last executing test programs:

20m21.870914379s ago: executing program 3 (id=26):
readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000280)=0x68)
syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="5c0000009078"], 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000004800210028bd7000fddbdf250a0080", @ANYRES32=r1, @ANYBLOB="0001000014000100ff0a00000000", @ANYRES64=r1, @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x10)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
write(0xffffffffffffffff, 0x0, 0x0)
nanosleep(&(0x7f0000000280), &(0x7f0000000300))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x800000000000001, 0x84)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
getpid()
openat$fb0(0xffffff9c, 0x0, 0x8000, 0x0)
write$cgroup_int(r5, &(0x7f0000000340)=0x4, 0x12)

20m19.449063004s ago: executing program 3 (id=30):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_of_msg(r4, &(0x7f0000000440)={@icresp={{0x1, 0x4, 0x80, 0x4, 0x5}, 0x0, 0x0, 0x0, 0x800}, @void}, 0x80, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, 0x0}, 0x108)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x1)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x24040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0)

20m17.55743842s ago: executing program 3 (id=32):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r3, 0x0, 0x0, 0x10fff9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r3, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)

20m15.619121818s ago: executing program 3 (id=37):
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
clock_adjtime(0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000200)={@desc={0x1, 0x0, @desc3}})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
iopl(0x5)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c61)
symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00')
bind$802154_raw(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_STATUS_ACCEL_DEV(r3, 0x40046103, &(0x7f0000000000)={0x5, 0x5, 0x2, 0xf5, 0x3, 0x80, 0xf, 0xbb, 0x0, 0x4, 0x0, "63ed9e45072327cfbb0004e52637c61687f0e8a5f6889089ab42f5b0b25ad4a8"})

20m11.749372682s ago: executing program 3 (id=42):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x7645, &(0x7f0000000140)={0x0, 0xfac6, 0x800, 0x3, 0x287}, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_of_msg(r4, &(0x7f0000000440)={@icresp={{0x1, 0x4, 0x80, 0x4, 0x5}, 0x0, 0x0, 0x0, 0x800}, @void}, 0x80, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, 0x0}, 0x108)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x1)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x24040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0)

20m7.137278408s ago: executing program 3 (id=48):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f00000003c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r5 = dup3(r3, r4, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='X\x00', 0x2}], 0x1)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000140))

19m51.953674352s ago: executing program 32 (id=48):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f00000003c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r5 = dup3(r3, r4, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='X\x00', 0x2}], 0x1)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000140))

15m13.114045014s ago: executing program 0 (id=497):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, 0x0, 0x40)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9000}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100005ff00"/19, @ANYBLOB="c3ff0000000000001c19128009000100626f6e64000000000c00028005"], 0x3c}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x1, [<r9=>0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
r11 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_TIOCINQ(r11, 0x8905, &(0x7f0000000100))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

15m11.170127401s ago: executing program 0 (id=501):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x15)
bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc)
r12 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48)
r13 = socket$netlink(0x10, 0x3, 0x4)
writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

15m10.961958434s ago: executing program 0 (id=502):
r0 = socket(0x2, 0x2, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0)
connect$unix(r0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b900, 0x0)
ioctl$FBIOBLANK(r4, 0x4611, 0x4)
getsockname$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'})
r7 = socket(0x10, 0x3, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x8)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x864, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffe0, 0xffff}, {0xd, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x838, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xceb2a6f0198d7a82}, @TCA_TBF_PTAB={0x404, 0x3, [0xc85, 0x7, 0x5, 0x1, 0x517b, 0x3ff, 0x4, 0xff8f, 0x0, 0x9, 0xb, 0x8, 0x6, 0x8, 0x6f, 0x100, 0x5, 0x0, 0x0, 0x6, 0x2a, 0x1ff, 0xfffffffb, 0x0, 0x7, 0x5, 0x4, 0xffffffff, 0x9, 0x7, 0x4, 0x200, 0xba, 0x1000, 0x7, 0x6, 0x10, 0x1a4, 0x64a, 0x2, 0x0, 0x1fde, 0xc28, 0x1, 0xffff, 0x40, 0x2, 0x3, 0x38, 0x5, 0x0, 0x9, 0x5, 0x7, 0x5, 0x9, 0x1, 0x67, 0xb685, 0xc55, 0x4, 0x3, 0xed, 0x40, 0x7fffffff, 0x0, 0x0, 0x2, 0x5, 0x6, 0x0, 0x5, 0x0, 0x3, 0xfffffffd, 0x7bb5127a, 0x4, 0x14fcc17d, 0xc8, 0x1, 0x3, 0x7ff, 0x77f, 0x6, 0x800, 0x200, 0xffff8000, 0x3, 0xfff, 0x3, 0x4, 0x9, 0x3, 0x80000001, 0x8, 0x5, 0xb, 0x5, 0x90000000, 0x6, 0x4, 0xf9, 0x7ff, 0x5, 0x45f, 0x7fffffff, 0x80000000, 0x2, 0x0, 0x1, 0x5, 0x9, 0x5, 0x1000, 0x9, 0x7, 0x400, 0x9, 0x6, 0x1, 0x0, 0xbd9c, 0x4, 0x8, 0x3, 0x1, 0x1, 0x99, 0x8, 0x1, 0x7fff, 0x2, 0x7, 0x4, 0x4, 0x4, 0x8000, 0x1, 0xfffffff5, 0x800, 0x9b6e, 0x2, 0x7, 0x810, 0xf0, 0x7, 0xfffffffe, 0x6, 0x4, 0x9, 0x1, 0x4, 0x6352, 0x101, 0x2, 0x1, 0x2, 0x1, 0x9, 0x5, 0x1, 0x1, 0x1, 0x90, 0x8, 0xa1a, 0x1, 0x222e, 0xa, 0x3, 0x4, 0xa, 0xe, 0x9, 0x1000, 0x7, 0xfffffffa, 0x4, 0x1c8, 0x7, 0x6, 0x5, 0x45, 0x61, 0x2, 0xf, 0xa3bc, 0x401, 0xa46, 0x5, 0x80000001, 0x5, 0x8, 0x5, 0x7, 0x1b956cc5, 0x8, 0x0, 0x7, 0x40, 0x4, 0x1, 0x7, 0x9, 0x7fc, 0x7fffffff, 0x2, 0x4, 0x4, 0x2, 0x5, 0x3, 0x5, 0x7c2, 0x8, 0x0, 0x90b, 0x1, 0x6, 0xb4c, 0x6, 0x6, 0x4, 0x7f, 0x0, 0x217, 0x5, 0x8000, 0x3, 0x6, 0x70, 0x4, 0x7, 0x8, 0x3, 0xbe, 0xfffffffd, 0x7, 0x2, 0x80000000, 0x768d, 0x2, 0x6, 0x8, 0x7f, 0xfff00000, 0x1, 0xffff, 0x0, 0x7, 0x2, 0x8000, 0x2, 0x5, 0x400, 0xdc]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1eb0}, @TCA_TBF_BURST={0x8, 0x6, 0xa777}, @TCA_TBF_PBURST={0x8, 0x7, 0x319}, @TCA_TBF_BURST={0x8, 0x6, 0x9}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x200, 0x3, 0x0, 0x8, 0x2000200, 0x3, 0x0, 0x0, 0x2, 0x6, 0x80000000, 0x1, 0x8, 0x3, 0x9, 0x8, 0x7, 0x4, 0xff, 0x8fd, 0x80, 0x500000, 0x8b66, 0x1, 0x1, 0x200, 0x7, 0x1, 0x61, 0x1, 0x6357, 0x3, 0x8, 0x9, 0x2, 0x3, 0x27b, 0x0, 0x591, 0x5, 0xe06, 0x5, 0x7ff, 0xfffffffe, 0xfff, 0x2, 0x4, 0x40, 0xffffffff, 0xd, 0xffffff5e, 0x6, 0x5d, 0x0, 0x8, 0x8, 0x6ea, 0x0, 0x8000, 0x4, 0x0, 0x2, 0x26, 0x9, 0x9cb7, 0x9, 0x7, 0x7, 0xff, 0x3, 0xc0, 0x5, 0x2, 0x3, 0xed1d, 0x1, 0x0, 0x2, 0x8, 0x1, 0x6, 0x7, 0xdc29, 0xef2, 0x9, 0x0, 0x5, 0x5, 0x80000001, 0x2, 0xb, 0x3ff, 0x6, 0x0, 0x8, 0x7, 0x23, 0xede, 0x3ea752f1, 0x8, 0x1, 0x3, 0x7ff, 0x0, 0x2e3, 0x0, 0x8001, 0x9, 0xd, 0x8, 0xb8, 0x3, 0xffffffff, 0x1, 0xff, 0x0, 0x4, 0x80, 0x100, 0x80, 0x5, 0x9, 0x6, 0x9, 0x6, 0x4, 0x7f, 0x4, 0x9, 0x5e, 0x6, 0x10000, 0xfffffffe, 0x4b9, 0xaddd, 0x0, 0x5, 0x5, 0x200, 0xdc, 0x101, 0x6, 0x4, 0x5, 0x3618, 0x10000, 0x9, 0x0, 0xfffffffd, 0x0, 0x1, 0x4, 0x4, 0x0, 0x80000000, 0x401, 0xfffffff7, 0x7, 0x7, 0x7f, 0xffffffff, 0x80000001, 0x71, 0x401, 0x0, 0x9, 0x8, 0x100, 0x9, 0x8, 0x7, 0x1000, 0xa9, 0xb, 0x9, 0x2, 0x62e7b6c1, 0x7, 0xff, 0x3ff, 0x2, 0x4, 0x97bd, 0x6, 0x8001, 0xd57, 0x1, 0x3e, 0x1ff, 0x8, 0x5, 0x8, 0x1ff, 0x3, 0x3, 0x4, 0x3, 0x400, 0x3, 0x10000, 0x4, 0x3, 0x3, 0x6, 0x81, 0x0, 0x3ff, 0xffff, 0x7ff, 0xa045, 0x4, 0x2888, 0x1, 0x5, 0x40, 0x2d, 0x6, 0xfffffffc, 0x6, 0xfffffffb, 0x40000, 0x0, 0x3a59, 0x4, 0x2e, 0xb9, 0xa55e, 0x0, 0x7, 0xf31, 0xfb, 0xa0a8, 0x2, 0x9, 0x8, 0x8, 0x5, 0x8000, 0x1, 0x7d00000, 0x6, 0x4, 0x4cfb, 0x5, 0x1, 0x2ae, 0x3, 0x8, 0x4, 0xfffffffb, 0x8, 0x29, 0x4, 0x5, 0x6]}]}}]}, 0x864}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484ad}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x4c}}, 0x0)

15m8.065521535s ago: executing program 0 (id=506):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000004200)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000032c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r6, 0x101, 0x70bd04, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x18}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41810}, 0x8800)
syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @loopback}, '\x00\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
listen(r7, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0)

15m6.617646036s ago: executing program 0 (id=509):
readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000280)=0x68)
syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[], 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000004800210028bd7000fddbdf250a0080", @ANYRES32=r1, @ANYBLOB="0001000014000100ff0a00000000", @ANYRES64=r1, @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x10)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
write(0xffffffffffffffff, 0x0, 0x0)
nanosleep(&(0x7f0000000280), &(0x7f0000000300))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
getpid()
openat$fb0(0xffffff9c, 0x0, 0x8000, 0x0)
write$cgroup_int(r6, &(0x7f0000000340)=0x4, 0x12)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18)

15m5.011552588s ago: executing program 0 (id=513):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)
pipe2$9p(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

14m48.211854356s ago: executing program 33 (id=513):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)
pipe2$9p(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

5m49.54588712s ago: executing program 6 (id=538):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000032c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r7, 0x101, 0x70bd04, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x18}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41810}, 0x8800)
syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @loopback}, '\x00\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
listen(r8, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0)

5m46.600838101s ago: executing program 6 (id=1269):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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")
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
gettid()
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x6, 0x1}, 0xc)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x7, @loopback}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x1, 0x600c000)
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000100)=ANY=[], 0xc)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

5m42.234015332s ago: executing program 6 (id=1273):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r3, 0x0, 0x0, 0x10fff9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r3, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})

5m40.021887874s ago: executing program 6 (id=1275):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000180)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18)
socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0)
bind$inet6(r5, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbb7fe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

5m37.340449942s ago: executing program 6 (id=1280):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x9}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r4, 0x6)

5m33.465524657s ago: executing program 6 (id=1284):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000180)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18)
socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0)
bind$inet6(r5, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbb7fe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

5m17.836601907s ago: executing program 34 (id=1284):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000180)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18)
socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0)
bind$inet6(r5, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbb7fe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

4m3.743822322s ago: executing program 4 (id=1428):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000180)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18)
socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0)
bind$inet6(r5, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbb7fe, 0x0, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

4m2.379116071s ago: executing program 4 (id=1431):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000180)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18)
socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0)
bind$inet6(r5, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbb7fe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

3m58.506014406s ago: executing program 4 (id=1435):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000180)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18)
socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0)
bind$inet6(r5, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbb7fe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

