last executing test programs:

5m35.995598604s ago: executing program 3 (id=856):
syz_mount_image$hfsplus(&(0x7f0000000480), &(0x7f0000000100)='./file1\x00', 0x2a08800, &(0x7f0000000140)=ANY=[], 0x4, 0x69f, &(0x7f0000000580)="$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")
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x3, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x6a}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x80000000}, &(0x7f0000000300)=0x8)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @loopback, 0x4e24, 0x3, 'rr\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e23, 0x10000, 0x1000, 0x80012d5a, 0x12d5c}}, 0x44)
setsockopt$inet6_int(r1, 0x10d, 0x10, &(0x7f0000000040)=0x1, 0x4)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

5m34.870388352s ago: executing program 3 (id=859):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020)

5m34.22867898s ago: executing program 3 (id=860):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x3, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x6a}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x80000000}, &(0x7f0000000300)=0x8)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @loopback, 0x4e24, 0x3, 'rr\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e23, 0x10000, 0x1000, 0x80012d5a, 0x12d5c}}, 0x44)
setsockopt$inet6_int(r1, 0x10d, 0x10, &(0x7f0000000040)=0x1, 0x4)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

5m33.06657716s ago: executing program 3 (id=861):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

5m32.405960538s ago: executing program 3 (id=866):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4000, &(0x7f0000000600)={[{@fat=@errors_continue}, {}, {@fat=@dmask={'dmask', 0x3d, 0x31}}, {@nodots}]}, 0x1, 0x29b, &(0x7f0000000340)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='net_prio.prioidx\x00', 0x275a, 0x0)

5m30.987404389s ago: executing program 3 (id=870):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @remote}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66)

5m30.703907471s ago: executing program 32 (id=870):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @remote}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66)

2m0.803648353s ago: executing program 4 (id=1543):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffdfe})
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000002100)={0x0, 0x0, 0x0, @raw})

2m0.466792617s ago: executing program 4 (id=1544):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8)

2m0.244051557s ago: executing program 4 (id=1547):
syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
socket(0x2, 0x3, 0xff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x3, 0x288501)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x2)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x3)
lgetxattr(0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000)

1m58.706393293s ago: executing program 4 (id=1554):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
open$dir(&(0x7f0000000000)='./file0/file2\x00', 0x2, 0xa1)

1m56.898941651s ago: executing program 4 (id=1559):
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f00000005c0)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="2012d2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m53.729602907s ago: executing program 4 (id=1571):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r1, 0x5, 0x70b525, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4)

1m53.466537458s ago: executing program 33 (id=1571):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r1, 0x5, 0x70b525, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4)

1m37.159890618s ago: executing program 2 (id=1607):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14415}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000)

1m36.201799239s ago: executing program 2 (id=1612):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000100)={[{@grpquota}, {@bsdgroups}]}, 0xff, 0x9882, &(0x7f000001c800)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0)
readahead(r0, 0x100000000, 0xc5)

1m35.247104831s ago: executing program 5 (id=1619):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b000"], 0x1b0}}], 0x1, 0x4)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

1m34.921684814s ago: executing program 5 (id=1620):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)=0x7)

1m34.585488519s ago: executing program 5 (id=1622):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xeeef0000, 0x8080000, 0xf000, 0x9, 0x80, 0xf0, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x9, 0x3, 0x3, 0x7, 0x6, 0x5, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0xeeee8000, 0x0, 0x8, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xeeef0000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0x10, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0x1000, 0xf, 0xe, 0x0, 0x40, 0xff, 0x0, 0x7f, 0x9, 0xf, 0x8}, {0x100000, 0x5}, {0x2, 0xff81}, 0x0, 0x0, 0x6000, 0x1a1, 0x3, 0xe801, 0x8000900, 0x0, [0xb, 0x2, 0x3, 0x1be]})

1m34.293060711s ago: executing program 5 (id=1624):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
open$dir(&(0x7f0000000000)='./file0/file2\x00', 0x2, 0xa1)

1m33.871577159s ago: executing program 5 (id=1626):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0)

1m33.773671224s ago: executing program 2 (id=1627):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x27dfdbfa, {0x0, 0x0, 0x0, r2, 0x280d3, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6}}}}]}, 0x40}}, 0x0)

1m31.731617272s ago: executing program 5 (id=1634):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0x8000, &(0x7f00000002c0), 0xff, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0xc17a)

1m31.585566538s ago: executing program 2 (id=1636):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
open$dir(&(0x7f0000000000)='./file0/file2\x00', 0x2, 0xa1)

1m31.145882577s ago: executing program 34 (id=1634):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0x8000, &(0x7f00000002c0), 0xff, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0xc17a)

1m30.938641175s ago: executing program 2 (id=1639):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)

1m27.263722883s ago: executing program 2 (id=1646):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000040))

1m26.8882533s ago: executing program 35 (id=1646):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000040))

7.432521131s ago: executing program 7 (id=2019):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x9, 0x30, 0x8, 0x7}, &(0x7f0000000180)=0x18)

6.803389068s ago: executing program 7 (id=2024):
timer_create(0x0, &(0x7f0000001040)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
lstat(0x0, 0x0)

6.421851964s ago: executing program 8 (id=2028):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001)
r1 = fcntl$dupfd(r0, 0x0, r0)
read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="320000000400000004"], 0x32)

5.381534039s ago: executing program 8 (id=2032):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x4, 0x5}, 0x90)

5.258336234s ago: executing program 1 (id=2033):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e)
syz_emit_ethernet(0x46, &(0x7f0000000040)={@random="99177fa54f29", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)

5.089310611s ago: executing program 1 (id=2034):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x121400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x40080)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})

4.735832457s ago: executing program 1 (id=2036):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xb, @loopback, 0x2008004}, {0xa, 0x4e20, 0x863e, @private2, 0x10dd}, r1, 0x7ff}}, 0x48)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10)
close(r0)

4.630278021s ago: executing program 8 (id=2037):
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)

4.365171372s ago: executing program 1 (id=2039):
syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
socket(0x2, 0x3, 0xff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x3, 0x288501)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x3)
lgetxattr(0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000)

4.350105883s ago: executing program 8 (id=2040):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x20, 0x1, 0x2, 0xfffff034}, {0x6}]}, 0x10)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080))

4.151346672s ago: executing program 0 (id=2041):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x2)

3.828633965s ago: executing program 6 (id=2042):
epoll_create(0xeed)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000332}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x47, &(0x7f0000000240)=[{&(0x7f0000000900)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x47ba, 0x1595, 0x0, 0x0, 0x0)

3.827792415s ago: executing program 8 (id=2043):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000200)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

3.777533728s ago: executing program 0 (id=2044):
syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
socket(0x2, 0x3, 0xff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x3, 0x288501)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x3)
lgetxattr(0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000)

3.584501956s ago: executing program 7 (id=2045):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0)

3.537222088s ago: executing program 6 (id=2046):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

2.970326862s ago: executing program 1 (id=2047):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file3\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.swap.current\x00', 0x275a, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file3\x00', 0x0, 0x0, 0x0, 0x2)

2.651152096s ago: executing program 0 (id=2048):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ed0301000000000000fa3efc83"], 0x28}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006f02"])

2.290476001s ago: executing program 6 (id=2049):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00')
r1 = fanotify_init(0x4, 0x2)
fanotify_mark(r1, 0x1, 0x8000039, r0, 0x0)
io_setup(0x9, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r0, 0x0}])

2.178896476s ago: executing program 0 (id=2050):
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x208, &(0x7f0000000300)="$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")
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x99d895ac8a019fd5)
fcntl$notify(r0, 0x402, 0x8000003d)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x60)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000080))

1.985711895s ago: executing program 7 (id=2051):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d})
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

1.759497984s ago: executing program 6 (id=2052):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, 0x0)

1.754788875s ago: executing program 0 (id=2053):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@uid}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@gid}, {@type={'type', 0x3d, "9d119198"}}, {@codepage={'codepage', 0x3d, 'cp950'}}, {}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x4, 0x337, &(0x7f0000000540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x8c0010, 0x0)

1.605661881s ago: executing program 1 (id=2054):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x580, &(0x7f0000000a40)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0)

1.271593295s ago: executing program 8 (id=2055):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

1.256051836s ago: executing program 0 (id=2056):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0x0, 0x6}}, 0x28)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

1.255330906s ago: executing program 7 (id=2057):
syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
socket(0x2, 0x3, 0xff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x3, 0x288501)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x3)
lgetxattr(0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000)

1.125366582s ago: executing program 6 (id=2058):
syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
socket(0x2, 0x3, 0xff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x3, 0x288501)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x3)
lgetxattr(0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000)

25.352939ms ago: executing program 7 (id=2059):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
readv(r0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

0s ago: executing program 6 (id=2060):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006})

kernel console output (not intermixed with test programs):

