last executing test programs:

14m35.187468662s ago: executing program 2 (id=3):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000680)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',iocharset=cp1255,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB=',novrs,iocharset=iso8859-6,shortad,,unhide,\x00'/54], 0x1, 0xc4d, &(0x7f0000003b00)="$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")
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(0x0)
mkdir(0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00')

14m34.355718215s ago: executing program 2 (id=9):
timer_create(0xb, 0x0, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = dup(0xffffffffffffffff)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x6, 0x3f, 0x0, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36)

14m33.004982037s ago: executing program 2 (id=13):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000980)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c75737271756f74612c726573765f6c6576656c3d30303030303030303030303030303030303030342c6865617274626561743d6e6f6e652c696e6f646536342c000e8f7ccb752ef4677d8cb289a879154b7616c17a83cbe0bba9479aaefe32ef4267d844267676"], 0x1, 0x4703, &(0x7f0000008f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x5, 0x8b}, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_debug_messages', 0x2, 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000600)=0x100)
syslog(0x2, &(0x7f0000000100)=""/133, 0x85)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b4, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}, {&(0x7f0000000140)="3b6809990681a3e30745ec36c2f3ef005f17a12d8ac6724362a75b02e9ddc58587411bbd32f552a4357375c5005585bac2aada7368d9dac7006dc1ac5177550c6cff834970aa9f205049262f6d73e54bd5cb204782c2eed1cade5234088c281a88db3c175bd02963ceae8261523a76ff68eabcd96ce895", 0x77}, {}], 0x3, 0x5412, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0)

14m32.110855451s ago: executing program 32 (id=13):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000980)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c75737271756f74612c726573765f6c6576656c3d30303030303030303030303030303030303030342c6865617274626561743d6e6f6e652c696e6f646536342c000e8f7ccb752ef4677d8cb289a879154b7616c17a83cbe0bba9479aaefe32ef4267d844267676"], 0x1, 0x4703, &(0x7f0000008f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x5, 0x8b}, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_debug_messages', 0x2, 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000600)=0x100)
syslog(0x2, &(0x7f0000000100)=""/133, 0x85)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b4, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}, {&(0x7f0000000140)="3b6809990681a3e30745ec36c2f3ef005f17a12d8ac6724362a75b02e9ddc58587411bbd32f552a4357375c5005585bac2aada7368d9dac7006dc1ac5177550c6cff834970aa9f205049262f6d73e54bd5cb204782c2eed1cade5234088c281a88db3c175bd02963ceae8261523a76ff68eabcd96ce895", 0x77}, {}], 0x3, 0x5412, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0)

7m21.343201026s ago: executing program 4 (id=836):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000000))
poll(0x0, 0x0, 0x5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000303"], 0x20}}, 0x0)

7m19.679731423s ago: executing program 4 (id=838):
socket(0x28, 0x5, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300)
rt_tgsigqueueinfo(0x0, 0x0, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)
recvmmsg(r4, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0)
recvfrom$inet6(r4, 0x0, 0x0, 0x87b0cc373e1cda89, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

7m17.408329589s ago: executing program 4 (id=840):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x2982, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004846}, 0x4040010)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc)
sendfile(r0, r6, 0x0, 0x20000023896)

7m13.533200622s ago: executing program 4 (id=849):
keyctl$join(0x1, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48cf, &(0x7f0000000540)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@discard}, {@fat=@showexec}, {@uni_xlate}, {@utf8no}, {@rodir}]}, 0x0, 0x274, &(0x7f0000000780)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

7m12.255769682s ago: executing program 4 (id=852):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1b2, 0x0, &(0x7f0000000600)="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"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x2000840}, 0x4004080)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000156000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040040000f0f10970fe8fa6466baf80cb82cf59b88ef66bafc0cb000eec4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bafc0c66ba004066ef66b8296c", 0x69}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7m10.979491183s ago: executing program 4 (id=854):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x80440, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0xf00}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

7m10.412592692s ago: executing program 33 (id=854):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x80440, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0xf00}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

2m9.394643323s ago: executing program 3 (id=1409):
socket(0x10, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @remote}}}}}}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngQLu4EQeZ31Jlso1KWHUmgg0J56aGJkxaSWrWDJITamTSiFXgpt6a295Nyfl9Jrfxx6af+PkhJaJzSlh+Iy+hHLtuRKiS2T5vOBid+beaM333lPb148YymAR1Yu/ScTcSwi3kwixhvrk4gYrKWyETP1cnc31gvpksTm5nM/JLUydzbWC9GyT+pII/P3iPjytYgTmd31VlbXFmZLpeJyIz9ZXbw8WVldO3lpcXa+OF9cOj01PX3qzP/OnN6/WH/6du3o9289/e+PZn559W8fv/FVEjNxtLGtNY79kotc45wMpqdwm6f2u7JD8+nLXRRq6QHZgzwYepQ2zECjVY7FeAzs1T6j/TwyAOCgvBIRm50MdNwCADzUkvr1/4nDPg4AoF+avwe4s7FeaC6H+xuJ/rr1ZESM1ONv3t+sb8k27tmN1O6Djt1Jtt0ZSSJiYh/qz0XEe5+9+EG6xAHdhwRo59r1iLgwkds9/ie7nlno1X/ar55vzeR2bDT+Qf98ns5//t9u/pe5N/+JNvOf4Tbv3fuRS7bnd7//Mzf3oZqO0vnf4y3Ptt1tib9hYqCR+1NtzjeYXLxUKqZj258j4ngMDqf5qT3qOH7719udtrXO/358+6X30/rTn1slMjezw9v3mZutzj5IzK1uXY/4R7Zd/On4P1xr/6TD/Pdcl3U889jr73balsafxttcdsd/sDZvRPyrbftvdcxkz+cTJ2vdYbLZKdr4ZCbGOtWfy261f7qk9Tf/L9APafuP7R3/RNL6vGal65e+97TYNzfGv+hUqLX/t4+/ff8fSp6vpYca667OVqvLUxFDybO715/a2reZb5ZP4z/+z/bv/+b416b/v5C+/oUuT0R2ID6sj5j3E//BSuOf66n9e07EyN2FgU717xF/o/+k7T+9bZ9uxr9uD/BBzh0AAAAAAAAAAAAAAAAAAAAAAAAAdCsTEUcjyeTvpTOZfL7+Hd5/jbFMqVypnrhYXlmai9p3ZU/EYKb5UZfjLZ+HOtX4PPxm/tSO/H8j4i8R8c7waC2fL5RLc4cdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HOnw/f+p74Z3FB44jCMEAA7EiAs7ADxqkmz2sA8BAOi3kZ5Kjx7YcQAA/dPb9R8A+CNw/QeAR8/vXP93/hkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Orc2bPpsvnzxnohzc9dWV1ZKF85OVesLOQXVwr5Qnn5cn6+XJ4vFfOF8mLHF7pW/1Eqly9Px9LK1clqsVKdrKyunV8sryxVz19anJ0vni8O9i0yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOheZXVtYbZUKi5L7E9iuHFiu9xr4et68XZlNjcPPxyJvRNxrafmfogSMbQ1Soz2f2ACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEj8FgAA///+gx9z")

2m5.211948094s ago: executing program 3 (id=1413):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000000400008500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x64000600)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

1m53.287898603s ago: executing program 3 (id=1434):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00')

1m52.989129188s ago: executing program 3 (id=1436):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x800800, &(0x7f0000000480)={[{@utf8}, {@umask={'umask', 0x3d, 0x6}}, {@sys_tz}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x800}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fmask={'fmask', 0x3d, 0x80003c}}, {@errors_continue}, {@sys_tz}]}, 0x1, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==")
fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x141)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, 0x0, r1, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

1m51.803567231s ago: executing program 3 (id=1438):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000007b8af8ff00000000bfa20000000000000703000000818432786dd10000000000000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
pipe2$9p(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000a40)=@urb_type_iso={0x0, {0xa, 0x1}, 0xdd6, 0x20, &(0x7f00000003c0)="4440364d6574d24cbafb35cacd3d873197abcbd2d7195c737113086632487463766ffe0f1035204900a17bb80f68230e88dc07202ea6b8861fd3b40bb22cb1577e92bbb80bfe378192b489ab5bc61511de8ddbde", 0x54, 0x1, 0x91, 0x66, 0x4, 0x5, &(0x7f0000000540)="5f0823a4172828d9f40211ab6e9ffeb4e35c867483fa35f6f3e128e20f98853f59163b7222e7f4ab8445b92ab032325a392801d0e402044e1670338bca0603b254ca4273b033ed3226d0aa2bf8df5cb3e491e4279d030377b24e373e15bdda6d7166bfea2bf38b72f78182755e08d5c4636be92acd588fbf276cafefeda70928ccd7fb1997721504f9c3fd2c653b1a8ad8ba68dad017eb11f92c85bf0d6c0cdc190809206821028f653b8658ac15f79e7e44646d280609afda687e669d42cc06053dd4bffae772b88945374c3db59c65b4a3", [{0xfffff737, 0x10001, 0x8000}, {0x5b2, 0x401, 0x7}, {0x4, 0xa, 0x3}, {0x3, 0x8, 0xfffffffe}, {0x2, 0x4, 0x5}, {0xb26, 0x3ff, 0x101}, {0x8, 0x0, 0x980000}, {0x1c0, 0x6, 0x6}, {0xfe01, 0x3, 0x1ff}, {0x3, 0xf, 0x3}, {0x9, 0xdb1, 0x8}, {0x6, 0x5, 0x5}, {0xfffffffe, 0x7d, 0x1}, {0x0, 0x1, 0x2}, {0x0, 0x5, 0x1000000}, {0x0, 0x522, 0x7}, {0x2, 0x4, 0x7}, {0x8001, 0x6, 0x829e}, {0x0, 0x9, 0x113f}, {0xff, 0x6, 0x5}, {0x5, 0xd, 0x3}, {0x10001, 0x6, 0x81}, {0x2, 0x8, 0x1}, {0x200, 0x1, 0x1}, {0x3, 0x32, 0x80}, {0x4, 0x0, 0x4}, {0x3, 0x0, 0x9}, {0x2, 0x4, 0x88}, {0x9, 0x8}, {0x9, 0xb, 0x2}, {0x2, 0x3, 0x80000001}, {0xf, 0x4, 0x1}, {0x9, 0x40, 0x7f}, {0x4, 0x5, 0x9}, {0xde, 0x135, 0x8}, {0x8001, 0xe086, 0x7}, {0x0, 0x2, 0x5}, {0x10001, 0xe, 0xfffffffb}, {0x3, 0x9, 0xff}, {0x0, 0x3b, 0xcd0f}, {0x4, 0x9, 0x1ff}, {0x5, 0x2, 0x91f}, {0x0, 0x8, 0x3}, {0x2, 0xfffffff7, 0x2}, {0x5, 0x5, 0xb}, {0x0, 0x1, 0x9}, {0x8, 0x10, 0x800}, {0x4, 0x9, 0xf}, {0x3, 0x8, 0xffff07e8}, {0x2, 0x2, 0x2}, {0x1, 0x69, 0x7b01}, {0x8, 0x5, 0x8000}, {0x97, 0x1, 0x8001}, {0xe2a, 0x6, 0xb}, {0x1, 0x1ff, 0x8}, {0x1, 0x2}, {0x8000, 0x2, 0x8}, {0xb4, 0x6, 0x1}, {0x6, 0xffffffff, 0x2}, {0x7, 0xffffffff, 0x8}, {0x67f3, 0x9, 0x924}, {0x0, 0x6, 0x7}, {0x591, 0x8, 0xd89}, {0x6, 0x2, 0x1}, {0xb5b2, 0xfffffffe, 0x7}, {0x6f1, 0x5, 0x5}, {0x5, 0x67, 0x4}, {0x331, 0x8, 0x8001}, {0xa3, 0x6e, 0x1}, {0x4, 0x1, 0x8d}, {0x5, 0x8}, {0x0, 0x0, 0x1}, {0x8e, 0x80000001, 0x1}, {0x0, 0x3, 0x6}, {0xbee1, 0x7fffffff, 0x482}, {0x3ff, 0xfc9, 0x100000}, {0x5b9, 0x7, 0x401}, {0x80000001, 0xf9, 0x1}, {0x200, 0x22, 0x8000}, {0x5, 0x4, 0x4000}, {0x2, 0x72f2, 0x6}, {0x6, 0x9, 0x7153}, {0x7f, 0x5, 0x8001}, {0x5, 0xa000000, 0xffffff01}, {0x3480, 0x0, 0xfffffffe}, {0x3, 0xffffddde, 0xb}, {0x1, 0x4, 0x2}, {0x1, 0xfffffffe, 0x6}, {0x8, 0x97, 0xf}, {0x1, 0x8000, 0x3}, {0x12f, 0x7, 0x1ff}, {0x3, 0x2392, 0x6}, {0xfff, 0x7, 0x1f}, {0xfff, 0x6, 0x4}, {0x549d, 0x15, 0xecf}, {0x0, 0x9, 0x80000000}, {0x3, 0xc1f, 0xc}, {0x7, 0x7ff, 0xff}, {0x4, 0xe, 0x80000000}, {0x5, 0x5, 0xffff8000}, {0x8, 0x8000, 0xfff}, {0x5, 0x8, 0x4}]})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

