152][  T788] hub 2-1:0.132: bad descriptor, ignoring hub
[  801.995653][  T788] hub: probe of 2-1:0.132 failed with error -5
[  802.027043][  T788] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input15
[  805.548794][   T23] usb 2-1: USB disconnect, device number 5
[  806.417518][T11563] loop1: detected capacity change from 0 to 8
[  806.872160][T11563] SQUASHFS error: zlib decompression failed, data probably corrupt
[  806.880470][T11563] SQUASHFS error: Failed to read block 0x9b: -5
[  806.886734][T11563] SQUASHFS error: Unable to read metadata cache entry [99]
[  806.894159][T11563] SQUASHFS error: Unable to read inode 0x127
[  807.914224][T11571] Bluetooth: hci0: invalid length 0, exp 2 for type 21
[  809.039004][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  809.049960][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  809.445487][T11591] loop4: detected capacity change from 0 to 1024
[  811.827269][ T6984] hfsplus: b-tree write err: -5, ino 4
[  812.695136][T11604] loop1: detected capacity change from 0 to 32768
[  812.707783][T11604] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  812.718008][T11604] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  812.726791][T11604] BTRFS info (device loop1): using free space tree
[  812.899338][T11604] BTRFS info (device loop1): enabling ssd optimizations
[  812.906531][T11604] BTRFS info (device loop1): auto enabling async discard
[  814.200683][   T28] audit: type=1800 audit(1761251652.256:70): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1104" name="file2" dev="loop1" ino=261 res=0 errno=0
[  814.656374][ T5784] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  817.957495][T11659] loop5: detected capacity change from 0 to 1024
[  818.037632][T11659] EXT4-fs: Ignoring removed bh option
[  818.085165][T11659] EXT4-fs: Ignoring removed nobh option
[  818.106861][T11659] EXT4-fs: Ignoring removed bh option
[  818.190708][T11659] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  818.285315][T11659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  818.852970][T11671] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4031: comm syz.5.1112: Allocating blocks 497-513 which overlap fs metadata
[  818.927424][T11671] EXT4-fs (loop5): pa ffff888076fabe80: logic 256, phys. 385, len 8
[  818.935667][T11671] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[  819.603458][T11675] loop1: detected capacity change from 0 to 1024
[  819.623973][T11675] EXT4-fs: Ignoring removed bh option
[  819.629590][T11675] EXT4-fs: Ignoring removed nobh option
[  819.749976][T11675] EXT4-fs: Ignoring removed bh option
[  819.782940][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  819.795248][T11675] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  820.486452][T11675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  821.191850][T11687] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.1117: Allocating blocks 497-513 which overlap fs metadata
[  821.227641][T11687] EXT4-fs (loop1): pa ffff888076fabae0: logic 256, phys. 385, len 8
[  821.235868][T11687] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[  822.458018][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  824.749267][T11714] loop1: detected capacity change from 0 to 1024
[  824.794204][T11714] EXT4-fs: Ignoring removed bh option
[  824.810255][T11714] EXT4-fs: Ignoring removed nobh option
[  824.836523][T11714] EXT4-fs: Ignoring removed bh option
[  824.848249][T11714] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  824.885545][T11710] capability: warning: `syz.0.1124' uses 32-bit capabilities (legacy support in use)
[  825.048392][T11714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  827.137695][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  828.299066][T11727] loop1: detected capacity change from 0 to 1024
[  831.447815][T11752] loop1: detected capacity change from 0 to 16
[  832.262172][T11752] erofs: (device loop1): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832
[  832.483108][T11757] loop5: detected capacity change from 0 to 8
[  832.810402][T11757] SQUASHFS error: zlib decompression failed, data probably corrupt
[  832.818369][T11757] SQUASHFS error: Failed to read block 0x9b: -5
[  832.824826][T11757] SQUASHFS error: Unable to read metadata cache entry [99]
[  832.832234][T11757] SQUASHFS error: Unable to read inode 0x127
[  834.452552][ T5797] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  835.412857][T11776] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  835.422156][T11776] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  835.431083][T11776] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  835.439914][T11776] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  835.448792][T11776] geneve2: entered promiscuous mode
[  835.454090][T11776] geneve2: entered allmulticast mode
[  836.224120][T11770] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  836.722039][T11791] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  838.827250][T11806] loop4: detected capacity change from 0 to 32768
[  838.938409][T11806] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1144 (11806)
[  838.971564][T11806] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  838.981796][T11806] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  838.990616][T11806] BTRFS info (device loop4): using free space tree
[  839.388058][T11806] BTRFS info (device loop4): enabling ssd optimizations
[  839.395199][T11806] BTRFS info (device loop4): auto enabling async discard
[  840.364502][   T28] audit: type=1800 audit(1761251678.376:71): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1144" name="file2" dev="loop4" ino=261 res=0 errno=0
[  840.743708][ T7265] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  841.607955][T11840] Bluetooth: MGMT ver 1.22
[  842.365160][T11854] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1151'.
[  842.631348][T11860] loop4: detected capacity change from 0 to 128
[  843.251553][T11860] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  843.270742][T11860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  844.810978][T11866] loop4: detected capacity change from 0 to 1024
[  844.904886][T11866] EXT4-fs: Ignoring removed bh option
[  844.914786][T11866] EXT4-fs: Ignoring removed nobh option
[  844.955620][T11866] EXT4-fs: Ignoring removed bh option
[  844.973062][T11866] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  845.134564][T11872] loop5: detected capacity change from 0 to 32768
[  845.163352][T11872] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1155 (11872)
[  845.189154][T11872] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  845.199886][T11872] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  845.208621][T11872] BTRFS info (device loop5): using free space tree
[  845.284786][T11866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  845.329008][T11872] BTRFS info (device loop5): enabling ssd optimizations
[  845.337395][T11872] BTRFS info (device loop5): auto enabling async discard
[  845.784767][   T28] audit: type=1800 audit(1761251684.196:72): pid=11896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1155" name="file2" dev="loop5" ino=261 res=0 errno=0
[  846.944951][T11894] loop1: detected capacity change from 0 to 2048
[  846.979523][T10496] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  847.033510][T11894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  847.085930][T11894] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  847.114207][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  847.214314][T11894] fs-verity: sha512 using implementation "sha512-avx2"
[  848.233518][T11909] bridge_slave_0: left allmulticast mode
[  848.242092][T11909] bridge_slave_0: left promiscuous mode
[  848.249667][T11909] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.279653][T11909] bridge_slave_1: left allmulticast mode
[  848.304920][T11909] bridge_slave_1: left promiscuous mode
[  848.347444][T11909] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.465233][ T5784] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /297/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  849.768802][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  849.779457][T11909] team0: Port device team_slave_0 removed
[  849.956110][T11909] team0: Port device team_slave_1 removed
[  850.021466][T11909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  850.086472][T11909] batman_adv: batadv0: Removing interface: batadv_slave_0
[  850.804369][T11909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  850.944421][T11909] batman_adv: batadv0: Removing interface: batadv_slave_1
[  851.387051][T11937] loop1: detected capacity change from 0 to 1024
[  851.403424][T11937] EXT4-fs: Ignoring removed bh option
[  851.409006][T11937] EXT4-fs: Ignoring removed nobh option
[  851.415989][T11937] EXT4-fs: Ignoring removed bh option
[  851.427109][T11937] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  851.617397][T11937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  851.674188][T11945] loop4: detected capacity change from 0 to 1024
[  851.688116][T11945] EXT4-fs: Ignoring removed bh option
[  851.693792][T11945] EXT4-fs: Ignoring removed nobh option
[  851.699584][T11945] EXT4-fs: Ignoring removed bh option
[  851.705971][T11945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  851.813960][T11948] (null): rxe_set_mtu: Set mtu to 1024
[  851.821658][T11948] rdma_rxe: rxe_newlink: failed to add syz_tun
[  852.352763][T11945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  854.159680][T11958] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.1167: Allocating blocks 497-513 which overlap fs metadata
[  854.174305][T11958] EXT4-fs (loop1): pa ffff88805b910488: logic 256, phys. 385, len 8
[  854.182399][T11958] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[  855.667556][T11981] (null): rxe_set_mtu: Set mtu to 1024
[  855.674994][T11981] rdma_rxe: rxe_newlink: failed to add ip6gretap0
[  856.429209][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  859.862406][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  865.506515][T12032] loop4: detected capacity change from 0 to 128
[  865.533508][T12032] EXT4-fs: Ignoring removed nobh option
[  865.593474][T12032] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  865.638926][T12032] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  865.712932][T12039] virtio-fs: tag </dev/md0> not found
[  865.738606][  T788] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0
[  865.763731][  T788] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0
[  865.771984][  T788] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0
[  865.779514][  T788] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0
[  865.791143][  T788] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0
[  865.798707][  T788] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0
[  865.982660][  T788] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0