3m57.057348126s ago: executing program 4 (id=1439):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@jqfmt_vfsv1}, {@bsdgroups}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nobarrier}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@data_err_abort}]}, 0x1, 0x55c, &(0x7f0000000600)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0XUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbbVmTmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG+3dr9q7PZkkS9/ulfSWO7rN58rebz9ueVlyLit68ijhc2t1tdWV0olcvpUl6frC1emqyurJ64sFiaT+fTi9MzM6fenpl+7913ehbrG2f/+f6T2x+e+vro2ne/3D10M4nTcSBf1xrHU7jWWpmIifw9GYvTj2w41YPGBknS7x3giYzkeT4WWR9wMEbyrAf+/76MiDowpBL5D0OqOQ5oXtv36Dr4uXHvg/ULoM3xj65/NhJ7GtdG+9aSh66Msuvd8R60n7Xx65+3bmZL9O5zCIBtXbseESdHR1v6v/zT2iTv/57cyS62ebQN/R/snNvZ+OfNduOfwsb4J9qMf/a3yd0nsX3+F+72oJmOsvHf+23HvxuTVuMjee2FxphvLDl/oZxmfduLEXEsxnZn9a3mc06t3al3Wtc6/suWrP3mWDDfj7ujux9+zlypVnqamFvdux7xStvxb7Jx/JM2xz97P8522caR9NZrndZtH/+zVf8p4vW2x//BjFay9fzkZON8mGyeFZv9fePI753a73f82fHft3X840nrfG318dv4cc+/aad1D8Uf3Z//u5LPGuVd+WNXSrXa0lTEruTjzY9PP3hus97cPov/2NGt+7925//eiPi8y/hvHP751a7i79Pxn3us4//4hTsfffFDp/a76//eapSO5Y900/91u4NP894BAAAAAADAoClExIFICsWNcqFQLK7f33E49hXKlWrt+PnK8sW5aHxXdjzGCs2Z7oMt90NM5ffDNuvTj9RnIuJQRHw7srdRL85WynP9Dh4AAAAAAAAAAAAAAAAAAAAGxP4O3//P/DHS770Dnjk/+Q3Da9v878UvPQEDyf9/GF7yH4aX/IfhJf9heMl/GF7yH4aX/IfhJf8BAAAAAAAAAAAAAAAAAAAAAAAAAACgp86eOZMt9bX7V2ez+tzlleWFyuUTc2l1obi4PFucrSxdKs5XKvPltDhbWdzu9cqVyqWp6Vi+MllLq7XJ6srqucXK8sXauQuLpfn0XDq2I1EBAAAAAAAAAAAAAAAAAADA86W6srpQKpfTJYWdK4zEQOxGbwqjg7EbCj0u9LtnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//8zg2hg==")
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220"], 0x5c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000001080)='./bus\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0xfffffffc, 0x0, 0x3, 0x31, &(0x7f0000000240)="a4da57", 0x0}, 0x50)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$uac1(0x1, 0x111, &(0x7f0000000b80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x3, 0x1, 0x4, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x81}, [@feature_unit={0xf, 0x24, 0x6, 0x1, 0x5, 0x4, [0xa, 0x3, 0x8, 0xa], 0xd3}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x1, 0x6, [0xa, 0x8, 0x1, 0x7, 0x5, 0x6], 0x2}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x8, 0x7, 0x4, 0x5], 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x10, 0x7, 0x2, "9a5bf1ce99"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x3}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x7, 0x81, "66f7"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x7}, @as_header={0x7, 0x24, 0x1, 0x2, 0x1, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x36, 0xb, "47769c", "ee"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x6, 0x9, {0x7, 0x25, 0x1, 0x84, 0x9, 0x99f3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x3, 0x1a, 0xa, "d16d3fd2249d5816"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x6d, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xd, 0x1, 0xf, 0xe6, "fb58e2882b07fd1f"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xb23, 0x6, 0x2, "369e4c08920d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x60, 0x3, 0x3, 0xe, {0x7, 0x25, 0x1, 0x2, 0x8, 0x9}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x1, 0x1, 0xec, 0x8, 0xe1}, 0xf, &(0x7f0000000380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0x7, 0x4}]}, 0x4, [{0xca, &(0x7f0000000cc0)=@string={0xca, 0x3, "d2bca86e9280937991be244e915c0f502cf90145b5826d1dfc90ec38ce9b5ac32cd6e28c1568846cd5eed2eb96f7d289ffdb9f9b281a54ed4f9c3a5eb8cf0577723417bd8934e72a975d024cbdeb7a26d97e6d7bf4b42d46a82d1d9257f57a361db4f59e4918f40522c16eba0205bce50f50c9196a6b7c8e4bdfccae7c8573670c117f45551bfa67ce63585af80a80634070fa79f55be3111e4975a34c1a1eca5980cbe7e67291aa01c92059f4d1d8d997cc785edb547244840e1dba4f8dbf4d0fbf26b197e2d50d"}}, {0xb0, &(0x7f0000000dc0)=@string={0xb0, 0x3, "604131dc4281bfed59f5e81c87c538fddc5777c8e8fd225de47f09b9f4d76b60c3debcbc8d355fd8b67f485c4c34ebf6b62c364ad82f0760d1c338c198208ee55b83b3d5c07e4c2883d675e30f9bf7b2feb24a47e50234275389771dca4633701612f7b4d9e0d0be29a3af2082a01129143537ca108585e441f79873206fce6f5aafbbf9170f7e28f6a559b283a9a029ad1594b2d073765fb8dc795b9e275ced8f5601ca15cace8709d569f602bb"}}, {0xdd, &(0x7f0000000e80)=@string={0xdd, 0x3, "d181f314bb64564dfb8bb1f04cd49cdff20ef7c13ff80d794367f2e1a16748ba79881c2a66202abd399fb6e31e8cc39ca609413f76090b62455c16aefa65d763d4efaf018ae352927b7f9dcadb22fb96c455a8cb0ee1c4e3249b8929976c68d43e79149d573fffda0f4ce95fcb09390bd23e2a423c2b9c0da66e0443ad6972e5fc97d7e9f2c4ae916aa9729dd974935cf3e15678807d6c8f22a2d3ced7a0adc15c48581ac633e43c3abd4004de91ae3413b47a54eaa679ded265db64bac6da71285f29de0527f3bce50a3adba75ddc436fa501d0589e98c1ede208"}}, {0x90, &(0x7f0000000f80)=@string={0x90, 0x3, "77a185a1ffbc703718d7d23afc38fd428eb41629f9ccd6d80a47d7f6f8475382d8aca1df370b75ab58c9ed51bb2d2302a0701d1b2e0f52a5ea36ea6ac0524b0f140acc80f52723a5d746b3afcd1b8d2239e70310df9367d3ea57310dd898c2e0509ca88a576b0f2d23b31718b3b74be7b39d08196c06719d71482d19504e8a07a8449bfde7094993467cf6813317"}}]})
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800090300000000000000000a0010000000ff000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x1000c840)
r7 = open(&(0x7f0000000180)='./file0\x00', 0x161040, 0x0)
ftruncate(r7, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x4000, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_test', 0x620400, 0x18)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x800})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
splice(r4, &(0x7f00000005c0), r0, &(0x7f0000001040)=0x4085894e, 0xa, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400e5ff1000010000000000000000000000000a7c000000060a0b0400020000055000048018000180080001006f7366000c000280080001400000000424000180090001006d6574cd623e640014080003400000001710000180080001006e617400040002800900d70d73797a30000000000900020073797a32000000001402000000000100000000002e03866e478603a68a2d8766569a96b3504cad14da6c786ce22913cc424afde86949753f99343fe944c15cdb10650425c4122170ee1fb90aafdae31bafde6340c74200"/215], 0xa4}, 0x1, 0x0, 0x0, 0x850}, 0x0)
truncate(&(0x7f00000000c0)='./file1\x00', 0x100)

3m53.757543343s ago: executing program 4 (id=1445):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, 0x0, 0x40)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x18, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6a}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9000}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100005ff00"/19, @ANYBLOB="c3ff0000000000001c19128009000100626f6e64000000000c00028005"], 0x3c}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x1, [<r9=>0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
r11 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_TIOCINQ(r11, 0x8905, &(0x7f0000000100))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m52.028590247s ago: executing program 4 (id=1449):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
syz_emit_vhci(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x4001c}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})

3m51.680712772s ago: executing program 35 (id=1449):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
syz_emit_vhci(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x4001c}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})

2m26.264900097s ago: executing program 1 (id=1732):
syz_read_part_table(0x105a, &(0x7f0000000000)="$eJzsz8FNwzAABdDvOAnkBCMwBjtwZh7IOqzAsbdO0u5QyVUqtyO0Pbx38v/+kuXwUEtJUsfPci3eX/rha7vI67RkSLL734/lN5nbT1rbNlPfrccpaW81teckQzm0Om/p1NbWhyWX5uP2VOr3352+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABP7RwAAP//EWQQvw==")
open(&(0x7f00000023c0)='./file0\x00', 0x8080, 0x84)

2m25.040331334s ago: executing program 1 (id=1737):
r0 = socket(0x10, 0x3, 0x0)
r1 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r2, 0x0, 0x3fffe)
sendfile(r3, r2, 0x0, 0x7ffff000)
ioctl$NBD_DO_IT(r3, 0xab03)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000380000000000000100000009500000000000000eb8b719339f9794948335bc3534575808381e049e57706711274a14e73513a4baaf68ef20889ab90b948e197a9119d817ba06d7247e5d5555d3aec554e79567a219c6bddd3fd47ad"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40021103)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0)
r9 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x4, 0x4, 0x324, 0xffffffff, 0x0, 0xc8, 0xc8, 0xfeffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'batadv_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1, 0x60}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [], [], 'hsr0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xffb3)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r8, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}}, 0x40)
r10 = socket(0x10, 0x3, 0x0)
unshare(0x80)
r11 = open(&(0x7f0000000440)='./bus\x00', 0x59937c, 0x8)
openat$sw_sync(0xffffff9c, &(0x7f0000000100), 0x3, 0x0)
close_range(r2, r11, 0x0)
setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="5e0a000700000000fc000000000000000000000000000001fc00000000000000000000000000000100000000000000000000000000000001fe000000000000000ace"], 0x58)
copy_file_range(r11, 0x0, r11, &(0x7f0000000080)=0x8800000, 0x1, 0x0)
sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0)

2m23.93734443s ago: executing program 1 (id=1742):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a3803, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

2m23.300732379s ago: executing program 1 (id=1747):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}}, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

2m21.156771649s ago: executing program 1 (id=1758):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b200, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f0000000040)=0x8001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8009}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0xa4000608)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat2$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x0, 0x4})
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="08000200010000004004d4690a2b92a2ef49cd79fc643fbc6080515b3668"], 0x24}}, 0x0)

2m20.159643463s ago: executing program 1 (id=1763):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, 0x0, 0xcfa4)
write$cgroup_pressure(r2, &(0x7f0000000280)={'some', 0x20, 0x3ff, 0x20, 0x5}, 0x2f)

2m19.753165509s ago: executing program 36 (id=1763):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, 0x0, 0xcfa4)
write$cgroup_pressure(r2, &(0x7f0000000280)={'some', 0x20, 0x3ff, 0x20, 0x5}, 0x2f)

8.167347905s ago: executing program 7 (id=2407):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x0, 0x0)
fchdir(r2)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1})
r4 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r4)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449})
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c24"], 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x6, 0x30, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "335f2fc7"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x8, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x38}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x34, 0x80, 0x6}}}}}}}]}}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f010400000008000000000624"], 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000180)={{@host}, 0xfffffffffffffffc, 0x800000000000002})
mkdir(&(0x7f0000000000)='./file0\x00', 0x26)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r5, 0x2, 0x0)
getdents64(r5, 0x0, 0x22)

5.206722427s ago: executing program 2 (id=2425):
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)

4.880581871s ago: executing program 7 (id=2426):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000540)={0x20, 0x3e, 0x1, "b3"}, 0x0, 0x0, 0x0, 0x0})

4.707463994s ago: executing program 8 (id=2429):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000240)={0x1, 0xffee, "be4108"})

4.579990145s ago: executing program 2 (id=2433):
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e000000000000109022400030000000009"], 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x2, 0x0, 0x1, 0x2}, 0x10)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@discard}, {@dioread_nolock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nobarrier}, {@nodelalloc}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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")
mount(0x0, 0x0, 0x0, 0x185641, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x810b07, &(0x7f00000005c0)={[{@data_ordered}, {@user_xattr}, {@sb={'sb', 0x3d, 0x342}}, {@resuid}, {@grpjquota}, {@usrjquota}, {@test_dummy_encryption}, {@sb={'sb', 0x3d, 0x40}}, {@test_dummy_encryption}]}, 0xff, 0x46b, &(0x7f0000000140)="$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")
open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000080)=0x5, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
accept4$packet(r0, &(0x7f0000000300), &(0x7f0000000340)=0x6, 0xc0800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

4.445222338s ago: executing program 5 (id=2436):
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.30135843s ago: executing program 5 (id=2437):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
syz_io_uring_complete(r0)
pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0)

3.724948108s ago: executing program 8 (id=2440):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$usbmon(0x0, 0x1, 0xc00)
read(r5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x15, &(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00'}, 0x30)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)={0x80000001}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
openat$fb0(0xffffff9c, &(0x7f0000000540), 0x88800, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000080)
r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000080)={0x5, 0x802})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="24005a8020000180050004000300000014000300"], 0x40}}, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

3.486447901s ago: executing program 9 (id=2443):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

3.396973892s ago: executing program 5 (id=2444):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x2, 0x6c1, &(0x7f0000001040)="$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")
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000140), 0x12)
syz_clone(0x24308000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.185601335s ago: executing program 9 (id=2445):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
r2 = dup(r1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}], 0x2, 0x20000000)

3.106229196s ago: executing program 9 (id=2446):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a8000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

3.036674547s ago: executing program 5 (id=2447):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1da, &(0x7f0000000a00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
memfd_create(&(0x7f00000006c0)='erofs\x00', 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_emit_ethernet(0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0)

2.897613109s ago: executing program 9 (id=2448):
r0 = socket(0x1e, 0x4, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="4b97", 0x2}], 0x1}}], 0x1, 0x24008804)
sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
unshare(0x22020600)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1786, 0x8, 0x3}, {0x3, 0x4, 0x2}}}]}]}]}}]}, 0x54}}, 0x0)

2.719962752s ago: executing program 9 (id=2449):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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")
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[], &(0x7f00000003c0)={0x1, 0x4, [0x57f, 0x94a, 0x641, 0x63f]})
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)

2.17134421s ago: executing program 5 (id=2450):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r2, 0x2007ffb)
sendfile(r1, r2, 0x0, 0x1000000201005)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
sendfile(r3, r4, 0x0, 0x1000000201005)
r5 = open(0x0, 0x185042, 0x182)
copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0xfffffbffa003e45c, 0x700000000000000)
truncate(&(0x7f0000000280)='./bus\x00', 0x9)

2.091593831s ago: executing program 2 (id=2451):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}}, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

1.610722797s ago: executing program 7 (id=2452):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000)

1.395691071s ago: executing program 8 (id=2453):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x800, 0x4)

1.101655964s ago: executing program 8 (id=2454):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x6, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

978.442966ms ago: executing program 7 (id=2455):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800003, 0x11, r0, 0xa928e000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

903.388607ms ago: executing program 9 (id=2456):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@nolazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x436, &(0x7f0000000e80)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x4)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
truncate(&(0x7f0000000040)='./file1\x00', 0x6)

837.396758ms ago: executing program 8 (id=2457):
r0 = memfd_create(0x0, 0x0)
write(r0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18008, &(0x7f0000003b40)=ANY=[], 0x7, 0x2f4, &(0x7f0000000880)="$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")
pread64(0xffffffffffffffff, 0x0, 0x0, 0x101)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123440, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)

780.364919ms ago: executing program 2 (id=2458):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a8000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

599.228142ms ago: executing program 2 (id=2459):
r0 = socket(0x1e, 0x4, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="4b97", 0x2}], 0x1}}], 0x1, 0x24008804)
sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
unshare(0x22020600)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1786, 0x8, 0x3}, {0x3, 0x4, 0x2}}}]}]}]}}]}, 0x54}}, 0x0)

439.083924ms ago: executing program 7 (id=2460):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400050000010000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x40000)

226.955057ms ago: executing program 5 (id=2461):
syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000040)=ANY=[], 0x1, 0x1ca, &(0x7f00000008c0)="$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")
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

134.079688ms ago: executing program 7 (id=2462):
socket$inet6_tcp(0xa, 0x1, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$inet(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2a)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0)

81.625729ms ago: executing program 2 (id=2463):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
readv(r1, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000740)=""/170, 0xaa}], 0x3)