1m48.144254611s ago: executing program 3 (id=1445):
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000800000000000000002c0000000000119078000000000000000000004e21001890780400"/58], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0)
getpeername$inet6(r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), 0x0}, 0x20)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000004c0)={{0x1, 0x1, 0x80000001, 0x0, 0xfff}})
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xfffffffc}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x2e, 0x0]}}, &(0x7f00000018c0)=""/235, 0x37, 0xeb, 0x1}, 0x28)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000240)={0x3, 0xf8, 0x200})
r8 = syz_io_uring_setup(0x82e, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1)
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f00000004c0)={&(0x7f0000004000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

1m47.061811752s ago: executing program 34 (id=1445):
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000800000000000000002c0000000000119078000000000000000000004e21001890780400"/58], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0)
getpeername$inet6(r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), 0x0}, 0x20)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000004c0)={{0x1, 0x1, 0x80000001, 0x0, 0xfff}})
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xfffffffc}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x2e, 0x0]}}, &(0x7f00000018c0)=""/235, 0x37, 0xeb, 0x1}, 0x28)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000240)={0x3, 0xf8, 0x200})
r8 = syz_io_uring_setup(0x82e, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1)
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f00000004c0)={&(0x7f0000004000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

19.949556986s ago: executing program 1 (id=1563):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20)
socket(0x10, 0x803, 0x57b97a23)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0x9, 0x8, 0x10008000, 0x120}, 0x0)
syz_open_dev$sg(0x0, 0xfffffffffffffffb, 0xae900)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
shmdt(0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x2c}}, 0x8)
syz_usb_connect$cdc_ncm(0x4, 0xa0, 0x0, 0x0)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
dup3(0xffffffffffffffff, r6, 0x0)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

19.75126961s ago: executing program 0 (id=1565):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x0, @empty}})
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r3, &(0x7f00000003c0)="d963c9f4e85e727c5964e3143f0f99d23f309eef0a1296e6c7c3704cf6deb8acb341b47e1a60a4a00d725fff3e721fdddd4879fe34dfb940c7e0849e8f3915e8ae01004b9e756c98388bb387ed9f4aa6186f04f561ff629425615736d8b42877970000c03cf51f85a9fbf99e695e98733b538a9dbde6ffa337c9b26bdc72695f05003ec9de5f807dc76e91a7a3db133a8bb5ae4a3c44819aaf56496fbad213f21b1a0a32e2ac17d5069fde917155cb8b1208cd8e08a7c0f480000000", 0x11c259e35b9f2599, 0x0, 0x0, 0x3000137)
ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1000}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x70bd26, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18.510350604s ago: executing program 5 (id=1567):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x104, 0x8, 0x2}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0xba01}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00')

17.084971261s ago: executing program 5 (id=1568):
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
r2 = socket(0x11, 0x3, 0xff)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000140))
mount$bpf(0x0, 0x0, 0x0, 0x1800040, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
r3 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000240)=0x4e6f, 0x78)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
unshare(0x64000600)

12.787916784s ago: executing program 6 (id=1570):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000002800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
socket$packet(0x11, 0x2, 0x300)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8)

11.747087184s ago: executing program 5 (id=1571):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c60000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x15}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', <r4=>0x0})
r5 = epoll_create1(0x0)
r6 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000400)={0xa})
epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1002}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r9}, 0x18)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x110, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe7}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4346b75d}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3d}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008054}, 0x80)
prlimit64(0x0, 0xe, 0x0, 0x0)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000180)={<r11=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r10, 0xc0182101, &(0x7f00000000c0)={r11})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000002780)={<r12=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f0000000080)={r12, 0x3, r10, 0x5})
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10)

11.576767098s ago: executing program 6 (id=1572):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='ext4_sync_file_exit\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_pid(r2, &(0x7f0000000980), 0x12)

11.503918789s ago: executing program 1 (id=1573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x48, 0x30, 0x301, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x600}}, {0xc}}}]}]}, 0x48}}, 0x0)

11.262467224s ago: executing program 1 (id=1574):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
pipe2(0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x1, 0x3, 0x0)
connect$unix(r2, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)

11.123405806s ago: executing program 6 (id=1575):
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000014)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF6wLbaSFO0maWwbfKgKok8Ftb7XmGxDyCZbkk3bhKIp/gGCiAq+6JMvgn+AIP0TRCjou6gooq0++FAd2d3ZmKa7+UE3u97s5wMnc8782O85GebsnJlhJ4ChdTEiJiMiy7LsSkSU8vlpnmKnlRrrvXj+eKGRksiyO39LIsnntT/r7Xx6Lt/sTER87csR30xej7uxtb0yX61W1vPyVH01eZll21eXV+eXKkuVtdnZmRtzN+euz033pJ3jEXHri3/6wXd/9qVbv/r0w9/f/cvkt1oNbNnbjl5qNb3Y/F+0FSJi/SSCDUih2cKW6wOuCwAAB2uc7384Ij4REVeiFCPNszkAAADgNMk+NxYvk9b9PwAAAOB0SiNiLJK0nD/vOxZpWi63nuH9aJxNq7WN+qey0u71gvEopveWq5Xp/NmB8SgmjfJM/oxtu3xtX3k2It6NiO+XRpvl8kKtujjQKx8AAAAwPM7tG///s9Qa/wMAAACnzPigKwAAAACcOON/AAAAOP2M/wEAAOBU+8rt242Utd9/vfhga3Ol9uDqYmVjpby6uVBeqK3fLy/VakvN3+xbPezzqrXa/c/E2uajqXploz61sbV9d7W2uVa/u/zKK7ABAACAPnr3wtPfJRGx89nRNCKyZM+yYkQ2snflQv/rB5yc9Dgr//Hk6gH038igKwAMjFN6GF7FQVcAGLjD+oGuD+/8uvd1AQAATsbEx3bv/zdTw1v5smSgNQNOWn7/P3Gsw/Bx/x+Gl/t/MLyKB50BGBTAqZce4VB/8/v/WXasSgEAAD031kxJWs7HAWORpuVyxDvN1wIUk3vL1cp0RHwoIn5bKr7dKM80t0xcHgAAAAAAAAAAAAAAAAAAAAAAAACAI8qyJLIuRnfXAQAAAD7IItI/J/n7vyZKl8f2Xx94K/lXqTmNiIc/vvPDR/P1+vpMY/7fd+fXf5TPv9bvqxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99OL544V26mfcv34hIsY7xS/Emeb0TBQj4uw/kijs2S6JiJEexN95EhHvdYqfNKoV43kt9sdPI2J0wPHP9SA+DLOnjf7n852OvzQuNqedj79Cnt5U9/4v3e3/Rrr0f+90+sD09VnvP/vFVNf4TyLeL3Tuf9rxky7xLx2xjd/4+vZ2t2XZTyMmOn7/JK/EmkoK96c2travLq/OL1WWKmuzszM35m7OXZ+bnrq3XK3kfzvG+N7Hf/mfg9p/tkv88UPaf/mI7f/3s0fPP9LKFvctKsZPsmzyUuf9/16X+O3vvk/mu7tRnmjnd1r5vc7//DfnLxzQ/sUu7T9s/08esf1XvvqdPxxxVQCgDza2tlfmq9XK+vEyScTOG2wuM1yZ0ehj0Pk4aJ32SWwf6vPtPNT/xS44dmZwfRIAAHAy/nfSP+iaAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gmgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKD/BgAA//+6ychX")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))

10.011941287s ago: executing program 1 (id=1576):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1, @ANYBLOB="0000000000007b8af8ff00000000bfa20000000000000703000000818432786dd10000000000000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)

9.934346079s ago: executing program 0 (id=1577):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000dc0)='net/udp\x00')
readv(r4, &(0x7f0000003140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x400)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000340)={@remote, @empty}, 0xc)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r9, 0x0, 0x7}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d63703836302c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c696f636861727365743d637039353046716e695f786c6174653d302c696f636861727365743d69736f384911f71ae4811ada6f6465706167653d3933362c696f636861727365743d6d616363656e746575726f2c6572726f72733d636f6e74696e75652c73686f72746e616d653d6c6f7765722c00"], 0x1, 0x362, &(0x7f0000000900)="$eJzs3U9oXFUXAPAzfUkmKfRLFh8UBeHpTtDQP7jQVUpJoTgblaHqQhxsqpKJhQwOpotO40ZcCi515UZc6MJF1yIo4s6FWytIVVxodwWLV2bmTeZNZpKmwrQWf7/FcHLuPe/eO3nJvLxkbl5eifXzs3Hhxo3rMT9fiZmV0ytxsxJLkcXAlRg3NyEHANwfbqYUf6S+A5ZUpjwlAGDKeq//rx4pZd7+ar/+yas/ANz3ip//F/brM79Xw8WpTAkAmLKx+/+PjDTPjf6qf6b0VwEAwP3quRdefPpULeLZPJ+P2HinXW/X46lh+6kL8Xo0Yy2OxWLciuhfKHQfKr3HM2drq8fyPO/Ez0tR71a06xEbnXa9f6VwKuvVV+N4LMZSUV9cbaSUsjOf11aP5z0RcaXTGz82Ku36bBwuxv/hcKzFicjj/2P1EWdrqyfy4gD1jUF9J2J7eN+iO//lWIzvXomL0YzzC+cipcFlTW318vE8P51qI/XtejXO7zwLe94BAQAAAAAAAAAAAAAAAAAAAACAf2Q537G0s/9NGu7fs7w8ob23P06/vtgfaLu/P1Cqpkjp97cer7+bxcj+QLv352nXZ+LQvV06AAAAAAAAAAAAAAAAAAAA/Gu0tuai0Wyubba2Lq2Xg85ma+tQRHQzb3zz6ZcLMd7nNsFMMUapKS9Sl9YbKRt0TtlInyLIuoMPMp9c3ZlxuU91ZxUTp1Hdu6nZPPLwTx8MMw9lgyP/NeyTxeQFZrumUQ42/tef0p08UZdOFsGJ23S+llLa6ziXXxqvikrEzJ1/4vYPUjf4+vprD5xsHX2il/ki9T362OK5a+9/9Ot6o9kduav58dxm61ZabxQfTz7Z9g6y0vlTiX5QKZ8JM/uVb49mGtn3vz3/4HvfHmz0VM68OaFP1l/OZ5utrUrxldJrmusH3dyuqoXm2Sxi13FmJ5z8UwiOfrjSuHr5x18OWlX6JmGjDgAAAAAAAAAAAAAAAAAAuCtK7xUvFG/2nd2v6slnpj8zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh7hv//vxRsj2UOEvzZifGm6tpmK2LuXi8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uL8DAAD//2Kpa7U=")