omm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  600.817369][ T4271] EXT4-fs (loop4): Remounting filesystem read-only
[  600.838849][ T4271] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  600.877940][ T4271] EXT4-fs error (device loop4): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /289/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  600.936332][T10155] loop5: detected capacity change from 0 to 32768
[  600.944045][ T4271] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  600.967672][ T7548] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  600.983761][T10155] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  600.988556][ T4271] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  601.043250][ T4271] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  601.081343][ T4271] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  601.186273][ T4271] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  601.201215][ T7548] usb 2-1: Using ep0 maxpacket: 8
[  601.217660][ T7548] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  601.267100][ T7548] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  601.284535][ T4271] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  601.295494][ T7548] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  601.366185][T10171] rdma_rxe: rxe_register_device failed with error -23
[  601.373581][T10171] rdma_rxe: failed to add vxcan1
[  601.468616][ T4271] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  601.602992][ T7548] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  601.887584][ T7548] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  601.987735][ T7548] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  602.101086][ T7548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.192368][T10177] loop0: detected capacity change from 0 to 512
[  602.200171][ T7048] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  602.250101][T10177] EXT4-fs (loop0): filesystem is read-only
[  602.288384][T10177] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  602.345086][T10177] EXT4-fs (loop0): filesystem is read-only
[  602.373549][T10177] EXT4-fs (loop0): orphan cleanup on readonly fs
[  602.396569][ T7548] usb 2-1: GET_CAPABILITIES returned 0
[  602.403668][ T7548] usbtmc 2-1:16.0: can't read capabilities
[  602.414071][T10177] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #16: comm syz.0.1568: iget: bad i_size value: -504403158265486552
[  602.458037][T10177] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1568: couldn't read orphan inode 16 (err -117)
[  602.509342][T10177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  602.722839][  T951] usb 2-1: USB disconnect, device number 15
[  602.800317][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  602.856276][T10175] loop2: detected capacity change from 0 to 32768
[  603.025203][T10180] loop5: detected capacity change from 0 to 8192
[  603.085147][T10180] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  603.133243][ T4648] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.197652][T10180] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  603.207725][T10180] REISERFS (device loop5): using ordered data mode
[  603.214338][T10180] reiserfs: using flush barriers
[  603.282947][T10180] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  603.328030][T10180] REISERFS (device loop5): checking transaction log (loop5)
[  603.349338][T10180] REISERFS (device loop5): Using r5 hash to sort names
[  603.373399][T10180] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  603.453186][T10180] REISERFS warning (device loop5): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=219086884, len=9 - odd
[  603.504056][ T4648] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.723336][T10186] loop1: detected capacity change from 0 to 8192
[  603.779499][ T4648] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.823884][T10186] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  603.857638][T10186] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  603.867013][T10186] REISERFS (device loop1): using ordered data mode
[  603.941374][T10186] reiserfs: using flush barriers
[  604.022468][T10186] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  604.113650][ T4648] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.128084][T10186] REISERFS (device loop1): checking transaction log (loop1)
[  604.179403][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  604.179649][T10186] REISERFS (device loop1): Using r5 hash to sort names
[  604.194135][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  604.205347][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  604.214257][T10186] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  604.233675][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  604.241572][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  604.257900][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  604.392892][T10182] loop0: detected capacity change from 0 to 32768
[  604.506550][T10192] vxcan1 speed is unknown, defaulting to 1000
[  604.695901][T10182] XFS (loop0): Mounting V5 Filesystem
[  605.168934][T10213] rdma_rxe: already configured on vxcan1
[  605.622409][T10182] XFS (loop0): Ending clean mount
[  605.811758][T10218] loop1: detected capacity change from 0 to 1024
[  605.857107][T10210] rdma_rxe: rxe_register_device failed with error -23
[  605.864585][T10210] rdma_rxe: failed to add vxcan1
[  606.009693][ T4276] XFS (loop0): Unmounting Filesystem
[  606.349606][ T4275] Bluetooth: hci1: command 0x0409 tx timeout
[  607.028173][T10234] loop1: detected capacity change from 0 to 1024
[  607.088458][T10216] loop2: detected capacity change from 0 to 32768
[  607.996139][   T26] audit: type=1326 audit(1763650499.346:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.1.1583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff27e58f749 code=0x0
[  608.039613][T10216] XFS (loop2): Mounting V5 Filesystem
[  608.126401][T10192] chnl_net:caif_netlink_parms(): no params data found
[  608.163428][T10216] XFS (loop2): Ending clean mount
[  608.397517][ T4272] Bluetooth: hci1: command 0x041b tx timeout
[  608.433592][T10256] loop1: detected capacity change from 0 to 1024
[  608.468638][ T4280] XFS (loop2): Unmounting Filesystem
[  608.826626][T10248] loop5: detected capacity change from 0 to 32768
[  608.931841][T10248] XFS (loop5): Mounting V5 Filesystem
[  609.709880][T10248] XFS (loop5): Ending clean mount
[  609.992067][T10192] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.028682][T10192] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.075990][T10192] device bridge_slave_0 entered promiscuous mode
[  610.085146][T10277] loop1: detected capacity change from 0 to 512
[  610.101103][ T7437] XFS (loop5): Unmounting Filesystem
[  610.289280][T10281] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  610.315962][T10281] FAT-fs (loop1): Filesystem has been set read-only
[  610.477510][ T4272] Bluetooth: hci1: command 0x040f tx timeout
[  610.588079][T10284] rdma_rxe: rxe_register_device failed with error -23
[  610.595404][T10284] rdma_rxe: failed to add vxcan1
[  610.770969][T10192] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.810651][T10192] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.988949][T10192] device bridge_slave_1 entered promiscuous mode
[  611.283020][T10286] loop1: detected capacity change from 0 to 1024
[  611.375259][T10192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  612.048093][T10192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  612.325123][T10192] team0: Port device team_slave_0 added
[  612.520667][T10282] loop2: detected capacity change from 0 to 32768
[  612.557524][ T4272] Bluetooth: hci1: command 0x0419 tx timeout
[  612.676164][T10297] ipt_CLUSTERIP: Please specify destination IP
[  612.677301][T10282] XFS (loop2): Mounting V5 Filesystem
[  612.701694][T10192] team0: Port device team_slave_1 added
[  612.848588][T10282] XFS (loop2): Ending clean mount
[  612.961118][T10192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  612.987458][T10192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  613.108599][ T4280] XFS (loop2): Unmounting Filesystem
[  613.115061][T10192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  613.168811][T10192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  613.175831][T10192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  613.306780][T10290] loop0: detected capacity change from 0 to 32768
[  613.337846][T10192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  613.397312][T10290] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  613.558813][ T4648] device hsr_slave_0 left promiscuous mode
[  613.587195][ T4648] device hsr_slave_1 left promiscuous mode
[  613.648257][ T4648] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  613.655902][ T4648] batman_adv: batadv0: Removing interface: batadv_slave_0
[  613.727652][ T4648] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  613.735139][ T4648] batman_adv: batadv0: Removing interface: batadv_slave_1
[  613.808387][ T4648] device bridge_slave_1 left promiscuous mode
[  613.826159][T10295] loop5: detected capacity change from 0 to 40427
[  613.842709][ T4648] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.865304][T10295] F2FS-fs (loop5): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  613.877309][ T7048] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  613.894983][T10295] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  613.905091][ T4648] device bridge_slave_0 left promiscuous mode
[  613.927973][ T4648] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.946568][T10295] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7
[  613.985034][T10295] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff
[  614.041193][T10295] F2FS-fs (loop5): invalid crc value
[  614.106448][T10295] F2FS-fs (loop5): Found nat_bits in checkpoint
[  614.118269][ T4648] device veth1_macvtap left promiscuous mode
[  614.155260][ T4648] device veth0_macvtap left promiscuous mode
[  614.196719][ T4648] device veth1_vlan left promiscuous mode
[  614.237207][ T4648] device veth0_vlan left promiscuous mode
[  614.311540][T10295] F2FS-fs (loop5): Start checkpoint disabled!
[  614.376745][T10295] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  614.398163][T10295] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  614.545289][T10295] syz.5.1590: attempt to access beyond end of device
[  614.545289][T10295] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  614.848390][ T4345] kworker/u4:5: attempt to access beyond end of device
[  614.848390][ T4345] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  615.015274][T10320] loop2: detected capacity change from 0 to 32768
[  616.286944][   T26] audit: type=1326 audit(1763650507.486:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10326 comm="syz.2.1598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab5b98f749 code=0x0
[  616.985113][ T5666] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  617.085715][T10332] loop2: detected capacity change from 0 to 40427
[  617.125442][T10332] F2FS-fs (loop2): invalid crc value
[  617.202977][ T5666] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  617.240693][ T5666] usb 6-1: config 0 has no interface number 0
[  617.248581][T10332] F2FS-fs (loop2): Found nat_bits in checkpoint
[  617.250213][T10341] loop1: detected capacity change from 0 to 128
[  617.277906][ T5666] usb 6-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  617.297122][T10341] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  617.307741][ T5666] usb 6-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0
[  617.337703][ T5666] usb 6-1: config 0 interface 85 has no altsetting 0
[  617.344523][ T5666] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00
[  617.345388][T10341] hpfs: filesystem error: improperly stopped
[  617.369800][ T5666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.379830][T10341] 
[  617.386348][T10341] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  617.394630][T10332] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  617.402272][T10341] hpfs: You really don't want any checks? You are crazy...
[  617.402669][T10341] hpfs: hpfs_map_sector(): read error
[  617.412081][ T5666] usb 6-1: config 0 descriptor??
[  617.424973][T10341] hpfs: code page support is disabled
[  617.434226][T10341] hpfs: hpfs_map_4sectors(): unaligned read
[  617.459598][T10341] hpfs: hpfs_map_4sectors(): unaligned read
[  617.465688][T10341] hpfs: filesystem error: unable to find root dir
[  617.556292][   T26] audit: type=1800 audit(1763650509.446:94): pid=10332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1599" name="bus" dev="loop2" ino=10 res=0 errno=0
[  617.581293][T10341] hpfs: hpfs_map_4sectors(): unaligned read
[  617.613541][T10341] hpfs: hpfs_map_sector(): read error
[  617.647614][   T26] audit: type=1804 audit(1763650509.506:95): pid=10332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1599" name="/newroot/325/file0/bus" dev="loop2" ino=10 res=1 errno=0
[  617.705813][ T4280] syz-executor: attempt to access beyond end of device
[  617.705813][ T4280] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  617.824013][T10344] loop1: detected capacity change from 0 to 1024
[  617.837206][ T4648] team0 (unregistering): Port device team_slave_1 removed
[  617.884458][ T5666] hid-led 0003:1D34:0004.0012: unknown main item tag 0x0
[  617.921864][ T5666] hid-led 0003:1D34:0004.0012: unknown main item tag 0x0
[  617.921869][T10344] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  617.938761][ T5666] hid-led 0003:1D34:0004.0012: unknown main item tag 0x0
[  617.945902][ T5666] hid-led 0003:1D34:0004.0012: unknown main item tag 0x0
[  617.953146][ T5666] hid-led 0003:1D34:0004.0012: unknown main item tag 0x0
[  617.960442][ T5666] hid-led 0003:1D34:0004.0012: unknown main item tag 0x0
[  617.968306][ T5666] hid-led 0003:1D34:0004.0012: unknown main item tag 0x0
[  618.005333][T10348] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  618.078349][ T4648] team0 (unregistering): Port device team_slave_0 removed
[  618.093232][ T5666] hid-led 0003:1D34:0004.0012: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.5-1/input85
[  618.149277][ T5666] hid-led 0003:1D34:0004.0012: Dream Cheeky Webmail Notifier initialized
[  618.212232][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  618.342870][ T5666] usb 6-1: USB disconnect, device number 7
[  618.348671][T10353] loop1: detected capacity change from 0 to 512
[  618.351224][ T4648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  618.412079][T10349] fido_id[10349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  618.432456][T10353] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  618.478536][ T4648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  618.491299][T10353] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1604: inode has both inline data and extents flags
[  618.516878][T10353] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1604: couldn't read orphan inode 15 (err -117)
[  618.535976][T10353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  618.600281][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  619.401702][ T4648] bond0 (unregistering): Released all slaves
[  619.490553][T10318] sch_fq: defrate 0 ignored.
[  619.650770][T10192] device hsr_slave_0 entered promiscuous mode
[  619.684589][T10192] device hsr_slave_1 entered promiscuous mode
[  619.828688][T10369] loop5: detected capacity change from 0 to 8
[  619.936140][T10362] device netdevsim0 entered promiscuous mode
[  619.997229][T10366] loop0: detected capacity change from 0 to 8192
[  620.026475][T10362] device netdevsim0 left promiscuous mode
[  620.044358][T10366] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  620.060343][T10369] SQUASHFS error: xz decompression failed, data probably corrupt
[  620.095903][T10366] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  620.107124][T10366] REISERFS (device loop0): using ordered data mode
[  620.115612][T10366] reiserfs: using flush barriers
[  620.165191][T10369] SQUASHFS error: Failed to read block 0xa8: -5
[  620.182671][T10366] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  620.297732][T10369] SQUASHFS error: xz decompression failed, data probably corrupt
[  620.305597][T10369] SQUASHFS error: Failed to read block 0xa8: -5
[  620.317910][T10366] REISERFS (device loop0): checking transaction log (loop0)
[  620.355544][T10366] REISERFS (device loop0): Using r5 hash to sort names
[  620.397927][T10366] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  620.430893][   T26] audit: type=1800 audit(1763650512.326:96): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1608" name="file0" dev="loop5" ino=3 res=0 errno=0
[  620.783107][T10384] loop5: detected capacity change from 0 to 136
[  620.841949][T10386] loop1: detected capacity change from 0 to 16
[  620.855479][T10192] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  620.887856][T10386] erofs: (device loop1): mounted with root inode @ nid 36.