0s ago: executing program 8 (id=2464):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@data_err_abort}, {@noload}, {@nobarrier}, {@nouid32}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet(0x2, 0x2, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x8000)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)
syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

rted failures. Some data may be lost.
[ 1133.423676][T12585] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1134.676813][ T4757] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[ 1135.105104][ T4757] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1135.180138][ T4757] usb 9-1: not running at top speed; connect to a high speed hub
[ 1135.263690][ T4757] usb 9-1: config 17 has an invalid interface number: 8 but max is 1
[ 1135.282300][ T4757] usb 9-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1135.318108][ T4757] usb 9-1: config 17 has no interface number 0
[ 1135.333747][ T4757] usb 9-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 149, changing to 4
[ 1135.342458][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1135.421719][ T4757] usb 9-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 29136, setting to 1023
[ 1135.503313][ T4757] usb 9-1: config 17 interface 8 has no altsetting 0
[ 1135.581896][T12655] raw_sendmsg: syz.1.1637 forgot to set AF_INET. Fix it!
[ 1135.623665][ T4757] usb 9-1: string descriptor 0 read error: -71
[ 1135.631238][ T4757] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1135.693221][ T4757] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.784074][ T4757] usb 9-1: can't set config #17, error -71
[ 1135.804226][ T4757] usb 9-1: USB disconnect, device number 5
[ 1136.996893][ T4185] Bluetooth: hci0: unexpected event for opcode 0x0c1a
[ 1140.054899][T12723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1140.498641][ T4185] Bluetooth: hci3: ACL packet for unknown connection handle 201
[ 1140.723708][T12543] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[ 1141.244867][T12543] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1141.343755][T12543] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1141.423531][T12543] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1141.432820][T12543] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.455887][T12543] usb 9-1: config 0 descriptor??
[ 1141.508143][T12543] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1141.526102][T12543] dvb-usb: bulk message failed: -22 (3/0)
[ 1141.763742][T12543] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1141.825515][T12761] 9pnet_virtio: no channels available for device syz
[ 1142.887270][T12543] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1142.905855][T12543] usb 9-1: media controller created
[ 1142.934662][T12543] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1143.009526][T12543] dvb-usb: bulk message failed: -22 (6/0)
[ 1143.053144][T12543] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1143.097103][T12779] 9pnet_virtio: no channels available for device syz
[ 1143.148987][T12543] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input37
[ 1143.215311][T12543] dvb-usb: schedule remote query interval to 150 msecs.
[ 1143.290158][T12543] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1143.362825][T12543] usb 9-1: USB disconnect, device number 6
[ 1143.525734][T12543] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1143.727481][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1673'.
[ 1143.858462][T12784] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1148.384397][T12847] netlink: 'syz.7.1689': attribute type 10 has an invalid length.
[ 1148.566893][T12847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1148.655990][T12847] device bridge_slave_1 left promiscuous mode
[ 1148.688469][T12847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1148.826060][T12847] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1148.864375][    C0] Illegal XDP return value 16128, expect packet loss!
[ 1150.097389][T12875] device syzkaller0 entered promiscuous mode
[ 1153.614502][T12929] tap0: tun_chr_ioctl cmd 1074025677
[ 1153.660699][T12929] tap0: linktype set to 823
[ 1154.260565][T12963] loop1: detected capacity change from 0 to 16
[ 1154.428490][T12963] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1154.529583][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36
[ 1154.586670][T12973] loop2: detected capacity change from 0 to 128
[ 1154.634818][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36
[ 1154.660783][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36
[ 1154.777200][T12963] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36
[ 1154.819016][T12973] attempt to access beyond end of device
[ 1154.819016][T12973] loop2: rw=2049, want=240, limit=128
[ 1154.886985][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 85 @ nid 36
[ 1154.968425][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36
[ 1155.075540][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 84 @ nid 36
[ 1155.171833][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36
[ 1155.200345][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'.
[ 1155.216001][T12984] ODEBUG: Out of memory. ODEBUG disabled
[ 1155.263762][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 83 @ nid 36
[ 1155.308554][T12963] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1155.331444][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 82 @ nid 36
[ 1155.344997][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 81 @ nid 36
[ 1155.356119][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 79 @ nid 36
[ 1155.366332][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36
[ 1155.376303][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 77 @ nid 36
[ 1155.386262][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36
[ 1155.398548][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36
[ 1155.466351][T12963] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1155.557277][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 75 @ nid 36
[ 1155.664684][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36
[ 1155.742717][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36
[ 1155.815221][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 73 @ nid 36
[ 1155.880029][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36
[ 1155.915732][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 71 @ nid 36
[ 1155.917111][T12984] syz.5.1723 (12984): drop_caches: 2
[ 1155.984072][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36
[ 1156.025051][T12991] loop2: detected capacity change from 0 to 16
[ 1156.075976][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36
[ 1156.103313][T12963] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36
[ 1156.115253][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 65 @ nid 36
[ 1156.116567][T12991] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1156.124922][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36
[ 1156.147967][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 64 @ nid 36
[ 1156.176750][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36
[ 1156.197791][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36
[ 1156.215171][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36
[ 1156.243210][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 60 @ nid 36
[ 1156.260835][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36
[ 1156.280724][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36
[ 1156.303668][T12963] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1156.314958][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36
[ 1156.337006][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36
[ 1156.357262][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36
[ 1156.378214][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 57 @ nid 36
[ 1156.392253][T12991] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36
[ 1156.409275][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36
[ 1156.454178][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 55 @ nid 36
[ 1156.483657][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36
[ 1156.494377][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 85 @ nid 36
[ 1156.497499][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 53 @ nid 36
[ 1156.521921][T12963] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 50 of nid 36
[ 1156.573520][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36
[ 1156.609010][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 51 @ nid 36
[ 1156.661492][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36
[ 1156.668508][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36
[ 1156.718667][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36
[ 1156.735108][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36
[ 1156.778721][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 49 @ nid 36
[ 1156.781434][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36
[ 1156.803511][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36
[ 1156.853928][T12991] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1156.855896][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 48 @ nid 36
[ 1156.881354][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36
[ 1156.892658][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36
[ 1156.928965][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 81 @ nid 36
[ 1156.955485][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36
[ 1156.963572][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36
[ 1157.012460][T12963] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1157.013613][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36
[ 1157.050257][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36
[ 1157.082275][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 77 @ nid 36
[ 1157.109149][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36
[ 1157.125330][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36
[ 1157.136962][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 44 @ nid 36
[ 1157.176620][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36
[ 1157.191630][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36
[ 1157.213536][T12991] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1157.233500][T12963] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1157.259523][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36
[ 1157.282325][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36
[ 1157.304414][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36
[ 1157.325417][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36
[ 1157.343943][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36
[ 1157.369994][T12963] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1157.387336][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 73 @ nid 36
[ 1157.410235][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36
[ 1157.433552][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36
[ 1157.453771][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36
[ 1157.463049][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36
[ 1157.506476][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36
[ 1157.553865][T12963] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1157.583556][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36
[ 1157.593977][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36
[ 1157.622293][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36
[ 1157.642139][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36
[ 1157.675948][T12991] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36
[ 1157.685618][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36
[ 1157.705871][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36
[ 1157.723527][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 65 @ nid 36
[ 1157.753500][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36
[ 1157.760745][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36
[ 1157.793205][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36
[ 1157.812118][T13004] loop7: detected capacity change from 0 to 32768
[ 1157.820274][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 64 @ nid 36
[ 1157.829359][T12963] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[ 1157.829393][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36
[ 1157.829411][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[ 1157.829433][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36
[ 1157.829451][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[ 1157.829472][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 14 @ nid 36
[ 1157.829491][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[ 1157.829512][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36
[ 1157.829598][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[ 1157.829619][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36
[ 1157.829701][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36
[ 1157.829724][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 36
[ 1157.829754][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36
[ 1157.829849][T12963] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[ 1157.887475][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36
[ 1157.989317][T13003] loop8: detected capacity change from 0 to 32768
[ 1158.002434][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36
[ 1158.019728][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36
[ 1158.034263][T13003] xfs: Unknown parameter 'smackfstransmute'
[ 1158.050120][T13009] loop5: detected capacity change from 0 to 32768
[ 1158.073607][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 60 @ nid 36
[ 1158.082804][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36
[ 1158.113233][T12963] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36
[ 1158.163615][T12963] attempt to access beyond end of device
[ 1158.163615][T12963] loop1: rw=524288, want=312, limit=16
[ 1158.175421][T12991] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1158.225250][T12963] attempt to access beyond end of device
[ 1158.225250][T12963] loop1: rw=524288, want=1049280, limit=16
[ 1158.238680][T12963] attempt to access beyond end of device
[ 1158.238680][T12963] loop1: rw=524288, want=736, limit=16
[ 1158.260211][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36
[ 1158.293920][T12963] attempt to access beyond end of device
[ 1158.293920][T12963] loop1: rw=524288, want=776, limit=16
[ 1158.306091][T13004] XFS (loop7): Mounting V5 Filesystem
[ 1158.313255][T12963] attempt to access beyond end of device
[ 1158.313255][T12963] loop1: rw=524288, want=848, limit=16
[ 1158.325040][T12963] attempt to access beyond end of device
[ 1158.325040][T12963] loop1: rw=524288, want=13478624104, limit=16
[ 1158.339780][T12963] attempt to access beyond end of device
[ 1158.339780][T12963] loop1: rw=524288, want=13478624080, limit=16
[ 1158.339944][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 57 @ nid 36
[ 1158.352451][T12963] attempt to access beyond end of device
[ 1158.352451][T12963] loop1: rw=524288, want=56, limit=16
[ 1158.393497][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36
[ 1158.402721][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 55 @ nid 36
[ 1158.439586][T12963] attempt to access beyond end of device
[ 1158.439586][T12963] loop1: rw=524288, want=40, limit=16
[ 1158.443955][T13009] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[ 1158.545865][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36
[ 1158.610718][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 53 @ nid 36
[ 1158.626089][T13004] XFS (loop7): Ending clean mount
[ 1158.648333][T13004] XFS (loop7): Quotacheck needed: Please wait.
[ 1158.672164][T12991] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 50 of nid 36
[ 1158.739526][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 51 @ nid 36
[ 1158.789763][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36
[ 1158.804629][   T26] audit: type=1800 audit(1749108424.826:78): pid=13009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1731" name="file1" dev="loop5" ino=17058 res=0 errno=0
[ 1158.863921][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36
[ 1158.893546][T13004] XFS (loop7): Quotacheck: Done.
[ 1158.897157][   T26] audit: type=1326 audit(1749108424.856:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12998 comm="syz.8.1729" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cfcc9c929 code=0x0
[ 1158.943711][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 49 @ nid 36
[ 1159.024682][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36
[ 1159.055005][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 48 @ nid 36
[ 1159.106261][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36
[ 1159.140453][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36
[ 1159.143525][ T4246] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[ 1159.173981][T12991] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1159.186123][T13036] loop1: detected capacity change from 0 to 8192
[ 1159.210536][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36
[ 1159.241756][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36
[ 1159.279895][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36
[ 1159.280688][T13036]  loop1: p1 p2 p3 p4
[ 1159.280688][T13036]  p3: <minix: p5 p6 p7 >
[ 1159.338995][T12996] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[ 1159.345938][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36
[ 1159.394194][T12991] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1159.423522][T13036] loop1: partition table partially beyond EOD, truncated
[ 1159.449510][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36
[ 1159.474785][T13036] loop1: p1 start 51379968 is beyond EOD, truncated
[ 1159.481545][T13036] loop1: p2 start 4293394690 is beyond EOD, truncated
[ 1159.520537][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36
[ 1159.553504][T13036] loop1: p3 size 100663552 extends beyond EOD, truncated
[ 1159.558171][T12991] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1159.584460][T13036] loop1: p4 size 50331648 extends beyond EOD, truncated
[ 1159.637612][T13036] loop1: p5 start 51379968 is beyond EOD, truncated
[ 1159.640168][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36
[ 1159.678759][T13036] loop1: p6 start 4293394690 is beyond EOD, truncated
[ 1159.731427][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36
[ 1159.732723][T13036] loop1: p7 size 100663552 extends beyond EOD, 
[ 1159.744983][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36
[ 1159.756215][T13036] truncated
[ 1159.819331][T12991] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1159.849284][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36
[ 1159.866855][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36
[ 1159.920539][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36
[ 1159.941640][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36
[ 1159.970442][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36
[ 1160.004186][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 23 @ nid 36