[  867.437426][  T788] hid-generic 00A0:0008:0003.0001: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  867.654149][ T7265] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  869.315268][T12050] fido_id[12050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  869.457081][T12061] loop5: detected capacity change from 0 to 512
[  869.616027][T12064] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  869.623807][T12064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  869.642390][T12070] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  869.803138][T12064] vhci_hcd vhci_hcd.0: Device attached
[  870.072079][   T23] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  870.465939][T12075] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20)
[  870.472607][T12075] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  870.481865][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  870.488217][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  870.498739][T12075] vhci_hcd vhci_hcd.0: Device attached
[  870.506546][T12075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  871.005450][T12086] loop1: detected capacity change from 0 to 8
[  871.077240][T12085] SQUASHFS error: zstd decompression error: 10
[  871.084039][T12085] SQUASHFS error: zstd decompression failed, data probably corrupt
[  871.092813][T12085] SQUASHFS error: Failed to read block 0x60: -5
[  871.104932][T12085] SQUASHFS error: zstd decompression error: 10
[  871.111310][T12085] SQUASHFS error: zstd decompression failed, data probably corrupt
[  871.119547][T12085] SQUASHFS error: Failed to read block 0x60: -5
[  871.158800][T12064] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12)
[  871.165541][T12064] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  871.195157][T12070] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17)
[  871.201911][T12070] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  871.296092][T12070] vhci_hcd vhci_hcd.0: Device attached
[  871.299224][T12064] vhci_hcd vhci_hcd.0: Device attached
[  871.304148][T12070] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  871.317266][T12061] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  871.343634][T12064] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(16)
[  871.350289][T12064] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  871.382021][T12061] EXT4-fs (loop5): Test dummy encryption mode enabled
[  871.420312][T12064] vhci_hcd vhci_hcd.0: Device attached
[  871.441164][T12061] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1194: inode has both inline data and extents flags
[  871.646549][T12061] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1194: couldn't read orphan inode 15 (err -117)
[  871.666535][T12076] vhci_hcd: connection closed
[  871.675071][T12061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  871.738684][T12073] vhci_hcd: connection closed
[  872.063317][T12067] vhci_hcd: connection reset by peer
[  872.088837][T12077] vhci_hcd: connection closed
[  872.089451][ T6984] vhci_hcd: stop threads
[  872.099652][T12088] vhci_hcd: connection closed
[  872.105022][ T6984] vhci_hcd: release socket
[  872.117436][ T6984] vhci_hcd: disconnect device
[  872.145062][ T6984] vhci_hcd: stop threads
[  872.162664][ T6984] vhci_hcd: release socket
[  872.172917][ T6984] vhci_hcd: disconnect device
[  872.187388][ T6984] vhci_hcd: stop threads
[  872.193425][ T6984] vhci_hcd: release socket
[  872.198339][ T6984] vhci_hcd: disconnect device
[  872.205905][ T6984] vhci_hcd: stop threads
[  872.215022][ T6984] vhci_hcd: release socket
[  872.221760][ T6984] vhci_hcd: disconnect device
[  872.230087][ T6984] vhci_hcd: stop threads
[  872.235837][ T6984] vhci_hcd: release socket
[  872.240556][ T6984] vhci_hcd: disconnect device
[  873.080582][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  875.014382][T12117] loop4: detected capacity change from 0 to 512
[  875.160625][T12117] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  875.274088][T12117] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1203: iget: bogus i_mode (5)
[  875.295349][T12117] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1203: couldn't read orphan inode 15 (err -117)
[  875.309932][T12117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  875.324263][T12117] ext2 filesystem being mounted at /227/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  875.750737][   T23] vhci_hcd: vhci_device speed not set
[  876.514867][T12128] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  876.582456][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  876.875158][T12139] loop4: detected capacity change from 0 to 512
[  876.894249][T12139] journal_path: Lookup failure for './file0'
[  876.930167][T12139] EXT4-fs: error: could not find journal device path
[  877.231780][T11551] usb usb42-port1: attempt power cycle
[  878.471512][T12146] "syz.1.1207" (12146) uses obsolete ecb(arc4) skcipher
[  879.622660][T11551] usb usb42-port1: unable to enumerate USB device
[  881.813249][T12153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1210'.
[  882.004215][T12178] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  882.836072][T12186] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  882.842825][T12186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  882.855465][T12186] vhci_hcd vhci_hcd.0: Device attached
[  882.864999][T12166] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  882.884157][T12186] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  882.916974][T12186] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14)
[  882.923646][T12186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  882.936515][T12186] vhci_hcd vhci_hcd.0: Device attached
[  882.948635][T12186] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16)
[  882.955264][T12186] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  882.963715][T12186] vhci_hcd vhci_hcd.0: Device attached
[  882.973755][T12186] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18)
[  882.980523][T12186] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  882.988922][T12186] vhci_hcd vhci_hcd.0: Device attached
[  883.000037][T12186] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  883.011698][T12186] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  883.032026][T12191] vhci_hcd: connection closed
[  883.032528][T12195] vhci_hcd: connection closed
[  883.032766][T12187] vhci_hcd: connection closed
[  883.037304][ T6980] vhci_hcd: stop threads
[  883.047473][T12193] vhci_hcd: connection closed
[  883.051317][ T5775] vhci_hcd: vhci_device speed not set
[  883.054978][ T6980] vhci_hcd: release socket
[  883.066382][ T6980] vhci_hcd: disconnect device
[  883.071743][ T6980] vhci_hcd: stop threads
[  883.076083][ T6980] vhci_hcd: release socket
[  883.080707][ T6980] vhci_hcd: disconnect device
[  883.086494][ T6980] vhci_hcd: stop threads
[  883.090778][ T6980] vhci_hcd: release socket
[  883.096123][ T6980] vhci_hcd: disconnect device
[  883.100968][ T6980] vhci_hcd: stop threads
[  883.105687][ T6980] vhci_hcd: release socket
[  883.110221][ T6980] vhci_hcd: disconnect device
[  883.121959][ T5775] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  883.129999][ T5775] usb 35-1: enqueue for inactive port 0
[  883.211247][ T5775] vhci_hcd: vhci_device speed not set
[  884.065771][T12205] loop5: detected capacity change from 0 to 512
[  884.102388][T12205] journal_path: Lookup failure for './file0'
[  884.137852][T12205] EXT4-fs: error: could not find journal device path
[  885.304916][T12218] xt_TPROXY: Can be used only with -p tcp or -p udp
[  886.264256][T12227] loop4: detected capacity change from 0 to 128
[  889.554984][T12253] siw: device registration error -23
[  891.044712][T12271] loop4: detected capacity change from 0 to 2048
[  891.121416][T12271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  891.127302][T12277] netlink: 'syz.1.1237': attribute type 1 has an invalid length.
[  891.299180][T12271] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  891.413162][T12277] 8021q: adding VLAN 0 to HW filter on device bond2
[  891.819026][T12282] 8021q: adding VLAN 0 to HW filter on device bond2
[  891.883940][T12282] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  891.914180][T12282] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  892.198267][T12284] ip6erspan0: entered promiscuous mode
[  892.556485][T12294] loop5: detected capacity change from 0 to 8
[  892.856326][T12284] bond2: (slave ip6erspan0): making interface the new active one
[  892.885231][T12289] SQUASHFS error: zstd decompression error: 10
[  892.886549][T12284] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  892.891874][T12289] SQUASHFS error: zstd decompression failed, data probably corrupt
[  892.907172][T12277] macvlan2: entered promiscuous mode
[  892.909566][T12289] SQUASHFS error: Failed to read block 0x60: -5
[  892.916420][T12277] bond2: entered promiscuous mode
[  892.922666][T12289] SQUASHFS error: zstd decompression error: 10
[  892.927151][T12277] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  892.932285][T12289] SQUASHFS error: zstd decompression failed, data probably corrupt
[  892.932329][T12289] SQUASHFS error: Failed to read block 0x60: -5
[  893.076840][T12277] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0
[  893.113906][ T7265] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /237/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  893.161337][T12277] bond2: left promiscuous mode
[  893.533569][T12302] loop5: detected capacity change from 0 to 128
[  893.631506][T12302] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  893.646391][T12302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  893.707618][T12302] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  893.850047][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  894.513939][T12313] virtio-fs: tag </dev/md0> not found
[  894.525456][ T5869] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0
[  894.602883][ T5869] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0
[  894.610343][ T5869] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0
[  894.678529][ T5869] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0
[  894.792572][ T5869] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0
[  894.801138][ T5869] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0
[  894.810386][ T5869] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0
[  895.226863][ T5869] hid-generic 00A0:0008:0003.0002: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  895.514454][T12318] fido_id[12318]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  896.076070][T12324] loop1: detected capacity change from 0 to 128
[  896.803604][T12324] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  897.077951][T12324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  897.123980][T12324] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  898.714873][T12336] loop1: detected capacity change from 0 to 1024
[  898.737726][T12336] ext4: Unknown parameter 'euid'
[  899.060532][T12342] netlink: 'syz.4.1253': attribute type 39 has an invalid length.