8.433243888s ago: executing program 1 (id=1578):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCGETD(r5, 0x5424, 0x0)
poll(0x0, 0x0, 0x5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000020311020000000000000000000000100800010001"], 0x1c}}, 0x0)

5.267296508s ago: executing program 6 (id=1579):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0)
getpeername$inet6(r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000004c0)={{0x1, 0x1, 0x80000001, 0x0, 0xfff}})
quotactl$Q_SYNC(0xffffffff80000100, 0x1000000, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000240)={0x3, 0xf8, 0x200})
r8 = syz_io_uring_setup(0x82e, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1)
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f00000004c0)={&(0x7f0000004000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

5.230445629s ago: executing program 5 (id=1580):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000002800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
socket$packet(0x11, 0x2, 0x300)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8)

5.133487291s ago: executing program 1 (id=1581):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20)
socket(0x10, 0x803, 0x57b97a23)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0x9, 0x8, 0x10008000, 0x120}, 0x0)
syz_open_dev$sg(0x0, 0xfffffffffffffffb, 0xae900)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
shmdt(0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x2c}}, 0x8)
syz_usb_connect$cdc_ncm(0x4, 0xa0, 0x0, 0x0)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
dup3(0xffffffffffffffff, r6, 0x0)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

3.923689015s ago: executing program 0 (id=1582):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[], 0xb0)
r4 = timerfd_create(0x0, 0x0)
read(r4, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x300, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r6, r5, 0x0, 0x3ffff)

3.822350546s ago: executing program 5 (id=1583):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pwritev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)='A', 0x1}], 0x2, 0x1, 0x4c5)

3.701002129s ago: executing program 6 (id=1584):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
pipe2(0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x1, 0x3, 0x0)
connect$unix(r2, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)

3.497564732s ago: executing program 5 (id=1585):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x0, @empty}})
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r3, &(0x7f00000003c0)="d963c9f4e85e727c5964e3143f0f99d23f309eef0a1296e6c7c3704cf6deb8acb341b47e1a60a4a00d725fff3e721fdddd4879fe34dfb940c7e0849e8f3915e8ae01004b9e756c98388bb387ed9f4aa6186f04f561ff629425615736d8b42877970000c03cf51f85a9fbf99e695e98733b538a9dbde6ffa337c9b26bdc72695f05003ec9de5f807dc76e91a7a3db133a8bb5ae4a3c44819aaf56496fbad213f21b1a0a32e2ac17d5069fde917155cb8b1208cd8e08a7c0f480000000", 0x11c259e35b9f2599, 0x0, 0x0, 0x3000137)
ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1000}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x70bd26, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40})
ioctl$UI_DEV_CREATE(r0, 0x5501)

2.430601253s ago: executing program 0 (id=1586):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1, @ANYBLOB="0000000000007b8af8ff00000000bfa20000000000000703000000818432786dd10000000000000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)

1.02178855s ago: executing program 0 (id=1587):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)

971.805431ms ago: executing program 6 (id=1588):
r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x0, 0x1fb, &(0x7f0000000b00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0)
fadvise64(r1, 0xaa17, 0xff39, 0x3)
openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x103000, 0x40)

0s ago: executing program 0 (id=1589):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_clone3(&(0x7f0000000580)={0x30000000, &(0x7f0000000100)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x20}, &(0x7f0000000340)=""/210, 0xd2, 0x0, &(0x7f0000000280)}, 0x58)
pidfd_send_signal(r1, 0x2f, &(0x7f0000000600)={0x1c, 0x800, 0xfffff554}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
clock_getres(0x7, &(0x7f0000000680))
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080))
r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8000)
ioctl$CEC_ADAP_G_CAPS(r5, 0xc04c6100, &(0x7f0000000680))
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000003ac0)={'wlan0\x00', &(0x7f0000000b80)=@ethtool_regs={0x4, 0x2}})
tee(r2, r6, 0x6, 0x8)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)

kernel console output (not intermixed with test programs):