[ 1160.079394][T12991] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[ 1160.103666][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'.
[ 1160.154281][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36
[ 1160.173893][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[ 1160.247046][ T6634] udevd[6634]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[ 1160.254674][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36
[ 1160.261291][ T8600] udevd[8600]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[ 1160.307131][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[ 1160.321733][ T8738] udevd[8738]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[ 1160.373897][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 14 @ nid 36
[ 1160.439571][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[ 1160.505777][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36
[ 1160.550495][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[ 1160.593078][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36
[ 1160.644959][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36
[ 1160.691725][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 36
[ 1160.729812][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36
[ 1160.765952][T12991] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[ 1160.819997][T12991] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36
[ 1160.853657][T12991] handle_bad_sector: 2 callbacks suppressed
[ 1160.853684][T12991] attempt to access beyond end of device
[ 1160.853684][T12991] loop2: rw=524288, want=312, limit=16
[ 1160.913558][T12991] attempt to access beyond end of device
[ 1160.913558][T12991] loop2: rw=524288, want=1049280, limit=16
[ 1160.924160][ T4246] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1160.963551][T12991] attempt to access beyond end of device
[ 1160.963551][T12991] loop2: rw=524288, want=736, limit=16
[ 1160.995329][T12991] attempt to access beyond end of device
[ 1160.995329][T12991] loop2: rw=524288, want=776, limit=16
[ 1161.006884][ T4246] usb 6-1: no configurations
[ 1161.019500][ T4246] usb 6-1: can't read configurations, error -22
[ 1161.043536][T12991] attempt to access beyond end of device
[ 1161.043536][T12991] loop2: rw=524288, want=848, limit=16
[ 1161.083508][T12991] attempt to access beyond end of device
[ 1161.083508][T12991] loop2: rw=524288, want=13478624104, limit=16
[ 1161.106099][T13059] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1161.112265][T13059] syzkaller0: linktype set to 0
[ 1161.126128][T12991] attempt to access beyond end of device
[ 1161.126128][T12991] loop2: rw=524288, want=13478624080, limit=16
[ 1161.146314][T12991] attempt to access beyond end of device
[ 1161.146314][T12991] loop2: rw=524288, want=56, limit=16
[ 1161.161572][T12991] attempt to access beyond end of device
[ 1161.161572][T12991] loop2: rw=524288, want=40, limit=16
[ 1161.183578][T12991] attempt to access beyond end of device
[ 1161.183578][T12991] loop2: rw=524288, want=96, limit=16
[ 1161.399396][T11354] XFS (loop7): Unmounting Filesystem
[ 1161.752539][T10349] ocfs2: Unmounting device (7,5) on (node local)
[ 1165.400485][T13094] loop8: detected capacity change from 0 to 32768
[ 1165.477704][T13094] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.1753 (13094)
[ 1165.624981][T13094] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1165.698894][T13094] BTRFS info (device loop8): force zlib compression, level 3
[ 1165.708786][T13094] BTRFS info (device loop8): force clearing of disk cache
[ 1165.732351][T13094] BTRFS info (device loop8): setting nodatasum
[ 1165.813713][T13094] BTRFS info (device loop8): use zlib compression, level 3
[ 1165.821107][T13094] BTRFS info (device loop8): allowing degraded mounts
[ 1165.923853][T13094] BTRFS info (device loop8): enabling disk space caching
[ 1165.930959][T13094] BTRFS info (device loop8): disk space caching is enabled
[ 1166.013676][T13094] BTRFS info (device loop8): has skinny extents
[ 1166.156702][T13134] netdevsim netdevsim5: Direct firmware load for  failed with error -2
[ 1166.183289][T13123] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1166.209057][T13094] BTRFS info (device loop8): enabling ssd optimizations
[ 1166.221286][T13094] BTRFS info (device loop8): clearing free space tree
[ 1166.228602][T13094] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1166.238944][T13094] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1166.281945][T13134] netdevsim netdevsim5: Falling back to sysfs fallback for: 
[ 1166.986759][T12543] Bluetooth: hci1: command 0x0405 tx timeout
[ 1167.211375][ T8738] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop8 scanned by udevd (8738)
[ 1170.363643][ T9808] Bluetooth: hci4: command 0x0409 tx timeout
[ 1170.567943][T13166] chnl_net:caif_netlink_parms(): no params data found
[ 1170.871422][T13239] tipc: Started in network mode
[ 1170.877151][T13239] tipc: Node identity 4, cluster identity 4711
[ 1170.883856][T13239] tipc: Node number set to 4
[ 1171.104656][T13166] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1171.111812][T13166] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.163218][T13166] device bridge_slave_0 entered promiscuous mode
[ 1171.229379][T13166] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1171.258312][T13166] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1171.284680][T13166] device bridge_slave_1 entered promiscuous mode
[ 1171.450010][T13166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1171.526914][T13166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1171.661727][T13166] team0: Port device team_slave_0 added
[ 1171.716504][T13166] team0: Port device team_slave_1 added
[ 1171.874999][T13166] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1171.902487][T13166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1171.981521][T13246] loop7: detected capacity change from 0 to 32768
[ 1172.013582][T13166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1172.065577][T13166] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1172.072578][T13166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1172.128267][T13246] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.1787 (13246)
[ 1172.207941][T13246] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[ 1172.260731][T13246] BTRFS info (device loop7): enabling disk space caching
[ 1172.308362][T13246] BTRFS info (device loop7): force clearing of disk cache
[ 1172.322021][T13246] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1172.334867][T13166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1172.351229][T13246] BTRFS info (device loop7): use zstd compression, level 3
[ 1172.376722][T13246] BTRFS info (device loop7): disk space caching is enabled
[ 1172.425137][T13246] BTRFS info (device loop7): has skinny extents
[ 1172.443946][   T13] Bluetooth: hci4: command 0x041b tx timeout
[ 1172.589783][T13166] device hsr_slave_0 entered promiscuous mode
[ 1172.630746][T13166] device hsr_slave_1 entered promiscuous mode
[ 1172.684032][T13166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1172.692859][T13166] Cannot create hsr debugfs directory
[ 1172.703510][ T9808] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[ 1172.762730][T13246] BTRFS info (device loop7): enabling ssd optimizations
[ 1172.831673][T13246] BTRFS info (device loop7): clearing free space tree
[ 1172.868975][T13246] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1172.953970][T13246] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1173.063688][ T9808] usb 9-1: config 0 has an invalid interface number: 23 but max is 0
[ 1173.071912][ T9808] usb 9-1: config 0 has no interface number 0
[ 1173.253743][ T9808] usb 9-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b
[ 1173.283425][ T9808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1173.304025][ T9808] usb 9-1: Product: syz
[ 1173.308244][ T9808] usb 9-1: Manufacturer: syz
[ 1173.312862][ T9808] usb 9-1: SerialNumber: syz
[ 1173.375835][ T9808] usb 9-1: config 0 descriptor??
[ 1173.444919][ T9808] ftdi_sio 9-1:0.23: FTDI USB Serial Device converter detected
[ 1173.458639][   T26] audit: type=1804 audit(1749108439.486:80): pid=13246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1787" name="/newroot/71/file0/file1" dev="loop7" ino=260 res=1 errno=0
[ 1173.525507][ T9808] usb 9-1: Detected SIO
[ 1173.575403][ T9808] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1173.690389][   T26] audit: type=1804 audit(1749108439.706:81): pid=13325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1787" name="/newroot/71/file0/file1" dev="loop7" ino=260 res=1 errno=0
[ 1173.733854][T13166] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1173.786907][ T9808] usb 9-1: USB disconnect, device number 7
[ 1173.836720][T13166] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1173.858709][ T9808] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1173.874870][T13166] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1173.917004][T13166] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1173.920523][ T9808] ftdi_sio 9-1:0.23: device disconnected
[ 1174.288821][T13166] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1174.361156][T13166] 8021q: adding VLAN 0 to HW filter on device team0
[ 1174.417675][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1174.426642][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1174.467301][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1174.489440][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1174.523890][   T13] Bluetooth: hci5: command 0x0406 tx timeout
[ 1174.530882][   T13] Bluetooth: hci4: command 0x040f tx timeout
[ 1174.552245][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1174.559844][ T8268] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1174.618876][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1174.660152][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1174.707845][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1174.715153][ T8268] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1174.753903][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1174.812285][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1174.857911][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1174.906016][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1174.927281][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1174.945045][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1175.277162][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1175.450823][T13364] mmap: syz.8.1806 (13364) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[ 1175.534079][T13166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1175.617181][T13166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1175.630097][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1175.683231][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1175.844530][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1175.855259][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1175.866255][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1175.903526][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1176.603500][ T9808] Bluetooth: hci4: command 0x0419 tx timeout
[ 1176.623174][ T4260] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.694083][ T4260] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.735990][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1176.785149][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1176.849129][ T4260] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.870808][T13166] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1176.988359][ T4260] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.571185][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.577773][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.619774][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1177.654885][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1177.715166][  T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1177.727522][  T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1177.750956][T13166] device veth0_vlan entered promiscuous mode
[ 1177.764541][  T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1177.783903][  T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1177.820233][T13166] device veth1_vlan entered promiscuous mode
[ 1177.906184][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1177.937384][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1177.967017][T13166] device veth0_macvtap entered promiscuous mode
[ 1178.009850][T13166] device veth1_macvtap entered promiscuous mode
[ 1178.071770][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1178.099495][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.122460][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1178.149985][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.184977][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1178.213030][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.248478][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1178.269033][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.299110][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1178.341060][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.396225][T13166] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1178.545075][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1178.574518][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1178.610302][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1178.634443][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1178.653190][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1178.695833][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.722260][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1178.740727][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.752058][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1178.763649][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.774803][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1178.785899][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.797166][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1178.809415][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.824209][T13166] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1178.863164][T13469] batman_adv: batadv0: Adding interface: dummy0
[ 1178.892480][T13469] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1178.953757][T13469] batman_adv: batadv0: Interface activated: dummy0
[ 1179.019241][T13473] batadv0: mtu less than device minimum
[ 1179.038228][T13473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1179.051407][T13473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1179.064325][T13473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1179.076374][T13473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1179.089031][T13473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1179.101701][T13473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1179.114402][T13473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1179.127176][T13473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1179.139797][T13473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1179.180651][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1179.200528][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1179.233112][T13166] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.251493][T13166] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.281854][T13166] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.318440][T13166] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.357652][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1828'.
[ 1180.776866][ T4599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1180.833926][ T4599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1180.946858][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1181.132236][  T383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1181.173285][  T383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1181.272385][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1181.939163][ T4260] IPVS: stopping backup sync thread 4344 ...
[ 1182.389279][ T4260] device hsr_slave_0 left promiscuous mode
[ 1182.412380][ T4260] device hsr_slave_1 left promiscuous mode
[ 1182.424627][ T4260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1182.462357][ T4260] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1182.505034][ T4260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1182.549525][ T4260] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1182.554991][T13511] loop7: detected capacity change from 0 to 32768
[ 1182.600956][ T4260] device bridge_slave_1 left promiscuous mode
[ 1182.687114][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1182.741191][T13511] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[ 1182.866334][ T4260] device bridge_slave_0 left promiscuous mode
[ 1182.872933][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1182.958803][ T4260] device veth1_macvtap left promiscuous mode
[ 1182.983522][ T4260] device veth0_macvtap left promiscuous mode
[ 1182.996246][   T26] audit: type=1800 audit(1749108449.016:82): pid=13511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1837" name="file1" dev="loop7" ino=17058 res=0 errno=0
[ 1183.043685][ T4260] device veth1_vlan left promiscuous mode
[ 1183.080640][ T4260] device veth0_vlan left promiscuous mode
[ 1183.383507][T13366] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[ 1183.689166][T11354] ocfs2: Unmounting device (7,7) on (node local)
[ 1183.753707][T13366] usb 6-1: config 0 has an invalid interface number: 138 but max is 0
[ 1183.772264][T13366] usb 6-1: config 0 has no interface number 0
[ 1183.812806][T13366] usb 6-1: config 0 interface 138 altsetting 0 has an invalid endpoint with address 0x61, skipping
[ 1183.922019][T13366] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=c8.66
[ 1183.964169][T13366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.000895][T13366] usb 6-1: config 0 descriptor??
[ 1184.038280][ T4260] bond2 (unregistering): Released all slaves
[ 1184.100850][ T4260] bond1 (unregistering): Released all slaves
[ 1184.308193][T13366] usb 6-1: string descriptor 0 read error: -71
[ 1184.378030][T13366] usbtest 6-1:0.138: Linux gadget zero
[ 1184.413616][T13366] usbtest 6-1:0.138: full-speed {control in/out iso-out} tests (+alt)
[ 1184.451008][T13366] usb 6-1: USB disconnect, device number 6
[ 1184.698628][ T4260] team0 (unregistering): Port device team_slave_1 removed
[ 1184.731460][ T4260] team0 (unregistering): Port device team_slave_0 removed
[ 1184.751197][ T4260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1184.780052][ T4260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1185.388292][ T4260] bond0 (unregistering): Released all slaves
[ 1188.842664][T13586] usb usb8: usbfs: process 13586 (syz.9.1847) did not claim interface 0 before use
[ 1189.192732][T13600] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1852'.
[ 1189.583539][ T4246] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1189.628949][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1190.023664][ T4246] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config