[  901.842731][T12357] loop4: detected capacity change from 0 to 512
[  902.032802][T12357] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  902.053631][T12357] EXT4-fs (loop4): Test dummy encryption mode enabled
[  903.110153][T12357] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1256: inode has both inline data and extents flags
[  903.131229][T12357] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1256: couldn't read orphan inode 15 (err -117)
[  903.469807][T12357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  903.584816][T12375] loop1: detected capacity change from 0 to 512
[  903.863732][T12375] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  903.923855][T12375] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349)
[  903.941632][T12375] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.1258: Invalid inode table block 1 in block_group 0
[  903.974342][T12375] EXT4-fs (loop1): get root inode failed
[  903.980038][T12375] EXT4-fs (loop1): mount failed
[  904.572192][ T5797] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  904.577646][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  906.010574][T12396] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  906.032926][T12396] batman_adv: batadv0: Adding interface: ip6gretap1
[  906.039746][T12396] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  906.067418][T12396] batman_adv: batadv0: Interface activated: ip6gretap1
[  914.980370][   T28] audit: type=1800 audit(1761251752.658:73): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1273" name="bus" dev="overlay" ino=412 res=0 errno=0
[  915.049873][T12447] fuse: Bad value for 'fd'
[  916.138109][T12454] loop5: detected capacity change from 0 to 128
[  916.298554][T12454] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  916.318184][T12454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  916.366294][T12454] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  921.319830][T12476] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  921.398178][T12476] batman_adv: batadv0: Adding interface: ip6gretap1
[  921.405045][T12476] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  921.431440][T12476] batman_adv: batadv0: Interface activated: ip6gretap1
[  923.024022][T12486] loop5: detected capacity change from 0 to 128
[  923.131172][ T5800] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  924.906560][T12501] binder_alloc: 12495: binder_alloc_buf, no vma
[  925.056301][T12501] binder: 12495:12501 ioctl c0306201 200000000240 returned -11
[  926.399796][T12515] loop4: detected capacity change from 0 to 128
[  926.459217][T12515] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  926.474655][T12515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  926.745300][T12515] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  927.314087][T12519] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  927.320823][T12519] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  927.327296][T12521] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  927.349713][T12525] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16)
[  927.356378][T12525] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  927.488970][T12525] vhci_hcd vhci_hcd.0: Device attached
[  927.536279][T12519] vhci_hcd vhci_hcd.0: Device attached
[  927.550637][T12521] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(12)
[  927.557301][T12521] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  927.566258][T12521] vhci_hcd vhci_hcd.0: Device attached
[  927.881807][T12517] loop1: detected capacity change from 0 to 40427
[  927.917947][  T788] vhci_hcd: vhci_device speed not set
[  927.992422][T12519] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18)
[  927.999077][T12519] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  927.999381][T12517] F2FS-fs (loop1): invalid crc value
[  928.013710][  T788] usb 41-1: new full-speed USB device number 3 using vhci_hcd
[  928.022940][T12519] vhci_hcd vhci_hcd.0: Device attached
[  928.030584][T12517] F2FS-fs (loop1): Found nat_bits in checkpoint
[  928.078868][T12517] F2FS-fs (loop1): Start checkpoint disabled!
[  928.429243][T12519] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  928.448473][T12517] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  928.482040][T12519] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  929.413611][T12526] vhci_hcd: connection closed
[  929.415548][ T6982] vhci_hcd: stop threads
[  929.445119][T12532] vhci_hcd: connection closed
[  929.455269][ T6982] vhci_hcd: release socket
[  929.464735][T12520] vhci_hcd: connection reset by peer
[  929.497891][T12536] vhci_hcd: connection closed
[  929.499794][ T6982] vhci_hcd: disconnect device
[  929.535911][ T6982] vhci_hcd: stop threads
[  929.540356][ T6982] vhci_hcd: release socket
[  929.544853][ T6982] vhci_hcd: disconnect device
[  929.556193][ T6982] vhci_hcd: stop threads
[  929.560708][ T6982] vhci_hcd: release socket
[  929.566287][ T6972] kworker/u4:14: attempt to access beyond end of device
[  929.566287][ T6972] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  929.576902][ T6982] vhci_hcd: disconnect device
[  929.581239][ T6972] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  929.621848][ T6982] vhci_hcd: stop threads
[  929.626283][ T6982] vhci_hcd: release socket
[  929.672954][ T6982] vhci_hcd: disconnect device
[  930.043853][ T6972] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  931.004632][T12557] loop5: detected capacity change from 0 to 1024
[  931.012163][T12557] EXT4-fs: Ignoring removed bh option
[  931.027160][T12557] EXT4-fs: Ignoring removed nobh option
[  931.061238][T12557] EXT4-fs: Ignoring removed bh option
[  931.085880][T12557] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  931.307735][T12557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  931.343163][T12567] loop4: detected capacity change from 0 to 128
[  931.429775][T12567] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  932.458192][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  932.464527][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  933.122653][T12583] loop1: detected capacity change from 0 to 512
[  933.135540][T12583] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  933.190760][  T788] vhci_hcd: vhci_device speed not set
[  933.203455][T12583] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1302: iget: bogus i_mode (5)
[  933.218694][T12583] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1302: couldn't read orphan inode 15 (err -117)
[  933.482705][T12583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  933.495120][T12583] ext2 filesystem being mounted at /332/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  934.452939][T12595] QAT: Stopping all acceleration devices.
[  934.520343][T12595] loop4: detected capacity change from 0 to 1024
[  934.949177][T12598] netlink: 'syz.4.1305': attribute type 1 has an invalid length.
[  936.400029][T12602] netlink: get zone limit has 8 unknown bytes
[  937.572098][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  937.681284][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  937.898386][T12610] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  937.905107][T12610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  938.034067][T12616] loop5: detected capacity change from 0 to 1024
[  938.041787][T12616] EXT4-fs: Ignoring removed bh option
[  938.047291][T12616] EXT4-fs: Ignoring removed nobh option
[  938.063512][T12616] EXT4-fs: Ignoring removed bh option
[  938.079007][T12616] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  938.090908][T12610] vhci_hcd vhci_hcd.0: Device attached
[  938.131560][T12617] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  939.080288][T12619] ptrace attach of ""[12620] was attempted by "./syz-executor exec"[12619]
[  939.162184][T12610] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15)
[  939.168839][T12610] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  939.179669][T12616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  939.404635][T12610] vhci_hcd vhci_hcd.0: Device attached
[  939.447979][T11551] usb 35-1: new low-speed USB device number 3 using vhci_hcd
[  939.655578][T12628] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18)
[  939.662220][T12628] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  939.683722][T12610] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14)
[  939.690382][T12610] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  939.730496][T12610] vhci_hcd vhci_hcd.0: Device attached
[  939.750310][T12628] vhci_hcd vhci_hcd.0: Device attached
[  939.757767][T12617] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  939.810310][T12628] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  939.931885][T12610] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(21)
[  939.938621][T12610] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  940.058272][ T7663] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  940.108047][T12610] vhci_hcd vhci_hcd.0: Device attached
[  940.143940][T12629] vhci_hcd: connection closed
[  940.145882][T12626] vhci_hcd: connection closed
[  940.155252][T12631] vhci_hcd: connection closed
[  940.162747][ T6965] vhci_hcd: stop threads
[  940.173711][T12613] vhci_hcd: connection reset by peer
[  940.328045][ T6965] vhci_hcd: release socket
[  940.340399][ T7663] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  940.360521][ T6965] vhci_hcd: disconnect device
[  940.381773][ T6965] vhci_hcd: stop threads
[  940.388089][ T7663] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  940.787090][ T6965] vhci_hcd: release socket
[  941.020550][ T6965] vhci_hcd: disconnect device
[  941.023548][T12635] vhci_hcd: connection closed
[  941.032981][ T6965] vhci_hcd: stop threads
[  941.038522][ T7663] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  941.076894][ T6965] vhci_hcd: release socket
[  941.081681][ T6965] vhci_hcd: disconnect device
[  941.121675][ T7663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  941.133130][ T7663] usb 5-1: SerialNumber: syz
[  941.143762][ T6965] vhci_hcd: stop threads
[  941.170032][ T6965] vhci_hcd: release socket
[  941.196201][ T6965] vhci_hcd: disconnect device
[  941.215296][ T7663] usb 5-1: 0:2 : does not exist
[  941.226520][ T6965] vhci_hcd: stop threads
[  941.230975][ T6965] vhci_hcd: release socket
[  941.265772][ T6965] vhci_hcd: disconnect device
[  942.473833][T12655] xt_l2tp: unknown flags: 17
[  943.962418][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  944.180193][ T5869] usb 5-1: USB disconnect, device number 2
[  944.211930][T12662] loop5: detected capacity change from 0 to 512
[  944.269183][T12662] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  944.307138][T12662] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349)
[  944.331161][T12662] EXT4-fs error (device loop5): __ext4_get_inode_loc:4489: comm syz.5.1318: Invalid inode table block 1 in block_group 0
[  944.439571][T12662] EXT4-fs (loop5): get root inode failed
[  944.445272][T12662] EXT4-fs (loop5): mount failed
[  944.872245][T12672] netlink: get zone limit has 8 unknown bytes
[  945.358044][T11551] vhci_hcd: vhci_device speed not set
[  945.673422][T12679] netlink: 'syz.5.1321': attribute type 1 has an invalid length.
[  945.820393][T12679] 8021q: adding VLAN 0 to HW filter on device bond1
[  946.186789][T12690] binder: 12686:12690 ioctl c0306201 0 returned -14
[  946.659000][T12685] 8021q: adding VLAN 0 to HW filter on device bond1
[  946.666147][T12685] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  946.971584][   T27] usb usb36-port1: attempt power cycle
[  947.451218][T12685] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  947.611013][T12679] ip6erspan0: entered promiscuous mode
[  947.652494][T12679] bond1: (slave ip6erspan0): making interface the new active one
[  947.661336][T12679] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  947.822760][T12688] macvlan2: entered promiscuous mode
[  947.835503][T12701] loop4: detected capacity change from 0 to 1024
[  947.882466][T12701] EXT4-fs: Ignoring removed bh option
[  947.888094][T12701] EXT4-fs: Ignoring removed nobh option
[  947.909443][T12688] bond1: entered promiscuous mode
[  947.957250][T12688] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  947.966364][T12701] EXT4-fs: Ignoring removed bh option
[  948.002061][T12688] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0
[  948.018056][T12701] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  948.056465][T12701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  948.496178][T12688] bond1: left promiscuous mode
[  948.819639][   T27] usb usb36-port1: unable to enumerate USB device
[  949.138318][T12713] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.1327: Allocating blocks 497-513 which overlap fs metadata
[  949.197884][T12713] EXT4-fs (loop4): pa ffff88805b859bc8: logic 256, phys. 385, len 8
[  949.206565][T12713] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[  953.041738][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'.