0.
[  618.074185][T10759] loop5: detected capacity change from 0 to 32768
[  618.133148][T10759] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.982 (10759)
[  618.151090][T10759] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  618.162056][T10759] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  618.170809][T10759] BTRFS info (device loop5): metadata ratio 5
[  618.176921][T10759] BTRFS info (device loop5): doing ref verification
[  618.183570][T10759] BTRFS info (device loop5): use zlib compression, level 3
[  618.190924][T10759] BTRFS info (device loop5): setting nodatasum
[  618.197687][T10759] BTRFS info (device loop5): doing ref verification
[  618.204391][T10759] BTRFS info (device loop5): metadata ratio 0
[  618.210526][T10759] BTRFS info (device loop5): using free space tree
[  618.364560][T10759] BTRFS info (device loop5): enabling ssd optimizations
[  618.371655][T10759] BTRFS info (device loop5): auto enabling async discard
[  619.295447][T10759] BTRFS info (device loop5): checking UUID tree
[  619.304683][T10784] loop1: detected capacity change from 0 to 512
[  619.397763][ T5914] BTRFS warning (device loop5): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x947a0a1eec88a54dbf20a1a8d6b6dd946bccf52dadb115fb5db895743b8984fa level 0
[  619.502945][T10759] BTRFS: error (device loop5) in btrfs_fill_super:1172: errno=-5 IO failure
[  619.513063][T10759] BTRFS error (device loop5: state E): commit super ret -30
[  619.617576][ T5786] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (5786)
[  619.657745][T10784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.700423][T10784] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  619.970796][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.418401][T10826] loop1: detected capacity change from 0 to 512
[  624.620624][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  624.627026][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  624.723378][T10829] loop0: detected capacity change from 0 to 512
[  625.750571][T10826] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  626.624607][T10829] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  626.633593][T10826] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  626.634036][T10826] EXT4-fs: failed to create workqueue
[  627.123657][T10829] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  627.124078][T10829] EXT4-fs: failed to create workqueue
[  627.139064][T10829] EXT4-fs (loop0): mount failed
[  627.145512][T10826] EXT4-fs (loop1): mount failed
[  630.870641][T10870] loop1: detected capacity change from 0 to 2048
[  630.983206][T10870] Alternate GPT is invalid, using primary GPT.
[  630.990363][T10870]  loop1: p1 p2 p3
[  631.249152][T10872] loop1: detected capacity change from 0 to 512
[  631.275292][T10872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  631.309088][T10872] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  631.318570][T10872] EXT4-fs (loop1): orphan cleanup on readonly fs
[  631.345468][T10872] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1002: bg 0: block 248: padding at end of block bitmap is not set
[  631.365567][T10872] Quota error (device loop1): write_blk: dquota write failed
[  631.373877][T10872] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  631.384159][T10872] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1002: Failed to acquire dquot type 1
[  631.427042][T10872] EXT4-fs (loop1): 1 truncate cleaned up
[  631.441391][T10872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  632.212589][T10876] loop5: detected capacity change from 0 to 256
[  632.317348][T10876] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  633.272230][ T9595] udevd[9595]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  633.292867][ T5792] udevd[5792]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  633.312710][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  633.324441][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.412447][T10884] input: syz0 as /devices/virtual/input/input33
[  637.322234][T10916] loop1: detected capacity change from 0 to 128
[  637.775755][T10916] wg1 speed is unknown, defaulting to 1000
[  641.626980][T10930] wg1 speed is unknown, defaulting to 1000
[  642.647492][T10928] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  642.654077][T10928] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  642.736918][T10928] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  642.743126][T10928] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  642.789892][T10928] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  642.796030][T10928] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  642.826046][T10928] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  642.833728][T10928] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  642.957014][T10928] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  643.891948][T10970] overlayfs: failed to resolve './file0': -2
[  644.656474][T10971] bridge0: port 2(bridge_slave_1) entered disabled state
[  644.667424][T10971] bridge0: port 1(bridge_slave_0) entered disabled state
[  644.678425][T10971] bridge0: entered allmulticast mode
[  644.690552][ T5788] Bluetooth: hci0: command 0x0406 tx timeout
[  644.769364][ T5788] Bluetooth: hci1: command 0x0406 tx timeout
[  644.846546][ T5791] Bluetooth: hci2: command 0x0406 tx timeout
[  644.855092][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout
[  645.414703][ T1187] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  645.525146][T10979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1022'.
[  646.303229][ T1187] usb 6-1: config 0 has an invalid descriptor of length 125, skipping remainder of the config
[  646.356686][ T1187] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  646.360499][T10982] loop1: detected capacity change from 0 to 512
[  646.587118][T10982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  646.604035][ T1187] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  646.618502][ T1187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.632816][ T1187] usb 6-1: config 0 descriptor??
[  646.647943][T10982] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  646.758746][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.769397][ T5788] Bluetooth: hci0: command 0x0406 tx timeout
[  646.851918][ T5788] Bluetooth: hci1: command 0x0406 tx timeout
[  646.898858][T10992] loop1: detected capacity change from 0 to 1024
[  646.919384][ T5791] Bluetooth: hci2: command 0x0406 tx timeout
[  646.925521][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout
[  647.343716][T10992] hfsplus: xattr searching failed
[  647.490757][ T1136] Bluetooth: hci4: Frame reassembly failed (-84)
[  647.561827][ T5915] Bluetooth: hci5: Frame reassembly failed (-84)
[  649.069169][T11005] Bluetooth: hci3: command 0x0c1a tx timeout
[  649.413014][ T1187] usb 6-1: USB disconnect, device number 2
[  649.481014][T11005] Bluetooth: hci4: command 0x1003 tx timeout
[  649.488606][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  649.500970][T11019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1033'.
[  649.559331][ T5791] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  649.567493][ T5788] Bluetooth: hci5: command 0x1003 tx timeout
[  650.461402][T11024] loop1: detected capacity change from 0 to 512
[  650.624906][T11024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  650.697833][T11024] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  650.970772][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.127978][T11039] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1039'.
[  651.569357][ T5842] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  651.786352][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  651.818223][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  651.820311][T11046] loop3: detected capacity change from 0 to 512
[  651.837051][T11046] EXT4-fs: Ignoring removed nomblk_io_submit option
[  651.867079][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  651.897126][ T5842] usb 2-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  651.923319][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.940714][T11046] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  651.984254][ T5842] usb 2-1: config 0 descriptor??
[  652.019839][T11041] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  652.156918][T11046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  652.173928][T11046] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  652.176527][T11043] loop0: detected capacity change from 0 to 40427
[  653.531092][T11043] F2FS-fs (loop0): Image doesn't support compression
[  653.548085][T11043] F2FS-fs (loop0): Unrecognized mount option "whint_mode=fs-based" or missing value
[  653.786844][ T5842] usbhid 2-1:0.0: can't add hid device: -71
[  653.814161][T11055] loop5: detected capacity change from 0 to 512
[  653.815664][ T5842] usbhid: probe of 2-1:0.0 failed with error -71
[  653.841241][T11055] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  653.841921][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  654.167849][T11055] EXT4-fs (loop5): 1 truncate cleaned up
[  654.195956][T11055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  654.505709][ T5842] usb 2-1: USB disconnect, device number 11
[  654.598480][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  654.608855][T11059] loop0: detected capacity change from 0 to 512
[  654.693514][T11059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  654.804352][T11059] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  655.056946][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  655.289460][T11072] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1049'.
[  657.086654][T11086] loop0: detected capacity change from 0 to 32768
[  657.722689][T11086] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  657.732984][T11086] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  657.741804][T11086] BTRFS info (device loop0): metadata ratio 5
[  657.748008][T11086] BTRFS info (device loop0): doing ref verification
[  657.754695][T11086] BTRFS info (device loop0): use zlib compression, level 3
[  657.762018][T11086] BTRFS info (device loop0): setting nodatasum
[  657.768216][T11086] BTRFS info (device loop0): doing ref verification
[  657.774881][T11086] BTRFS info (device loop0): metadata ratio 0
[  657.781079][T11086] BTRFS info (device loop0): using free space tree
[  657.956065][T11086] BTRFS info (device loop0): enabling ssd optimizations
[  657.963798][T11086] BTRFS info (device loop0): auto enabling async discard
[  657.973293][T11086] BTRFS info (device loop0): checking UUID tree
[  658.000830][   T42] BTRFS warning (device loop0): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x947a0a1eec88a54dbf20a1a8d6b6dd946bccf52dadb115fb5db895743b8984fa level 0
[  658.062722][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1055'.
[  658.081385][ T8809] Bluetooth: hci4: Frame reassembly failed (-84)
[  658.119540][T11086] BTRFS: error (device loop0) in btrfs_fill_super:1172: errno=-5 IO failure
[  658.132547][T11086] BTRFS error (device loop0: state E): commit super ret -30
[  658.165316][T11111] (null): rxe_set_mtu: Set mtu to 1024
[  658.227309][T11111] rdma_rxe: rxe_newlink: failed to add wg1
[  659.229343][ T5835] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  659.328328][T11118] netlink: 'syz.3.1058': attribute type 72 has an invalid length.
[  659.418851][T11120] loop5: detected capacity change from 0 to 512
[  659.433758][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  659.453508][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  659.467640][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  659.485680][ T5835] usb 1-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  659.506572][T11120] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1059: iget: bad extended attribute block 1
[  659.524062][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.534540][T11120] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1059: couldn't read orphan inode 15 (err -117)
[  659.559277][ T5835] usb 1-1: config 0 descriptor??
[  659.574358][T11120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  659.598596][T11113] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  660.129361][ T5788] Bluetooth: hci4: command 0x1003 tx timeout
[  660.136018][ T5791] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  660.391770][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1059'.
[  660.402662][T11129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1060'.
[  660.849272][ T5835] usbhid 1-1:0.0: can't add hid device: -71
[  660.934062][T11128] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  660.963670][ T5835] usbhid: probe of 1-1:0.0 failed with error -71
[  661.064106][ T5835] usb 1-1: USB disconnect, device number 13
[  661.751773][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  662.008327][T11136] loop0: detected capacity change from 0 to 1024
[  662.143551][T11136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  663.078471][T11144] loop5: detected capacity change from 0 to 512
[  663.137403][T11144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  663.218005][T11144] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  664.396309][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  664.474347][T11153] loop1: detected capacity change from 0 to 512
[  664.545596][T11153] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1066: iget: bad extended attribute block 1
[  664.610668][T11153] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1066: couldn't read orphan inode 15 (err -117)
[  664.773760][T11153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  664.821383][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  664.943471][T11157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1066'.
[  665.066632][T11159] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1068'.
[  665.095643][T11157] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  665.358800][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  665.444931][T11165] loop3: detected capacity change from 0 to 512
[  665.493784][T11165] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1071: iget: bad extended attribute block 1
[  665.559032][T11165] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1071: couldn't read orphan inode 15 (err -117)
[  665.643577][T11165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  665.896003][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'.
[  666.027990][T11174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1071'.
[  666.142358][T11174] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  666.257307][T11180] loop0: detected capacity change from 0 to 512
[  666.349247][T11180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  666.395507][T11180] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  666.605014][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  666.742657][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  666.978787][T11191] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1078'.
[  667.539521][T11199] loop0: detected capacity change from 0 to 512
[  667.604914][T11199] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1081: iget: bad extended attribute block 1
[  667.661793][T11202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'.
[  667.676811][T11199] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1081: couldn't read orphan inode 15 (err -117)
[  667.837384][T11199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  667.923335][T11203] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap
[  669.128072][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1081'.
[  669.150419][T11208] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  669.359890][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1083'.
[  669.429793][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.586330][T11216] loop1: detected capacity change from 0 to 512
[  669.709217][ T5884] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  669.806049][T11216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  669.829307][T11216] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  669.869421][   T28] audit: type=1800 audit(1753752570.533:22): pid=11216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1086" name="bus" dev="loop1" ino=18 res=0 errno=0
[  669.953008][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short