[ 1190.093473][ T4246] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1190.173954][ T4246] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1190.403882][ T4246] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1190.415200][ T4246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1190.513544][ T4246] usb 3-1: Product: syz
[ 1190.542162][ T4246] usb 3-1: Manufacturer: syz
[ 1190.554533][ T4246] usb 3-1: SerialNumber: syz
[ 1190.723580][T13366] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1190.985539][T13366] usb 6-1: Using ep0 maxpacket: 16
[ 1191.003777][ T4246] usb 3-1: Found UVC 0.00 device syz (8086:0b07)
[ 1191.013469][ T4246] usb 3-1: No valid video chain found.
[ 1191.064553][ T4246] usb 3-1: USB disconnect, device number 4
[ 1191.104611][T13366] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[ 1191.323675][T13366] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1191.354204][T13366] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.438685][T13366] usb 6-1: Product: syz
[ 1191.460405][T13366] usb 6-1: Manufacturer: syz
[ 1191.479381][T13366] usb 6-1: SerialNumber: syz
[ 1191.534799][T13366] usb 6-1: config 0 descriptor??
[ 1191.920510][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'.
[ 1192.403490][ T4216] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1192.663791][ T4216] usb 10-1: Using ep0 maxpacket: 16
[ 1192.783708][ T4216] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[ 1193.023739][ T4216] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1193.033347][ T4216] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.111253][ T4216] usb 10-1: Product: syz
[ 1193.123458][ T4216] usb 10-1: Manufacturer: syz
[ 1193.153492][ T4216] usb 10-1: SerialNumber: syz
[ 1193.163330][T13366] usb 6-1: USB disconnect, device number 7
[ 1193.194649][ T4216] usb 10-1: config 0 descriptor??
[ 1193.490249][T13662] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[ 1193.682779][T13692] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1871'.
[ 1193.849382][T13697] loop7: detected capacity change from 0 to 512
[ 1193.937528][T13697] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 1195.361085][T13697] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #16: comm syz.7.1873: corrupted inode contents
[ 1195.391589][T13697] EXT4-fs error (device loop7): ext4_dirty_inode:6039: inode #16: comm syz.7.1873: mark_inode_dirty error
[ 1195.417714][T13697] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #16: comm syz.7.1873: corrupted inode contents
[ 1195.423754][T13697] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.1873: mark_inode_dirty error
[ 1195.424330][T13697] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #16: comm syz.7.1873: corrupted inode contents
[ 1195.473593][T13697] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem
[ 1195.590134][ T4246] usb 10-1: USB disconnect, device number 2
[ 1195.668089][T13729] loop9: detected capacity change from 0 to 16
[ 1195.754067][T13697] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #16: comm syz.7.1873: corrupted inode contents
[ 1195.774581][T13729] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1195.800246][T13728] loop5: detected capacity change from 0 to 2048
[ 1195.815086][T13729] xt_hashlimit: max too large, truncated to 1048576
[ 1195.844061][T13697] EXT4-fs error (device loop7): ext4_truncate:4273: inode #16: comm syz.7.1873: mark_inode_dirty error
[ 1195.885672][T13697] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem
[ 1196.045400][T13697] EXT4-fs (loop7): 1 truncate cleaned up
[ 1196.095001][T13697] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1196.191048][T13697] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1196.231969][T13741] loop9: detected capacity change from 0 to 2048
[ 1196.349893][T13728] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1196.374789][T13741] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1196.469647][T13741] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1196.563981][T13741] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[ 1196.678408][T13741] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1197.428817][T13762] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1889'.
[ 1197.524665][T13761] loop7: detected capacity change from 0 to 256
[ 1197.572906][T13762] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1889'.
[ 1197.694341][T13762] netlink: 'syz.2.1889': attribute type 5 has an invalid length.
[ 1197.802219][T13762] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1889'.
[ 1197.883343][T13761] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[ 1198.820826][T13781] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[ 1198.900974][T13781] hfsplus: unable to find HFS+ superblock
[ 1199.102897][T13786] loop5: detected capacity change from 0 to 2048
[ 1199.198929][ T8738]  loop5: p1 < > p3
[ 1199.226399][ T8738] loop5: p3 size 134217728 extends beyond EOD, truncated
[ 1199.279161][T13786]  loop5: p1 < > p3
[ 1199.377615][T13786] loop5: p3 size 134217728 extends beyond EOD, truncated
[ 1199.408412][T13802] loop7: detected capacity change from 0 to 256
[ 1199.449921][T13802] exfat: Deprecated parameter 'namecase'
[ 1199.488189][T13802] exfat: Deprecated parameter 'utf8'
[ 1199.530797][T13802] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[ 1199.642273][T13802] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[ 1199.930181][ T6634] udevd[6634]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[ 1199.933870][ T8738] udevd[8738]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[ 1200.523006][T13842] loop7: detected capacity change from 0 to 512
[ 1200.605420][T13842] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.1911: Invalid inode bitmap blk 4 in block_group 0
[ 1200.627795][T13842] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,nouid32,,errors=continue. Quota mode: none.
[ 1200.913523][T13366] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1200.925047][T13854] loop2: detected capacity change from 0 to 16
[ 1200.997883][T13857] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1201.834096][T13366] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1201.873106][T13854] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1201.919274][T13366] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1201.951235][T13854] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1202.012102][T13854] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[ 1202.044442][T13366] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1202.083506][T13366] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1202.106299][T13366] usb 9-1: SerialNumber: syz
[ 1202.143455][T12535] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1202.382427][T13872] loop7: detected capacity change from 0 to 512
[ 1202.431054][T13366] usb 9-1: 0:2 : does not exist
[ 1202.450326][T13872] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[ 1202.504428][T12535] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[ 1202.513887][T13872] EXT4-fs (loop7): revision level too high, forcing read-only mode
[ 1202.569834][T12535] usb 6-1: config 0 has no interface number 0
[ 1202.576949][T13872] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002]
[ 1202.593055][T13878] loop2: detected capacity change from 0 to 512
[ 1202.608863][T12535] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1202.634441][T13872] EXT4-fs (loop7): orphan cleanup on readonly fs
[ 1202.641186][T13872] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0
[ 1202.699847][T13366] usb 9-1: USB disconnect, device number 8
[ 1202.706262][T12535] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1202.713740][T13872] EXT4-fs warning (device loop7): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1202.753524][T13872] EXT4-fs (loop7): Cannot turn on quotas: error -22
[ 1202.756312][T12535] usb 6-1: config 0 interface 255 has no altsetting 0
[ 1202.772805][T13872] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1920: bg 0: block 40: padding at end of block bitmap is not set
[ 1202.776356][T12535] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1202.817721][T13872] EXT4-fs (loop7): Remounting filesystem read-only
[ 1202.834636][T13872] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem
[ 1202.854368][T13872] EXT4-fs (loop7): Remounting filesystem read-only
[ 1202.856686][T12535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1202.869524][T13872] EXT4-fs (loop7): 1 truncate cleaned up
[ 1202.874687][T13878] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1202.883495][T13872] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,norecovery,nouid32,nomblk_io_submit,. Quota mode: writeback.
[ 1202.905468][T13878] ext4 filesystem being mounted at /533/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1203.020307][T12535] usb 6-1: config 0 descriptor??
[ 1203.027349][ T8738] udevd[8738]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1203.104864][T12535] ums-realtek 6-1:0.255: USB Mass Storage device detected
[ 1203.231602][T13892] loop9: detected capacity change from 0 to 128
[ 1203.309526][T13895] loop8: detected capacity change from 0 to 512
[ 1203.373913][T13367] usb 6-1: USB disconnect, device number 8
[ 1203.383179][T13895] EXT4-fs (loop8): Ignoring removed nobh option
[ 1203.467440][T13895] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1927: invalid indirect mapped block 256 (level 2)
[ 1203.542909][T13892] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[ 1203.954697][T13895] EXT4-fs (loop8): 2 truncates cleaned up
[ 1204.251671][T13895] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[ 1205.172983][T13926] loop8: detected capacity change from 0 to 1024
[ 1206.683688][T13366] Bluetooth: hci4: command 0x0405 tx timeout
[ 1207.304180][T13950] loop8: detected capacity change from 0 to 764
[ 1208.095588][T13950] rock: corrupted directory entry. extent=32, offset=2044, size=237
[ 1208.275802][T13966] binder: 13960:13966 ioctl 4018620d 0 returned -22
[ 1208.530864][T13981] loop7: detected capacity change from 0 to 256
[ 1208.701249][T13981] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1208.733464][T13981] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[ 1208.892355][T13981] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1209.001491][T13996] loop9: detected capacity change from 0 to 128
[ 1209.032035][T13996] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1209.078116][T13981] exFAT-fs (loop7): hint_cluster is invalid (17)
[ 1209.351134][T13996] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1209.859357][ T4303] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1210.203734][   T13] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1210.853594][T14036] binder: 14029:14036 ioctl c0306201 0 returned -14
[ 1211.003995][   T13] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1211.031712][   T13] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1211.154084][   T13] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1211.171036][   T13] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1211.189015][   T13] usb 10-1: SerialNumber: syz
[ 1211.596581][   T13] usb 10-1: 0:2 : does not exist
[ 1211.648520][   T13] usb 10-1: USB disconnect, device number 3
[ 1213.135706][T12535] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[ 1214.254470][ T8738] udevd[8738]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1214.489330][T14064] loop7: detected capacity change from 0 to 1024
[ 1214.684089][T13367] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1214.695777][T14064] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=880ec028, mo2=0002]
[ 1214.709599][T14064] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,bsddf,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,debug,nolazytime,quota,nodiscard,. Quota mode: writeback.
[ 1215.084587][T13367] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1215.113458][T13367] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1215.253879][T13367] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1215.283646][T13367] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1215.302506][T13367] usb 10-1: SerialNumber: syz
[ 1215.420525][T14098] loop7: detected capacity change from 0 to 1024
[ 1215.490950][T14102] loop8: detected capacity change from 0 to 512
[ 1215.547880][T14098] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869)
[ 1215.624205][T14102] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none.
[ 1215.637224][T13367] usb 10-1: 0:2 : does not exist
[ 1215.677119][T13367] usb 10-1: USB disconnect, device number 4
[ 1215.705631][T14098] EXT4-fs error (device loop7): __ext4_iget:4893: inode #3: block 1803188595: comm syz.7.1985: invalid block
[ 1215.732758][T14098] EXT4-fs (loop7): no journal found
[ 1215.945951][ T6634] udevd[6634]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1216.175194][T14093] loop7: detected capacity change from 0 to 512
[ 1216.406927][T14093] EXT4-fs (loop7): Ignoring removed oldalloc option
[ 1216.461206][T14128] loop9: detected capacity change from 0 to 256
[ 1216.550314][T14093] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,quota,oldalloc,,errors=continue. Quota mode: writeback.
[ 1216.615822][T14093] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1216.995589][T14093] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1985: bg 0: block 217: padding at end of block bitmap is not set
[ 1217.114045][T14149] loop2: detected capacity change from 0 to 764
[ 1217.120795][T14093] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem
[ 1217.200700][T14149] rock: directory entry would overflow storage
[ 1217.213608][T14149] rock: sig=0x4654, size=5, remaining=4
[ 1218.379074][T14174] loop7: detected capacity change from 0 to 1024
[ 1218.490893][T14174] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1218.563462][T12543] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1219.053712][ T4216] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1219.303439][ T4216] usb 9-1: Using ep0 maxpacket: 16
[ 1219.313911][T12543] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1219.345243][T12543] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1219.463967][T12543] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1219.474403][T12543] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1219.482711][T12543] usb 10-1: SerialNumber: syz
[ 1219.593732][ T4216] usb 9-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[ 1219.624045][ T4216] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.631227][T14202] loop2: detected capacity change from 0 to 2048
[ 1219.632218][ T4216] usb 9-1: Product: syz
[ 1219.693467][ T4216] usb 9-1: Manufacturer: syz
[ 1219.699851][T14202] EXT4-fs (loop2): inline encryption not supported
[ 1219.712033][ T4216] usb 9-1: SerialNumber: syz
[ 1219.733770][T14202] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[ 1219.745475][ T4216] usb 9-1: config 0 descriptor??
[ 1219.792913][T14202] EXT4-fs (loop2): Unrecognized mount option "audit" or missing value
[ 1219.807045][T12543] usb 10-1: 0:2 : does not exist
[ 1220.112571][T12543] usb 10-1: USB disconnect, device number 5
[ 1220.156494][T13367] usb 9-1: USB disconnect, device number 9
[ 1222.566801][T14256] loop8: detected capacity change from 0 to 512
[ 1222.674529][T14261] loop9: detected capacity change from 0 to 16
[ 1222.801905][T14261] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1224.660400][T14284] loop9: detected capacity change from 0 to 2048
[ 1224.753623][T14284] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1224.883819][T14292] syz.8.2045 (14292): attempted to duplicate a private mapping with mremap.  This is not supported.
[ 1224.929564][T14292] loop8: detected capacity change from 0 to 512
[ 1225.150398][T14292] EXT4-fs error (device loop8): ext4_ext_check_inode:501: inode #15: comm syz.8.2045: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964)
[ 1225.274384][T14306] loop9: detected capacity change from 0 to 1024
[ 1225.333692][T14292] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.2045: couldn't read orphan inode 15 (err -117)
[ 1225.388260][T14292] EXT4-fs (loop8): mounted filesystem without journal. Opts: stripe=0x0000000000000001,block_validity,,errors=continue. Quota mode: writeback.
[ 1226.624445][ T9379] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1226.646004][T14333] loop9: detected capacity change from 0 to 1024
[ 1226.708359][T14333] EXT4-fs (loop9): blocks per group (0) and clusters per group (32) inconsistent
[ 1227.014096][ T9379] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1227.075460][ T9379] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1227.153764][ T4246] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[ 1227.194063][ T9379] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1227.221523][ T9379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1227.269694][ T9379] usb 6-1: SerialNumber: syz
[ 1227.533840][ T4246] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1227.568535][ T4246] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1227.587528][ T9379] usb 6-1: 0:2 : does not exist
[ 1227.616700][ T4246] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[ 1227.632365][ T9379] usb 6-1: USB disconnect, device number 9
[ 1227.680131][T14354] loop7: detected capacity change from 0 to 512
[ 1227.735769][ T4246] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1227.752956][ T4246] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1227.761952][ T4246] usb 10-1: SerialNumber: syz
[ 1227.804011][T14333] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1227.820087][T14354] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1227.837381][ T4246] cdc_acm 10-1:1.0: Control and data interfaces are not separated!
[ 1227.873713][T14354] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1227.926614][ T8738] udevd[8738]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1228.011039][T14367] loop2: detected capacity change from 0 to 256
[ 1228.049416][T14367] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1228.051415][ T4246] cdc_acm 10-1:1.0: ttyACM0: USB ACM device
[ 1228.075337][T14354] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz.7.2060: invalid size
[ 1228.089771][ T4246] usb 10-1: USB disconnect, device number 6
[ 1228.135817][T14367] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[ 1228.302692][T14367] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xddfd5d26, utbl_chksum : 0xe619d30d)
[ 1228.475380][T14376] loop5: detected capacity change from 0 to 2048
[ 1229.276744][T14376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1231.916910][T13365] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1232.394875][T14450] loop9: detected capacity change from 0 to 2364
[ 1232.473509][T13365] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1232.844638][T13365] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1232.992657][T13365] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1233.002312][T13365] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1233.011928][T13365] usb 9-1: SerialNumber: syz
[ 1233.360340][T13365] usb 9-1: 0:2 : does not exist
[ 1233.482241][T14457] loop2: detected capacity change from 0 to 2048