[  953.428791][T12750] loop5: detected capacity change from 0 to 1024
[  953.483607][T12750] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  953.493582][T12750] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  953.513339][T12750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  953.825315][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.005008][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.451616][   T28] audit: type=1326 audit(1761251792.903:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.5.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4add18efc9 code=0x7fc00000
[  955.333236][   T28] audit: type=1326 audit(1761251793.823:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.5.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4add18efc9 code=0x7fc00000
[  958.451976][T12794] netlink: 'syz.1.1344': attribute type 39 has an invalid length.
[  960.964151][T12804] loop5: detected capacity change from 0 to 1024
[  960.998892][T12804] EXT4-fs: Ignoring removed bh option
[  961.016085][T12804] EXT4-fs: Ignoring removed nobh option
[  961.030533][T12804] EXT4-fs: Ignoring removed bh option
[  961.067211][T12804] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  961.146295][T12804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  961.548824][   T28] audit: type=1800 audit(1761251799.763:76): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1349" name="bus" dev="overlay" ino=1477 res=0 errno=0
[  963.345270][T12821] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4031: comm syz.5.1347: Allocating blocks 497-513 which overlap fs metadata
[  963.368082][T12821] EXT4-fs (loop5): pa ffff88805b910740: logic 256, phys. 385, len 8
[  963.376188][T12821] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[  963.477181][T12826] ipvlan0: entered promiscuous mode
[  963.763425][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  964.633168][T12832] binder_alloc: 12829: binder_alloc_buf, no vma
[  964.640386][T12832] binder: 12829:12832 ioctl c0306201 200000000240 returned -11
[  965.311476][T12835] loop5: detected capacity change from 0 to 512
[  965.388257][T12835] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  965.441596][T12835] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1352: iget: bogus i_mode (5)
[  965.500921][T12835] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1352: couldn't read orphan inode 15 (err -117)
[  965.596252][T12835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  965.659687][T12835] ext2 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  965.713588][  T788] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  965.920301][  T788] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  965.954123][  T788] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  965.972892][  T788] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  965.983782][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.005769][T12840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  966.040646][  T788] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  968.627540][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  969.358821][T11551] usb 2-1: USB disconnect, device number 6
[  969.584536][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'.
[  969.978723][T12873] loop1: detected capacity change from 0 to 1024
[  969.987225][T12873] EXT4-fs: Ignoring removed bh option
[  969.992909][T12873] EXT4-fs: Ignoring removed nobh option
[  969.999717][T12873] EXT4-fs: Ignoring removed bh option
[  970.012349][T12873] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  970.220513][T12873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  970.338623][T12879] veth0_to_bridge: entered promiscuous mode
[  971.177728][T12874] veth0_to_bridge: left promiscuous mode
[  975.173728][T12895] loop4: detected capacity change from 0 to 512
[  975.718624][T12895] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  975.727223][T12895] EXT4-fs (loop4): orphan cleanup on readonly fs
[  975.737577][T12895] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  975.748849][T12895] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  975.815695][T12895] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  975.826427][T12895] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1365: bg 0: block 40: padding at end of block bitmap is not set
[  975.841766][T12895] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  975.856931][T12895] EXT4-fs (loop4): 1 truncate cleaned up
[  975.863904][T12895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  976.617534][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  976.709261][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  977.053852][T12909] loop4: detected capacity change from 0 to 1024
[  977.743518][T12909] ext4: Unknown parameter 'euid'
[  977.809737][ T5800] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  978.737796][T12924] snd_dummy snd_dummy.0: control 3:129:3:syz0:5 is already present
[  979.230318][T12929] loop1: detected capacity change from 0 to 128
[  979.388206][T12929] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  979.400683][T12929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  979.421007][T12928] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  979.478267][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1374'.
[  998.329661][T12977] ptrace attach of ""[12979] was attempted by "./syz-executor exec"[12977]
[  998.375882][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  998.415417][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  998.849722][T12986] loop5: detected capacity change from 0 to 64
[  998.919010][T12986] hfs: unable to locate alternate MDB
[  998.939879][T12986] hfs: continuing without an alternate MDB
[  999.426551][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'.
[ 1001.041004][T13003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1390'.
[ 1003.467382][T13018] netlink: 'syz.5.1392': attribute type 39 has an invalid length.
[ 1005.265702][    C1] hrtimer: interrupt took 51759 ns
[ 1006.805515][T13041] loop4: detected capacity change from 0 to 128
[ 1006.841706][T13041] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 1006.926291][T13041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1006.954037][T13041] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[ 1007.049064][T13047] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1008.828972][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1403'.
[ 1009.066441][ T7663] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1009.285870][ T7663] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1009.664831][ T7663] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1009.684601][ T7663] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1009.703438][ T7663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.727370][T13058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1009.739257][ T7663] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[ 1009.996899][T13069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1010.051838][T13069] syzkaller0: entered promiscuous mode
[ 1010.210268][T13069] syzkaller0: entered allmulticast mode
[ 1011.447583][T13069] tipc: Resetting bearer <eth:syzkaller0>
[ 1011.674062][T13068] tipc: Resetting bearer <eth:syzkaller0>
[ 1012.362179][T13068] tipc: Disabling bearer <eth:syzkaller0>
[ 1012.641725][T13088] comedi comedi3: das16m1: I/O port conflict (0x4f2a,16)
[ 1013.449698][ T5775] usb 1-1: USB disconnect, device number 4
[ 1016.352745][T13106] loop1: detected capacity change from 0 to 128
[ 1016.459470][T13106] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1016.960898][T13106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1017.182965][T13106] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[ 1017.988161][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1416'.
[ 1019.412987][T13131] comedi comedi3: das16m1: I/O port conflict (0x4f2a,16)
[ 1020.597905][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1020.891501][ T5869] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1020.976886][ T5869] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1021.076275][ T5869] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1021.168558][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.290493][T13136] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1021.312854][ T5869] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[ 1021.427953][T11551] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1021.849492][T11551] usb 6-1: Using ep0 maxpacket: 8
[ 1021.859081][T11551] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1021.878506][T11551] usb 6-1: config 16 has an invalid interface number: 196 but max is 0
[ 1022.301420][T11551] usb 6-1: config 16 has no interface number 0
[ 1022.308194][T11551] usb 6-1: config 16 interface 196 has no altsetting 0
[ 1022.321309][T11551] usb 6-1: New USB device found, idVendor=093a, idProduct=2461, bcdDevice=86.f3
[ 1022.336086][T11551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.351043][T11551] usb 6-1: Product: syz
[ 1022.358675][T11551] usb 6-1: Manufacturer: syz
[ 1022.367650][T11551] usb 6-1: SerialNumber: syz
[ 1022.913378][T13154] netlink: 'syz.1.1423': attribute type 10 has an invalid length.
[ 1023.851213][T11551] gspca_main: pac207-2.14.0 probing 093a:2461
[ 1023.875749][T13158] loop5: detected capacity change from 0 to 1024
[ 1023.885269][T13158] EXT4-fs: Ignoring removed bh option
[ 1023.892547][T11551] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[ 1023.898608][T13158] EXT4-fs: Ignoring removed nobh option
[ 1023.906440][T13158] EXT4-fs: Ignoring removed bh option
[ 1023.932024][T13158] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1023.965116][T11551] usb 6-1: USB disconnect, device number 2
[ 1024.146329][T13158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1024.506576][T11551] usb 5-1: USB disconnect, device number 3
[ 1025.083706][T13158] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4031: comm syz.5.1425: Allocating blocks 497-513 which overlap fs metadata
[ 1025.362170][T13158] EXT4-fs (loop5): pa ffff88805b9100e8: logic 256, phys. 385, len 8
[ 1025.370678][T13158] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[ 1025.539502][T13171] loop1: detected capacity change from 0 to 1024
[ 1027.820495][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1028.864111][T13195] loop4: detected capacity change from 0 to 2048
[ 1029.781189][T13197] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1034.223531][T13197] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 1034.237896][T13197] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 1034.239615][T13197] Remounting filesystem read-only
[ 1034.244064][ T6972] NILFS (loop4): discard dirty page: offset=4096, ino=6
[ 1034.244148][ T6972] NILFS (loop4): discard dirty block: blocknr=39, size=1024
[ 1034.244164][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244177][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244185][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244245][ T6972] NILFS (loop4): discard dirty page: offset=0, ino=3
[ 1034.244254][ T6972] NILFS (loop4): discard dirty block: blocknr=42, size=1024
[ 1034.244263][ T6972] NILFS (loop4): discard dirty block: blocknr=43, size=1024
[ 1034.244271][ T6972] NILFS (loop4): discard dirty block: blocknr=44, size=1024
[ 1034.244279][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244291][ T6972] NILFS (loop4): discard dirty page: offset=65536, ino=3
[ 1034.244299][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244308][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244316][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244324][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244336][ T6972] NILFS (loop4): discard dirty page: offset=98304, ino=3
[ 1034.244344][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244355][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244367][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244378][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244393][ T6972] NILFS (loop4): discard dirty page: offset=102400, ino=3
[ 1034.244403][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244411][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244419][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244427][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244437][ T6972] NILFS (loop4): discard dirty page: offset=106496, ino=3
[ 1034.244446][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244454][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244462][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244470][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244481][ T6972] NILFS (loop4): discard dirty page: offset=110592, ino=3
[ 1034.244489][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244497][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244505][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244513][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244523][ T6972] NILFS (loop4): discard dirty page: offset=114688, ino=3
[ 1034.244532][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244540][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244548][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244556][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244566][ T6972] NILFS (loop4): discard dirty page: offset=118784, ino=3
[ 1034.244574][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244582][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244590][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244598][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244616][ T6972] NILFS (loop4): discard dirty page: offset=122880, ino=3
[ 1034.244624][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244632][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244640][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244648][ T6972] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1034.244659][ T6972] NILFS (loop4): discard dirty page: offset=196608, ino=3
[ 1034.244668][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244676][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244685][ T6972] NILFS (loop4): discard dirty block: blocknr=49, size=1024
[ 1034.244692][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244732][ T6972] NILFS (loop4): discard dirty page: offset=0, ino=5
[ 1034.244740][ T6972] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[ 1034.244748][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244757][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.244765][ T6972] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.412285][ T7265] NILFS (loop4): discard dirty page: offset=0, ino=6
[ 1034.412312][ T7265] NILFS (loop4): discard dirty block: blocknr=35, size=1024
[ 1034.412327][ T7265] NILFS (loop4): discard dirty block: blocknr=36, size=1024
[ 1034.412340][ T7265] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[ 1034.412353][ T7265] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[ 1034.413811][ T7265] NILFS (loop4): discard dirty page: offset=0, ino=4
[ 1034.413831][ T7265] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[ 1034.413846][ T7265] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.413861][ T7265] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1034.413876][ T7265] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1035.365378][T13236] loop4: detected capacity change from 0 to 1024
[ 1035.366611][T13236] EXT4-fs: Ignoring removed bh option
[ 1035.366698][T13236] EXT4-fs: Ignoring removed nobh option
[ 1035.366712][T13236] EXT4-fs: Ignoring removed bh option
[ 1035.367406][T13236] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1035.567741][T13236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1036.348739][T13236] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.1442: Allocating blocks 497-513 which overlap fs metadata
[ 1036.352373][T13236] EXT4-fs (loop4): pa ffff88805b910910: logic 256, phys. 385, len 8
[ 1036.352516][T13236] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[ 1036.653798][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1039.232925][T13256] loop4: detected capacity change from 0 to 1024
[ 1039.241204][T13256] EXT4-fs: Ignoring removed bh option
[ 1039.241295][T13256] EXT4-fs: Ignoring removed nobh option
[ 1039.241312][T13256] EXT4-fs: Ignoring removed bh option
[ 1039.266543][T13256] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1039.315526][T13256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1039.755373][T13241] tty tty1: ldisc open failed (-12), clearing slot 0
[ 1040.016865][T13256] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.1449: Allocating blocks 497-513 which overlap fs metadata
[ 1040.032015][T13256] EXT4-fs (loop4): pa ffff88805b8599f8: logic 256, phys. 385, len 8
[ 1040.040158][T13256] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[ 1040.334905][T13261] loop1: detected capacity change from 0 to 2048
[ 1040.425617][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1040.456032][T13266] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1043.847009][T13288] netlink: 292 bytes leftover after parsing attributes in process `syz.5.1454'.