[  620.953762][T10192] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  620.991011][T10386] overlayfs: failed to get redirect (-117)
[  621.023159][T10192] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  621.065842][T10192] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  621.566489][T10407] loop0: detected capacity change from 0 to 512
[  621.592631][T10192] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.635650][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  621.654838][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  621.689350][T10192] 8021q: adding VLAN 0 to HW filter on device team0
[  621.703317][T10407] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1618: inode has both inline data and extents flags
[  621.724036][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  621.761701][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  621.827956][T10407] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1618: couldn't read orphan inode 15 (err -117)
[  621.849523][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.858592][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.880388][T10407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  621.916711][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  621.950517][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  621.998425][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.005618][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  622.070675][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  622.076668][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  622.110379][T10382] loop2: detected capacity change from 0 to 32768
[  622.125789][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  622.174600][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  622.257553][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  622.301326][T10382] XFS (loop2): Mounting V5 Filesystem
[  622.325857][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  622.334458][T10425] loop0: detected capacity change from 0 to 1024
[  622.356595][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  622.461586][T10433] loop5: detected capacity change from 0 to 1024
[  622.471383][T10433] EXT4-fs: Ignoring removed bh option
[  622.488049][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  622.521285][T10433] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  622.531509][T10382] XFS (loop2): Ending clean mount
[  622.545140][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  622.556993][T10382] XFS (loop2): Quotacheck needed: Please wait.
[  622.567335][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  622.623165][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  622.666188][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  622.667482][T10382] XFS (loop2): Quotacheck: Done.
[  622.708865][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  622.784072][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  622.883929][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'.
[  622.897131][ T7437] EXT4-fs error (device loop5): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /138/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  622.920804][ T4280] XFS (loop2): Unmounting Filesystem
[  622.960230][ T7437] EXT4-fs (loop5): Remounting filesystem read-only
[  622.987944][ T7437] EXT4-fs error (device loop5): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /138/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  623.056386][ T7437] EXT4-fs (loop5): Remounting filesystem read-only
[  623.090061][ T7437] EXT4-fs error (device loop5): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  623.122339][ T7437] EXT4-fs (loop5): Remounting filesystem read-only
[  623.136243][ T7437] EXT4-fs warning (device loop5): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  623.166623][ T7437] EXT4-fs error (device loop5): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /138/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  623.232954][ T7437] EXT4-fs (loop5): Remounting filesystem read-only
[  623.245219][ T7437] EXT4-fs error (device loop5): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /138/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  623.287462][ T7437] EXT4-fs (loop5): Remounting filesystem read-only
[  623.294485][ T7437] EXT4-fs error (device loop5): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  623.352366][ T7437] EXT4-fs (loop5): Remounting filesystem read-only
[  623.387761][ T7437] EXT4-fs warning (device loop5): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  623.408331][ T7437] EXT4-fs error (device loop5): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /138/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  623.445366][T10454] loop1: detected capacity change from 0 to 512
[  623.455958][ T7437] EXT4-fs (loop5): Remounting filesystem read-only
[  623.479511][T10454] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  623.498563][ T7437] EXT4-fs error (device loop5): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /138/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  623.541314][T10454] EXT4-fs (loop1): 1 truncate cleaned up
[  623.547048][T10454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  623.569107][ T7437] EXT4-fs (loop5): Remounting filesystem read-only
[  623.576005][ T7437] EXT4-fs error (device loop5): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  623.604474][ T7437] EXT4-fs (loop5): Remounting filesystem read-only
[  623.610182][T10454] EXT4-fs (loop1): shut down requested (2)
[  623.611826][ T7437] EXT4-fs warning (device loop5): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  623.631601][ T7437] EXT4-fs error (device loop5): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /138/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  623.680986][ T7437] EXT4-fs warning (device loop5): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  623.722445][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  623.736474][ T7437] EXT4-fs warning (device loop5): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  623.736980][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  623.766895][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  623.776288][T10192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  623.798187][ T7437] EXT4-fs warning (device loop5): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  623.877780][ T7437] EXT4-fs warning (device loop5): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  623.928766][ T7437] EXT4-fs warning (device loop5): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  623.982002][ T7437] EXT4-fs warning (device loop5): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  624.058214][ T7437] EXT4-fs warning (device loop5): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  624.404885][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  624.411315][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  624.716524][T10464] loop1: detected capacity change from 0 to 32768
[  624.760578][T10464] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  625.231469][ T4385] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.275081][ T5212] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  625.301708][T10484] loop2: detected capacity change from 0 to 1024
[  625.373460][T10484] EXT4-fs: Ignoring removed bh option
[  625.494187][T10484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  625.620130][ T4385] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.729944][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  625.758817][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  625.808988][ T4280] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /330/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  625.872590][T10470] loop0: detected capacity change from 0 to 40427
[  625.887199][ T4385] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.907682][ T4280] EXT4-fs (loop2): Remounting filesystem read-only
[  625.917748][T10470] F2FS-fs (loop0): Invalid log blocks per segment (4278190089)
[  625.932177][ T4280] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /330/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  625.942443][T10470] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  625.994673][T10470] F2FS-fs (loop0): invalid crc value
[  626.000020][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  626.001307][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  626.038184][ T4280] EXT4-fs (loop2): Remounting filesystem read-only
[  626.054765][ T4280] EXT4-fs error (device loop2): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  626.096947][T10470] F2FS-fs (loop0): Found nat_bits in checkpoint
[  626.112600][ T4280] EXT4-fs (loop2): Remounting filesystem read-only
[  626.115667][ T4385] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.126404][ T4280] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  626.177046][T10192] device veth0_vlan entered promiscuous mode
[  626.188568][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  626.208422][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  626.227847][ T4280] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /330/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  626.256644][T10192] device veth1_vlan entered promiscuous mode
[  626.329015][T10470] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  626.336127][T10470] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  626.345800][ T4280] EXT4-fs (loop2): Remounting filesystem read-only
[  626.372936][ T4280] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /330/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  626.395665][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  626.413250][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  626.447981][ T4280] EXT4-fs (loop2): Remounting filesystem read-only
[  626.451980][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  626.454871][ T4280] EXT4-fs error (device loop2): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  626.513576][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  626.536585][T10470] F2FS-fs (loop0): Corrupted max_depth of 3: 255
[  626.563214][T10470] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  626.581135][T10192] device veth0_macvtap entered promiscuous mode
[  626.593579][ T4280] EXT4-fs (loop2): Remounting filesystem read-only
[  626.603755][T10192] device veth1_macvtap entered promiscuous mode
[  626.619566][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  626.623419][ T4280] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  626.665159][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  626.675249][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  626.683484][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  626.688302][ T4280] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /330/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  626.714190][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  626.723652][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  626.732019][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.772044][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.783102][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.793858][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.804713][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.815632][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.832844][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  626.844345][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.856215][T10192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  626.873340][ T4280] EXT4-fs (loop2): Remounting filesystem read-only
[  626.932107][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  626.964255][ T4280] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /330/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  626.993506][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  627.028866][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  627.038990][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  627.058834][ T4280] EXT4-fs (loop2): Remounting filesystem read-only
[  627.063220][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  627.076450][ T4280] EXT4-fs error (device loop2): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  627.107629][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  627.149954][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  627.149974][ T4280] EXT4-fs (loop2): Remounting filesystem read-only
[  627.149990][ T4280] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  627.177680][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  627.222526][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  627.225401][ T4280] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /330/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  627.247828][T10513] loop1: detected capacity change from 0 to 1024
[  627.282645][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  627.307045][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  627.334951][ T4280] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  627.337175][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  627.399417][ T4280] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  627.409635][T10192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  627.462427][T10502] vxcan1 speed is unknown, defaulting to 1000
[  627.470616][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  627.490091][ T4280] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  627.531439][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  627.579143][ T4280] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  627.619035][T10192] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  627.645589][ T4280] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  627.658778][T10192] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  627.692760][T10192] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  627.745743][T10192] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  627.759469][ T4280] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  627.812475][ T4280] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  628.915454][   T26] audit: type=1326 audit(1763650520.426:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10512 comm="syz.1.1642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff27e58f749 code=0x0
[  628.946887][ T4277] Bluetooth: hci2: command 0x0409 tx timeout
[  629.467699][ T4713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  629.476102][ T4713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  629.686544][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  629.881929][T10549] loop1: detected capacity change from 0 to 8
[  629.893659][ T4713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  629.914529][T10549] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  629.920734][ T4713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  629.936139][ T5212] udevd[5212]: incorrect cramfs checksum on /dev/loop1
[  630.002924][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  630.308276][T10556] loop6: detected capacity change from 0 to 128
[  630.311409][T10502] chnl_net:caif_netlink_parms(): no params data found
[  630.316574][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'.
[  630.408513][T10556] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  630.437129][T10556] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  630.764002][T10548] loop0: detected capacity change from 0 to 32768
[  630.819147][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  630.833918][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  630.843754][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  630.855756][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  630.863698][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  630.873235][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  630.922525][T10548] XFS (loop0): Mounting V5 Filesystem
[  630.957714][ T4277] Bluetooth: hci2: command 0x041b tx timeout
[  630.977560][  T951] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  631.040197][T10548] XFS (loop0): Ending clean mount
[  631.072142][T10548] XFS (loop0): Quotacheck needed: Please wait.
[  631.137897][T10548] XFS (loop0): Quotacheck: Done.
[  631.191779][  T951] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  631.212036][  T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.240950][T10502] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.242331][  T951] usb 2-1: Product: syz
[  631.260177][T10502] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.277708][  T951] usb 2-1: Manufacturer: syz
[  631.282046][T10502] device bridge_slave_0 entered promiscuous mode
[  631.288207][  T951] usb 2-1: SerialNumber: syz
[  631.301645][T10192] EXT4-fs (loop6): unmounting filesystem.
[  631.311691][T10565] vxcan1 speed is unknown, defaulting to 1000