[  669.962999][ T5884] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  669.965494][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.972590][ T5884] usb 6-1: config 1 has no interface number 1
[  669.991860][ T5884] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  670.001398][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.020473][ T5884] usb 6-1: Product: syz
[  670.033239][ T5884] usb 6-1: Manufacturer: syz
[  670.052685][ T5884] usb 6-1: SerialNumber: syz
[  670.337297][ T5884] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  670.346607][ T5884] usb 6-1: 2:1 : sample bitwidth 139 in over sample bytes 13
[  670.354687][ T5884] usb 6-1: 2:1 : unsupported sample bitwidth 139 in 13 bytes
[  670.397173][ T5884] usb 6-1: USB disconnect, device number 3
[  670.795105][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  670.846369][T11231] loop1: detected capacity change from 0 to 256
[  673.670204][T11230] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1089'.
[  674.305515][T11231] FAT-fs (loop1): Directory bread(block 64) failed
[  674.312833][T11231] FAT-fs (loop1): Directory bread(block 65) failed
[  674.319551][T11231] FAT-fs (loop1): Directory bread(block 66) failed
[  674.326139][T11231] FAT-fs (loop1): Directory bread(block 67) failed
[  674.333104][T11231] FAT-fs (loop1): Directory bread(block 68) failed
[  674.339755][T11231] FAT-fs (loop1): Directory bread(block 69) failed
[  674.346396][T11231] FAT-fs (loop1): Directory bread(block 70) failed
[  674.353043][T11231] FAT-fs (loop1): Directory bread(block 71) failed
[  674.359802][T11231] FAT-fs (loop1): Directory bread(block 72) failed
[  674.366383][T11231] FAT-fs (loop1): Directory bread(block 73) failed
[  676.590766][T11255] loop5: detected capacity change from 0 to 512
[  676.637918][T11255] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1093: iget: bad extended attribute block 1
[  676.668329][T11255] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1093: couldn't read orphan inode 15 (err -117)
[  676.727552][T11255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  676.899682][ T1187] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  676.960339][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1093'.
[  677.069516][T11260] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  677.119855][ T1187] usb 2-1: Using ep0 maxpacket: 8
[  677.175518][ T1187] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  677.195484][T11263] loop3: detected capacity change from 0 to 1024
[  677.367512][ T1187] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  677.377586][ T1187] usb 2-1: config 0 interface 0 has no altsetting 0
[  677.384952][ T1187] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00
[  677.394200][ T1187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.405175][ T1187] usb 2-1: config 0 descriptor??
[  677.876630][T11265] hfsplus: xattr searching failed
[  678.202048][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  678.632918][ T1187] usbhid 2-1:0.0: can't add hid device: -71
[  678.638982][ T1187] usbhid: probe of 2-1:0.0 failed with error -71
[  678.652950][ T1187] usb 2-1: USB disconnect, device number 12
[  679.098676][T11272] loop3: detected capacity change from 0 to 40427
[  679.137246][T11272] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  679.168352][T11272] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  679.457252][T11272] F2FS-fs (loop3): invalid crc value
[  679.488741][T11272] F2FS-fs (loop3): Found nat_bits in checkpoint
[  679.705896][T11287] loop5: detected capacity change from 0 to 512
[  679.753317][T11287] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  679.798737][T11272] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  679.827341][T11287] EXT4-fs (loop5): 1 truncate cleaned up
[  679.835555][T11272] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  679.935051][T11287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  680.880101][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  681.128606][T11296] loop1: detected capacity change from 0 to 512
[  681.214237][T11296] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1106: iget: bad extended attribute block 1
[  681.697705][T11296] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1106: couldn't read orphan inode 15 (err -117)
[  681.867383][T11296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  681.942608][T11301] loop5: detected capacity change from 0 to 1024
[  682.717454][T11306] hfsplus: xattr searching failed
[  682.944520][T11303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1106'.
[  683.000662][T11303] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  683.396416][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  685.074312][T11328] loop0: detected capacity change from 0 to 512
[  685.142465][T11328] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  686.255031][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  686.278533][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  686.329822][T11328] EXT4-fs (loop0): 1 truncate cleaned up
[  686.336913][T11328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  686.782412][T11337] loop3: detected capacity change from 0 to 512
[  686.827664][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.173646][T11337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  687.455457][T11343] loop1: detected capacity change from 0 to 1024
[  687.786019][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.861427][T11344] hfsplus: xattr searching failed
[  687.962115][T11348] loop0: detected capacity change from 0 to 512
[  688.120034][T11348] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1119: iget: bad extended attribute block 1
[  688.210188][T11348] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1119: couldn't read orphan inode 15 (err -117)
[  688.299811][T11348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  688.579669][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1119'.
[  688.590679][T11348] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  688.630690][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  689.309252][ T5835] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  689.589483][T11369] loop5: detected capacity change from 0 to 2048
[  689.789373][T11369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  693.490191][T11372] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  694.429356][ T5835] usb 1-1: device not accepting address 14, error -71
[  694.496494][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  695.142457][T11394] loop0: detected capacity change from 0 to 512
[  695.308403][T11395] loop5: detected capacity change from 0 to 512
[  696.281630][T11395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  696.294858][T11395] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  696.321237][T11395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  697.188113][T11401] loop3: detected capacity change from 0 to 512
[  697.215218][T11394] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1132: casefold flag without casefold feature
[  697.285473][T11401] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1133: iget: bad extended attribute block 1
[  697.353714][T11394] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1132: couldn't read orphan inode 15 (err -117)
[  697.380319][T11401] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1133: couldn't read orphan inode 15 (err -117)
[  697.424154][T11394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  697.471066][T11401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  697.620083][ T5777] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  697.637467][T11394] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.1132: Directory hole found for htree leaf block 0
[  697.920567][T11401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1133'.
[  697.931237][T11401] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  698.143285][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  698.178943][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  698.397970][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'.
[  698.427971][T11411] syz0: rxe_newlink: already configured on wg1
[  699.031253][ T5842] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  700.228694][ T5842] usb 1-1: Using ep0 maxpacket: 8
[  700.293751][ T5842] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  700.345765][ T5842] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  700.413445][ T5842] usb 1-1: config 0 interface 0 has no altsetting 0
[  700.439237][ T5842] usb 1-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00
[  700.457412][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.515572][ T5842] usb 1-1: config 0 descriptor??
[  700.637312][T11435] loop1: detected capacity change from 0 to 512
[  700.675227][T11435] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1144: iget: bad extended attribute block 1
[  700.745909][T11439] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1143'.
[  700.841957][T11435] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1144: couldn't read orphan inode 15 (err -117)
[  701.156676][T11435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  701.443730][ T5842] usbhid 1-1:0.0: can't add hid device: -71
[  701.444821][T11441] loop3: detected capacity change from 0 to 512
[  701.463956][T11441] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1145: iget: bad extended attribute block 1
[  701.477418][T11441] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1145: couldn't read orphan inode 15 (err -117)
[  701.538571][ T5842] usbhid: probe of 1-1:0.0 failed with error -71
[  701.548936][ T5842] usb 1-1: USB disconnect, device number 16
[  701.587272][T11443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1144'.
[  701.624677][T11441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  701.803834][T11448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1145'.
[  701.823122][T11448] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  702.353408][T11443] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  702.988912][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  703.477728][T11454] input: syz0 as /devices/virtual/input/input34
[  703.628582][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  707.036349][T11476] loop5: detected capacity change from 0 to 32768
[  707.067431][T11486] loop3: detected capacity change from 0 to 256
[  707.242079][T11476] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1155 (11476)
[  707.645928][T11486] FAT-fs (loop3): Directory bread(block 64) failed
[  707.652779][T11486] FAT-fs (loop3): Directory bread(block 65) failed
[  707.660075][T11486] FAT-fs (loop3): Directory bread(block 66) failed
[  707.666739][T11486] FAT-fs (loop3): Directory bread(block 67) failed
[  707.673998][T11486] FAT-fs (loop3): Directory bread(block 68) failed
[  707.680911][T11486] FAT-fs (loop3): Directory bread(block 69) failed
[  707.688078][T11486] FAT-fs (loop3): Directory bread(block 70) failed
[  707.695933][T11486] FAT-fs (loop3): Directory bread(block 71) failed
[  707.703333][T11486] FAT-fs (loop3): Directory bread(block 72) failed
[  707.710044][T11486] FAT-fs (loop3): Directory bread(block 73) failed
[  708.609274][   T27] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  708.634684][T11476] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  708.645314][T11476] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  708.654270][T11476] BTRFS info (device loop5): metadata ratio 5
[  708.660475][T11476] BTRFS info (device loop5): doing ref verification
[  708.667110][T11476] BTRFS info (device loop5): use zlib compression, level 3
[  708.674515][T11476] BTRFS info (device loop5): setting nodatasum
[  708.681220][T11476] BTRFS info (device loop5): doing ref verification
[  708.687856][T11476] BTRFS info (device loop5): metadata ratio 0
[  708.694266][T11476] BTRFS info (device loop5): using free space tree
[  708.901990][   T27] usb 2-1: Using ep0 maxpacket: 8
[  708.944637][   T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  708.959284][T11476] BTRFS info (device loop5): enabling ssd optimizations
[  708.966311][T11476] BTRFS info (device loop5): auto enabling async discard
[  708.976982][T11476] BTRFS info (device loop5): checking UUID tree
[  708.996314][ T3433] BTRFS warning (device loop5): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x947a0a1eec88a54dbf20a1a8d6b6dd946bccf52dadb115fb5db895743b8984fa level 0
[  709.034048][   T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  709.068165][   T27] usb 2-1: config 0 interface 0 has no altsetting 0
[  709.097079][   T27] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00
[  709.109506][T11476] BTRFS: error (device loop5) in btrfs_fill_super:1172: errno=-5 IO failure
[  709.120428][T11476] BTRFS error (device loop5: state E): commit super ret -30
[  709.292511][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.314705][   T27] usb 2-1: config 0 descriptor??
[  709.575942][T11517] loop3: detected capacity change from 0 to 512
[  709.672800][T11517] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1159: iget: bad extended attribute block 1
[  709.744928][T11517] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1159: couldn't read orphan inode 15 (err -117)
[  710.116440][T11517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  710.143289][   T27] usbhid 2-1:0.0: can't add hid device: -71
[  710.367173][   T27] usbhid: probe of 2-1:0.0 failed with error -71
[  710.425131][   T27] usb 2-1: USB disconnect, device number 14
[  710.936151][T11530] loop0: detected capacity change from 0 to 512
[  710.943590][T11530] EXT4-fs: Ignoring removed nomblk_io_submit option
[  710.951406][T11519] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap
[  712.672773][T11528] loop5: detected capacity change from 0 to 1024
[  713.674620][T11530] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0.
[  713.797493][T11528] hfsplus: failed to load root directory
[  714.296949][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.679157][T11536] input: syz0 as /devices/virtual/input/input35
[  715.224017][T11542] loop5: detected capacity change from 0 to 32768
[  715.376648][T11542] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1166 (11542)
[  715.401506][T11542] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  715.411839][T11542] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  715.420596][T11542] BTRFS info (device loop5): metadata ratio 5
[  715.426922][T11542] BTRFS info (device loop5): doing ref verification
[  715.433617][T11542] BTRFS info (device loop5): use zlib compression, level 3
[  715.440934][T11542] BTRFS info (device loop5): setting nodatasum
[  715.447163][T11542] BTRFS info (device loop5): doing ref verification
[  715.453839][T11542] BTRFS info (device loop5): metadata ratio 0
[  715.459990][T11542] BTRFS info (device loop5): using free space tree
[  715.948614][T11535] input: syz0 as /devices/virtual/input/input36
[  716.335398][T11563] loop3: detected capacity change from 0 to 256
[  718.273429][T11542] BTRFS error (device loop5): open_ctree failed: -4
[  719.260192][T11563] FAT-fs (loop3): Directory bread(block 64) failed
[  719.267972][T11563] FAT-fs (loop3): Directory bread(block 65) failed
[  719.274811][T11563] FAT-fs (loop3): Directory bread(block 66) failed
[  719.281483][T11563] FAT-fs (loop3): Directory bread(block 67) failed
[  719.288114][T11563] FAT-fs (loop3): Directory bread(block 68) failed
[  719.294745][T11563] FAT-fs (loop3): Directory bread(block 69) failed
[  719.301405][T11563] FAT-fs (loop3): Directory bread(block 70) failed
[  719.307955][T11563] FAT-fs (loop3): Directory bread(block 71) failed
[  719.314691][T11563] FAT-fs (loop3): Directory bread(block 72) failed
[  719.321354][T11563] FAT-fs (loop3): Directory bread(block 73) failed
[  719.629649][ T7471] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (7471)
[  720.001225][T11573] loop1: detected capacity change from 0 to 256
[  720.122186][T11573] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  720.192366][T11573] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  720.273120][T11573] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  721.351700][T11585] loop3: detected capacity change from 0 to 512
[  721.358288][T11583] loop0: detected capacity change from 0 to 1024
[  721.480617][T11585] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1173: iget: bad extended attribute block 1
[  721.569429][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1171'.