[ 1043.857061][T13288] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1454'.
[ 1044.655252][T13293] loop5: detected capacity change from 0 to 1024
[ 1044.932737][T13293] EXT4-fs: Ignoring removed bh option
[ 1044.938855][T13293] EXT4-fs: Ignoring removed nobh option
[ 1044.952167][T13293] EXT4-fs: Ignoring removed bh option
[ 1044.969901][T13293] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1045.865701][T13293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1046.195209][T13303] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4031: comm syz.5.1456: Allocating blocks 497-513 which overlap fs metadata
[ 1046.341251][T13303] EXT4-fs (loop5): pa ffff88805b8593a0: logic 256, phys. 385, len 8
[ 1046.350774][T13303] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[ 1046.894792][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1046.911869][T13266] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 1046.927623][T13266] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 1048.270103][T13266] Remounting filesystem read-only
[ 1048.294350][ T6965] NILFS (loop1): discard dirty page: offset=4096, ino=6
[ 1048.310856][ T6965] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[ 1048.318210][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1048.327985][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1048.349661][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1048.385726][ T6965] NILFS (loop1): discard dirty page: offset=0, ino=3
[ 1048.397758][ T6965] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[ 1048.407051][ T6965] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[ 1048.537375][ T6965] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[ 1048.544920][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1048.554667][ T6965] NILFS (loop1): discard dirty page: offset=65536, ino=3
[ 1048.565107][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1048.574541][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1048.584300][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.602434][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1048.611740][ T6965] NILFS (loop1): discard dirty page: offset=98304, ino=3
[ 1048.619294][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1048.631552][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1048.640769][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.649406][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.657629][ T6965] NILFS (loop1): discard dirty page: offset=102400, ino=3
[ 1048.664932][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.672689][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.680034][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.688062][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.709852][ T6965] NILFS (loop1): discard dirty page: offset=106496, ino=3
[ 1048.718134][T11551] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1048.752435][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.761748][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.769056][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.777348][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.784901][ T6965] NILFS (loop1): discard dirty page: offset=110592, ino=3
[ 1048.792790][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.800104][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.808055][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.819111][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.826832][ T6965] NILFS (loop1): discard dirty page: offset=114688, ino=3
[ 1048.835957][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.846821][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.856596][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.868792][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.882267][ T6965] NILFS (loop1): discard dirty page: offset=118784, ino=3
[ 1048.890453][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.901935][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.909294][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.922466][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.930657][ T6965] NILFS (loop1): discard dirty page: offset=122880, ino=3
[ 1048.940070][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.952332][T11551] usb 5-1: Using ep0 maxpacket: 8
[ 1048.960002][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1048.984573][T11551] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1048.992863][ T6965] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1049.020450][T11551] usb 5-1: config 16 has an invalid interface number: 196 but max is 0
[ 1049.037591][T11551] usb 5-1: config 16 has no interface number 0
[ 1049.047331][T11551] usb 5-1: config 16 interface 196 has no altsetting 0
[ 1049.063215][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1049.073803][T11551] usb 5-1: New USB device found, idVendor=093a, idProduct=2461, bcdDevice=86.f3
[ 1049.089991][ T6965] NILFS (loop1): discard dirty page: offset=196608, ino=3
[ 1049.110908][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1049.114897][T11551] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1049.121131][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1049.139725][ T6965] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[ 1049.146855][T11551] usb 5-1: Product: syz
[ 1049.154279][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1049.168502][T11551] usb 5-1: Manufacturer: syz
[ 1049.181301][ T6965] NILFS (loop1): discard dirty page: offset=0, ino=5
[ 1049.184535][T11551] usb 5-1: SerialNumber: syz
[ 1049.194691][ T6965] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[ 1049.211411][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1049.277648][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1049.334643][ T6965] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1049.386696][ T5784] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[ 1049.940107][ T5784] NILFS (loop1): discard dirty page: offset=0, ino=6
[ 1049.940153][ T5784] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[ 1049.940227][ T5784] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[ 1049.940297][ T5784] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[ 1049.940345][ T5784] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[ 1050.132755][ T5784] NILFS (loop1): discard dirty page: offset=0, ino=4
[ 1050.211290][ T5784] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[ 1050.219004][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1050.228098][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1050.328165][ T5784] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1050.978498][T11551] gspca_main: pac207-2.14.0 probing 093a:2461
[ 1051.000994][T11551] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[ 1051.040856][T11551] usb 5-1: USB disconnect, device number 4
[ 1051.280566][T13343] loop1: detected capacity change from 0 to 512
[ 1052.276877][T13343] EXT4-fs (loop1): revision level too high, forcing read-only mode
[ 1052.285704][T13343] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1052.294624][T13343] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[ 1052.306483][T13343] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1052.322930][T13343] EXT4-fs (loop1): Cannot turn on quotas: error -117
[ 1052.339640][T13343] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1460: bg 0: block 40: padding at end of block bitmap is not set
[ 1052.366227][T13343] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem
[ 1052.376293][T13343] EXT4-fs (loop1): 1 truncate cleaned up
[ 1052.383478][T13343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1052.594186][T13348] loop4: detected capacity change from 0 to 1024
[ 1052.622586][T13348] EXT4-fs: Ignoring removed bh option
[ 1052.628125][T13348] EXT4-fs: Ignoring removed nobh option
[ 1052.721053][T13352] gfs2: not a GFS2 filesystem
[ 1052.755194][T13352] binfmt_misc: register: failed to install interpreter file ./file0
[ 1053.026180][T13348] EXT4-fs: Ignoring removed bh option
[ 1053.107604][T13348] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1053.381533][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1053.895666][T13348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1054.340248][T13365] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.1471: Allocating blocks 497-513 which overlap fs metadata
[ 1054.462935][T13365] EXT4-fs (loop4): pa ffff8880795a3ae0: logic 256, phys. 385, len 8
[ 1054.471041][T13365] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[ 1054.693791][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1054.931120][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.937641][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.099121][T13374] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1055.413909][T13374] loop5: detected capacity change from 0 to 1024
[ 1055.799161][ T6982] hfsplus: b-tree write err: -5, ino 4
[ 1055.962424][T13379] comedi comedi3: adq12b: I/O port conflict (0x4f27,16)
[ 1056.855243][T13385] netlink: zone id is out of range
[ 1056.923090][T13383] loop5: detected capacity change from 0 to 1024
[ 1057.017368][T13383] EXT4-fs: Ignoring removed bh option
[ 1057.023249][T13383] EXT4-fs: Ignoring removed nobh option
[ 1057.066877][T13383] EXT4-fs: Ignoring removed bh option
[ 1057.096437][T13383] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1057.259669][T13383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1059.957637][T13394] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4031: comm syz.5.1478: Allocating blocks 497-513 which overlap fs metadata
[ 1060.005502][T13394] EXT4-fs (loop5): pa ffff8880795a3570: logic 256, phys. 385, len 8
[ 1060.013745][T13394] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[ 1060.211350][T13405] loop4: detected capacity change from 0 to 1024
[ 1060.401495][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1061.073487][T13415] loop5: detected capacity change from 0 to 1024
[ 1061.113687][T13415] EXT4-fs: Ignoring removed bh option
[ 1061.119233][T13415] EXT4-fs: Ignoring removed nobh option
[ 1062.336906][ T6972] hfsplus: found bad thread record in catalog
[ 1062.361290][T13415] EXT4-fs: Ignoring removed bh option
[ 1062.488193][ T6972] hfsplus: found bad thread record in catalog
[ 1062.510407][T13415] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1062.582075][T13415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1062.841770][T13428] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4031: comm syz.5.1484: Allocating blocks 497-513 which overlap fs metadata
[ 1062.861030][T13428] EXT4-fs (loop5): pa ffff88805b910658: logic 256, phys. 385, len 8
[ 1062.869170][T13428] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[ 1064.371031][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1065.916752][T13448] netlink: zone id is out of range
[ 1066.078212][T13447] ceph: No mds server is up or the cluster is laggy
[ 1066.311413][T13456] loop5: detected capacity change from 0 to 164