[  631.314762][  T951] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  631.353589][T10502] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.371444][T10502] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.394578][T10502] device bridge_slave_1 entered promiscuous mode
[  631.411898][ T4276] XFS (loop0): Unmounting Filesystem
[  631.658375][  T951] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  631.907712][ T5666] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  632.012364][T10502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  632.039293][T10502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  632.117612][ T5666] usb 7-1: Using ep0 maxpacket: 16
[  632.124603][ T5666] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  632.151734][ T5666] usb 7-1: config 0 has no interface number 0
[  632.166957][ T5666] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  632.185813][ T5666] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  632.213883][ T4385] device hsr_slave_0 left promiscuous mode
[  632.222392][ T4385] device hsr_slave_1 left promiscuous mode
[  632.227166][ T5666] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  632.244256][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  632.246351][ T5666] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  632.274993][ T5666] usb 7-1: Product: syz
[  632.279646][ T5666] usb 7-1: SerialNumber: syz
[  632.282971][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0
[  632.287178][ T5666] usb 7-1: config 0 descriptor??
[  632.325750][ T5666] cm109 7-1:0.8: invalid payload size 0, expected 4
[  632.336898][ T4901] usb 2-1: USB disconnect, device number 16
[  632.348021][ T5666] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input13
[  632.360611][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  632.378148][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1
[  632.387075][ T4385] device bridge_slave_1 left promiscuous mode
[  632.395804][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.426610][ T4385] device bridge_slave_0 left promiscuous mode
[  632.427822][T10594] loop0: detected capacity change from 0 to 64
[  632.472395][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.522672][ T4385] device veth1_macvtap left promiscuous mode
[  632.573597][ T4385] device veth0_macvtap left promiscuous mode
[  632.600445][ T4385] device veth1_vlan left promiscuous mode
[  632.606346][ T4385] device veth0_vlan left promiscuous mode
[  632.630457][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  632.631019][ T4898] usb 7-1: USB disconnect, device number 2
[  632.637956][    C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  632.669429][ T4898] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  632.957565][  T951] usb 2-1: Service connection timeout for: 256
[  632.963801][  T951] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  632.972102][ T4277] Bluetooth: hci4: command 0x0409 tx timeout
[  632.972617][T10598] loop1: detected capacity change from 0 to 2048
[  632.987109][  T951] ath9k_htc: Failed to initialize the device
[  632.996284][ T4901] usb 2-1: ath9k_htc: USB layer deinitialized
[  633.049612][ T4277] Bluetooth: hci2: command 0x040f tx timeout
[  633.065960][T10598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  633.112669][T10598] EXT4-fs: Cannot specify journal on remount
[  633.321389][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  633.553758][T10608] loop1: detected capacity change from 0 to 1024
[  634.739230][ T4385] team0 (unregistering): Port device team_slave_1 removed
[  634.857783][ T4385] team0 (unregistering): Port device team_slave_0 removed
[  634.872700][T10616] rdma_rxe: rxe_register_device failed with error -23
[  634.912561][T10616] rdma_rxe: failed to add vxcan1
[  634.994541][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  635.037735][ T4277] Bluetooth: hci4: command 0x041b tx timeout
[  635.117656][ T4277] Bluetooth: hci2: command 0x0419 tx timeout
[  635.200044][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  636.011935][T10623] loop6: detected capacity change from 0 to 1024
[  637.027196][   T26] audit: type=1326 audit(1763650528.226:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.6.1664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d498f749 code=0x0
[  637.117623][ T4277] Bluetooth: hci4: command 0x040f tx timeout
[  637.454182][ T4385] bond0 (unregistering): Released all slaves
[  637.591214][T10502] team0: Port device team_slave_0 added
[  637.662413][T10502] team0: Port device team_slave_1 added
[  637.886504][T10632] loop6: detected capacity change from 0 to 32768
[  637.920972][T10639] loop0: detected capacity change from 0 to 1024
[  637.963924][T10502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  637.971579][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  637.998215][T10502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  638.052994][T10502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  638.064574][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  638.099910][T10502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  638.474288][T10502] device hsr_slave_0 entered promiscuous mode
[  638.621903][T10502] device hsr_slave_1 entered promiscuous mode
[  638.663311][T10502] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  638.710838][T10502] Cannot create hsr debugfs directory
[  638.855027][T10565] chnl_net:caif_netlink_parms(): no params data found
[  639.074944][T10653] loop0: detected capacity change from 0 to 1024
[  639.103920][T10655] loop1: detected capacity change from 0 to 64
[  639.138561][ T5212] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  639.183182][T10655] hfs: unable to locate alternate MDB
[  639.189032][T10655] hfs: continuing without an alternate MDB
[  639.197936][ T4277] Bluetooth: hci4: command 0x0419 tx timeout
[  639.269737][T10655] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  640.543521][T10678] loop1: detected capacity change from 0 to 128
[  641.232855][T10565] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.251223][T10565] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.261880][T10565] device bridge_slave_0 entered promiscuous mode
[  641.281309][T10565] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.319985][T10565] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.361289][T10565] device bridge_slave_1 entered promiscuous mode
[  641.413891][T10502] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  641.471464][T10692] loop6: detected capacity change from 0 to 1024
[  641.697992][T10502] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  641.726807][T10565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  642.213153][T10695] loop0: detected capacity change from 0 to 1024
[  642.289286][T10565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  642.536536][T10502] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  642.578202][T10695] hfsplus: found bad thread record in catalog
[  642.584836][T10695] hfsplus: catalog searching failed
[  642.725551][ T4580] hfsplus: found bad thread record in catalog
[  642.737862][ T4385] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.753654][ T4580] hfsplus: found bad thread record in catalog
[  642.772950][T10502] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  642.819507][T10565] team0: Port device team_slave_0 added
[  642.892364][T10565] team0: Port device team_slave_1 added
[  642.946183][ T4385] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.069145][T10565] batman_adv: batadv0: Adding interface: batadv_slave_0
[  643.076258][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  643.171713][T10565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  643.242344][ T4385] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.276458][T10702] loop1: detected capacity change from 0 to 32768
[  643.299240][T10565] batman_adv: batadv0: Adding interface: batadv_slave_1
[  643.306345][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  643.391164][T10702] XFS (loop1): Mounting V5 Filesystem
[  643.398839][T10565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.481636][T10700] loop6: detected capacity change from 0 to 32768
[  643.513940][T10700] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  643.556674][ T4385] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.583666][T10700] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  643.605226][T10702] XFS (loop1): Ending clean mount
[  643.653043][T10724] loop0: detected capacity change from 0 to 512
[  643.686921][T10700] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[  643.708020][   T26] audit: type=1800 audit(1763650535.606:99): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1685" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  643.773556][T10565] device hsr_slave_0 entered promiscuous mode
[  643.796339][T10565] device hsr_slave_1 entered promiscuous mode
[  643.818573][T10724] EXT4-fs: Ignoring removed bh option
[  643.825315][T10565] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  643.833898][T10724] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  643.867665][T10565] Cannot create hsr debugfs directory
[  643.901820][T10502] 8021q: adding VLAN 0 to HW filter on device bond0
[  643.975612][T10724] EXT4-fs (loop0): 1 truncate cleaned up
[  643.985545][T10724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  644.111231][   T26] audit: type=1800 audit(1763650536.006:100): pid=10724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1688" name="file1" dev="loop0" ino=15 res=0 errno=0
[  644.143519][ T4267] XFS (loop1): Unmounting Filesystem
[  644.214789][T10700] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  644.310174][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  644.335253][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  644.434395][T10700] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[  644.449760][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  644.460167][T10502] 8021q: adding VLAN 0 to HW filter on device team0
[  644.497724][T10700] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error
[  644.497724][T10700]   inode = 12 2341
[  644.497724][T10700]   function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602
[  644.587917][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  644.605503][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  644.636795][T10700] gfs2: fsid=syz:syz.s: G:  s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  644.668167][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.675433][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  644.688515][T10700] gfs2: fsid=syz:syz.s:  H: s:SH f:H e:0 p:10700 [syz.6.1684] __gfs2_lookup+0x8c/0x260
[  644.722908][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  644.746427][T10700] gfs2: fsid=syz:syz.s:  I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[  644.782056][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  644.807723][T10700] gfs2: fsid=syz:syz.s: about to withdraw this file system
[  644.815357][T10700] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount.
[  644.824457][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  644.878386][T10700] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0
[  644.882918][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.892188][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.927975][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  644.942068][T10700] gfs2: fsid=syz:syz.s: File system withdrawn
[  644.967771][T10700] CPU: 1 PID: 10700 Comm: syz.6.1684 Not tainted syzkaller #0
[  644.975408][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  644.985522][T10700] Call Trace:
[  644.988837][T10700]  <TASK>
[  644.991791][T10700]  dump_stack_lvl+0x168/0x22e
[  644.996566][T10700]  ? kobject_uevent_env+0x35f/0x8a0
[  645.001789][T10700]  ? show_regs_print_info+0x12/0x12
[  645.007013][T10700]  ? load_image+0x3b0/0x3b0
[  645.011538][T10700]  ? kobject_uevent_env+0x35f/0x8a0
[  645.016761][T10700]  gfs2_withdraw+0x143f/0x1780
[  645.021562][T10700]  ? gfs2_lm+0x220/0x220
[  645.025830][T10700]  ? load_image+0x3b0/0x3b0
[  645.030370][T10700]  ? gfs2_consist_inode_i+0xf1/0x110
[  645.035706][T10700]  gfs2_dirent_scan+0x525/0x650
[  645.040589][T10700]  ? gfs2_dirent_search+0x7e0/0x7e0
[  645.045801][T10700]  ? gfs2_dirent_search+0x7e0/0x7e0
[  645.051019][T10700]  gfs2_dirent_search+0x2dd/0x7e0
[  645.056065][T10700]  ? gfs2_permission+0x3f1/0x4c0
[  645.061022][T10700]  ? gfs2_dir_search+0x220/0x220
[  645.065986][T10700]  ? gfs2_lookupi+0x640/0x640
[  645.070704][T10700]  gfs2_dir_search+0x49/0x220
[  645.075418][T10700]  gfs2_lookupi+0x45f/0x640
[  645.079960][T10700]  ? gfs2_lookup_simple+0xf0/0xf0
[  645.085005][T10700]  ? d_alloc_parallel+0x13e0/0x1530
[  645.090232][T10700]  ? __gfs2_lookup+0x8c/0x260
[  645.094941][T10700]  __gfs2_lookup+0x8c/0x260
[  645.099460][T10700]  ? lockdep_softirqs_off+0x420/0x420
[  645.104857][T10700]  ? gfs2_atomic_open+0x210/0x210
[  645.109908][T10700]  ? __init_waitqueue_head+0xa5/0x150
[  645.115303][T10700]  __lookup_slow+0x27d/0x3a0
[  645.119926][T10700]  ? lookup_one_len+0x2c0/0x2c0
[  645.124906][T10700]  ? crc32_le_base+0x617/0xcf0
[  645.129719][T10700]  ? preempt_count_add+0x8d/0x190
[  645.134783][T10700]  ? down_read+0x1a8/0x2d0
[  645.139233][T10700]  lookup_slow+0x53/0x70
[  645.143506][T10700]  link_path_walk+0x928/0xe50
[  645.148207][T10700]  ? handle_lookup_down+0x130/0x130
[  645.153458][T10700]  path_openat+0x276/0x2e70
[  645.157993][T10700]  ? do_sys_openat2+0xcf/0x490
[  645.162787][T10700]  ? __x64_sys_openat+0x135/0x160
[  645.167852][T10700]  ? do_syscall_64+0x4c/0xa0
[  645.172491][T10700]  ? do_filp_open+0x3c0/0x3c0
[  645.177217][T10700]  do_filp_open+0x1c1/0x3c0
[  645.181744][T10700]  ? vfs_tmpfile+0x480/0x480
[  645.186384][T10700]  ? _raw_spin_unlock+0x24/0x40
[  645.191260][T10700]  ? alloc_fd+0x58f/0x630
[  645.195629][T10700]  do_sys_openat2+0x142/0x490
[  645.200347][T10700]  ? do_sys_open+0xe0/0xe0
[  645.204786][T10700]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  645.210791][T10700]  ? lock_chain_count+0x20/0x20
[  645.215665][T10700]  __x64_sys_openat+0x135/0x160
[  645.220535][T10700]  do_syscall_64+0x4c/0xa0
[  645.224965][T10700]  ? clear_bhb_loop+0x60/0xb0
[  645.229657][T10700]  ? clear_bhb_loop+0x60/0xb0
[  645.234353][T10700]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  645.240278][T10700] RIP: 0033:0x7f74d498f749
[  645.245057][T10700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  645.264690][T10700] RSP: 002b:00007f74d2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  645.273260][T10700] RAX: ffffffffffffffda RBX: 00007f74d4be5fa0 RCX: 00007f74d498f749
[  645.281258][T10700] RDX: 0000000000105042 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  645.289239][T10700] RBP: 00007f74d4a13f91 R08: 0000000000000000 R09: 0000000000000000
[  645.297219][T10700] R10: 00000000000001db R11: 0000000000000246 R12: 0000000000000000
[  645.305219][T10700] R13: 00007f74d4be6038 R14: 00007f74d4be5fa0 R15: 00007ffd621dca78
[  645.313212][T10700]  </TASK>
[  645.403743][ T4385] tipc: Left network mode
[  645.418372][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  645.444336][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  645.466044][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  645.637957][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  645.665461][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  645.698562][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  645.826711][T10502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  645.863566][T10502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  645.943863][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  645.960479][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  645.970570][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  645.979576][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  646.040471][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  646.205800][T10565] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  646.267105][T10741] loop0: detected capacity change from 0 to 40427
[  646.278894][T10753] loop1: detected capacity change from 0 to 1024
[  646.283296][T10565] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  646.345181][T10741] F2FS-fs (loop0): Found nat_bits in checkpoint
[  646.524858][T10565] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  646.603802][T10762] loop6: detected capacity change from 0 to 1024
[  646.669843][T10741] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  646.693104][ T4393] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  646.717105][T10565] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  647.818093][ T4276] syz-executor: attempt to access beyond end of device
[  647.818093][ T4276] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  648.234014][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  648.254687][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  648.396122][T10502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  648.432822][T10565] 8021q: adding VLAN 0 to HW filter on device bond0