[  721.686359][T11585] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1173: couldn't read orphan inode 15 (err -117)
[  721.762164][T11585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  721.839796][T11591] hfsplus: xattr searching failed
[  721.981215][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1173'.
[  722.406856][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  723.256520][T11604] loop1: detected capacity change from 0 to 32768
[  723.325672][T11606] loop3: detected capacity change from 0 to 256
[  724.641227][T11607] input: syz0 as /devices/virtual/input/input37
[  727.509983][T11606] FAT-fs (loop3): Directory bread(block 64) failed
[  727.516605][T11606] FAT-fs (loop3): Directory bread(block 65) failed
[  727.523343][T11606] FAT-fs (loop3): Directory bread(block 66) failed
[  727.529979][T11606] FAT-fs (loop3): Directory bread(block 67) failed
[  727.536664][T11606] FAT-fs (loop3): Directory bread(block 68) failed
[  727.543263][T11606] FAT-fs (loop3): Directory bread(block 69) failed
[  727.549915][T11606] FAT-fs (loop3): Directory bread(block 70) failed
[  727.556439][T11606] FAT-fs (loop3): Directory bread(block 71) failed
[  727.563506][T11606] FAT-fs (loop3): Directory bread(block 72) failed
[  727.570061][T11606] FAT-fs (loop3): Directory bread(block 73) failed
[  728.381224][T11616] loop0: detected capacity change from 0 to 512
[  729.463506][T11616] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1183: iget: bad extended attribute block 1
[  729.576362][T11616] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1183: couldn't read orphan inode 15 (err -117)
[  729.905329][T11616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  730.845218][T11616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1183'.
[  730.857909][T11616] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  730.953053][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  730.994833][T11631] loop1: detected capacity change from 0 to 256
[  731.040485][T11631] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  731.067515][T11631] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  731.098909][T11631] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  732.128080][T11640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1187'.
[  733.269312][T11643] loop5: detected capacity change from 0 to 32768
[  733.280344][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'.
[  733.312008][T11643] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  733.322403][T11643] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  733.331323][T11643] BTRFS info (device loop5): metadata ratio 5
[  733.337448][T11643] BTRFS info (device loop5): doing ref verification
[  733.344135][T11643] BTRFS info (device loop5): use zlib compression, level 3
[  733.351458][T11643] BTRFS info (device loop5): setting nodatasum
[  733.357671][T11643] BTRFS info (device loop5): doing ref verification
[  733.364413][T11643] BTRFS info (device loop5): metadata ratio 0
[  733.370621][T11643] BTRFS info (device loop5): using free space tree
[  733.510951][T11643] BTRFS info (device loop5): enabling ssd optimizations
[  733.518018][T11643] BTRFS info (device loop5): auto enabling async discard
[  733.561772][T11643] BTRFS info (device loop5): checking UUID tree
[  733.577459][ T5911] BTRFS warning (device loop5): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x947a0a1eec88a54dbf20a1a8d6b6dd946bccf52dadb115fb5db895743b8984fa level 0
[  733.637414][T11643] BTRFS: error (device loop5) in btrfs_fill_super:1172: errno=-5 IO failure
[  733.648607][T11643] BTRFS error (device loop5: state E): commit super ret -30
[  734.166994][T11667] loop3: detected capacity change from 0 to 256
[  734.320037][T11667] FAT-fs (loop3): Directory bread(block 64) failed
[  734.326773][T11667] FAT-fs (loop3): Directory bread(block 65) failed
[  734.334037][T11667] FAT-fs (loop3): Directory bread(block 66) failed
[  734.340959][T11667] FAT-fs (loop3): Directory bread(block 67) failed
[  734.348132][T11667] FAT-fs (loop3): Directory bread(block 68) failed
[  734.354917][T11667] FAT-fs (loop3): Directory bread(block 69) failed
[  734.362309][T11667] FAT-fs (loop3): Directory bread(block 70) failed
[  734.368975][T11667] FAT-fs (loop3): Directory bread(block 71) failed
[  734.376219][T11667] FAT-fs (loop3): Directory bread(block 72) failed
[  734.383002][T11667] FAT-fs (loop3): Directory bread(block 73) failed
[  735.824980][T11671] input: syz0 as /devices/virtual/input/input38
[  738.338651][T11686] loop5: detected capacity change from 0 to 512
[  738.423551][T11686] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1195: iget: bad extended attribute block 1
[  738.485097][T11686] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1195: couldn't read orphan inode 15 (err -117)
[  739.104178][T11686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  739.285435][T11686] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1195'.
[  739.320256][T11686] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  739.352105][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'.
[  739.472907][T11699] (null): rxe_set_mtu: Set mtu to 1024
[  739.478602][T11699] rdma_rxe: rxe_newlink: failed to add wg1
[  739.730989][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  739.985421][T11706] loop3: detected capacity change from 0 to 512
[  740.282355][T11706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  740.295645][T11706] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  740.318372][T11706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  742.905219][T11717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1203'.
[  743.964716][T11722] input: syz0 as /devices/virtual/input/input39
[  744.052513][T11728] input: syz0 as /devices/virtual/input/input40
[  744.554879][T11738] loop3: detected capacity change from 0 to 512
[  744.576135][T11738] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1210: iget: bad extended attribute block 1
[  744.598956][T11738] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1210: couldn't read orphan inode 15 (err -117)
[  744.625097][T11738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  744.702483][T11738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1210'.
[  744.716356][T11738] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  744.780623][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.921427][T11744] loop0: detected capacity change from 0 to 512
[  744.930068][T11744] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  744.942997][T11744] EXT4-fs (loop0): 1 truncate cleaned up
[  744.953677][T11744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  745.342542][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  745.473551][T11752] xt_TPROXY: Can be used only with -p tcp or -p udp
[  746.436038][T11758] input: syz0 as /devices/virtual/input/input41
[  746.818899][T11760] loop3: detected capacity change from 0 to 256
[  746.872042][T11763] loop0: detected capacity change from 0 to 512
[  746.878670][T11760] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  746.903943][T11760] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  746.954058][T11763] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1219: iget: bad extended attribute block 1
[  747.002656][T11760] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  747.024359][T11763] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1219: couldn't read orphan inode 15 (err -117)
[  747.712714][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  747.719740][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  747.783618][T11763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  747.846416][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'.
[  748.780909][T11763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1219'.
[  748.810474][T11763] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  749.082482][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  749.425775][T11788] netlink: 'syz.3.1225': attribute type 3 has an invalid length.
[  749.441018][T11788] netlink: 'syz.3.1225': attribute type 3 has an invalid length.
[  749.449125][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'.
[  749.602755][T11788] wg1 speed is unknown, defaulting to 1000
[  750.346089][T11789] usb usb1: check_ctrlrecip: process 11789 (syz.3.1225) requesting ep 01 but needs 81
[  750.979175][ T5884] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  751.116015][T11799] input: syz0 as /devices/virtual/input/input42
[  751.182935][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  751.215439][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  751.227056][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  751.244310][ T5884] usb 2-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  751.287053][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.328325][ T5884] usb 2-1: config 0 descriptor??
[  751.373288][T11794] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  752.516945][ T5884] nzxt-smart2 0003:1E71:2019.0010: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.1-1/input0
[  752.843249][ T5884] usb 2-1: USB disconnect, device number 15
[  753.105186][T11815] loop0: detected capacity change from 0 to 512
[  753.114740][T11813] fido_id[11813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  753.212274][T11815] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1233: iget: bad extended attribute block 1
[  753.362146][T11815] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1233: couldn't read orphan inode 15 (err -117)
[  753.498228][T11815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  753.566971][T11815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1233'.
[  753.602696][T11815] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  753.635557][T11823] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1234'.
[  753.916914][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  754.451257][T11833] input: syz0 as /devices/virtual/input/input43
[  756.382785][T11845] loop0: detected capacity change from 0 to 512
[  756.399418][T11845] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  756.466434][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1244'.
[  756.489668][T11845] EXT4-fs (loop0): 1 truncate cleaned up
[  756.496747][T11845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  756.503457][T11848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1244'.
[  756.580592][T11855] loop3: detected capacity change from 0 to 512
[  756.619414][T11855] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1246: iget: bad extended attribute block 1
[  756.648314][T11855] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1246: couldn't read orphan inode 15 (err -117)
[  756.701188][T11855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  756.714384][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  756.771014][ T5884] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  756.936749][T11859] input: syz0 as /devices/virtual/input/input44
[  757.294718][T11855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1246'.
[  757.305167][T11855] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  757.453215][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  757.461551][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  757.490964][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  757.524475][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  757.558420][ T5884] usb 6-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  757.579377][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.616091][ T5884] usb 6-1: config 0 descriptor??
[  757.630481][T11852] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  759.021621][T11872] loop1: detected capacity change from 0 to 32768
[  759.064826][T11872] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1250 (11872)
[  759.127767][ T5884] nzxt-smart2 0003:1E71:2019.0011: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.5-1/input0
[  759.202306][T11872] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  759.212599][T11872] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  759.221385][T11872] BTRFS info (device loop1): metadata ratio 5
[  759.227516][T11872] BTRFS info (device loop1): doing ref verification
[  759.235029][T11872] BTRFS info (device loop1): use zlib compression, level 3
[  759.242553][T11872] BTRFS info (device loop1): setting nodatasum
[  759.248741][T11872] BTRFS info (device loop1): doing ref verification
[  759.255458][T11872] BTRFS info (device loop1): metadata ratio 0
[  759.261607][T11872] BTRFS info (device loop1): using free space tree
[  759.386862][ T5884] usb 6-1: USB disconnect, device number 4
[  759.679237][T11872] BTRFS info (device loop1): enabling ssd optimizations
[  759.686304][T11872] BTRFS info (device loop1): auto enabling async discard
[  759.698032][T11872] BTRFS info (device loop1): checking UUID tree
[  760.117577][T11884] fido_id[11884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  760.359562][   T12] BTRFS warning (device loop1): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x947a0a1eec88a54dbf20a1a8d6b6dd946bccf52dadb115fb5db895743b8984fa level 0
[  760.486523][T11872] BTRFS: error (device loop1) in btrfs_fill_super:1172: errno=-5 IO failure
[  760.497366][T11872] BTRFS error (device loop1: state E): commit super ret -30
[  761.385043][T11908] loop0: detected capacity change from 0 to 512
[  761.401811][T11908] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  761.714925][T11908] EXT4-fs (loop0): 1 truncate cleaned up
[  762.759496][T11908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  762.854217][T11913] loop5: detected capacity change from 0 to 512
[  763.220134][T11913] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1258: iget: bad extended attribute block 1
[  763.340724][T11921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1257'.
[  763.758648][T11913] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1258: couldn't read orphan inode 15 (err -117)
[  763.772686][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  763.812525][T11913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  764.083212][T11913] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1258'.
[  764.094436][T11913] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  764.374324][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  764.599359][ T6942] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  765.020652][ T6942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  765.059939][ T6942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  765.089428][ T6942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  765.126411][ T6942] usb 2-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  765.143858][ T6942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  765.193794][ T6942] usb 2-1: config 0 descriptor??
[  765.203917][T11933] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  766.246859][T11941] loop5: detected capacity change from 0 to 32768
[  766.275301][ T6942] nzxt-smart2 0003:1E71:2019.0012: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.1-1/input0
[  766.287138][T11941] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1263 (11941)
[  766.507642][ T6942] usb 2-1: USB disconnect, device number 16
[  766.531592][T11941] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  766.541940][T11941] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  766.553512][T11941] BTRFS info (device loop5): metadata ratio 5
[  766.559730][T11941] BTRFS info (device loop5): doing ref verification
[  766.566358][T11941] BTRFS info (device loop5): use zlib compression, level 3
[  766.574811][T11941] BTRFS info (device loop5): setting nodatasum
[  766.581079][T11941] BTRFS info (device loop5): doing ref verification
[  766.587692][T11941] BTRFS info (device loop5): metadata ratio 0
[  766.593831][T11941] BTRFS info (device loop5): using free space tree
[  766.656473][T11951] fido_id[11951]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  766.697042][T11941] BTRFS info (device loop5): enabling ssd optimizations
[  766.704266][T11941] BTRFS info (device loop5): auto enabling async discard
[  766.717853][T11941] BTRFS info (device loop5): checking UUID tree
[  766.725647][ T9072] BTRFS warning (device loop5): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x947a0a1eec88a54dbf20a1a8d6b6dd946bccf52dadb115fb5db895743b8984fa level 0
[  766.816187][T11941] BTRFS: error (device loop5) in btrfs_fill_super:1172: errno=-5 IO failure