[ 1066.551374][T13456] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[ 1066.570459][T13456] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[ 1068.961943][T13477] loop4: detected capacity change from 0 to 16
[ 1068.987546][T13477] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1069.097684][T13480] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[ 1069.109060][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 47 @ nid 36
[ 1069.118410][T13480] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[ 1069.129317][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 46 @ nid 36
[ 1069.140491][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 45 @ nid 36
[ 1069.421124][T13480] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1069.432402][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 43 @ nid 36
[ 1069.442169][T13480] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1069.680556][ T7663] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1069.752876][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 42 @ nid 36
[ 1069.762434][T13480] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[ 1069.773215][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 41 @ nid 36
[ 1069.782612][T13480] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[ 1069.793728][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 40 @ nid 36
[ 1069.803342][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 39 @ nid 36
[ 1069.812560][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 38 @ nid 36
[ 1069.822588][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 36 @ nid 36
[ 1069.832811][T13480] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36
[ 1069.844121][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 31 @ nid 36
[ 1069.854730][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 25 @ nid 36
[ 1069.864236][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 24 @ nid 36
[ 1069.875187][T13480] erofs: (device loop4): z_erofs_readahead: readahead error at folio 19 @ nid 36
[ 1069.948476][T13480] syz.4.1496: attempt to access beyond end of device
[ 1069.948476][T13480] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16
[ 1069.970740][T13480] syz.4.1496: attempt to access beyond end of device
[ 1069.970740][T13480] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[ 1069.986172][T13480] syz.4.1496: attempt to access beyond end of device
[ 1069.986172][T13480] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[ 1070.001136][T13480] syz.4.1496: attempt to access beyond end of device
[ 1070.001136][T13480] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16
[ 1070.063548][ T7663] usb 1-1: Using ep0 maxpacket: 8
[ 1070.072270][ T7663] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1070.185950][ T7663] usb 1-1: config 16 has an invalid interface number: 196 but max is 0
[ 1070.305647][ T7663] usb 1-1: config 16 has no interface number 0
[ 1070.399698][ T7663] usb 1-1: config 16 interface 196 has no altsetting 0
[ 1070.571598][T13480] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1070.582845][T13480] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[ 1070.594216][T13480] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1070.884653][ T7663] usb 1-1: New USB device found, idVendor=093a, idProduct=2461, bcdDevice=86.f3
[ 1071.088767][ T7663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1071.100201][ T7663] usb 1-1: Product: syz
[ 1071.105344][ T7663] usb 1-1: Manufacturer: syz
[ 1071.110393][ T7663] usb 1-1: SerialNumber: syz
[ 1072.530575][ T7663] gspca_main: pac207-2.14.0 probing 093a:2461
[ 1072.548698][ T7663] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[ 1072.774278][ T7663] usb 1-1: USB disconnect, device number 5
[ 1074.271026][T13515] loop1: detected capacity change from 0 to 764
[ 1075.340638][T13512] loop5: detected capacity change from 0 to 1024
[ 1075.654988][T13512] EXT4-fs: Ignoring removed bh option
[ 1075.677459][T13512] EXT4-fs: Ignoring removed nobh option
[ 1075.769342][T13512] EXT4-fs: Ignoring removed bh option
[ 1075.908274][T13512] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1077.049489][T13512] EXT4-fs: error -4 creating inode table initialization thread
[ 1077.199053][T13512] EXT4-fs (loop5): mount failed
[ 1082.578255][T13572] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1082.590851][T13566] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1083.012177][T13574] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[ 1083.225217][ T7663] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1083.275329][T13578] loop4: detected capacity change from 0 to 1024
[ 1083.297671][T13578] EXT4-fs: Ignoring removed bh option
[ 1083.317797][T13578] EXT4-fs: Ignoring removed nobh option
[ 1083.339256][T13578] EXT4-fs: Ignoring removed bh option
[ 1083.347010][T13578] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1083.392822][T13578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1083.554013][ T7663] usb 2-1: Using ep0 maxpacket: 8
[ 1083.629214][ T7663] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1083.680345][ T7663] usb 2-1: config 16 has an invalid interface number: 196 but max is 0
[ 1083.704384][T13588] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.1517: Allocating blocks 497-513 which overlap fs metadata
[ 1083.751075][ T7663] usb 2-1: config 16 has no interface number 0
[ 1083.781280][ T7663] usb 2-1: config 16 interface 196 has no altsetting 0
[ 1083.975499][ T7663] usb 2-1: New USB device found, idVendor=093a, idProduct=2461, bcdDevice=86.f3
[ 1083.988732][ T7663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.996798][T13588] EXT4-fs (loop4): pa ffff88805b910740: logic 256, phys. 385, len 8
[ 1083.996831][T13588] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[ 1084.015831][ T7663] usb 2-1: Product: syz
[ 1084.020984][ T7663] usb 2-1: Manufacturer: syz
[ 1084.025903][ T7663] usb 2-1: SerialNumber: syz
[ 1085.045592][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1087.846731][ T7663] gspca_main: pac207-2.14.0 probing 093a:2461
[ 1088.060651][ T7663] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[ 1088.092357][ T7663] usb 2-1: USB disconnect, device number 7
[ 1089.246520][T13624] netlink: 'syz.1.1526': attribute type 4 has an invalid length.
[ 1089.490005][T13621] netlink: 'syz.0.1527': attribute type 21 has an invalid length.
[ 1089.839872][T13625] loop4: detected capacity change from 0 to 128
[ 1094.099106][ T7663] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1095.206572][ T7663] usb 6-1: Using ep0 maxpacket: 8
[ 1095.283274][ T7663] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1095.319455][ T7663] usb 6-1: config 16 has an invalid interface number: 196 but max is 0
[ 1095.346656][ T7663] usb 6-1: config 16 has no interface number 0
[ 1095.363264][ T7663] usb 6-1: config 16 interface 196 has no altsetting 0
[ 1095.403662][ T7663] usb 6-1: New USB device found, idVendor=093a, idProduct=2461, bcdDevice=86.f3
[ 1095.439754][ T7663] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1095.604346][T13670] loop1: detected capacity change from 0 to 1024
[ 1096.013694][T13670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1096.264121][ T7663] usb 6-1: Product: syz
[ 1096.268490][ T7663] usb 6-1: Manufacturer: syz
[ 1096.273206][ T7663] usb 6-1: SerialNumber: syz
[ 1096.287656][ T7663] usb 6-1: can't set config #16, error -71
[ 1096.295669][ T7663] usb 6-1: USB disconnect, device number 3
[ 1096.301149][T13670] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1096.619472][T13682] gfs2: not a GFS2 filesystem
[ 1096.641539][T13682] binfmt_misc: register: failed to install interpreter file ./file0
[ 1097.845674][T13689] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[ 1098.099065][T13675] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[ 1098.330987][T13690] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1098.940591][T13690] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.1538: inode has both inline data and extents flags
[ 1099.041311][T13694] loop4: detected capacity change from 0 to 1024
[ 1099.159199][T13694] EXT4-fs: Ignoring removed bh option
[ 1099.193895][T13694] EXT4-fs: Ignoring removed nobh option
[ 1099.477177][T13694] EXT4-fs: Ignoring removed bh option
[ 1100.226899][T13694] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1100.478169][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1100.878083][T13694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1101.831441][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1102.291069][T13726] comedi comedi3: das16m1: I/O port conflict (0x4f2a,16)
[ 1110.594769][T13790] loop1: detected capacity change from 0 to 1024
[ 1110.602819][T13790] EXT4-fs: Ignoring removed bh option
[ 1110.608959][T13790] EXT4-fs: Ignoring removed nobh option
[ 1110.614786][T13790] EXT4-fs: Ignoring removed bh option
[ 1110.622038][T13790] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1110.784943][T13790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1113.859891][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1114.306885][T13816] gfs2: not a GFS2 filesystem
[ 1114.366230][T13816] binfmt_misc: register: failed to install interpreter file ./file0
[ 1116.309549][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.318971][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.743747][T13828] openvswitch: netlink: Key type 226 is out of range max 32
[ 1116.757134][T13828] loop1: detected capacity change from 0 to 256
[ 1116.764595][T13828] exfat: Deprecated parameter 'namecase'
[ 1118.217075][T12936] schedule_timeout: wrong timeout value ffffffffffffff7c
[ 1118.285738][T13828] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[ 1118.381287][T12936] CPU: 0 PID: 12936 Comm: vivid-000-vid-c Not tainted syzkaller #0
[ 1118.389248][T12936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1118.399342][T12936] Call Trace:
[ 1118.402629][T12936]  <TASK>
[ 1118.405584][T12936]  dump_stack_lvl+0x16c/0x230
[ 1118.410286][T12936]  ? show_regs_print_info+0x20/0x20
[ 1118.415812][T12936]  ? load_image+0x3b0/0x3b0
[ 1118.420384][T12936]  schedule_timeout+0x215/0x280
[ 1118.425515][T12936]  ? console_conditional_schedule+0x40/0x40
[ 1118.431421][T12936]  ? __mutex_trylock_common+0x153/0x250
[ 1118.436993][T12936]  ? prepare_to_wait_event+0x434/0x470
[ 1118.442465][T12936]  vivid_thread_vid_cap+0xaaf/0x10c0
[ 1118.447881][T12936]  ? vivid_start_generating_vid_cap+0x510/0x510
[ 1118.454146][T12936]  ? wake_bit_function+0x200/0x200
[ 1118.459804][T12936]  ? __kthread_parkme+0x7a/0x1c0
[ 1118.464952][T12936]  kthread+0x2fa/0x390
[ 1118.469033][T12936]  ? vivid_start_generating_vid_cap+0x510/0x510
[ 1118.475290][T12936]  ? kthread_blkcg+0xd0/0xd0
[ 1118.479894][T12936]  ret_from_fork+0x48/0x80
[ 1118.484327][T12936]  ? kthread_blkcg+0xd0/0xd0
[ 1118.488921][T12936]  ret_from_fork_asm+0x11/0x20
[ 1118.493704][T12936]  </TASK>
[ 1120.333107][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'.