[  648.657947][T10789] loop6: detected capacity change from 0 to 256
[  648.731586][T10791] loop0: detected capacity change from 0 to 764
[  648.741450][T10789] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  648.786770][T10791] rock: directory entry would overflow storage
[  648.825759][T10791] rock: sig=0x4654, size=5, remaining=4
[  648.876733][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  648.912365][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  648.934734][T10795] isofs: Unable to find the ".." directory for NFS.
[  648.952088][T10565] 8021q: adding VLAN 0 to HW filter on device team0
[  649.018241][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  649.027100][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  649.046830][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.054055][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  649.383930][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  649.395477][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  649.429816][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  649.444047][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.451313][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state
[  649.483124][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  649.510366][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  649.615048][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  649.660784][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  649.674922][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  649.684361][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  649.729526][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  649.760138][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  649.808266][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  649.816999][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  649.868318][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  649.880576][T10565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  649.901178][T10814] loop0: detected capacity change from 0 to 1024
[  649.958512][T10815] loop6: detected capacity change from 0 to 1024
[  651.967638][ T5955] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  652.349266][ T4385] device hsr_slave_0 left promiscuous mode
[  652.370429][ T4385] device hsr_slave_1 left promiscuous mode
[  652.395130][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  652.403114][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0
[  652.418962][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  652.426802][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1
[  652.450598][ T4385] device bridge_slave_1 left promiscuous mode
[  652.463465][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.473151][ T5955] usb 2-1: Using ep0 maxpacket: 16
[  652.483009][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  652.501185][ T5955] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  652.516557][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.526997][ T4385] device bridge_slave_0 left promiscuous mode
[  652.535422][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.543835][ T5955] usb 2-1: config 0 descriptor??
[  652.600285][ T4385] device veth1_macvtap left promiscuous mode
[  652.606390][ T4385] device veth0_macvtap left promiscuous mode
[  652.613040][ T4385] device veth1_vlan left promiscuous mode
[  652.619006][ T4385] device veth0_vlan left promiscuous mode
[  652.966118][ T5955] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  653.442264][    T7] usb 2-1: USB disconnect, device number 17
[  653.459842][ T4385] team0 (unregistering): Port device team_slave_1 removed
[  653.538611][ T4385] team0 (unregistering): Port device team_slave_0 removed
[  653.604748][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  653.672634][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  654.376473][T10838] loop1: detected capacity change from 0 to 1024
[  654.694061][ T4385] bond0 (unregistering): Released all slaves
[  654.857652][T10831] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1709'.
[  654.882656][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  654.928280][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  654.989174][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  655.000611][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  655.030804][T10502] device veth0_vlan entered promiscuous mode
[  655.129436][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  655.144027][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  655.192380][T10502] device veth1_vlan entered promiscuous mode
[  655.268518][T10847] loop0: detected capacity change from 0 to 2048
[  655.277307][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  655.298322][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  655.346880][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  655.378461][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  655.387941][T10847] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  655.410585][T10847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  655.420660][T10502] device veth0_macvtap entered promiscuous mode
[  655.433962][T10502] device veth1_macvtap entered promiscuous mode
[  655.449133][T10850] loop6: detected capacity change from 0 to 4096
[  655.513436][T10565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  655.523492][   T26] audit: type=1800 audit(1763650547.416:101): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1713" name="file1" dev="loop0" ino=1346 res=0 errno=0
[  655.576214][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  655.585505][T10850] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing.
[  655.598228][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  655.627560][T10850] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  655.689376][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  655.696948][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  655.707574][T10850] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  655.749361][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  655.763799][T10850] ntfs: volume version 3.1.
[  655.795362][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  655.838623][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  655.887678][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  655.948461][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  655.992495][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.040132][T10502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  656.078741][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  656.093599][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  656.162255][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.185387][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.199424][T10192] ntfs: (device loop6): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  656.208464][T10860] loop0: detected capacity change from 0 to 128
[  656.224337][T10860] EXT4-fs: Ignoring removed nobh option
[  656.238547][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.281134][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.340808][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.354695][T10860] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  656.377607][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.379430][T10860] ext4 filesystem being mounted at /371/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  656.389439][T10502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  656.414050][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  656.434532][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  656.490217][T10502] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  656.519440][T10867] loop6: detected capacity change from 0 to 16
[  656.554202][T10502] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  656.577761][T10867] erofs: (device loop6): mounted with root inode @ nid 36.
[  656.615599][T10502] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  656.645170][T10860] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x0e)
[  656.647629][T10502] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  656.882742][T10871] loop6: detected capacity change from 0 to 1024
[  656.900888][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.918698][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.097926][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  657.113635][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  657.939137][ T4648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.964928][ T4648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  658.049527][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  658.063221][T10881] loop6: detected capacity change from 0 to 512
[  658.089083][T10881] EXT4-fs: Ignoring removed oldalloc option
[  658.160797][T10881] EXT4-fs (loop6): 1 truncate cleaned up
[  658.166527][T10881] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  658.250984][   T26] audit: type=1326 audit(1763650550.146:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.7.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a04b8f749 code=0x7ffc0000
[  658.289342][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  658.328463][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  658.387675][   T26] audit: type=1326 audit(1763650550.176:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.7.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f1a04b8f749 code=0x7ffc0000
[  658.462248][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  658.490843][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  658.507632][   T26] audit: type=1326 audit(1763650550.176:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.7.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a04b8f749 code=0x7ffc0000
[  658.559335][T10192] EXT4-fs (loop6): unmounting filesystem.
[  658.575922][T10565] device veth0_vlan entered promiscuous mode
[  658.595877][   T26] audit: type=1326 audit(1763650550.176:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.7.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1a04b8f749 code=0x7ffc0000
[  658.599547][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  658.621075][T10896] loop1: detected capacity change from 0 to 8
[  658.733552][   T26] audit: type=1326 audit(1763650550.256:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.7.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a04b8f749 code=0x7ffc0000
[  658.741667][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  658.849746][T10565] device veth1_vlan entered promiscuous mode
[  658.964263][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  658.990291][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  659.015888][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  659.047595][    T7] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  659.067274][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  659.089432][T10565] device veth0_macvtap entered promiscuous mode
[  659.112672][T10565] device veth1_macvtap entered promiscuous mode
[  659.158804][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  659.177536][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  659.238061][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  659.256808][    T7] usb 7-1: unable to get BOS descriptor or descriptor too short
[  659.276296][    T7] usb 7-1: not running at top speed; connect to a high speed hub
[  659.306031][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  659.318141][    T7] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  659.346397][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  659.357539][    T7] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  659.377960][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  659.388271][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1732'.
[  659.389855][    T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  659.409505][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  659.421135][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  659.446183][    T7] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  659.446812][T10565] batman_adv: batadv0: Interface activated: batadv_slave_0
[  659.473959][    T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.474190][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  659.491615][    T7] usb 7-1: Product: syz
[  659.498980][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  659.503066][    T7] usb 7-1: Manufacturer: syz
[  659.508180][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  659.522902][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  659.526874][    T7] usb 7-1: SerialNumber: syz
[  659.538722][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  659.582602][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  659.637532][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  659.674251][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  659.707642][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  659.722792][T10926] loop0: detected capacity change from 0 to 1024
[  659.734110][T10928] loop7: detected capacity change from 0 to 1024
[  659.747495][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  659.790010][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  659.829188][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  659.905748][T10926] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  660.026321][    T7] usb 7-1: 0:2 : does not exist
[  660.047203][T10565] batman_adv: batadv0: Interface activated: batadv_slave_1
[  660.067698][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  660.246792][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  660.597672][    T7] usb 7-1: USB disconnect, device number 3
[  660.734076][T10565] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  660.788216][T10565] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  660.797091][T10565] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  660.820517][T10565] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  660.854537][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  661.074963][T10945] loop7: detected capacity change from 0 to 512
[  661.124365][T10945] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  661.140754][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  661.168959][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  661.180340][T10945] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  661.242988][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  661.267866][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  661.305772][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  661.384956][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  661.432415][ T4385] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  662.141047][T10970] loop8: detected capacity change from 0 to 1024
[  662.439466][T10978] loop7: detected capacity change from 0 to 1024
[  662.495226][T10954] loop1: detected capacity change from 0 to 32768
[  662.554984][T10950] loop6: detected capacity change from 0 to 32768
[  662.611383][T10954] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  662.733723][T10950] XFS (loop6): Mounting V5 Filesystem
[  663.329546][T10950] XFS (loop6): Ending clean mount
[  663.491967][T10995] loop8: detected capacity change from 0 to 1024
[  663.614973][T10999] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1748'.
[  663.721376][T10192] XFS (loop6): Unmounting Filesystem
[  663.787582][ T5955] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  663.845436][ T4393] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  663.997753][ T5955] usb 2-1: Using ep0 maxpacket: 32
[  664.017700][ T5955] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  664.046254][ T5955] usb 2-1: config 0 has no interface number 0
[  664.094226][ T5955] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  664.161377][ T5955] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  664.233231][ T5955] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  664.277462][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.312035][ T5955] usb 2-1: Product: syz
[  664.316139][T11017] device ip6gretap1 entered promiscuous mode
[  664.327981][ T5955] usb 2-1: Manufacturer: syz
[  664.332662][ T5955] usb 2-1: SerialNumber: syz
[  664.379147][ T5955] usb 2-1: config 0 descriptor??
[  664.591592][ T5955] radio-si470x 2-1:0.35: this is not a si470x device.
[  664.648937][ T5955] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  664.858791][ T5955] radio-raremono 2-1:0.35: V4L2 device registered as radio48
[  664.953117][T11035] loop6: detected capacity change from 0 to 128
[  665.015389][T11038] loop0: detected capacity change from 0 to 1024
[  665.151762][ T5955] usb 2-1: USB disconnect, device number 18
[  665.184890][ T5955] radio-raremono 2-1:0.35: Thanko's Raremono disconnected
[  666.907683][ T5666] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  666.956545][T11041] loop7: detected capacity change from 0 to 32768