[  766.827238][T11941] BTRFS error (device loop5: state E): commit super ret -30
[  768.098837][T11978] loop5: detected capacity change from 0 to 512
[  768.159456][T11978] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  768.251643][T11980] loop3: detected capacity change from 0 to 512
[  768.350918][T11978] EXT4-fs (loop5): 1 truncate cleaned up
[  768.357974][T11978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  768.382115][T11980] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1271: iget: bad extended attribute block 1
[  768.472854][T11980] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1271: couldn't read orphan inode 15 (err -117)
[  768.585639][T11980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  768.654838][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.976268][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1270'.
[  769.949966][T11980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1271'.
[  769.960932][T11980] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  770.021701][T11994] input: syz0 as /devices/virtual/input/input45
[  770.072587][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  771.239201][ T5835] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  772.224487][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  772.260026][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  772.288689][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  772.555576][ T5835] usb 2-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  772.565032][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.819284][ T5835] usb 2-1: config 0 descriptor??
[  772.858004][T12007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  773.065932][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1282'.
[  773.579824][ T5835] nzxt-smart2 0003:1E71:2019.0013: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.1-1/input0
[  773.757156][ T5835] usb 2-1: USB disconnect, device number 17
[  773.847573][T12035] fido_id[12035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  774.115498][T12041] veth1_macvtap: left promiscuous mode
[  774.125066][T12041] macsec0: entered promiscuous mode
[  774.135924][T12044] input: syz0 as /devices/virtual/input/input46
[  775.553780][T12052] loop5: detected capacity change from 0 to 512
[  775.570175][T12052] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  775.804108][T12052] EXT4-fs (loop5): 1 truncate cleaned up
[  775.814471][T12052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  776.254427][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  776.535275][T12066] input: syz0 as /devices/virtual/input/input47
[  777.384440][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1292'.
[  779.844842][T12082] input: syz0 as /devices/virtual/input/input48
[  780.860002][T12098] loop0: detected capacity change from 0 to 256
[  780.895873][   T55] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  781.248442][   T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  781.351631][T12098] FAT-fs (loop0): Directory bread(block 64) failed
[  781.358601][T12098] FAT-fs (loop0): Directory bread(block 65) failed
[  781.365989][T12098] FAT-fs (loop0): Directory bread(block 66) failed
[  781.372776][T12098] FAT-fs (loop0): Directory bread(block 67) failed
[  781.380067][T12098] FAT-fs (loop0): Directory bread(block 68) failed
[  781.386760][T12098] FAT-fs (loop0): Directory bread(block 69) failed
[  781.394150][T12098] FAT-fs (loop0): Directory bread(block 70) failed
[  781.401116][T12098] FAT-fs (loop0): Directory bread(block 71) failed
[  781.408406][T12098] FAT-fs (loop0): Directory bread(block 72) failed
[  781.415354][T12098] FAT-fs (loop0): Directory bread(block 73) failed
[  781.791287][   T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  781.850326][   T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  781.915749][   T55] usb 6-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  782.644450][   T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.794991][   T55] usb 6-1: config 0 descriptor??
[  782.935055][T12101] input: syz0 as /devices/virtual/input/input49
[  783.316362][   T55] usb 6-1: can't set config #0, error -71
[  783.327040][   T55] usb 6-1: USB disconnect, device number 5
[  783.493669][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1303'.
[  783.645180][T12109] loop3: detected capacity change from 0 to 512
[  783.709326][T12110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1302'.
[  784.393305][T12111] (null): rxe_set_mtu: Set mtu to 1024
[  784.431626][T12111] rdma_rxe: rxe_newlink: failed to add wg1
[  784.440444][T12109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  784.591617][T12109] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  784.694335][T12120] loop0: detected capacity change from 0 to 512
[  784.723397][T12120] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  784.789071][T12120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  784.824781][T12120] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.1306: corrupted in-inode xattr: e_value size too large
[  784.865902][T12120] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1306: couldn't read orphan inode 15 (err -117)
[  784.915924][T12120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  784.945289][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  785.433815][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  785.799471][T12126] input: syz0 as /devices/virtual/input/input50
[  787.091942][T12133] loop3: detected capacity change from 0 to 32768
[  787.148048][T12133] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1310 (12133)
[  787.201510][T12133] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  787.211864][T12133] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  787.220657][T12133] BTRFS info (device loop3): metadata ratio 5
[  787.226791][T12133] BTRFS info (device loop3): doing ref verification
[  787.233600][T12133] BTRFS info (device loop3): use zlib compression, level 3
[  787.241012][T12133] BTRFS info (device loop3): setting nodatasum
[  787.247183][T12133] BTRFS info (device loop3): doing ref verification
[  787.253823][T12133] BTRFS info (device loop3): metadata ratio 0
[  787.260760][T12133] BTRFS info (device loop3): using free space tree
[  787.545628][T12133] BTRFS info (device loop3): enabling ssd optimizations
[  787.552820][T12133] BTRFS info (device loop3): auto enabling async discard
[  787.566500][T12133] BTRFS info (device loop3): checking UUID tree
[  787.598682][ T1136] BTRFS warning (device loop3): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x947a0a1eec88a54dbf20a1a8d6b6dd946bccf52dadb115fb5db895743b8984fa level 0
[  788.339803][T12133] BTRFS: error (device loop3) in btrfs_fill_super:1172: errno=-5 IO failure
[  788.350592][T12133] BTRFS error (device loop3: state E): commit super ret -30
[  788.807690][T12163] overlayfs: failed to resolve './file0': -2
[  789.914432][T12173] loop1: detected capacity change from 0 to 512
[  789.985403][T12173] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  790.067569][T12173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  790.120105][T12173] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.1318: corrupted in-inode xattr: e_value size too large
[  790.139951][T12173] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1318: couldn't read orphan inode 15 (err -117)
[  790.181117][T12173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  790.419366][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  791.776340][T12189] loop3: detected capacity change from 0 to 512
[  792.153541][T12189] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1322: iget: bad extended attribute block 1
[  792.399543][T12189] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1322: couldn't read orphan inode 15 (err -117)
[  792.432158][T12189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  792.488787][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'.
[  792.557830][T12189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1322'.
[  792.568434][T12189] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  792.604291][T12202] (null): rxe_set_mtu: Set mtu to 1024
[  792.647161][T12202] rdma_rxe: rxe_newlink: failed to add wg1
[  792.676617][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  793.959645][T12217] 9pnet_fd: Insufficient options for proto=fd
[  794.878053][T12222] loop5: detected capacity change from 0 to 512
[  795.100732][ T5842] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  795.190566][T12222] EXT4-fs: Ignoring removed nomblk_io_submit option
[  795.198373][T12222] EXT4-fs (loop5): Test dummy encryption mode enabled
[  795.216982][T12222] EXT4-fs (loop5): 1 truncate cleaned up
[  795.234903][T12222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  795.434655][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  795.502726][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  795.564629][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  795.579429][ T5842] usb 4-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  795.588488][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  795.619190][ T5842] usb 4-1: config 0 descriptor??
[  795.624914][T12220] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  796.120349][ T5842] nzxt-smart2 0003:1E71:2019.0014: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.3-1/input0
[  796.275690][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  796.309990][ T5842] usb 4-1: USB disconnect, device number 8
[  796.461356][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1335'.
[  797.084895][T12238] loop5: detected capacity change from 0 to 512
[  797.164009][T12238] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1336: iget: bad extended attribute block 1
[  797.304738][T12238] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1336: couldn't read orphan inode 15 (err -117)
[  797.349708][T12238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  797.463373][T12238] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1336'.
[  797.500562][T12238] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  798.646877][T12252] veth0: entered promiscuous mode
[  798.786004][T12251] veth0: left promiscuous mode
[  798.827187][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  799.366583][T12253] input: syz0 as /devices/virtual/input/input51
[  799.770564][T12262] loop5: detected capacity change from 0 to 128
[  800.386726][T12269] wg1 speed is unknown, defaulting to 1000
[  800.520551][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'.
[  800.720197][T12275] (null): rxe_set_mtu: Set mtu to 1024
[  801.925916][T12275] rdma_rxe: rxe_newlink: failed to add wg1
[  802.033853][T12286] loop3: detected capacity change from 0 to 512
[  802.083641][T12286] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1350: iget: bad extended attribute block 1
[  802.110395][T12286] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1350: couldn't read orphan inode 15 (err -117)
[  802.220097][T12286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  802.366718][T12286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1350'.
[  802.380176][T12286] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  802.473414][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  805.548650][T12316] loop0: detected capacity change from 0 to 512
[  805.610797][T12316] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  805.736914][T12316] EXT4-fs (loop0): 1 truncate cleaned up
[  805.775520][T12316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  805.935818][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  806.116796][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'.
[  807.179865][T12332] loop5: detected capacity change from 0 to 32768
[  807.187633][T12332] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1363 (12332)
[  807.209555][T12329] (null): rxe_set_mtu: Set mtu to 1024
[  807.219201][ T5842] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  807.311846][T12332] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  807.323081][T12332] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  807.332951][T12332] BTRFS info (device loop5): metadata ratio 5
[  807.339170][T12332] BTRFS info (device loop5): doing ref verification
[  807.345803][T12332] BTRFS info (device loop5): use zlib compression, level 3
[  807.353625][T12332] BTRFS info (device loop5): setting nodatasum
[  807.360275][T12332] BTRFS info (device loop5): doing ref verification
[  807.366917][T12332] BTRFS info (device loop5): metadata ratio 0
[  807.373144][T12332] BTRFS info (device loop5): using free space tree
[  807.419499][T12329] rdma_rxe: rxe_newlink: failed to add wg1
[  807.526661][T12332] BTRFS info (device loop5): enabling ssd optimizations
[  807.533257][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  807.535552][T12332] BTRFS info (device loop5): auto enabling async discard
[  807.568112][T12332] BTRFS info (device loop5): checking UUID tree
[  807.591592][ T5911] BTRFS warning (device loop5): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x947a0a1eec88a54dbf20a1a8d6b6dd946bccf52dadb115fb5db895743b8984fa level 0
[  807.620715][T12332] BTRFS: error (device loop5) in btrfs_fill_super:1172: errno=-5 IO failure
[  807.631112][T12332] BTRFS error (device loop5: state E): commit super ret -30
[  807.683495][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  807.722062][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  807.765175][ T5842] usb 4-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  807.774735][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.880385][ T5842] usb 4-1: config 0 descriptor??
[  807.892884][ T7471] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (7471)
[  807.921906][T12324] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  809.069783][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  809.076161][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  809.087944][ T5842] nzxt-smart2 0003:1E71:2019.0015: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.3-1/input0
[  809.305370][T12359] loop1: detected capacity change from 0 to 512
[  809.322224][ T5842] usb 4-1: USB disconnect, device number 9
[  809.542428][T12357] fido_id[12357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  809.597914][T12359] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1367: iget: bad extended attribute block 1
[  809.628965][T12359] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1367: couldn't read orphan inode 15 (err -117)
[  810.470471][T12359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  810.752374][T12370] loop5: detected capacity change from 0 to 512
[  810.762578][T12363] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap
[  810.795457][T12370] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  813.639544][T12370] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  813.640027][T12370] EXT4-fs: failed to create workqueue
[  813.655354][T12370] EXT4-fs (loop5): mount failed
[  814.229099][ T7471] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  814.240425][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.559908][T12377] loop1: detected capacity change from 0 to 512
[  814.624834][T12377] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  814.717754][T12377] EXT4-fs (loop1): 1 truncate cleaned up
[  814.751095][T12377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  815.801881][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.126033][T12387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1373'.
[  818.903097][T12408] loop1: detected capacity change from 0 to 512
[  818.934364][T12408] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  819.038721][T12408] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  819.055595][T12408] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.1379: corrupted in-inode xattr: e_value size too large
[  819.080115][T12408] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1379: couldn't read orphan inode 15 (err -117)
[  819.107232][T12408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  819.444783][T12411] loop5: detected capacity change from 0 to 512
[  819.550181][T12411] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1380: iget: bad extended attribute block 1
[  819.661776][T12411] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1380: couldn't read orphan inode 15 (err -117)