[ 1233.497242][T13365] usb 9-1: USB disconnect, device number 10
[ 1233.591927][ T8738] udevd[8738]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1233.652658][T14457] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1233.697440][T14457] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1233.996864][T14475] loop2: detected capacity change from 0 to 128
[ 1234.926183][T14475] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[ 1234.982970][T14475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1235.291557][T14488] loop7: detected capacity change from 0 to 128
[ 1235.838266][T14488] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[ 1236.124228][T14488] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1236.380941][T14488] EXT4-fs error (device loop7): htree_dirblock_to_tree:1083: inode #2: comm syz.7.2093: Directory block failed checksum
[ 1237.700929][T14507] loop2: detected capacity change from 0 to 128
[ 1237.750285][T14507] EXT4-fs (loop2): Ignoring removed nobh option
[ 1237.959695][T14511] loop8: detected capacity change from 0 to 256
[ 1238.008105][T14507] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none.
[ 1238.164556][T14511] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1238.180721][T14507] ext4 filesystem being mounted at /571/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1238.527053][T14528] loop5: detected capacity change from 0 to 8
[ 1238.766958][T14530] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[ 1239.007617][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.020105][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 1241.083438][ T4216] Bluetooth: hci1: command 0x0406 tx timeout
[ 1241.118865][T14559] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1241.459236][T14561] loop8: detected capacity change from 0 to 4096
[ 1241.633942][T14568] loop9: detected capacity change from 0 to 16
[ 1241.658805][T14561] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1241.703655][T14568] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1241.915923][   T26] audit: type=1800 audit(1749108507.916:83): pid=14561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2114" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1242.047198][T14581] loop5: detected capacity change from 0 to 16
[ 1242.190231][T14581] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1243.599780][T14595] loop8: detected capacity change from 0 to 512
[ 1243.747487][T14595] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1243.868113][T14595] EXT4-fs (loop8): 1 truncate cleaned up
[ 1243.890444][T14595] EXT4-fs (loop8): mounted filesystem without journal. Opts: nogrpid,i_version,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback.
[ 1244.081152][T14603] loop9: detected capacity change from 0 to 2048
[ 1244.721137][ T8735]  loop9: p1 < > p3
[ 1244.763146][ T8735] loop9: p3 size 134217728 extends beyond EOD, truncated
[ 1244.881775][T14603]  loop9: p1 < > p3
[ 1245.032895][T14603] loop9: p3 size 134217728 extends beyond EOD, truncated
[ 1245.190103][ T3548]  loop9: p1 < > p3
[ 1245.200315][ T3548] loop9: p3 size 134217728 extends beyond EOD, truncated
[ 1245.208141][T10676] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1245.483707][T10676] usb 6-1: Using ep0 maxpacket: 8
[ 1245.539086][T14626] loop8: detected capacity change from 0 to 1024
[ 1245.799891][T10676] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[ 1245.819200][T10676] usb 6-1: config 179 has no interface number 0
[ 1245.826694][T10676] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1245.928992][T10676] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1245.947523][ T8738] udevd[8738]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1245.965412][ T8735] udevd[8735]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[ 1246.003708][T10676] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1246.029317][T10676] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1246.052678][T10676] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1246.092520][T10676] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1246.096437][ T8735] udevd[8735]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[ 1246.112487][T10676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1246.131873][ T8738] udevd[8738]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1246.173876][T14613] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1246.225323][ T8600] udevd[8600]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[ 1246.238389][ T8738] udevd[8738]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1246.724020][ T4246] usb 6-1: USB disconnect, device number 10
[ 1246.743420][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1247.365206][T10676] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1247.371130][T14660] loop5: detected capacity change from 0 to 1024
[ 1247.626463][T14660] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1247.733729][T10676] usb 9-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00
[ 1247.753613][T10676] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1247.802627][T10676] usb 9-1: config 0 descriptor??
[ 1248.178405][T10676] usbhid 9-1:0.0: can't add hid device: -71
[ 1248.190826][T10676] usbhid: probe of 9-1:0.0 failed with error -71
[ 1248.239631][T10676] usb 9-1: USB disconnect, device number 11
[ 1249.807386][T14693] 9pnet: Insufficient options for proto=fd
[ 1250.019404][T14703] loop5: detected capacity change from 0 to 512
[ 1250.062510][T14703] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[ 1250.080817][T14703] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[ 1250.979601][ T9649] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1251.355624][ T9649] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[ 1251.377788][ T9649] usb 3-1: config 0 has no interface number 0
[ 1251.392013][T14733] loop9: detected capacity change from 0 to 8
[ 1251.395244][ T9649] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1251.458738][ T9649] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1251.504001][ T9649] usb 3-1: config 0 interface 255 has no altsetting 0
[ 1251.538495][ T9649] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1251.596925][ T9649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1251.624539][ T9649] usb 3-1: config 0 descriptor??
[ 1251.651957][T14737] loop8: detected capacity change from 0 to 512
[ 1251.664738][ T9649] ums-realtek 3-1:0.255: USB Mass Storage device detected
[ 1251.885773][T14737] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[ 1251.902376][T14737] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1251.987328][ T9649] usb 3-1: USB disconnect, device number 6
[ 1252.019445][T14749] loop7: detected capacity change from 0 to 2048
[ 1252.114683][T14751] loop9: detected capacity change from 0 to 512
[ 1252.139457][T14749] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1252.273805][T14751] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1252.312386][T14751] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1252.418945][T14763] loop2: detected capacity change from 0 to 512
[ 1252.448705][T14763] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[ 1252.493645][T14763] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1252.570292][T14763] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8002e019, mo2=0000]
[ 1252.639313][T14763] EXT4-fs (loop2): 1 truncate cleaned up
[ 1252.693488][ T9649] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1252.719808][T14763] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,auto_da_alloc=0x0000000000000002,nodiscard,jqfmt=vfsold,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[ 1252.747700][ T4260] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5)
[ 1252.792849][ T4260] EXT4-fs error (device loop2): ext4_release_dquot:6240: comm kworker/u4:6: Failed to release dquot type 1
[ 1252.886801][T14763] EXT4-fs warning (device loop2): __ext4_unlink:3335: inode #15: comm syz.2.2186: Deleting file 'file1' with no links
[ 1253.017478][ T6770] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5)
[ 1253.091752][ T6770] EXT4-fs error (device loop2): ext4_release_dquot:6240: comm kworker/u4:18: Failed to release dquot type 1
[ 1253.106280][ T9649] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1253.123580][ T9649] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1253.223659][ T9649] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1253.244770][ T9649] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1253.252920][ T9649] usb 9-1: SerialNumber: syz
[ 1253.556482][ T9649] usb 9-1: 0:2 : does not exist
[ 1253.622897][ T9649] usb 9-1: USB disconnect, device number 12
[ 1254.636664][ T8738] udevd[8738]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1254.841888][T14793] loop5: detected capacity change from 0 to 8192
[ 1254.850744][T14804] loop7: detected capacity change from 0 to 512
[ 1254.975789][T14806] loop8: detected capacity change from 0 to 16
[ 1255.154648][T14806] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1255.170899][T14804] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1255.237146][T14804] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1256.116805][T14804] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #2: block 18: comm syz.7.2200: lblock 23 mapped to illegal pblock 18 (length 1)
[ 1256.413252][T14827] loop5: detected capacity change from 0 to 128
[ 1256.550756][T14827] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[ 1256.572988][T14827] FAT-fs (loop5): Filesystem has been set read-only
[ 1257.065236][T14838] loop7: detected capacity change from 0 to 2048
[ 1257.853545][T14838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1257.958629][T14850] loop8: detected capacity change from 0 to 128
[ 1258.095240][T14855] loop5: detected capacity change from 0 to 2048
[ 1258.149375][T14850] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1258.233548][T12543] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1258.285552][T14855] EXT4-fs (loop5): inline encryption not supported
[ 1258.327135][T14855] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[ 1258.356604][T14855] EXT4-fs (loop5): Unrecognized mount option "audit" or missing value
[ 1258.378330][T14859] loop2: detected capacity change from 0 to 128
[ 1258.430955][T14861] loop7: detected capacity change from 0 to 128
[ 1258.652790][T12543] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1258.676291][T12543] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1258.854391][T12543] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1258.893378][T12543] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1258.911901][T12543] usb 10-1: SerialNumber: syz
[ 1259.235849][T12543] usb 10-1: 0:2 : does not exist
[ 1259.904667][T12543] usb 10-1: USB disconnect, device number 7
[ 1260.154416][ T8735] udevd[8735]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1261.519879][T14899] netlink: 'syz.8.2235': attribute type 6 has an invalid length.
[ 1261.656027][T14903] binder: 14894:14903 ioctl c0306201 0 returned -14
[ 1264.008192][T14909] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[ 1264.016814][T14909] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[ 1264.433585][ T9649] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1264.570197][T14934] loop7: detected capacity change from 0 to 736
[ 1265.634807][ T9649] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1265.670823][ T9649] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1265.686210][T14934] rock: directory entry would overflow storage
[ 1265.711552][T14934] rock: sig=0x3b10, size=4, remaining=3
[ 1265.810353][ T9649] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1265.826203][ T9649] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1265.851548][ T9649] usb 9-1: SerialNumber: syz
[ 1266.165936][ T9649] usb 9-1: 0:2 : does not exist
[ 1266.243494][ T9649] usb 9-1: USB disconnect, device number 13
[ 1266.500550][T14958] loop9: detected capacity change from 0 to 2048
[ 1266.536320][T14962] loop7: detected capacity change from 0 to 512
[ 1266.576744][ T8738] udevd[8738]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1266.664267][T14962] EXT4-fs (loop7): Ignoring removed nobh option
[ 1267.006887][T14958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1267.318695][T14962] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #3: comm syz.7.2258: corrupted inode contents
[ 1267.482860][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1267.584377][T14980] loop2: detected capacity change from 0 to 256
[ 1267.679697][T14962] EXT4-fs error (device loop7): ext4_dirty_inode:6039: inode #3: comm syz.7.2258: mark_inode_dirty error
[ 1267.710688][T14984] loop5: detected capacity change from 0 to 256
[ 1267.748772][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1267.764311][T14980] exfat: Bad value for 'uid'
[ 1268.385682][T14962] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #3: comm syz.7.2258: corrupted inode contents
[ 1268.484415][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1268.491117][T14962] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #3: comm syz.7.2258: mark_inode_dirty error
[ 1268.504171][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1268.553905][T14962] Quota error (device loop7): write_blk: dquota write failed
[ 1268.562470][T14962] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[ 1268.616575][T14962] EXT4-fs error (device loop7): ext4_acquire_dquot:6204: comm syz.7.2258: Failed to acquire dquot type 0
[ 1268.657624][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1268.664348][T14992] loop5: detected capacity change from 0 to 128
[ 1268.671566][T14993] loop8: detected capacity change from 0 to 128
[ 1268.692741][T14962] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #16: comm syz.7.2258: corrupted inode contents
[ 1268.724029][T14992] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[ 1268.730907][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1268.762361][T14993] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[ 1268.784897][T14962] EXT4-fs error (device loop7): ext4_dirty_inode:6039: inode #16: comm syz.7.2258: mark_inode_dirty error
[ 1268.798659][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1268.806104][T14962] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #16: comm syz.7.2258: corrupted inode contents
[ 1268.813515][ T4246] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1268.872236][T14992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1268.936807][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1268.948247][T14962] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.2258: mark_inode_dirty error
[ 1268.966717][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1268.973930][T14962] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #16: comm syz.7.2258: corrupted inode contents
[ 1268.987089][ T8529] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[ 1268.993914][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1269.058825][T14962] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem
[ 1269.113985][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1269.147465][T14962] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #16: comm syz.7.2258: corrupted inode contents
[ 1269.251486][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1269.265169][ T4246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1269.278645][T14962] EXT4-fs error (device loop7): ext4_truncate:4273: inode #16: comm syz.7.2258: mark_inode_dirty error
[ 1269.303398][ T4246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1269.312796][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1269.335572][ T4246] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1269.351699][T14962] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem
[ 1269.368273][ T4246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1269.391669][T14962] EXT4-fs (loop7): Remounting filesystem read-only
[ 1269.414528][ T4246] usb 3-1: config 0 descriptor??
[ 1269.433148][T14962] EXT4-fs (loop7): 1 truncate cleaned up
[ 1269.455010][T14962] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback.
[ 1269.487490][T14962] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1269.696804][T12538] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1269.926891][ T4246] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[ 1269.934236][ T4246] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[ 1269.941408][ T4246] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[ 1269.949151][ T4246] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[ 1269.956623][ T4246] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[ 1269.977837][T15012] loop7: detected capacity change from 0 to 1024
[ 1270.016269][ T4246] logitech 0003:046D:C29C.0001: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0
[ 1270.153675][T12538] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1270.165612][T12538] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1270.254193][T12538] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1270.300250][T12538] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1270.352041][T12538] usb 9-1: SerialNumber: syz
[ 1270.383555][ T4246] logitech 0003:046D:C29C.0001: no inputs found
[ 1270.513953][ T4246] usb 3-1: USB disconnect, device number 7
[ 1270.686821][T12538] usb 9-1: 0:2 : does not exist
[ 1270.829636][T15013] fido_id[15013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1270.845603][T12538] usb 9-1: USB disconnect, device number 14
[ 1271.265584][ T8738] udevd[8738]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1272.738568][T15026] loop2: detected capacity change from 0 to 32768
[ 1272.829270][T15026] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.2281 (15026)
[ 1272.942639][T15057] loop8: detected capacity change from 0 to 128
[ 1273.149014][T15026] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1273.158720][T15026] BTRFS info (device loop2): enabling disk space caching
[ 1273.167371][T15026] BTRFS info (device loop2): force clearing of disk cache
[ 1273.175025][T15026] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1273.184992][T15026] BTRFS info (device loop2): use zstd compression, level 3
[ 1273.192351][T15026] BTRFS info (device loop2): disk space caching is enabled
[ 1273.211578][T15057] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback.
[ 1273.229792][T15057] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1273.266916][T15026] BTRFS info (device loop2): has skinny extents
[ 1274.296470][T15026] BTRFS error (device loop2): open_ctree failed: -12
[ 1274.486959][T15091] loop7: detected capacity change from 0 to 512
[ 1274.571506][T15091] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1274.583288][ T9379] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1274.597624][T15091] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1274.911223][T15097] loop8: detected capacity change from 0 to 512
[ 1275.023876][ T9379] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1275.043402][ T9379] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1275.110998][T15097] EXT4-fs error (device loop8): __ext4_iget:4893: inode #14: block 1886221359: comm syz.8.2298: invalid block