[  667.097490][ T5666] usb 1-1: Using ep0 maxpacket: 8
[  667.106470][ T5666] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  667.186266][ T5666] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  667.207070][ T5666] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  667.227677][ T5666] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  667.282217][ T5666] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  667.297010][T11092] loop8: detected capacity change from 0 to 512
[  667.313812][ T5666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.346760][T11041] XFS (loop7): Mounting V5 Filesystem
[  667.458268][T11092] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  667.467729][T11092] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  667.510666][T11041] XFS (loop7): Ending clean mount
[  667.561506][ T5666] usb 1-1: GET_CAPABILITIES returned 0
[  667.567195][ T5666] usbtmc 1-1:16.0: can't read capabilities
[  667.668335][T10502] XFS (loop7): Unmounting Filesystem
[  667.680191][T11075] loop6: detected capacity change from 0 to 32768
[  667.749791][T11075] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  667.767873][ T4381] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  667.784618][T10565] EXT4-fs (loop8): unmounting filesystem.
[  667.796168][ T5666] usb 1-1: USB disconnect, device number 17
[  667.981490][ T4381] usb 2-1: Using ep0 maxpacket: 8
[  668.002760][ T4381] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  668.046592][ T4381] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  668.087760][ T4381] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  668.121474][ T4381] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  668.174616][ T7048] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  668.205285][ T4381] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  668.231830][ T4381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.364982][T11111] loop6: detected capacity change from 0 to 1024
[  668.506166][ T4381] usb 2-1: GET_CAPABILITIES returned 0
[  668.533612][ T4381] usbtmc 2-1:16.0: can't read capabilities
[  668.758902][ T5666] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  669.034072][ T5666] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  669.182369][ T5666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.211831][T11100] usb 2-1: usbtmc_ioctl_clear_in_halt returned -32
[  669.245681][ T5666] usb 1-1: config 0 descriptor??
[  669.273222][ T4381] usb 2-1: USB disconnect, device number 19
[  669.290771][ T5666] gspca_main: spca508-2.14.0 probing 8086:0110
[  669.365263][  T951] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  669.488026][ T5666] gspca_spca508: reg_read err -32
[  669.577520][  T951] usb 9-1: Using ep0 maxpacket: 16
[  669.585048][  T951] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  669.606853][  T951] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  669.627625][  T951] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  669.651277][  T951] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  669.669464][  T951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.699546][ T5666] gspca_spca508: reg_read err -71
[  669.707893][ T5666] gspca_spca508: reg_read err -71
[  669.717772][ T5666] gspca_spca508: reg_read err -71
[  669.724696][  T951] usb 9-1: config 0 descriptor??
[  669.727760][    T7] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  669.738077][ T5666] gspca_spca508: reg write: error -71
[  669.763766][ T5666] spca508: probe of 1-1:0.0 failed with error -71
[  669.772161][ T5666] usb 1-1: USB disconnect, device number 18
[  669.943627][    T7] usb 8-1: Using ep0 maxpacket: 8
[  669.953059][    T7] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  669.991353][    T7] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  670.005007][    T7] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  670.028534][    T7] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  670.055221][    T7] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  670.086328][    T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.164061][  T951] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0014/input/input14
[  670.307874][  T951] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  670.334263][    T7] usb 8-1: GET_CAPABILITIES returned 0
[  670.340039][    T7] usbtmc 8-1:16.0: can't read capabilities
[  670.361547][  T951] usb 9-1: USB disconnect, device number 2
[  670.578962][    T7] usb 8-1: USB disconnect, device number 2
[  670.676851][T11140] fido_id[11140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  670.827984][T11144] loop0: detected capacity change from 0 to 4096
[  671.064941][T11131] loop6: detected capacity change from 0 to 40427
[  671.153856][T11131] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  671.209323][T11131] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  671.311202][T11131] F2FS-fs (loop6): Found nat_bits in checkpoint
[  671.498261][T11131] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  671.505378][T11131] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  671.594302][    T7] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  671.677529][ T5666] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  671.799510][    T7] usb 1-1: Using ep0 maxpacket: 16
[  671.807079][    T7] usb 1-1: unable to get BOS descriptor or descriptor too short
[  671.847071][    T7] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  671.878862][    T7] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024
[  671.893887][ T5666] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  671.918288][ T5666] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  671.940064][    T7] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  671.959345][    T7] usb 1-1: config 1 interface 0 has no altsetting 0
[  671.971157][ T5666] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  671.984754][    T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  672.004730][ T5666] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  672.013302][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.022830][ T5666] usb 8-1: SerialNumber: syz
[  672.060561][    T7] usb 1-1: Product: syz
[  672.065519][    T7] usb 1-1: Manufacturer: syz
[  672.076264][ T5666] cdc_ether: probe of 8-1:1.0 failed with error -22
[  672.096053][ T5666] usb-storage 8-1:1.0: USB Mass Storage device detected
[  672.103546][    T7] usb 1-1: SerialNumber: syz
[  672.129113][T11154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  672.147617][ T5666] usb-storage 8-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  672.158865][ T5666] scsi host1: usb-storage 8-1:1.0
[  672.354017][    T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input15
[  672.399596][T11165] loop8: detected capacity change from 0 to 32768
[  672.444685][T11165] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9
[  672.625664][T11180] loop6: detected capacity change from 0 to 256
[  672.653376][T11180] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  672.735266][T11180] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  672.808728][ T7048] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9
[  672.813672][T11180] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  672.993562][ T3623] bcm5974 1-1:1.0: could not read from device
[  673.001301][    T7] usb 1-1: USB disconnect, device number 19
[  673.022704][ T4393] bcm5974 1-1:1.0: could not read from device
[  673.151557][T11189] loop1: detected capacity change from 0 to 128
[  673.664293][T11196] rdma_rxe: rxe_register_device failed with error -23
[  673.671918][T11196] rdma_rxe: failed to add vxcan1
[  674.011872][T11203] loop0: detected capacity change from 0 to 8
[  674.317046][    T7] usb 8-1: USB disconnect, device number 3
[  674.623565][T11221] loop8: detected capacity change from 0 to 128
[  674.777812][ T5539] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  674.971483][ T5539] usb 2-1: Using ep0 maxpacket: 32
[  674.983029][ T5539] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  674.995019][ T5539] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  675.004570][ T5539] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  675.049544][ T5539] usb 2-1: config 1 has no interface number 0
[  675.116835][ T5539] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  675.153581][T11231] rdma_rxe: rxe_register_device failed with error -23
[  675.160616][T11231] rdma_rxe: failed to add vxcan1
[  675.199544][ T5539] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  675.267029][ T5539] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  675.332613][ T5539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.394080][ T5539] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  675.600474][ T5539] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  675.629996][T11249] rdma_rxe: rxe_register_device failed with error -23
[  675.636981][T11249] rdma_rxe: failed to add vxcan1
[  676.074836][ T4335] usb 2-1: USB disconnect, device number 20
[  676.090950][ T4335] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  676.180756][ T5539] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  676.206381][T11267] loop8: detected capacity change from 0 to 1024
[  676.285367][T11267] hfsplus: request for non-existent node 16777216 in B*Tree
[  676.296961][T11267] hfsplus: request for non-existent node 16777216 in B*Tree
[  676.340281][T11267] hfsplus: request for non-existent node 16777216 in B*Tree
[  676.389652][T11267] hfsplus: request for non-existent node 16777216 in B*Tree
[  676.420199][T11271] loop6: detected capacity change from 0 to 256
[  676.495770][ T5539] usb 8-1: config 1 has an invalid descriptor of length 24, skipping remainder of the config
[  676.526137][ T4392] hfsplus: request for non-existent node 16777216 in B*Tree
[  676.527166][ T5539] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  676.543879][ T4392] hfsplus: request for non-existent node 16777216 in B*Tree
[  676.584302][ T5539] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  676.656173][ T5539] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  676.722926][ T5539] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.757457][ T5539] usb 8-1: Product: syz
[  676.761696][ T5539] usb 8-1: Manufacturer: syz
[  676.778426][T11276] loop8: detected capacity change from 0 to 1024
[  676.786607][ T5539] usb 8-1: SerialNumber: syz
[  676.822178][ T5539] cdc_ncm 8-1:1.0: skipping garbage
[  676.989666][ T5539] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found
[  676.999071][ T5539] cdc_ncm 8-1:1.0: bind() failure
[  677.745533][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  677.745551][   T26] audit: type=1326 audit(1763650568.986:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.8.1828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc3398f749 code=0x0
[  677.813733][ T5539] usb 8-1: USB disconnect, device number 4
[  678.901276][T11323] loop1: detected capacity change from 0 to 512
[  678.946520][T11323] EXT4-fs: Ignoring removed orlov option
[  678.989831][T11323] EXT4-fs (loop1): orphan cleanup on readonly fs
[  679.047811][T11323] EXT4-fs error (device loop1): ext4_find_extent:900: inode #4: comm syz.1.1843: inode has invalid extent depth: 7
[  679.123079][T11323] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117
[  679.167879][T11323] EXT4-fs warning (device loop1): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  679.218604][T11323] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  679.257452][T11323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  679.291116][T11323] EXT4-fs (loop1): unmounting filesystem.
[  679.305442][T11336] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1846'.
[  679.627308][T11341] loop7: detected capacity change from 0 to 128
[  679.729721][T11341] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  680.093831][ T4392] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  680.472315][T11334] loop0: detected capacity change from 0 to 40427
[  680.502178][T11334] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  680.543077][T11334] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  680.849001][T11373] rdma_rxe: rxe_register_device failed with error -23
[  680.856065][T11373] rdma_rxe: failed to add vxcan1
[  680.863655][T11334] F2FS-fs (loop0): Found nat_bits in checkpoint
[  680.890158][T11371] rdma_rxe: rxe_register_device failed with error -23
[  680.897273][T11371] rdma_rxe: failed to add vxcan1
[  681.060396][T11334] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  681.079120][T11334] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  681.640342][T11391] kvm [11390]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000030) = 0x0
[  681.787815][T11394] loop8: detected capacity change from 0 to 2048
[  681.821729][T11394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  682.177671][ T5955] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  682.385505][ T5955] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  682.432736][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.462288][ T5955] usb 2-1: Product: syz
[  682.467268][ T5955] usb 2-1: Manufacturer: syz
[  682.481479][T11411] rdma_rxe: rxe_register_device failed with error -23
[  682.488719][T11411] rdma_rxe: failed to add vxcan1
[  682.512818][ T5955] usb 2-1: SerialNumber: syz
[  682.546153][ T5955] usb 2-1: config 0 descriptor??
[  682.765013][ T5955] usb 2-1: ignoring: probably an ADSL modem
[  682.933508][T11421] loop8: detected capacity change from 0 to 1024
[  683.184541][ T5955] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  683.774085][ T5955] usb 2-1: USB disconnect, device number 21
[  683.910014][ T5666] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  684.097519][ T5666] usb 7-1: Using ep0 maxpacket: 16
[  684.106821][ T5666] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  684.136995][ T5666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.167509][ T5666] usb 7-1: Product: syz
[  684.172484][ T5666] usb 7-1: Manufacturer: syz
[  684.210450][ T5666] usb 7-1: SerialNumber: syz
[  684.245005][ T5666] usb 7-1: config 0 descriptor??
[  684.757256][ T5666] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  684.776456][T11443] rdma_rxe: already configured on vxcan1
[  684.811182][ T5666] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  684.859946][T11444] rdma_rxe: rxe_register_device failed with error -23
[  684.862417][ T5666] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  684.866895][T11444] rdma_rxe: failed to add vxcan1
[  684.900744][ T5666] usb 7-1: media controller created
[  684.909994][T11423] loop0: detected capacity change from 0 to 40427
[  684.938709][T11423] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  684.979890][T11423] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  684.993588][ T5666] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  685.007786][T11423] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  685.066288][T11423] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  685.084916][T11423] F2FS-fs (loop0): invalid crc value
[  685.091606][ T5666] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  685.114071][T11423] F2FS-fs (loop0): Found nat_bits in checkpoint
[  685.115038][ T5666] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  685.236810][T11423] F2FS-fs (loop0): Start checkpoint disabled!
[  685.261921][T11423] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  685.280066][T11423] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  685.341415][ T4898] usb 7-1: USB disconnect, device number 4
[  685.542927][ T4898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  685.572067][T11456] loop1: detected capacity change from 0 to 164
[  685.808691][   T46] kworker/u4:3: attempt to access beyond end of device
[  685.808691][   T46] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  685.843494][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  685.849922][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  686.019749][T11467] vxcan1 speed is unknown, defaulting to 1000
[  686.327590][ T5666] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  686.397204][T11473] loop1: detected capacity change from 0 to 4096
[  686.542031][ T5666] usb 8-1: config 0 has no interfaces?
[  686.569942][ T5666] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  686.597472][ T4898] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  686.602250][ T5666] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.664267][ T5666] usb 8-1: Product: syz
[  686.671081][ T5666] usb 8-1: Manufacturer: syz
[  686.675743][ T5666] usb 8-1: SerialNumber: syz
[  686.693745][ T5666] usb 8-1: config 0 descriptor??
[  686.701102][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  686.725409][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  686.799924][ T4898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  686.857472][ T4898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  686.885271][ T4898] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  686.947652][ T4898] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  686.966811][ T4898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.989736][ T4898] usb 9-1: config 0 descriptor??