[ 1120.343719][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'.
[ 1120.353515][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'.
[ 1120.364639][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'.
[ 1120.374417][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'.
[ 1120.387407][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'.
[ 1120.397374][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'.
[ 1120.410524][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'.
[ 1120.420520][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'.
[ 1120.433312][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'.
[ 1120.870490][T13839] netlink: 'syz.1.1575': attribute type 10 has an invalid length.
[ 1120.879846][T13839] team0: entered promiscuous mode
[ 1120.885019][T13839] team_slave_0: entered promiscuous mode
[ 1120.891452][T13839] team_slave_1: entered promiscuous mode
[ 1120.897875][T13839] vxlan0: entered promiscuous mode
[ 1120.936309][T13839] team0: entered allmulticast mode
[ 1120.946556][T13839] team_slave_0: entered allmulticast mode
[ 1120.955221][T13839] team_slave_1: entered allmulticast mode
[ 1120.965383][T13839] vxlan0: entered allmulticast mode
[ 1120.998737][T13839] bridge0: port 3(team0) entered blocking state
[ 1121.015577][T13839] bridge0: port 3(team0) entered disabled state
[ 1122.139942][T13839] bridge0: port 3(team0) entered blocking state
[ 1122.146847][T13839] bridge0: port 3(team0) entered forwarding state
[ 1122.381895][T13854] loop5: detected capacity change from 0 to 1024
[ 1122.396457][T13854] EXT4-fs: Ignoring removed bh option
[ 1122.406218][T13854] EXT4-fs: Ignoring removed nobh option
[ 1122.449428][T13854] EXT4-fs: Ignoring removed bh option
[ 1122.461131][T13854] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1122.567039][T13854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1125.423048][T13878] loop4: detected capacity change from 0 to 8
[ 1126.330587][T13883] loop4: detected capacity change from 0 to 128
[ 1126.337761][T13883] FAT-fs (loop4): Unrecognized mount option "uni_xl%PB^�°cwiet" or missing value
[ 1127.021367][T13757] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1128.659472][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1130.151733][T13911] loop1: detected capacity change from 0 to 512
[ 1130.713484][T13071] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1131.440034][T13922] syz.0.1593: attempt to access beyond end of device
[ 1131.440034][T13922] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0
[ 1131.644726][T13923] __nla_validate_parse: 36 callbacks suppressed
[ 1131.644740][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1593'.
[ 1131.682061][T13923] veth0_macvtap: left promiscuous mode
[ 1132.616185][T13934] loop1: detected capacity change from 0 to 512
[ 1132.624112][T13934] FAT-fs (loop1): Unrecognized mount option "" or missing value
[ 1133.993948][T13757] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1134.099511][T13933] ceph: No mds server is up or the cluster is laggy
[ 1135.954641][T13944] loop5: detected capacity change from 0 to 128
[ 1135.962610][T13944] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[ 1136.466229][T13944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1137.628108][T13952] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[ 1138.585533][T13955] loop5: detected capacity change from 0 to 1024
[ 1138.593388][T13955] EXT4-fs: Ignoring removed bh option
[ 1138.599008][T13955] EXT4-fs: Ignoring removed nobh option
[ 1138.637313][T13955] EXT4-fs: Ignoring removed bh option
[ 1138.841638][T13955] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1140.678241][T13960] usb usb8: usbfs: process 13960 (syz.0.1600) did not claim interface 0 before use
[ 1141.022520][T13955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1142.066853][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1142.264889][T13978] loop4: detected capacity change from 0 to 32768
[ 1142.374285][T13978] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1142.494125][T13978] XFS (loop4): Ending clean mount
[ 1142.530369][T13978] XFS (loop4): Quotacheck needed: Please wait.
[ 1142.851535][T13978] XFS (loop4): Quotacheck: Done.
[ 1143.599427][T13991] loop5: detected capacity change from 0 to 40427
[ 1143.659898][T13991] F2FS-fs (loop5): build fault injection attr: rate: 4, type: 0x7ffff
[ 1144.151432][ T7265] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1144.376830][T13998] mkiss: ax0: crc mode is auto.
[ 1146.858577][T14012] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[ 1150.428171][T14020] loop4: detected capacity change from 0 to 512
[ 1150.647517][T14027] loop5: detected capacity change from 0 to 1024
[ 1150.655682][T14027] EXT4-fs: Ignoring removed bh option
[ 1150.661297][T14027] EXT4-fs: Ignoring removed nobh option
[ 1151.219776][T14027] EXT4-fs: Ignoring removed bh option
[ 1151.245743][T14027] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1151.297172][T14027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1154.687105][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1157.273160][T14073] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[ 1158.975864][T14090] loop1: detected capacity change from 0 to 512
[ 1158.983194][T14090] EXT4-fs: Ignoring removed oldalloc option
[ 1159.096306][T14092] SET target dimension over the limit!
[ 1159.130736][T14090] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1159.220889][T14090] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[ 1159.232587][T14090] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0102]
[ 1159.241646][T14090] System zones: 0-2, 18-18, 34-34
[ 1159.263227][T14090] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1624: iget: bad i_size value: 360287970189639680
[ 1159.289692][T14090] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1624: couldn't read orphan inode 15 (err -117)
[ 1159.312122][T14090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1159.529114][T14083] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 3: comm syz.1.1624: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=262156, rec_len=0, size=4096 fake=0
[ 1159.574895][T14083] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 3: comm syz.1.1624: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=262156, rec_len=0, size=4096 fake=0
[ 1161.345021][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1161.755824][T14122] sctp: [Deprecated]: syz.4.1632 (pid 14122) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1161.755824][T14122] Use struct sctp_sack_info instead
[ 1164.680580][T14146] loop5: detected capacity change from 0 to 1024
[ 1164.695958][T14146] EXT4-fs: Ignoring removed bh option
[ 1164.701497][T14146] EXT4-fs: Ignoring removed nobh option
[ 1164.822440][T14146] EXT4-fs: Ignoring removed bh option
[ 1165.083019][T14146] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1165.416034][T14146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1168.564405][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1169.875366][T14179] tmpfs: Bad value for 'mpol'
[ 1171.401346][T14186] openvswitch: netlink: Key type 226 is out of range max 32
[ 1173.141285][T14191] loop5: detected capacity change from 0 to 256
[ 1173.279908][T14191] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1173.863102][   T28] audit: type=1400 audit(1761252012.308:77): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=14192 comm="syz.0.1648"
[ 1175.044503][T14210] loop4: detected capacity change from 0 to 1024
[ 1175.052096][T14210] EXT4-fs: Ignoring removed bh option
[ 1175.057664][T14210] EXT4-fs: Ignoring removed nobh option
[ 1175.063341][T14210] EXT4-fs: Ignoring removed bh option
[ 1175.070687][T14210] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1177.283072][T14210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1177.761606][T14232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1177.769884][T14232] IPv6: NLM_F_CREATE should be set when creating new route
[ 1177.777229][T14232] IPv6: NLM_F_CREATE should be set when creating new route
[ 1178.228293][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1178.235782][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.666054][T10499] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[ 1179.882891][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1181.612866][T14245] loop1: detected capacity change from 0 to 256
[ 1181.633528][T14245] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value
[ 1183.164666][T14256] Cannot find add_set index 0 as target
[ 1191.696450][T14286] hpfs: Bad magic ... probably not HPFS
[ 1196.301940][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'.
[ 1200.739039][T14339] loop4: detected capacity change from 0 to 16
[ 1201.902517][T14339] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1202.940073][T14351] loop4: detected capacity change from 0 to 128
[ 1203.700660][   T28] audit: type=1800 audit(1761252042.164:78): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1684" name="bus" dev="loop4" ino=1048630 res=0 errno=0
[ 1206.346397][T14385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1691'.