[ 1275.140270][T15097] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.2298: couldn't read orphan inode 14 (err -117)
[ 1275.183798][ T9379] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1275.188310][T15097] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nodiscard,nouid32,journal_ioprio=0x0000000000000006,quota,,errors=continue. Quota mode: writeback.
[ 1275.192981][ T9379] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1275.193012][ T9379] usb 10-1: SerialNumber: syz
[ 1275.244891][T15097] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1275.492146][T15109] loop7: detected capacity change from 0 to 512
[ 1275.699399][ T9379] usb 10-1: 0:2 : does not exist
[ 1275.834828][ T9379] usb 10-1: USB disconnect, device number 8
[ 1275.979437][T15109] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1276.043826][T15109] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1276.106354][ T8738] udevd[8738]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1276.240032][T15116] loop5: detected capacity change from 0 to 2048
[ 1276.477143][ T4231] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1276.547702][T15124] 9pnet: Insufficient options for proto=fd
[ 1276.562120][ T4231] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1276.626451][T15116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1276.744003][T15106] chnl_net:caif_netlink_parms(): no params data found
[ 1277.068399][ T4231] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1277.151932][ T4231] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1277.273740][T15106] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1277.281072][T15106] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1277.333618][T11264] Bluetooth: hci0: command 0x0409 tx timeout
[ 1277.344743][T15106] device bridge_slave_0 entered promiscuous mode
[ 1277.421008][T15106] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1277.448833][T15106] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1277.468165][T15106] device bridge_slave_1 entered promiscuous mode
[ 1277.603861][T15148] loop7: detected capacity change from 0 to 512
[ 1277.670653][T15148] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[ 1277.686542][T15148] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1277.763647][T15148] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,dioread_nolock,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[ 1277.791702][T15148] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1277.826596][T15106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1278.573454][   T26] audit: type=1800 audit(1749108544.586:84): pid=15148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2315" name="file1" dev="loop7" ino=15 res=0 errno=0
[ 1278.642756][T15106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1278.669228][   T26] audit: type=1804 audit(1749108544.586:85): pid=15148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2315" name="/newroot/166/bus/file1" dev="loop7" ino=15 res=1 errno=0
[ 1278.859976][T15161] netlink: 'syz.5.2317': attribute type 2 has an invalid length.
[ 1278.890152][ T4231] tipc: Left network mode
[ 1278.938259][T15106] team0: Port device team_slave_0 added
[ 1279.034705][T15106] team0: Port device team_slave_1 added
[ 1279.181894][T15170] loop7: detected capacity change from 0 to 512
[ 1279.237119][T15170] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1279.272814][T15106] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1279.286479][T15106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1279.318515][T15170] EXT4-fs (loop7): 1 truncate cleaned up
[ 1279.330695][T15170] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[ 1279.353510][ T9808] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1279.403532][T11264] Bluetooth: hci0: command 0x041b tx timeout
[ 1279.449404][T15145] syz.8.2313 (15145): drop_caches: 2
[ 1279.465827][T15106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1279.491654][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2320'.
[ 1279.521771][T15106] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1279.551301][T15106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1279.619479][T15179] loop9: detected capacity change from 0 to 256
[ 1279.629625][T15106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1279.739991][ T9808] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.759702][ T9808] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1279.760296][T15182] loop7: detected capacity change from 0 to 512
[ 1279.843916][T15182] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1279.863951][ T9808] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1279.882783][ T9808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1279.904098][T15182] EXT4-fs (loop7): 1 truncate cleaned up
[ 1279.909851][T15182] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none.
[ 1279.959652][ T9808] usb 6-1: SerialNumber: syz
[ 1280.059107][   T26] audit: type=1800 audit(1749108546.076:86): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2323" name="bus" dev="loop7" ino=18 res=0 errno=0
[ 1280.084470][T15106] device hsr_slave_0 entered promiscuous mode
[ 1280.107651][T15106] device hsr_slave_1 entered promiscuous mode
[ 1280.276735][ T9808] usb 6-1: 0:2 : does not exist
[ 1280.503460][ T9808] usb 6-1: USB disconnect, device number 11
[ 1281.504594][ T8738] udevd[8738]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1281.604021][T11264] Bluetooth: hci0: command 0x040f tx timeout
[ 1282.583760][T15227] loop8: detected capacity change from 0 to 512
[ 1282.617082][ T4231] IPVS: stopping backup sync thread 4667 ...
[ 1282.758808][T15227] EXT4-fs error (device loop8): ext4_ext_check_inode:501: inode #15: comm syz.8.2333: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964)
[ 1282.872126][T15247] loop7: detected capacity change from 0 to 16
[ 1282.893091][T15227] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.2333: couldn't read orphan inode 15 (err -117)
[ 1282.930127][T15227] EXT4-fs (loop8): mounted filesystem without journal. Opts: stripe=0x0000000000000001,block_validity,,errors=continue. Quota mode: writeback.
[ 1283.015682][T15247] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1283.065798][T15227] EXT4-fs error (device loop8): ext4_check_dx_root:2266: inode #2: comm syz.8.2333: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[ 1283.204669][ T4231] device hsr_slave_0 left promiscuous mode
[ 1283.216703][ T4231] device hsr_slave_1 left promiscuous mode
[ 1283.250927][ T4231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1283.291388][ T9379] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1283.305086][ T4231] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1283.315082][ T4231] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1283.323209][ T4231] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1283.332380][ T4231] device bridge_slave_1 left promiscuous mode
[ 1283.342212][ T4231] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1283.521873][T15270] loop8: detected capacity change from 0 to 512
[ 1283.539337][ T4231] device bridge_slave_0 left promiscuous mode
[ 1283.546484][T15267] loop9: detected capacity change from 0 to 1024
[ 1283.549173][ T4231] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1283.594100][ T4231] device veth1_macvtap left promiscuous mode
[ 1283.615166][ T4231] device veth0_macvtap left promiscuous mode
[ 1283.633793][ T4231] device veth1_vlan left promiscuous mode
[ 1283.639791][ T4231] device veth0_vlan left promiscuous mode
[ 1283.643674][T12542] Bluetooth: hci0: command 0x0419 tx timeout
[ 1283.663684][ T9379] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1283.674144][ T9379] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1283.716487][ T4303] hfsplus: b-tree write err: -5, ino 4
[ 1283.719525][T15270] EXT4-fs (loop8): 1 orphan inode deleted
[ 1283.728431][T15270] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1283.740080][T15270] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1283.773737][ T9379] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1283.782817][ T9379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1283.790996][   T26] audit: type=1800 audit(1749108549.796:87): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2342" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1283.833006][ T9379] usb 6-1: SerialNumber: syz
[ 1284.028403][T15283] loop8: detected capacity change from 0 to 8
[ 1284.155352][ T4231] bond7 (unregistering): Released all slaves
[ 1284.181349][ T9379] usb 6-1: 0:2 : does not exist
[ 1284.206365][ T9379] usb 6-1: USB disconnect, device number 12
[ 1284.215088][ T4231] bond6 (unregistering): Released all slaves
[ 1284.231625][ T4231] bond5 (unregistering): Released all slaves
[ 1284.245236][ T4231] bond4 (unregistering): Released all slaves
[ 1284.258706][ T4231] bond3 (unregistering): Released all slaves
[ 1284.274514][ T4231] bond2 (unregistering): Released all slaves
[ 1284.298621][ T4231] bond1 (unregistering): Released all slaves
[ 1284.546703][ T4231] team0 (unregistering): Port device team_slave_1 removed
[ 1284.565769][ T4231] team0 (unregistering): Port device team_slave_0 removed
[ 1284.582056][ T4231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1284.602693][ T4231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1285.635560][ T4231] bond0 (unregistering): Released all slaves
[ 1286.139578][T15106] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1286.245987][T15328] loop7: detected capacity change from 0 to 512
[ 1286.268698][T15333] loop9: detected capacity change from 0 to 256
[ 1286.278332][T15106] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1286.394450][T15106] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1286.431241][T15106] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1286.484437][T15333] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1286.541688][T15339] loop8: detected capacity change from 0 to 1024
[ 1286.561830][T15328] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #3: comm syz.7.2362: corrupted inode contents
[ 1286.576447][T15328] EXT4-fs error (device loop7): ext4_dirty_inode:6039: inode #3: comm syz.7.2362: mark_inode_dirty error
[ 1286.622345][T15328] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #3: comm syz.7.2362: corrupted inode contents
[ 1286.665655][T15328] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #3: comm syz.7.2362: mark_inode_dirty error
[ 1286.693983][T15339] EXT4-fs (loop8): Ignoring removed bh option
[ 1286.715530][T15328] Quota error (device loop7): write_blk: dquota write failed
[ 1286.742707][T15328] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[ 1286.773841][T15328] EXT4-fs error (device loop7): ext4_acquire_dquot:6204: comm syz.7.2362: Failed to acquire dquot type 0
[ 1286.805326][T15339] EXT4-fs error (device loop8): ext4_map_blocks:739: inode #3: block 1: comm syz.8.2366: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1286.809688][T15328] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #16: comm syz.7.2362: corrupted inode contents
[ 1286.832441][T15328] EXT4-fs error (device loop7): ext4_dirty_inode:6039: inode #16: comm syz.7.2362: mark_inode_dirty error
[ 1286.845307][T15328] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #16: comm syz.7.2362: corrupted inode contents
[ 1286.858201][T15328] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.2362: mark_inode_dirty error
[ 1286.870307][T15328] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #16: comm syz.7.2362: corrupted inode contents
[ 1286.884236][T15328] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem
[ 1286.913431][T15328] EXT4-fs error (device loop7): ext4_do_update_inode:5203: inode #16: comm syz.7.2362: corrupted inode contents
[ 1286.950190][ T4246] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[ 1286.958895][T15328] EXT4-fs error (device loop7): ext4_truncate:4273: inode #16: comm syz.7.2362: mark_inode_dirty error
[ 1286.970533][T15339] Quota error (device loop8): write_blk: dquota write failed
[ 1286.994492][T15106] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1287.008028][T15339] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[ 1287.021347][T15328] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem
[ 1287.063755][T15339] EXT4-fs error (device loop8): ext4_acquire_dquot:6204: comm syz.8.2366: Failed to acquire dquot type 0
[ 1287.088140][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1287.094576][T15328] EXT4-fs (loop7): 1 truncate cleaned up
[ 1287.104387][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1287.114083][T15328] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1287.142925][T15339] EXT4-fs error (device loop8): ext4_free_blocks:6223: comm syz.8.2366: Freeing blocks not in datazone - block = 0, count = 4096
[ 1287.153595][T15328] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1287.180921][T15106] 8021q: adding VLAN 0 to HW filter on device team0
[ 1287.224671][T15339] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.2366: Invalid inode bitmap blk 0 in block_group 0
[ 1287.243783][ T4297] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1287.271118][T15339] EXT4-fs error (device loop8) in ext4_free_inode:362: Corrupt filesystem
[ 1287.289512][   T26] audit: type=1800 audit(1749108553.306:88): pid=15328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2362" name="file1" dev="loop7" ino=15 res=0 errno=0
[ 1287.321315][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1287.352580][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1287.370002][T15339] EXT4-fs (loop8): 1 orphan inode deleted
[ 1287.376309][ T4297] Quota error (device loop8): remove_tree: Can't read quota data block 1
[ 1287.391957][T15328] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.2362: inode #59392: comm syz.7.2362: iget: illegal inode #
[ 1287.408120][ T4297] EXT4-fs error (device loop8): ext4_release_dquot:6240: comm kworker/u4:9: Failed to release dquot type 0
[ 1287.423612][ T4246] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1287.445463][T15339] EXT4-fs (loop8): mounted filesystem without journal. Opts: €�; usrquota,noblock_validity,bh,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback.
[ 1287.464125][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1287.471619][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1287.488241][ T4246] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1287.501480][ T4246] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1287.516650][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1287.541961][ T4246] usb 10-1: config 0 descriptor??
[ 1287.546923][T15328] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.2362: error while reading EA inode 59392 err=-117
[ 1287.587656][T15333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1287.605965][T15339] EXT4-fs error (device loop8): ext4_search_dir:1549: inode #2: block 16: comm syz.8.2366: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[ 1287.624905][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1287.639894][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1287.641760][T15328] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.2362: inode #59392: comm syz.7.2362: iget: illegal inode #
[ 1287.690566][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1287.697841][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1287.754241][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1287.802691][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1287.821647][T15328] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.2362: error while reading EA inode 59392 err=-117
[ 1287.828285][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1287.855515][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1287.864869][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1287.939793][T15360] binder: 15350:15360 ioctl c0306201 0 returned -14
[ 1288.162996][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1288.177652][ T4246] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0
[ 1288.234318][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1288.251284][T15106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1288.318769][T15106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1288.386251][T13366] usb 10-1: USB disconnect, device number 9
[ 1288.433722][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1288.442310][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1288.450805][ T8600] udevd[8600]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1288.492540][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1288.561975][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1288.757447][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1289.072767][T15374] fido_id[15374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1289.380804][T15393] loop9: detected capacity change from 0 to 1024
[ 1289.534121][T15393] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869)
[ 1289.579673][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2379'.
[ 1289.631463][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1289.649963][T15393] EXT4-fs error (device loop9): __ext4_iget:4893: inode #3: block 1803188595: comm syz.9.2375: invalid block
[ 1289.651980][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1289.689152][T15393] EXT4-fs (loop9): no journal found
[ 1289.815932][T15388] loop9: detected capacity change from 0 to 512
[ 1289.846845][T15106] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1289.906614][T15388] EXT4-fs (loop9): Ignoring removed oldalloc option
[ 1289.977342][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1290.056698][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1290.114079][T15388] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,quota,oldalloc,,errors=continue. Quota mode: writeback.
[ 1290.125703][T15106] device veth0_vlan entered promiscuous mode
[ 1290.183712][T15388] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1290.634584][ T8529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1290.661978][T15388] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback.
[ 1290.850448][ T8529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1290.863543][T10676] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1290.931211][T15106] device veth1_vlan entered promiscuous mode
[ 1291.001952][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1291.022951][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1291.122769][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1291.139292][T10676] usb 6-1: Using ep0 maxpacket: 32
[ 1291.174547][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1291.219668][T15106] device veth0_macvtap entered promiscuous mode
[ 1291.243088][T15106] device veth1_macvtap entered promiscuous mode
[ 1291.293672][T10676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1291.307995][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1291.321022][T10676] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[ 1291.341126][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1291.363427][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1291.392439][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1291.423727][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1291.445631][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1291.466947][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1291.507234][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1291.535788][T10676] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[ 1292.283481][T12535] Bluetooth: hci4: command 0x0406 tx timeout