[  687.014141][ T5955] usb 8-1: USB disconnect, device number 5
[  687.236281][T11496] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.236522][T11496] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.427347][ T4898] plantronics 0003:047F:FFFF.0015: unbalanced collection at end of report description
[  687.428142][ T4898] plantronics 0003:047F:FFFF.0015: parse failed
[  687.428174][ T4898] plantronics: probe of 0003:047F:FFFF.0015 failed with error -22
[  687.502704][T11503] loop0: detected capacity change from 0 to 4096
[  687.525801][T11503] ntfs3: loop0: ino=3, Correct links count -> 2.
[  687.633254][ T4898] usb 9-1: USB disconnect, device number 3
[  687.698599][   T26] audit: type=1800 audit(1763650579.596:111): pid=11503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1892" name="file1" dev="loop0" ino=33 res=0 errno=0
[  688.500158][T11531] loop7: detected capacity change from 0 to 1024
[  689.500379][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'.
[  689.967644][T11555] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  689.975074][T11555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  690.039787][T11559] loop7: detected capacity change from 0 to 512
[  690.054668][T11555] vhci_hcd vhci_hcd.0: Device attached
[  690.085573][T11562] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  690.137162][ T4898] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  690.145312][T11559] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  690.168233][T11559] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  690.237992][T11570] loop8: detected capacity change from 0 to 1024
[  690.249535][T11570] EXT4-fs: Ignoring removed oldalloc option
[  690.266026][T11570] EXT4-fs: Ignoring removed bh option
[  690.281549][T11570] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  690.297551][ T5955] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  690.327448][    T7] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  690.328191][ T4898] usb 2-1: Using ep0 maxpacket: 32
[  690.342357][   T26] audit: type=1800 audit(1763650582.236:112): pid=11559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1911" name="file2" dev="loop7" ino=16 res=0 errno=0
[  690.380531][ T4898] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  690.415846][T11570] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  690.430515][ T4898] usb 2-1: config 0 has no interface number 0
[  690.474278][T11539] loop0: detected capacity change from 0 to 32768
[  690.477717][ T4898] usb 2-1: config 0 interface 89 has no altsetting 0
[  690.490143][ T5955] usb 7-1: config 0 has no interfaces?
[  690.495741][ T5955] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  690.528061][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.541451][ T4898] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  690.559708][T11539] find_entry called with index >= next_index
[  690.575397][T11539] find_entry called with index >= next_index
[  690.580040][ T5955] usb 7-1: config 0 descriptor??
[  690.587331][ T4898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.595727][ T4898] usb 2-1: Product: syz
[  690.600366][T11539] find_entry called with index >= next_index
[  690.605563][T10502] EXT4-fs (loop7): unmounting filesystem.
[  690.606651][ T4898] usb 2-1: Manufacturer: syz
[  690.662796][ T4898] usb 2-1: SerialNumber: syz
[  690.685603][ T4898] usb 2-1: config 0 descriptor??
[  690.758016][ T4898] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  690.762676][T10565] EXT4-fs (loop8): unmounting filesystem.
[  690.798552][ T4898] em28xx 2-1:0.89: Video interface 89 found: bulk
[  690.865326][T11556] vhci_hcd: connection closed
[  690.867075][ T5540] usb 7-1: USB disconnect, device number 5
[  690.887027][ T4348] vhci_hcd: stop threads
[  690.918900][ T4348] vhci_hcd: release socket
[  690.970312][ T4348] vhci_hcd: disconnect device
[  691.008519][    T7] usb 45-1: device descriptor read/64, error -71
[  691.217680][    T7] vhci_hcd: vhci_device speed not set
[  691.287671][ T5955] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  691.364900][ T4898] em28xx 2-1:0.89: chip ID is em28174
[  691.489633][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  691.510961][ T5955] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  691.542804][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.565392][T11593] syz.6.1920 uses obsolete (PF_INET,SOCK_PACKET)
[  691.582115][ T5955] usb 1-1: config 0 descriptor??
[  691.877824][ T4898] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  691.910191][ T4898] em28xx 2-1:0.89: board has no eeprom
[  691.998150][ T5955] cherry 0003:046A:0023.0016: unbalanced delimiter at end of report description
[  692.007641][ T4898] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  692.014935][ T4898] em28xx 2-1:0.89: analog set to bulk mode.
[  692.042197][ T5955] cherry: probe of 0003:046A:0023.0016 failed with error -22
[  692.058057][ T4898] usb 2-1: USB disconnect, device number 22
[  692.100340][ T4898] em28xx 2-1:0.89: Disconnecting em28xx
[  692.106637][ T5955] em28xx 2-1:0.89: Registering V4L2 extension
[  692.148777][T11584] loop7: detected capacity change from 0 to 32768
[  692.234108][T11614] loop6: detected capacity change from 0 to 512
[  692.274893][T11614] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  692.306411][T11584] XFS (loop7): Mounting V5 Filesystem
[  692.426264][T11614] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  692.458518][T11584] XFS (loop7): Ending clean mount
[  692.472367][T11584] XFS (loop7): Quotacheck needed: Please wait.
[  692.487028][T11614] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  692.607245][ T4335] usb 1-1: USB disconnect, device number 20
[  692.672604][ T5955] usb 2-1: Decoder not found
[  692.692271][T11584] XFS (loop7): Quotacheck: Done.
[  692.700383][T11628] loop1: detected capacity change from 0 to 1024
[  692.715919][ T5955] em28xx 2-1:0.89: failed to create media graph
[  692.748632][ T5955] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  692.831758][ T5955] em28xx 2-1:0.89: Registering snapshot button...
[  692.850985][T11628] hfsplus: found bad thread record in catalog
[  692.950290][ T5955] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input16
[  693.044672][ T5955] em28xx 2-1:0.89: Remote control support is not available for this card.
[  693.064425][ T4898] em28xx 2-1:0.89: Closing input extension
[  693.078356][ T4898] em28xx 2-1:0.89: Deregistering snapshot button
[  693.110949][ T4580] hfsplus: found bad thread record in catalog
[  693.122082][T10502] XFS (loop7): Unmounting Filesystem
[  693.127718][ T4580] hfsplus: found bad thread record in catalog
[  693.247655][ T5955] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  693.462989][ T5955] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  693.487178][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.538683][ T5955] usb 7-1: config 0 descriptor??
[  693.574709][ T5955] cp210x 7-1:0.0: cp210x converter detected
[  693.594494][ T4898] em28xx 2-1:0.89: Freeing device
[  693.950235][ T5955] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  693.992590][ T5955] usb 7-1: cp210x converter now attached to ttyUSB0
[  694.169954][T11658] loop7: detected capacity change from 0 to 4096
[  694.195646][ T5955] usb 7-1: USB disconnect, device number 6
[  694.235787][ T5955] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  694.241020][T11661] loop8: detected capacity change from 0 to 1024
[  694.296160][T11664] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  694.346891][ T5955] cp210x 7-1:0.0: device disconnected
[  694.626468][T11642] loop1: detected capacity change from 0 to 40427
[  694.998470][T11642] F2FS-fs (loop1): invalid crc value
[  695.117199][T11642] F2FS-fs (loop1): Found nat_bits in checkpoint
[  695.346896][T10192] EXT4-fs (loop6): unmounting filesystem.
[  695.477258][T11642] F2FS-fs (loop1): Start checkpoint disabled!
[  695.504088][T11676] loop8: detected capacity change from 0 to 256
[  695.555215][T11642] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  695.677189][T11681] rdma_rxe: rxe_register_device failed with error -23
[  695.685213][T11681] rdma_rxe: failed to add vxcan1
[  695.921613][T11676] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x40dd4d7c, utbl_chksum : 0xe619d30d)
[  696.332283][   T26] audit: type=1800 audit(1763650588.226:113): pid=11676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1935" name="file1" dev="loop8" ino=1048797 res=0 errno=0
[  696.406567][T11676] exFAT-fs (loop8): hint_cluster is invalid (17)
[  696.589781][T11690] loop0: detected capacity change from 0 to 64
[  696.746220][T11694] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  696.998847][ T4276] Trying to free block not in datazone
[  697.033098][ T4276] Trying to free block not in datazone
[  697.070421][ T4276] Trying to free block not in datazone
[  697.112498][ T4276] Trying to free block not in datazone
[  697.147754][ T4276] Trying to free block not in datazone
[  697.165447][ T4276] Trying to free block not in datazone
[  697.172267][ T4276] Trying to free block not in datazone
[  697.183819][ T4276] Trying to free block not in datazone
[  697.197941][ T4276] Trying to free block not in datazone
[  697.246479][ T4276] Trying to free block not in datazone
[  697.261639][ T4276] Trying to free block not in datazone
[  697.273629][ T4276] Trying to free block not in datazone
[  697.309827][ T4276] Trying to free block not in datazone
[  697.350019][ T4276] Trying to free block not in datazone
[  698.985777][T11735] loop1: detected capacity change from 0 to 4096
[  699.557257][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1962'.
[  699.613233][T11760] netlink: 'syz.7.1962': attribute type 30 has an invalid length.
[  699.642193][T11760] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  699.652057][T11760] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  699.661010][T11760] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  699.669806][T11760] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  699.927142][   T26] audit: type=1326 audit(1763650591.816:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.8.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3398f749 code=0x7ffc0000
[  700.057594][   T26] audit: type=1326 audit(1763650591.816:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.8.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3398f749 code=0x7ffc0000
[  700.177699][   T26] audit: type=1326 audit(1763650591.826:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.8.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcc3398f749 code=0x7ffc0000
[  700.265591][   T26] audit: type=1326 audit(1763650591.926:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.8.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3398f749 code=0x7ffc0000
[  700.369761][   T26] audit: type=1326 audit(1763650591.926:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.8.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3398f749 code=0x7ffc0000
[  700.442797][   T26] audit: type=1326 audit(1763650591.926:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.8.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc339c2005 code=0x7ffc0000
[  700.518251][   T26] audit: type=1326 audit(1763650592.006:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.8.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fcc3398f749 code=0x7ffc0000
[  700.627581][   T26] audit: type=1326 audit(1763650592.096:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.8.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcc3398f749 code=0x7ffc0000
[  700.690773][   T26] audit: type=1326 audit(1763650592.146:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.8.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc3392b829 code=0x7ffc0000
[  701.958049][T11793] loop8: detected capacity change from 0 to 32768
[  702.107281][T11793] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  702.192200][T11832] loop7: detected capacity change from 0 to 47
[  702.343136][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  702.343151][   T26] audit: type=1800 audit(1763650594.236:125): pid=11833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1971" name="file1" dev="loop8" ino=17058 res=0 errno=0
[  702.664438][T10565] ocfs2: Unmounting device (7,8) on (node local)
[  702.798002][ T4335] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  702.998005][ T4335] usb 2-1: Using ep0 maxpacket: 8
[  703.005458][ T4335] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  703.007706][T11852] loop7: detected capacity change from 0 to 2048
[  703.059151][ T4335] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  703.101996][T11852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  703.117132][ T4335] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  703.239456][ T4335] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  703.265896][ T4335] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  703.279050][ T4335] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  703.289544][ T4335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.583125][T11860] rdma_rxe: rxe_register_device failed with error -23
[  703.590161][T11860] rdma_rxe: failed to add vxcan1
[  703.812699][ T4335] usb 2-1: usb_control_msg returned -32
[  703.869801][ T4335] usbtmc 2-1:16.0: can't read capabilities
[  704.247445][T11862] usbtmc 2-1:16.0: usb_bulk_msg returned -71
[  704.298911][T11848] loop8: detected capacity change from 0 to 32768
[  704.379102][T11863] loop0: detected capacity change from 0 to 1024
[  704.391477][T11848] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  704.484548][ T5539] usb 2-1: USB disconnect, device number 23
[  704.737318][T11875] rdma_rxe: rxe_register_device failed with error -23
[  704.744312][T11875] rdma_rxe: failed to add vxcan1
[  705.347800][T11881] loop6: detected capacity change from 0 to 128
[  705.439160][T11881] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  705.506283][T11881] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  705.617069][T10565] ocfs2: Unmounting device (7,8) on (node local)
[  705.617559][ T4898] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  705.842613][T10192] EXT4-fs (loop6): unmounting filesystem.
[  705.847641][ T4898] usb 8-1: Using ep0 maxpacket: 8
[  705.855966][ T4898] usb 8-1: unable to get BOS descriptor or descriptor too short
[  705.902018][ T4898] usb 8-1: config 5 has an invalid interface number: 97 but max is 0
[  705.926477][T11894] loop0: detected capacity change from 0 to 512
[  705.937487][ T4898] usb 8-1: config 5 has no interface number 0
[  705.957421][ T4898] usb 8-1: config 5 interface 97 has no altsetting 0
[  705.984123][ T4898] usb 8-1: New USB device found, idVendor=c643, idProduct=384d, bcdDevice=c9.f6
[  705.998870][ T7048] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  706.049303][ T4898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.098326][ T4898] usb 8-1: Product: syz
[  706.113502][ T4898] usb 8-1: Manufacturer: syz
[  706.135151][ T4898] usb 8-1: SerialNumber: syz
[  706.392052][ T4898] usb-storage 8-1:5.97: USB Mass Storage device detected
[  706.408386][T11908] netlink: 'syz.0.2003': attribute type 1 has an invalid length.
[  706.441715][T11906] rdma_rxe: already configured on vxcan1
[  706.447653][ T5539] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  706.518719][ T4898] usb 8-1: USB disconnect, device number 6
[  706.637508][ T5539] usb 7-1: Using ep0 maxpacket: 32
[  706.645117][ T5539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  706.682723][ T5539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  706.733512][ T5539] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  706.771415][ T5539] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.807319][ T5539] usb 7-1: config 0 descriptor??
[  706.905671][T11920] rdma_rxe: rxe_register_device failed with error -23
[  706.913505][T11920] rdma_rxe: failed to add vxcan1
[  707.666054][T11925] loop8: detected capacity change from 0 to 256
[  707.675215][T11922] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2006'.
[  707.731300][T11922] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2006'.
[  707.754500][T11922] netlink: 'syz.0.2006': attribute type 5 has an invalid length.
[  707.776134][T11922] netlink: 'syz.0.2006': attribute type 6 has an invalid length.
[  707.795995][T11922] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2006'.
[  707.920065][ T5539] logitech 0003:046D:C29C.0017: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.6-1/input0
[  707.941151][ T5539] logitech 0003:046D:C29C.0017: no inputs found
[  707.957480][   T26] audit: type=1804 audit(1763650599.846:126): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2008" name="/newroot/71/file0/bus" dev="loop8" ino=1048798 res=1 errno=0
[  708.040628][T11933] rdma_rxe: already configured on vxcan1