[ 1206.753359][ T5869] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1207.000637][ T5869] usb 5-1: Using ep0 maxpacket: 8
[ 1207.072809][ T5869] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1207.166088][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.247010][ T5869] usb 5-1: Product: syz
[ 1207.277475][ T5869] usb 5-1: Manufacturer: syz
[ 1207.308940][ T5869] usb 5-1: SerialNumber: syz
[ 1207.392631][ T5869] usb 5-1: config 0 descriptor??
[ 1207.737550][ T5869] gspca_main: se401-2.14.0 probing 047d:5003
[ 1207.864990][T14393] loop5: detected capacity change from 0 to 512
[ 1207.875211][T14393] EXT4-fs: Ignoring removed oldalloc option
[ 1208.104459][T14393] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1208.131601][ T5869] gspca_se401: Wrong descriptor type
[ 1208.190876][T14393] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[ 1208.201168][T14393] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0102]
[ 1208.209603][T14393] System zones: 0-2, 18-18, 34-34
[ 1208.222354][T14393] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1692: iget: bad i_size value: 360287970189639680
[ 1208.243024][T14393] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1692: couldn't read orphan inode 15 (err -117)
[ 1208.259894][T14393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1208.325383][T14393] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #2: block 3: comm syz.5.1692: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=262156, rec_len=0, size=4096 fake=0
[ 1208.366062][T14393] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #2: block 3: comm syz.5.1692: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=262156, rec_len=0, size=4096 fake=0
[ 1209.450117][ T5869] usb 5-1: USB disconnect, device number 5
[ 1210.278559][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1214.253131][   T28] audit: type=1400 audit(1761252052.713:79): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=14428 comm="syz.4.1699"
[ 1214.272434][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1214.331825][T14436] loop5: detected capacity change from 0 to 128
[ 1214.552400][T14436] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1214.614368][T14441] binfmt_misc: register: failed to install interpreter file ./file0
[ 1215.328564][T14436] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1217.340789][T10496] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1217.394264][T14456] SET target dimension over the limit!
[ 1218.983299][T14462] loop5: detected capacity change from 0 to 4096
[ 1219.644383][T14471] PKCS8: Unsupported PKCS#8 version
[ 1225.110286][T14509] loop1: detected capacity change from 0 to 32768
[ 1225.458702][T14509] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1226.664719][T14509] XFS (loop1): Ending clean mount
[ 1226.690030][T14509] XFS (loop1): Quotacheck needed: Please wait.
[ 1227.443851][T14509] XFS (loop1): Quotacheck: Done.
[ 1228.932729][T14524] Bluetooth: hci0: invalid length 0, exp 2 for type 23
[ 1228.967689][ T5784] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1229.310966][T14534] loop4: detected capacity change from 0 to 512
[ 1229.321852][T14534] EXT4-fs: Ignoring removed oldalloc option
[ 1229.366667][T14534] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1229.433179][T14534] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[ 1229.447973][T14534] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0102]
[ 1229.456822][T14534] System zones: 0-2, 18-18, 34-34
[ 1229.985289][T14534] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1719: iget: bad i_size value: 360287970189639680
[ 1230.001863][T14534] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1719: couldn't read orphan inode 15 (err -117)
[ 1230.023000][T14534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1230.104693][T14534] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.1719: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=262156, rec_len=0, size=4096 fake=0
[ 1230.583660][T14538] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.1719: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=262156, rec_len=0, size=4096 fake=0
[ 1230.768696][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1231.287793][T14543] loop5: detected capacity change from 0 to 512
[ 1231.315233][T14543] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1231.434685][T14543] EXT4-fs (loop5): 1 truncate cleaned up
[ 1231.612417][T14543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1232.262061][ T6978] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1232.840829][T10496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1234.182372][T10499] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[ 1234.335364][T14568] loop1: detected capacity change from 0 to 128
[ 1234.748799][T14575] blktrace: Concurrent blktraces are not allowed on sg0
[ 1236.657546][   T28] audit: type=1800 audit(1761252074.901:80): pid=14580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1736" name="bus" dev="loop1" ino=1048631 res=0 errno=0
[ 1237.588061][T14597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1732'.
[ 1239.693487][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.699949][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.881532][T14607] loop4: detected capacity change from 0 to 512
[ 1241.501515][T14607] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1737: inode has both inline data and extents flags
[ 1241.670665][T14607] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1737: couldn't read orphan inode 15 (err -117)
[ 1241.717451][T14607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1242.252071][T14624] bridge0: port 1(vlan2) entered blocking state
[ 1242.259314][T14624] bridge0: port 1(vlan2) entered disabled state
[ 1242.267122][T14624] vlan2: entered allmulticast mode
[ 1242.272477][T14624] bridge0: entered allmulticast mode
[ 1242.293339][T14624] vlan2: left allmulticast mode
[ 1242.298368][T14624] bridge0: left allmulticast mode
[ 1243.081687][ T7265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1243.083560][T14626] comedi comedi3: pcl818: I/O port conflict (0x4f27,16)
[ 1243.100120][T14626] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN
[ 1243.112143][T14626] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[ 1243.120580][T14626] CPU: 0 PID: 14626 Comm: syz.1.1738 Not tainted syzkaller #0
[ 1243.128061][T14626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1243.138133][T14626] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[ 1243.143741][T14626] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 79 a2 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 58 a2 df f9 4d 8b 24 24 48 83 c3
[ 1243.163462][T14626] RSP: 0018:ffffc9000d1f7a18 EFLAGS: 00010206
[ 1243.169549][T14626] RAX: 0000000000000005 RBX: ffff888025d6e000 RCX: 0000000000080000
[ 1243.177624][T14626] RDX: ffffc9000e67f000 RSI: 000000000003e632 RDI: 000000000003e633
[ 1243.185733][T14626] RBP: 0000000000000001 R08: ffff88802a57512f R09: 1ffff110054aea25
[ 1243.193804][T14626] R10: dffffc0000000000 R11: ffffed10054aea26 R12: 0000000000000028
[ 1243.201800][T14626] R13: dffffc0000000000 R14: ffff88802a575000 R15: dffffc0000000000
[ 1243.209793][T14626] FS:  00007f6bccf6a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1243.218759][T14626] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1243.225366][T14626] CR2: 00002000002b6030 CR3: 000000004cf9d000 CR4: 00000000003506f0
[ 1243.233360][T14626] Call Trace:
[ 1243.236674][T14626]  <TASK>
[ 1243.239620][T14626]  pcl818_detach+0x66/0xd0
[ 1243.244233][T14626]  comedi_device_detach_locked+0x172/0x710
[ 1243.250072][T14626]  comedi_device_attach+0x5cd/0x710
[ 1243.255299][T14626]  comedi_unlocked_ioctl+0x606/0xfe0
[ 1243.260614][T14626]  ? tomoyo_path_number_perm+0x477/0x590
[ 1243.266363][T14626]  ? comedi_poll+0x8c0/0x8c0
[ 1243.270992][T14626]  ? __fget_files+0x28/0x4d0
[ 1243.275603][T14626]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1243.280602][T14626]  ? security_file_ioctl+0x80/0xa0
[ 1243.285873][T14626]  ? comedi_poll+0x8c0/0x8c0
[ 1243.290488][T14626]  __se_sys_ioctl+0xfd/0x170
[ 1243.295107][T14626]  do_syscall_64+0x55/0xb0
[ 1243.299710][T14626]  ? clear_bhb_loop+0x40/0x90
[ 1243.304587][T14626]  ? clear_bhb_loop+0x40/0x90
[ 1243.309305][T14626]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1243.315524][T14626] RIP: 0033:0x7f6bcc18efc9
[ 1243.320000][T14626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1243.339807][T14626] RSP: 002b:00007f6bccf6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1243.348239][T14626] RAX: ffffffffffffffda RBX: 00007f6bcc3e6090 RCX: 00007f6bcc18efc9
[ 1243.356311][T14626] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000006
[ 1243.364307][T14626] RBP: 00007f6bcc211f91 R08: 0000000000000000 R09: 0000000000000000
[ 1243.372297][T14626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1243.380281][T14626] R13: 00007f6bcc3e6128 R14: 00007f6bcc3e6090 R15: 00007ffe9d73e638
[ 1243.388369][T14626]  </TASK>
[ 1243.391401][T14626] Modules linked in:
[ 1243.405556][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'.
[ 1243.424232][T14626] ---[ end trace 0000000000000000 ]---
[ 1243.429926][T14626] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[ 1243.435730][T14626] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 79 a2 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 58 a2 df f9 4d 8b 24 24 48 83 c3
[ 1243.455672][T14626] RSP: 0018:ffffc9000d1f7a18 EFLAGS: 00010206
[ 1243.462567][T14626] RAX: 0000000000000005 RBX: ffff888025d6e000 RCX: 0000000000080000
[ 1243.470913][T14626] RDX: ffffc9000e67f000 RSI: 000000000003e632 RDI: 000000000003e633
[ 1243.479050][T14626] RBP: 0000000000000001 R08: ffff88802a57512f R09: 1ffff110054aea25
[ 1243.487191][T14626] R10: dffffc0000000000 R11: ffffed10054aea26 R12: 0000000000000028
[ 1243.495389][T14626] R13: dffffc0000000000 R14: ffff88802a575000 R15: dffffc0000000000
[ 1243.503508][T14626] FS:  00007f6bccf6a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1243.512701][T14626] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1243.519462][T14626] CR2: 00002000002ba030 CR3: 000000004cf9d000 CR4: 00000000003506f0
[ 1243.757469][T14626] Kernel panic - not syncing: Fatal exception
[ 1243.764011][T14626] Kernel Offset: disabled
[ 1243.768329][T14626] Rebooting in 86400 seconds..