[ 1292.343401][T10676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1292.362738][T15106] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1292.386347][T10676] usb 6-1: Product: syz
[ 1292.390572][T10676] usb 6-1: Manufacturer: syz
[ 1292.400829][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1292.404841][T15445] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1292.427920][T10676] usb 6-1: SerialNumber: syz
[ 1292.434037][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1292.449549][T10676] usb 6-1: config 0 descriptor??
[ 1292.454186][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1292.475965][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1292.521012][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1292.613951][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1292.691741][T15449] loop9: detected capacity change from 0 to 256
[ 1292.775958][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1292.813406][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1292.839465][T10676] snd-usb-audio: probe of 6-1:0.0 failed with error -12
[ 1292.847561][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1292.871887][T10676] usb 6-1: USB disconnect, device number 13
[ 1292.878007][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1292.897035][T15106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1292.912240][T15106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1292.931018][T15106] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1292.946696][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1293.034589][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1293.068669][T15106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1293.128858][T15106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1293.159535][ T8738] udevd[8738]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1293.182723][T15106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1293.226150][T15106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1293.546029][T15472] loop9: detected capacity change from 0 to 256
[ 1293.622226][T15472] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[ 1293.723157][ T8426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1293.757326][ T8426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1294.415611][   T26] audit: type=1800 audit(1749108560.426:89): pid=15472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2394" name="bus" dev="loop9" ino=1048646 res=0 errno=0
[ 1294.465427][ T8529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1294.531620][ T8426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1294.635964][ T8426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1294.649498][ T8529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1295.073728][T15494] loop2: detected capacity change from 0 to 8
[ 1296.833453][   T23] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1296.863868][T15528] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2407'.
[ 1296.879742][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2409'.
[ 1297.093454][   T23] usb 6-1: Using ep0 maxpacket: 32
[ 1297.924389][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1298.275246][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1298.465397][   T23] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[ 1298.475833][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1298.511142][   T23] usb 6-1: config 0 descriptor??
[ 1298.942110][ T9808] kernel write not supported for file /uinput (pid: 9808 comm: kworker/0:8)
[ 1299.321867][   T23] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.0003/input/input39
[ 1299.336936][   T26] audit: type=1326 audit(1749108565.356:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.8.2424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cfcc9c929 code=0x0
[ 1299.560878][   T23] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0
[ 1299.578165][   T23] usb 6-1: USB disconnect, device number 14
[ 1299.923602][T15581] fido_id[15581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1300.450276][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.456826][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.713514][T10676] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1301.103598][T10676] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1301.119704][T10676] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[ 1301.130800][T10676] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 1301.144264][T10676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1301.169753][T10676] usb 3-1: config 0 descriptor??
[ 1301.639318][T15626] loop2: detected capacity change from 0 to 4096
[ 1301.668413][T15629] loop5: detected capacity change from 0 to 1024
[ 1301.841007][T15626] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,discard,dioread_nolock,inode_readahead_blks=0x0000000000010000,nobarrier,nodelalloc,nodelalloc,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[ 1301.886155][T10349] hfsplus: bad catalog entry type
[ 1301.956511][T10349] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[ 1302.021263][T10349] hfsplus: xattr search failed
[ 1302.054439][T10349] hfsplus: bad catalog entry type
[ 1302.123090][ T8426] hfsplus: b-tree write err: -5, ino 4
[ 1302.233656][   T23] usb 3-1: USB disconnect, device number 8
[ 1302.264296][T15643] loop9: detected capacity change from 0 to 128
[ 1302.285530][T15645] loop5: detected capacity change from 0 to 16
[ 1302.305841][T15643] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1302.327861][T15645] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1302.364256][ T4215] Bluetooth: hci1: command 0x080f tx timeout
[ 1302.375627][T15645] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89
[ 1302.391001][T15643] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1302.481040][ T4182] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192]
[ 1302.522486][T15645] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192]
[ 1302.553769][   T26] audit: type=1800 audit(1749108568.576:91): pid=15645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2447" name="file2" dev="loop5" ino=89 res=0 errno=0
[ 1303.419812][T15654] loop7: detected capacity change from 0 to 512
[ 1303.583097][T15654] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: none.
[ 1303.789723][T15648] loop5: detected capacity change from 0 to 32768
[ 1303.950348][T15648] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[ 1304.173546][   T26] audit: type=1800 audit(1749108570.186:92): pid=15648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2450" name="file1" dev="loop5" ino=17058 res=0 errno=0
[ 1304.220742][T15669] loop8: detected capacity change from 0 to 128
[ 1304.512509][T15678] loop9: detected capacity change from 0 to 512
[ 1304.545960][T15680] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2460'.
[ 1304.571032][T15680] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2460'.
[ 1304.599171][T15678] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1304.619856][T15681] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00)
[ 1304.641936][T15680] netlink: 'syz.7.2460': attribute type 5 has an invalid length.
[ 1304.662884][T15678] EXT4-fs (loop9): 1 truncate cleaned up
[ 1304.673663][T15681] FAT-fs (loop8): Filesystem has been set read-only
[ 1304.699471][T15680] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2460'.
[ 1304.734509][T15678] EXT4-fs (loop9): mounted filesystem without journal. Opts: quota,nolazytime,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[ 1305.004124][T15689] ==================================================================
[ 1305.013266][T15689] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x1390/0x3d30
[ 1305.021228][T15689] Read of size 18446744073709551552 at addr ffff88805c00f2e8 by task syz.9.2456/15689
[ 1305.030825][T15689] 
[ 1305.033184][T15689] CPU: 0 PID: 15689 Comm: syz.9.2456 Not tainted 5.15.185-syzkaller #0
[ 1305.041630][T15689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1305.051715][T15689] Call Trace:
[ 1305.055023][T15689]  <TASK>
[ 1305.057982][T15689]  dump_stack_lvl+0x168/0x230
[ 1305.062710][T15689]  ? show_regs_print_info+0x20/0x20
[ 1305.067946][T15689]  ? _printk+0xcc/0x110
[ 1305.071837][T15691] loop8: detected capacity change from 0 to 512
[ 1305.072310][T15689]  ? load_image+0x3b0/0x3b0
[ 1305.083059][T15689]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 1305.088484][T15689]  print_address_description+0x60/0x2d0
[ 1305.094079][T15689]  ? ext4_xattr_set_entry+0x1390/0x3d30
[ 1305.099958][T15689]  kasan_report+0xdf/0x130
[ 1305.104416][T15689]  ? ext4_xattr_set_entry+0x1390/0x3d30
[ 1305.110014][T15689]  ? ext4_xattr_set_entry+0x1390/0x3d30
[ 1305.115603][T15689]  kasan_check_range+0x27b/0x290
[ 1305.120579][T15689]  memmove+0x25/0x60
[ 1305.124514][T15689]  ext4_xattr_set_entry+0x1390/0x3d30
[ 1305.129923][T15689]  ? lockdep_hardirqs_on+0x94/0x140
[ 1305.135201][T15689]  ? ext4_xattr_block_set+0xd93/0x2d30
[ 1305.140806][T15689]  ? ext4_xattr_ibody_set+0x330/0x330
[ 1305.146258][T15689]  ? ext4_xattr_block_find+0x500/0x500
[ 1305.151759][T15689]  ext4_xattr_ibody_set+0x112/0x330
[ 1305.157024][T15689]  ext4_expand_extra_isize_ea+0xf9a/0x19a0
[ 1305.162916][T15689]  __ext4_expand_extra_isize+0x301/0x3e0
[ 1305.168625][T15689]  __ext4_mark_inode_dirty+0x469/0x700
[ 1305.174283][T15689]  ext4_setattr+0x13b7/0x19e0
[ 1305.179016][T15689]  ? ext4_write_inode+0x5f0/0x5f0
[ 1305.184068][T15689]  notify_change+0xbcd/0xee0
[ 1305.188701][T15689]  do_truncate+0x197/0x220
[ 1305.193165][T15689]  ? aa_get_task_label+0x21c/0x2c0
[ 1305.198314][T15689]  ? rcu_lock_release+0x20/0x20
[ 1305.203234][T15689]  ? ima_bprm_check+0x1f0/0x1f0
[ 1305.208152][T10349] ocfs2: Unmounting device (7,5) on (node local)
[ 1305.208147][T15689]  ? bpf_lsm_path_truncate+0x5/0x10
[ 1305.219722][T15689]  path_openat+0x28af/0x2f30
[ 1305.224400][T15689]  ? do_filp_open+0x3e0/0x3e0
[ 1305.229429][T15689]  do_filp_open+0x1b3/0x3e0
[ 1305.234069][T15689]  ? vfs_tmpfile+0x300/0x300
[ 1305.238795][T15689]  ? _raw_spin_unlock+0x24/0x40
[ 1305.243665][T15689]  ? alloc_fd+0x598/0x630
[ 1305.248039][T15689]  do_sys_openat2+0x142/0x4a0
[ 1305.252766][T15689]  ? do_sys_open+0xe0/0xe0
[ 1305.257235][T15689]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1305.263405][T15689]  ? lock_chain_count+0x20/0x20
[ 1305.268298][T15689]  ? vtime_user_exit+0x2dc/0x400
[ 1305.273284][T15689]  __x64_sys_creat+0x8c/0xb0
[ 1305.277930][T15689]  do_syscall_64+0x4c/0xa0
[ 1305.282410][T15689]  ? clear_bhb_loop+0x30/0x80
[ 1305.287114][T15689]  ? clear_bhb_loop+0x30/0x80
[ 1305.291805][T15689]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1305.297806][T15689] RIP: 0033:0x7fb8f0726929
[ 1305.302244][T15689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1305.321874][T15689] RSP: 002b:00007fb8ee56d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 1305.330500][T15689] RAX: ffffffffffffffda RBX: 00007fb8f094e080 RCX: 00007fb8f0726929
[ 1305.338598][T15689] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00002000000000c0
[ 1305.346591][T15689] RBP: 00007fb8f07a8b39 R08: 0000000000000000 R09: 0000000000000000
[ 1305.354588][T15689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1305.362559][T15689] R13: 0000000000000001 R14: 00007fb8f094e080 R15: 00007ffe5ffbcd68
[ 1305.370546][T15689]  </TASK>
[ 1305.373563][T15689] 
[ 1305.375878][T15689] The buggy address belongs to the page:
[ 1305.381542][T15689] page:ffffea00017003c0 refcount:2 mapcount:0 mapping:ffff88801ce74370 index:0x2 pfn:0x5c00f
[ 1305.391692][T15689] memcg:ffff88807bd84000
[ 1305.395930][T15689] aops:def_blk_aops ino:700009
[ 1305.400720][T15689] flags: 0xfff00000002036(referenced|uptodate|lru|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 1305.411324][T15689] raw: 00fff00000002036 ffffea0001908c88 ffffea0001985d48 ffff88801ce74370
[ 1305.419927][T15689] raw: 0000000000000002 ffff888057e0a740 00000002ffffffff ffff88807bd84000
[ 1305.428522][T15689] page dumped because: kasan: bad access detected
[ 1305.434944][T15689] page_owner tracks the page as allocated
[ 1305.440736][T15689] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 15678, ts 1304861102679, free_ts 1303977055031
[ 1305.458491][T15689]  get_page_from_freelist+0x1b77/0x1c60
[ 1305.464047][T15689]  __alloc_pages+0x1e1/0x470
[ 1305.468636][T15689]  __page_cache_alloc+0xd2/0x3f0
[ 1305.473657][T15689]  pagecache_get_page+0x986/0xef0
[ 1305.478676][T15689]  __getblk_gfp+0x249/0xb70
[ 1305.483177][T15689]  __ext4_get_inode_loc+0x461/0xcd0
[ 1305.488380][T15689]  ext4_reserve_inode_write+0x140/0x2e0
[ 1305.493930][T15689]  __ext4_mark_inode_dirty+0x142/0x700
[ 1305.499393][T15689]  __ext4_new_inode+0x30ba/0x39e0
[ 1305.504416][T15689]  ext4_create+0x22a/0x460
[ 1305.508829][T15689]  path_openat+0x11e1/0x2f30
[ 1305.513594][T15689]  do_filp_open+0x1b3/0x3e0
[ 1305.518095][T15689]  do_sys_openat2+0x142/0x4a0
[ 1305.522769][T15689]  __x64_sys_creat+0x8c/0xb0
[ 1305.527356][T15689]  do_syscall_64+0x4c/0xa0
[ 1305.531782][T15689]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1305.537678][T15689] page last free stack trace:
[ 1305.542435][T15689]  free_unref_page_prepare+0x637/0x6c0
[ 1305.548004][T15689]  free_unref_page_list+0x122/0x7e0
[ 1305.553295][T15689]  release_pages+0x184b/0x1bb0
[ 1305.558075][T15689]  __pagevec_release+0x6d/0xe0
[ 1305.562920][T15689]  shmem_undo_range+0x593/0x1840
[ 1305.567863][T15689]  shmem_evict_inode+0x20d/0xa00
[ 1305.572980][T15689]  evict+0x485/0x870
[ 1305.576885][T15689]  __dentry_kill+0x431/0x650
[ 1305.581481][T15689]  dentry_kill+0xb8/0x290
[ 1305.585815][T15689]  dput+0xd8/0x1a0
[ 1305.589531][T15689]  __fput+0x5ee/0x930
[ 1305.593508][T15689]  task_work_run+0x125/0x1a0
[ 1305.598111][T15689]  do_exit+0x616/0x20a0
[ 1305.602269][T15689]  do_group_exit+0x12e/0x300
[ 1305.606884][T15689]  __x64_sys_exit_group+0x3b/0x40
[ 1305.611911][T15689]  do_syscall_64+0x4c/0xa0
[ 1305.616358][T15689] 
[ 1305.618680][T15689] Memory state around the buggy address:
[ 1305.624306][T15689]  ffff88805c00f180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1305.632451][T15689]  ffff88805c00f200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1305.640514][T15689] >ffff88805c00f280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1305.648573][T15689]                                                           ^
[ 1305.656198][T15689]  ffff88805c00f300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1305.664353][T15689]  ffff88805c00f380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1305.672586][T15689] ==================================================================
[ 1305.680647][T15689] Disabling lock debugging due to kernel taint
[ 1305.686890][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1305.718035][T15691] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.2464: Invalid inode bitmap blk 4 in block_group 0
[ 1305.743668][T15689] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1305.751273][T15689] CPU: 1 PID: 15689 Comm: syz.9.2456 Tainted: G    B             5.15.185-syzkaller #0
[ 1305.760926][T15689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1305.771014][T15689] Call Trace:
[ 1305.774470][T15689]  <TASK>
[ 1305.777432][T15689]  dump_stack_lvl+0x168/0x230
[ 1305.782141][T15689]  ? show_regs_print_info+0x20/0x20
[ 1305.787378][T15689]  ? load_image+0x3b0/0x3b0
[ 1305.792010][T15689]  panic+0x2c9/0x7f0
[ 1305.796143][T15689]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1305.802429][T15689]  ? bpf_jit_dump+0xd0/0xd0
[ 1305.806981][T15689]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 1305.813077][T15689]  ? _raw_spin_unlock+0x40/0x40
[ 1305.817970][T15689]  ? ext4_xattr_set_entry+0x1390/0x3d30
[ 1305.823554][T15689]  check_panic_on_warn+0x80/0xa0
[ 1305.828630][T15689]  ? ext4_xattr_set_entry+0x1390/0x3d30
[ 1305.834206][T15689]  end_report+0x6d/0xf0
[ 1305.838396][T15689]  kasan_report+0x102/0x130
[ 1305.843017][T15689]  ? ext4_xattr_set_entry+0x1390/0x3d30
[ 1305.848676][T15689]  ? ext4_xattr_set_entry+0x1390/0x3d30
[ 1305.854249][T15689]  kasan_check_range+0x27b/0x290
[ 1305.857543][T15691] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,nouid32,,errors=continue. Quota mode: none.
[ 1305.859226][T15689]  memmove+0x25/0x60
[ 1305.881008][T15689]  ext4_xattr_set_entry+0x1390/0x3d30
[ 1305.886414][T15689]  ? lockdep_hardirqs_on+0x94/0x140
[ 1305.891661][T15689]  ? ext4_xattr_block_set+0xd93/0x2d30
[ 1305.897333][T15689]  ? ext4_xattr_ibody_set+0x330/0x330
[ 1305.902747][T15689]  ? ext4_xattr_block_find+0x500/0x500
[ 1305.908246][T15689]  ext4_xattr_ibody_set+0x112/0x330
[ 1305.913482][T15689]  ext4_expand_extra_isize_ea+0xf9a/0x19a0
[ 1305.919333][T15689]  __ext4_expand_extra_isize+0x301/0x3e0
[ 1305.925007][T15689]  __ext4_mark_inode_dirty+0x469/0x700
[ 1305.930503][T15689]  ext4_setattr+0x13b7/0x19e0
[ 1305.935216][T15689]  ? ext4_write_inode+0x5f0/0x5f0
[ 1305.940345][T15689]  notify_change+0xbcd/0xee0
[ 1305.944999][T15689]  do_truncate+0x197/0x220
[ 1305.949442][T15689]  ? aa_get_task_label+0x21c/0x2c0
[ 1305.954580][T15689]  ? rcu_lock_release+0x20/0x20
[ 1305.959554][T15689]  ? ima_bprm_check+0x1f0/0x1f0
[ 1305.964427][T15689]  ? bpf_lsm_path_truncate+0x5/0x10
[ 1305.969742][T15689]  path_openat+0x28af/0x2f30
[ 1305.974364][T15689]  ? do_filp_open+0x3e0/0x3e0
[ 1305.979160][T15689]  do_filp_open+0x1b3/0x3e0
[ 1305.983695][T15689]  ? vfs_tmpfile+0x300/0x300
[ 1305.988317][T15689]  ? _raw_spin_unlock+0x24/0x40
[ 1305.993207][T15689]  ? alloc_fd+0x598/0x630
[ 1305.997569][T15689]  do_sys_openat2+0x142/0x4a0
[ 1306.002276][T15689]  ? do_sys_open+0xe0/0xe0
[ 1306.006717][T15689]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1306.007895][T15696] loop5: detected capacity change from 0 to 16
[ 1306.012721][T15689]  ? lock_chain_count+0x20/0x20
[ 1306.024006][T15689]  ? vtime_user_exit+0x2dc/0x400
[ 1306.028975][T15689]  __x64_sys_creat+0x8c/0xb0
[ 1306.033598][T15689]  do_syscall_64+0x4c/0xa0
[ 1306.038039][T15689]  ? clear_bhb_loop+0x30/0x80
[ 1306.042833][T15689]  ? clear_bhb_loop+0x30/0x80
[ 1306.047537][T15689]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1306.053452][T15689] RIP: 0033:0x7fb8f0726929
[ 1306.058061][T15689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1306.077882][T15689] RSP: 002b:00007fb8ee56d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 1306.086315][T15689] RAX: ffffffffffffffda RBX: 00007fb8f094e080 RCX: 00007fb8f0726929
[ 1306.094474][T15689] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00002000000000c0
[ 1306.102451][T15689] RBP: 00007fb8f07a8b39 R08: 0000000000000000 R09: 0000000000000000
[ 1306.110432][T15689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1306.118407][T15689] R13: 0000000000000001 R14: 00007fb8f094e080 R15: 00007ffe5ffbcd68
[ 1306.126392][T15689]  </TASK>
[ 1306.129702][T15689] Kernel Offset: disabled
[ 1306.134141][T15689] Rebooting in 86400 seconds..