[  708.661607][ T5539] usb 7-1: USB disconnect, device number 7
[  708.984730][ T5666] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  709.081551][T11941] fido_id[11941]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  709.190032][ T5666] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  709.230303][T11952] device pim6reg1 entered promiscuous mode
[  709.244158][ T5666] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  709.328616][ T5666] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  709.361456][ T5666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.609423][ T5666] usb 1-1: usb_control_msg returned -32
[  709.615092][ T5666] usbtmc 1-1:16.0: can't read capabilities
[  710.401147][T11989] loop1: detected capacity change from 0 to 1024
[  710.446799][T11989] EXT4-fs: Ignoring removed nomblk_io_submit option
[  710.473497][T11989] EXT4-fs: Ignoring removed nobh option
[  710.576168][T11989] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  710.840874][T11998] loop6: detected capacity change from 0 to 4096
[  710.974404][T11998] ntfs3: loop6: ino=5, "/" directory corrupted
[  710.991925][T11998] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  711.027143][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  711.050974][T11998] ntfs3: loop6: ino=5, "/" directory corrupted
[  711.871414][ T5666] usb 1-1: USB disconnect, device number 21
[  712.699954][T12042] rdma_rxe: already configured on vxcan1
[  712.740040][T12045] loop0: detected capacity change from 0 to 64
[  714.035690][T12060] loop6: detected capacity change from 0 to 256
[  714.117592][ T4898] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  714.321942][ T4898] usb 9-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  714.337676][ T4898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.368820][ T4898] usb 9-1: config 0 descriptor??
[  714.390919][ T4898] gspca_main: spca508-2.14.0 probing 8086:0110
[  714.424367][T12063] loop1: detected capacity change from 0 to 8192
[  714.482435][T12063] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  714.507763][T12063] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  714.517308][T12063] REISERFS (device loop1): using ordered data mode
[  714.582303][ T4898] gspca_spca508: reg_read err -32
[  714.598079][T12063] reiserfs: using flush barriers
[  714.608377][T12063] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  714.645568][T12063] REISERFS (device loop1): checking transaction log (loop1)
[  714.686870][T12074] loop0: detected capacity change from 0 to 128
[  714.707675][T12063] REISERFS (device loop1): Using r5 hash to sort names
[  714.743543][T12063] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  714.793362][ T4898] gspca_spca508: reg_read err -71
[  714.805067][ T4898] gspca_spca508: reg_read err -71
[  714.823066][ T4898] gspca_spca508: reg_read err -71
[  714.839668][ T4898] gspca_spca508: reg write: error -71
[  714.870540][ T4898] spca508: probe of 9-1:0.0 failed with error -71
[  714.957768][T12077] input: syz1 as /devices/virtual/input/input17
[  714.967949][ T4898] usb 9-1: USB disconnect, device number 4
[  715.138305][T12082] loop0: detected capacity change from 0 to 64
[  715.523066][T12087] loop1: detected capacity change from 0 to 1024
[  715.839118][T12099] rdma_rxe: rxe_register_device failed with error -23
[  715.846081][T12099] rdma_rxe: failed to add vxcan1
[  715.957631][T12087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  716.062248][T12105] rdma_rxe: rxe_register_device failed with error -23
[  716.070215][T12105] rdma_rxe: failed to add vxcan1
[  716.688934][ T4898] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  716.713843][T12087] ==================================================================
[  716.721979][T12087] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x965/0x1e90
[  716.729759][T12087] Read of size 18446744073709551588 at addr ffff888056b88840 by task syz.1.2054/12087
[  716.739343][T12087] 
[  716.741697][T12087] CPU: 1 PID: 12087 Comm: syz.1.2054 Not tainted syzkaller #0
[  716.749373][T12087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  716.759483][T12087] Call Trace:
[  716.762806][T12087]  <TASK>
[  716.765764][T12087]  dump_stack_lvl+0x168/0x22e
[  716.770484][T12087]  ? __lock_acquire+0x7c50/0x7c50
[  716.775559][T12087]  ? show_regs_print_info+0x12/0x12
[  716.780802][T12087]  ? load_image+0x3b0/0x3b0
[  716.785399][T12087]  ? __virt_addr_valid+0x465/0x540
[  716.790562][T12087]  ? ext4_xattr_set_entry+0x965/0x1e90
[  716.796073][T12087]  print_report+0xa8/0x210
[  716.800533][T12087]  kasan_report+0x10b/0x140
[  716.805093][T12087]  ? ext4_xattr_set_entry+0x965/0x1e90
[  716.810637][T12087]  ? ext4_xattr_set_entry+0x965/0x1e90
[  716.816230][T12087]  kasan_check_range+0x27b/0x290
[  716.821201][T12087]  memmove+0x25/0x60
[  716.825130][T12087]  ext4_xattr_set_entry+0x965/0x1e90
[  716.830436][T12087]  ext4_xattr_block_set+0xadf/0x32a0
[  716.835739][T12087]  ? ext4_destroy_inode+0x200/0x200
[  716.840953][T12087]  ? proc_nr_inodes+0x2f0/0x2f0
[  716.845825][T12087]  ? _raw_spin_unlock+0x24/0x40
[  716.850699][T12087]  ? iput+0x768/0x980
[  716.854694][T12087]  ? ext4_xattr_block_find+0x2b0/0x2b0
[  716.860173][T12087]  ? ext4_xattr_ibody_set+0x509/0x690
[  716.865560][T12087]  ext4_xattr_set_handle+0xbd5/0x12b0
[  716.870981][T12087]  ? ext4_xattr_inode_free_quota+0x1b0/0x1b0
[  716.876994][T12087]  ext4_xattr_set+0x22a/0x320
[  716.881686][T12087]  ? end_current_label_crit_section+0x170/0x170
[  716.887950][T12087]  ? ext4_xattr_set_credits+0x290/0x290
[  716.893517][T12087]  ? evm_protect_xattr+0x7a0/0x990
[  716.898641][T12087]  ? ext4_xattr_security_get+0x40/0x40
[  716.904114][T12087]  __vfs_setxattr+0x3e0/0x420
[  716.908811][T12087]  __vfs_setxattr_noperm+0x129/0x5e0
[  716.914115][T12087]  vfs_setxattr+0x168/0x2f0
[  716.918659][T12087]  ? xattr_permission+0x500/0x500
[  716.923700][T12087]  ? _copy_from_user+0x10b/0x170
[  716.928654][T12087]  ? setxattr+0x243/0x2d0
[  716.933022][T12087]  setxattr+0x2b2/0x2d0
[  716.937228][T12087]  ? path_setxattr+0x280/0x280
[  716.942022][T12087]  ? __mnt_want_write+0x21f/0x2a0
[  716.947073][T12087]  path_setxattr+0x142/0x280
[  716.951691][T12087]  ? simple_xattr_list_add+0xf0/0xf0
[  716.956998][T12087]  ? lock_chain_count+0x20/0x20
[  716.961866][T12087]  __x64_sys_setxattr+0xb7/0xd0
[  716.966822][T12087]  do_syscall_64+0x4c/0xa0
[  716.971300][T12087]  ? clear_bhb_loop+0x60/0xb0
[  716.976009][T12087]  ? clear_bhb_loop+0x60/0xb0
[  716.980700][T12087]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  716.986602][T12087] RIP: 0033:0x7ff27e58f749
[  716.991045][T12087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  717.010667][T12087] RSP: 002b:00007ff27f464038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  717.019095][T12087] RAX: ffffffffffffffda RBX: 00007ff27e7e5fa0 RCX: 00007ff27e58f749
[  717.027534][T12087] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100
[  717.035515][T12087] RBP: 00007ff27e613f91 R08: 0000000000000000 R09: 0000000000000000
[  717.043505][T12087] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[  717.051489][T12087] R13: 00007ff27e7e6038 R14: 00007ff27e7e5fa0 R15: 00007ffe59615128
[  717.059482][T12087]  </TASK>
[  717.062506][T12087] 
[  717.064831][T12087] Allocated by task 12087:
[  717.069248][T12087]  kasan_set_track+0x4b/0x70
[  717.073942][T12087]  __kasan_kmalloc+0x8e/0xa0
[  717.078634][T12087]  __kmalloc_node_track_caller+0xae/0x230
[  717.084372][T12087]  kmemdup+0x27/0x60
[  717.088283][T12087]  ext4_xattr_block_set+0x9e1/0x32a0
[  717.093578][T12087]  ext4_xattr_set_handle+0xbd5/0x12b0
[  717.098964][T12087]  ext4_xattr_set+0x22a/0x320
[  717.103659][T12087]  __vfs_setxattr+0x3e0/0x420
[  717.108365][T12087]  __vfs_setxattr_noperm+0x129/0x5e0
[  717.113664][T12087]  vfs_setxattr+0x168/0x2f0
[  717.118177][T12087]  setxattr+0x2b2/0x2d0
[  717.122347][T12087]  path_setxattr+0x142/0x280
[  717.126948][T12087]  __x64_sys_setxattr+0xb7/0xd0
[  717.131818][T12087]  do_syscall_64+0x4c/0xa0
[  717.136289][T12087]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  717.142207][T12087] 
[  717.144543][T12087] Last potentially related work creation:
[  717.150348][T12087]  kasan_save_stack+0x3a/0x60
[  717.155043][T12087]  __kasan_record_aux_stack+0xb2/0xc0
[  717.160431][T12087]  insert_work+0x54/0x3c0
[  717.164770][T12087]  __queue_work+0xba3/0xfb0
[  717.169302][T12087]  queue_work_on+0x11d/0x1d0
[  717.173912][T12087]  blk_update_request+0x593/0xe30
[  717.178959][T12087]  blk_mq_end_request+0x3a/0x70
[  717.183849][T12087]  blk_flush_complete_seq+0x5ad/0xc30
[  717.189241][T12087]  flush_end_io+0x726/0xa50
[  717.193757][T12087]  __blk_mq_end_request+0x475/0x550
[  717.198963][T12087]  blk_done_softirq+0x100/0x150
[  717.203831][T12087]  handle_softirqs+0x2a1/0x920
[  717.208609][T12087]  run_ksoftirqd+0x98/0xf0
[  717.213032][T12087]  smpboot_thread_fn+0x64a/0xa40
[  717.217992][T12087]  kthread+0x29d/0x330
[  717.222074][T12087]  ret_from_fork+0x1f/0x30
[  717.226504][T12087] 
[  717.228832][T12087] Second to last potentially related work creation:
[  717.235416][T12087]  kasan_save_stack+0x3a/0x60
[  717.240106][T12087]  __kasan_record_aux_stack+0xb2/0xc0
[  717.245508][T12087]  insert_work+0x54/0x3c0
[  717.249845][T12087]  __queue_work+0xba3/0xfb0
[  717.254369][T12087]  queue_work_on+0x11d/0x1d0
[  717.258997][T12087]  blk_update_request+0x593/0xe30
[  717.264080][T12087]  blk_mq_end_request+0x3a/0x70
[  717.268972][T12087]  blk_flush_complete_seq+0x5ad/0xc30
[  717.274379][T12087]  flush_end_io+0x726/0xa50
[  717.278895][T12087]  __blk_mq_end_request+0x475/0x550
[  717.284103][T12087]  blk_done_softirq+0x100/0x150
[  717.288963][T12087]  handle_softirqs+0x2a1/0x920
[  717.293750][T12087]  run_ksoftirqd+0x98/0xf0
[  717.298168][T12087]  smpboot_thread_fn+0x64a/0xa40
[  717.303119][T12087]  kthread+0x29d/0x330
[  717.307200][T12087]  ret_from_fork+0x1f/0x30
[  717.311661][T12087] 
[  717.313990][T12087] The buggy address belongs to the object at ffff888056b88800
[  717.313990][T12087]  which belongs to the cache kmalloc-1k of size 1024
[  717.328071][T12087] The buggy address is located 64 bytes inside of
[  717.328071][T12087]  1024-byte region [ffff888056b88800, ffff888056b88c00)
[  717.341353][T12087] 
[  717.343688][T12087] The buggy address belongs to the physical page:
[  717.350116][T12087] page:ffffea00015ae200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56b88
[  717.360366][T12087] head:ffffea00015ae200 order:3 compound_mapcount:0 compound_pincount:0
[  717.368696][T12087] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  717.376713][T12087] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017441dc0
[  717.385305][T12087] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  717.393888][T12087] page dumped because: kasan: bad access detected
[  717.400334][T12087] page_owner tracks the page as allocated
[  717.406053][T12087] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3627, tgid 3627 (klogd), ts 80115858130, free_ts 22648384940
[  717.426835][T12087]  post_alloc_hook+0x173/0x1a0
[  717.431615][T12087]  get_page_from_freelist+0x1a26/0x1ac0
[  717.437179][T12087]  __alloc_pages+0x1df/0x4e0
[  717.441799][T12087]  alloc_slab_page+0x5d/0x160
[  717.446487][T12087]  new_slab+0x87/0x2c0
[  717.450561][T12087]  ___slab_alloc+0xbc6/0x1230
[  717.455271][T12087]  __kmem_cache_alloc_node+0x1a0/0x260
[  717.460740][T12087]  kmalloc_trace+0x26/0xe0
[  717.465190][T12087]  syslog_print+0xcf/0x590
[  717.469709][T12087]  do_syslog+0x7bd/0x8b0
[  717.473963][T12087]  __x64_sys_syslog+0x78/0x90
[  717.478654][T12087]  do_syscall_64+0x4c/0xa0
[  717.483112][T12087]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  717.489018][T12087] page last free stack trace:
[  717.493702][T12087]  free_unref_page_prepare+0x8b4/0x9a0
[  717.499176][T12087]  free_unref_page+0x2e/0x3f0
[  717.503865][T12087]  free_contig_range+0x9d/0x150
[  717.508735][T12087]  destroy_args+0x100/0xa31
[  717.513252][T12087]  debug_vm_pgtable+0x32a/0x37e
[  717.518119][T12087]  do_one_initcall+0x214/0x7a0
[  717.522919][T12087]  do_initcall_level+0x137/0x1e4
[  717.527873][T12087]  do_initcalls+0x4b/0x8a
[  717.532219][T12087]  kernel_init_freeable+0x3fa/0x5ac
[  717.537435][T12087]  kernel_init+0x19/0x1b0
[  717.541794][T12087]  ret_from_fork+0x1f/0x30
[  717.546224][T12087] 
[  717.548556][T12087] Memory state around the buggy address:
[  717.554193][T12087]  ffff888056b88700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  717.562264][T12087]  ffff888056b88780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  717.570365][T12087] >ffff888056b88800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  717.578426][T12087]                                            ^
[  717.584588][T12087]  ffff888056b88880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  717.592652][T12087]  ffff888056b88900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  717.600716][T12087] ==================================================================
[  717.717592][ T4898] usb 9-1: Using ep0 maxpacket: 16
[  717.737596][ T4898] usb 9-1: config 0 interface 0 has no altsetting 0
[  717.755231][ T4898] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  717.772246][ T4898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.808249][ T4898] usb 9-1: config 0 descriptor??
[  717.920599][T12087] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  717.927878][T12087] CPU: 1 PID: 12087 Comm: syz.1.2054 Not tainted syzkaller #0
[  717.935379][T12087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  717.945487][T12087] Call Trace:
[  717.948802][T12087]  <TASK>
[  717.951766][T12087]  dump_stack_lvl+0x168/0x22e
[  717.956502][T12087]  ? memcpy+0x3c/0x60
[  717.960538][T12087]  ? show_regs_print_info+0x12/0x12
[  717.965778][T12087]  ? load_image+0x3b0/0x3b0
[  717.970341][T12087]  panic+0x2c9/0x710
[  717.974298][T12087]  ? bpf_jit_dump+0xd0/0xd0
[  717.978845][T12087]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[  717.984801][T12087]  ? _raw_spin_unlock+0x40/0x40
[  717.989698][T12087]  ? print_memory_metadata+0x314/0x400
[  717.995281][T12087]  check_panic_on_warn+0x80/0xa0
[  718.000257][T12087]  ? ext4_xattr_set_entry+0x965/0x1e90
[  718.005752][T12087]  end_report+0x66/0x110
[  718.010037][T12087]  kasan_report+0x118/0x140
[  718.014582][T12087]  ? ext4_xattr_set_entry+0x965/0x1e90
[  718.020091][T12087]  ? ext4_xattr_set_entry+0x965/0x1e90
[  718.025596][T12087]  kasan_check_range+0x27b/0x290
[  718.030589][T12087]  memmove+0x25/0x60
[  718.034535][T12087]  ext4_xattr_set_entry+0x965/0x1e90
[  718.039879][T12087]  ext4_xattr_block_set+0xadf/0x32a0
[  718.045219][T12087]  ? ext4_destroy_inode+0x200/0x200
[  718.050471][T12087]  ? proc_nr_inodes+0x2f0/0x2f0
[  718.055432][T12087]  ? _raw_spin_unlock+0x24/0x40
[  718.060317][T12087]  ? iput+0x768/0x980
[  718.064315][T12087]  ? ext4_xattr_block_find+0x2b0/0x2b0
[  718.069788][T12087]  ? ext4_xattr_ibody_set+0x509/0x690
[  718.075177][T12087]  ext4_xattr_set_handle+0xbd5/0x12b0
[  718.080572][T12087]  ? ext4_xattr_inode_free_quota+0x1b0/0x1b0
[  718.086569][T12087]  ext4_xattr_set+0x22a/0x320
[  718.091259][T12087]  ? end_current_label_crit_section+0x170/0x170
[  718.097535][T12087]  ? ext4_xattr_set_credits+0x290/0x290
[  718.103135][T12087]  ? evm_protect_xattr+0x7a0/0x990
[  718.108272][T12087]  ? ext4_xattr_security_get+0x40/0x40
[  718.113750][T12087]  __vfs_setxattr+0x3e0/0x420
[  718.118451][T12087]  __vfs_setxattr_noperm+0x129/0x5e0
[  718.123754][T12087]  vfs_setxattr+0x168/0x2f0
[  718.128274][T12087]  ? xattr_permission+0x500/0x500
[  718.133310][T12087]  ? _copy_from_user+0x10b/0x170
[  718.138260][T12087]  ? setxattr+0x243/0x2d0
[  718.142603][T12087]  setxattr+0x2b2/0x2d0
[  718.146774][T12087]  ? path_setxattr+0x280/0x280
[  718.151562][T12087]  ? __mnt_want_write+0x21f/0x2a0
[  718.156603][T12087]  path_setxattr+0x142/0x280
[  718.161211][T12087]  ? simple_xattr_list_add+0xf0/0xf0
[  718.166509][T12087]  ? lock_chain_count+0x20/0x20
[  718.171403][T12087]  __x64_sys_setxattr+0xb7/0xd0
[  718.176271][T12087]  do_syscall_64+0x4c/0xa0
[  718.180694][T12087]  ? clear_bhb_loop+0x60/0xb0
[  718.185399][T12087]  ? clear_bhb_loop+0x60/0xb0
[  718.190083][T12087]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  718.195985][T12087] RIP: 0033:0x7ff27e58f749
[  718.200405][T12087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  718.220020][T12087] RSP: 002b:00007ff27f464038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  718.228456][T12087] RAX: ffffffffffffffda RBX: 00007ff27e7e5fa0 RCX: 00007ff27e58f749
[  718.236457][T12087] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100
[  718.244440][T12087] RBP: 00007ff27e613f91 R08: 0000000000000000 R09: 0000000000000000
[  718.252598][T12087] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[  718.260597][T12087] R13: 00007ff27e7e6038 R14: 00007ff27e7e5fa0 R15: 00007ffe59615128
[  718.268588][T12087]  </TASK>
[  718.271755][T12087] Kernel Offset: disabled
[  718.276081][T12087] Rebooting in 86400 seconds..