[  819.909904][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  820.637847][T12411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  820.825436][T12418] loop0: detected capacity change from 0 to 256
[  821.071499][T12418] FAT-fs (loop0): Directory bread(block 64) failed
[  821.078294][T12418] FAT-fs (loop0): Directory bread(block 65) failed
[  821.085527][T12418] FAT-fs (loop0): Directory bread(block 66) failed
[  821.092266][T12418] FAT-fs (loop0): Directory bread(block 67) failed
[  821.099466][T12418] FAT-fs (loop0): Directory bread(block 68) failed
[  821.106128][T12418] FAT-fs (loop0): Directory bread(block 69) failed
[  821.113345][T12418] FAT-fs (loop0): Directory bread(block 70) failed
[  821.120080][T12418] FAT-fs (loop0): Directory bread(block 71) failed
[  821.127263][T12418] FAT-fs (loop0): Directory bread(block 72) failed
[  821.134040][T12418] FAT-fs (loop0): Directory bread(block 73) failed
[  822.039463][T12423] syz0: rxe_newlink: already configured on wg1
[  822.169531][T12422] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  822.765373][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  822.912509][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  823.022522][T12428] usb usb1: check_ctrlrecip: process 12428 (syz.0.1384) requesting ep 01 but needs 81
[  823.112201][T12429] loop1: detected capacity change from 0 to 512
[  823.291609][T12429] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  823.391772][T12429] EXT4-fs (loop1): 1 truncate cleaned up
[  823.398866][T12429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  824.004645][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  825.252023][T12452] loop1: detected capacity change from 0 to 32768
[  826.270455][T12457] loop5: detected capacity change from 0 to 512
[  826.396659][T12457] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  826.704239][T12452] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  826.714509][T12452] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  826.723509][T12452] BTRFS info (device loop1): metadata ratio 5
[  826.729735][T12452] BTRFS info (device loop1): doing ref verification
[  826.736360][T12452] BTRFS info (device loop1): use zlib compression, level 3
[  826.743657][T12452] BTRFS info (device loop1): setting nodatasum
[  826.749903][T12452] BTRFS info (device loop1): doing ref verification
[  826.756528][T12452] BTRFS info (device loop1): metadata ratio 0
[  826.762763][T12452] BTRFS info (device loop1): using free space tree
[  826.841092][T12457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  827.095518][T12457] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.1391: corrupted in-inode xattr: e_value size too large
[  827.137017][T12457] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1391: couldn't read orphan inode 15 (err -117)
[  827.180960][T12457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  827.660184][T12452] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  827.661115][T12452] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  827.672632][T12452] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  827.683030][T12452] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  827.692536][T12452] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  827.702082][T12452] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  827.712753][T12452] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  827.723406][T12452] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  827.732818][T12452] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  827.742797][T12452] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  827.753204][T12452] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  827.763697][T12452] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  828.658969][T12452] BTRFS error (device loop1): open_ctree failed: -12
[  828.732710][T12478] loop3: detected capacity change from 0 to 256
[  829.024253][ T5786] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (5786)
[  829.512124][T12478] FAT-fs (loop3): Directory bread(block 64) failed
[  829.519180][T12478] FAT-fs (loop3): Directory bread(block 65) failed
[  829.527431][T12478] FAT-fs (loop3): Directory bread(block 66) failed
[  829.534416][T12478] FAT-fs (loop3): Directory bread(block 67) failed
[  829.542698][T12478] FAT-fs (loop3): Directory bread(block 68) failed
[  829.550763][T12478] FAT-fs (loop3): Directory bread(block 69) failed
[  829.558866][T12478] FAT-fs (loop3): Directory bread(block 70) failed
[  829.565870][T12478] FAT-fs (loop3): Directory bread(block 71) failed
[  829.574274][T12478] FAT-fs (loop3): Directory bread(block 72) failed
[  829.581201][T12478] FAT-fs (loop3): Directory bread(block 73) failed
[  830.216729][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  830.445145][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'.
[  830.895584][T12484] usb usb1: check_ctrlrecip: process 12484 (syz.0.1396) requesting ep 01 but needs 81
[  830.963707][T12483] (null): rxe_set_mtu: Set mtu to 1024
[  830.973741][T12483] rdma_rxe: rxe_newlink: failed to add wg1
[  831.387758][T12486] loop5: detected capacity change from 0 to 512
[  831.470506][T12488] loop3: detected capacity change from 0 to 512
[  831.553583][T12486] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1394: iget: bad extended attribute block 1
[  831.589415][T12488] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  831.644373][T12486] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1394: couldn't read orphan inode 15 (err -117)
[  831.720899][T12486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  831.749880][T12488] EXT4-fs (loop3): 1 truncate cleaned up
[  831.757581][T12488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  831.992386][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1394'.
[  832.007861][T12496] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  832.271331][T12499] loop1: detected capacity change from 0 to 256
[  832.336652][T12499] FAT-fs (loop1): Directory bread(block 64) failed
[  832.351974][T12499] FAT-fs (loop1): Directory bread(block 65) failed
[  832.358678][T12499] FAT-fs (loop1): Directory bread(block 66) failed
[  832.366539][T12499] FAT-fs (loop1): Directory bread(block 67) failed
[  832.373627][T12499] FAT-fs (loop1): Directory bread(block 68) failed
[  832.380571][T12499] FAT-fs (loop1): Directory bread(block 69) failed
[  832.387228][T12499] FAT-fs (loop1): Directory bread(block 70) failed
[  832.394593][T12499] FAT-fs (loop1): Directory bread(block 71) failed
[  832.401604][T12499] FAT-fs (loop1): Directory bread(block 72) failed
[  832.408167][T12499] FAT-fs (loop1): Directory bread(block 73) failed
[  832.455603][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  832.487747][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  833.242108][T12509] loop3: detected capacity change from 0 to 512
[  833.400305][T12509] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  833.451647][T12509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  833.464533][T12509] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.1402: corrupted in-inode xattr: e_value size too large
[  833.491477][T12509] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1402: couldn't read orphan inode 15 (err -117)
[  833.526207][T12509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  835.266407][T12516] loop0: detected capacity change from 0 to 32768
[  835.624444][T12516] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  835.634814][T12516] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  835.643625][T12516] BTRFS info (device loop0): metadata ratio 5
[  835.649802][T12516] BTRFS info (device loop0): doing ref verification
[  835.656472][T12516] BTRFS info (device loop0): use zlib compression, level 3
[  835.663831][T12516] BTRFS info (device loop0): setting nodatasum
[  835.670075][T12516] BTRFS info (device loop0): doing ref verification
[  835.676720][T12516] BTRFS info (device loop0): metadata ratio 0
[  835.684106][T12516] BTRFS info (device loop0): using free space tree
[  835.953331][T12521] loop5: detected capacity change from 0 to 256
[  836.137461][T12521] FAT-fs (loop5): Directory bread(block 64) failed
[  836.144309][T12521] FAT-fs (loop5): Directory bread(block 65) failed
[  836.151565][T12521] FAT-fs (loop5): Directory bread(block 66) failed
[  836.158239][T12521] FAT-fs (loop5): Directory bread(block 67) failed
[  836.165522][T12521] FAT-fs (loop5): Directory bread(block 68) failed
[  836.172235][T12521] FAT-fs (loop5): Directory bread(block 69) failed
[  836.179592][T12521] FAT-fs (loop5): Directory bread(block 70) failed
[  836.186269][T12521] FAT-fs (loop5): Directory bread(block 71) failed
[  836.193546][T12521] FAT-fs (loop5): Directory bread(block 72) failed
[  836.200415][T12521] FAT-fs (loop5): Directory bread(block 73) failed
[  836.572491][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  836.829913][T12516] BTRFS info (device loop0): enabling ssd optimizations
[  836.836939][T12516] BTRFS info (device loop0): auto enabling async discard
[  836.853580][T12516] BTRFS info (device loop0): checking UUID tree
[  836.931216][ T9072] BTRFS warning (device loop0): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x947a0a1eec88a54dbf20a1a8d6b6dd946bccf52dadb115fb5db895743b8984fa level 0
[  837.143718][T12516] BTRFS: error (device loop0) in btrfs_fill_super:1172: errno=-5 IO failure
[  837.154807][T12516] BTRFS error (device loop0: state E): commit super ret -30
[  838.034278][T12546] serio: Serial port ptm0
[  840.657537][T12559] loop3: detected capacity change from 0 to 2048
[  840.961493][T12559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  841.623212][T12565] loop5: detected capacity change from 0 to 512
[  841.855313][T12565] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1410: iget: bad extended attribute block 1
[  841.946126][T12565] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1410: couldn't read orphan inode 15 (err -117)
[  842.007951][T12565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  842.468211][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  842.502858][T12573] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1410'.
[  842.522787][T12573] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  843.036154][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  843.186643][T12583] ip6gretap1: entered allmulticast mode
[  843.201779][T12583] bridge0: port 3(ip6gretap1) entered blocking state
[  843.209485][T12583] bridge0: port 3(ip6gretap1) entered disabled state
[  843.227968][T12583] ip6gretap1: entered promiscuous mode
[  843.237226][T12583] bridge0: port 3(ip6gretap1) entered blocking state
[  843.244097][T12583] bridge0: port 3(ip6gretap1) entered forwarding state
[  843.502577][T12583] bridge0: port 4(syz_tun) entered blocking state
[  843.510257][T12583] bridge0: port 4(syz_tun) entered disabled state
[  843.524131][T12583] syz_tun: entered allmulticast mode
[  843.546815][T12583] syz_tun: entered promiscuous mode
[  843.556053][T12583] bridge0: port 4(syz_tun) entered blocking state
[  843.563178][T12583] bridge0: port 4(syz_tun) entered forwarding state
[  844.095880][T12587] wg1 speed is unknown, defaulting to 1000
[  844.208191][T12588] loop3: detected capacity change from 0 to 1024
[  844.215972][T12588] EXT4-fs: Ignoring removed orlov option
[  844.221778][T12588] EXT4-fs: Ignoring removed nomblk_io_submit option
[  844.372892][T12588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  845.050066][T12598] loop5: detected capacity change from 0 to 32768
[  845.058252][T12598] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1415 (12598)
[  845.081133][T12598] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  845.091422][T12598] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  845.100192][T12598] BTRFS info (device loop5): metadata ratio 5
[  845.106320][T12598] BTRFS info (device loop5): doing ref verification
[  845.113738][T12598] BTRFS info (device loop5): use zlib compression, level 3
[  845.121093][T12598] BTRFS info (device loop5): setting nodatasum
[  845.127295][T12598] BTRFS info (device loop5): doing ref verification
[  845.134010][T12598] BTRFS info (device loop5): metadata ratio 0
[  845.140219][T12598] BTRFS info (device loop5): using free space tree
[  845.317324][T12598] BTRFS info (device loop5): enabling ssd optimizations
[  845.325214][T12598] BTRFS info (device loop5): auto enabling async discard
[  845.345615][T12598] BTRFS info (device loop5): checking UUID tree
[  845.354819][ T5911] BTRFS warning (device loop5): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x947a0a1eec88a54dbf20a1a8d6b6dd946bccf52dadb115fb5db895743b8984fa level 0
[  845.455653][T12598] BTRFS: error (device loop5) in btrfs_fill_super:1172: errno=-5 IO failure
[  845.468160][T12598] BTRFS error (device loop5: state E): commit super ret -30
[  845.836563][T12618] loop0: detected capacity change from 0 to 16
[  845.889893][T12618] erofs: (device loop0): z_erofs_parse_cfgs: unidentified algorithms fff8, please upgrade kernel
[  846.930354][T12622] input: syz0 as /devices/virtual/input/input52
[  848.451697][T12636] loop0: detected capacity change from 0 to 512
[  848.565105][T12636] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1423: iget: bad extended attribute block 1
[  848.633300][T12636] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1423: couldn't read orphan inode 15 (err -117)
[  848.674876][T12636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  848.787827][T12641] overlayfs: failed to resolve './file0': -2
[  849.658604][T12636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1423'.
[  849.669102][T12636] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  849.940977][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.277782][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.697265][T12679] loop3: detected capacity change from 0 to 256
[  854.720145][T12679] exfat: Deprecated parameter 'utf8'
[  854.816653][T12679] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  855.084746][T12683] overlayfs: failed to resolve './file0': -2
[  859.471700][T12701] loop1: detected capacity change from 0 to 2048
[  859.542556][T12701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  859.755565][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  859.854969][ T3433] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.337163][ T3433] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.449887][T12709] input: syz0 as /devices/virtual/input/input53
[  860.470181][T10599] infiniband syz0: set down
[  860.498136][ T5856] wg1 speed is unknown, defaulting to 1000
[  860.594659][ T3433] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.686545][T12716] loop1: detected capacity change from 0 to 512
[  860.720455][T12716] EXT4-fs: Ignoring removed nomblk_io_submit option
[  860.792385][T12716] EXT4-fs: Mount option(s) incompatible with ext2
[  860.901485][ T3433] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.918119][   T55] wg1 speed is unknown, defaulting to 1000
[  861.016148][T12720] overlayfs: failed to resolve './file0': -2
[  861.850869][T12719] loop5: detected capacity change from 0 to 4096
[  862.416196][T12719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  862.803086][T12723] input: syz0 as /devices/virtual/input/input54
[  862.994481][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  863.043196][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  863.057381][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  863.076529][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  863.108050][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  863.125420][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  863.138410][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  864.669667][T12743] overlayfs: failed to resolve './file0': -2
[  865.313739][ T5791] Bluetooth: hci0: command tx timeout
[  865.363979][T12744] bridge0: port 2(bridge_slave_1) entered disabled state
[  865.371388][T12744] bridge0: port 1(bridge_slave_0) entered disabled state
[  865.384366][T12744] bridge0: entered allmulticast mode
[  865.863479][T12730] wg1 speed is unknown, defaulting to 1000
[  867.668513][ T5791] Bluetooth: hci0: command tx timeout
[  868.878321][T12764] input: syz0 as /devices/virtual/input/input55
[  869.800422][ T5791] Bluetooth: hci0: command tx timeout
[  871.641244][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  871.658026][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  871.675184][T12789] loop1: detected capacity change from 0 to 256
[  872.639133][ T5791] Bluetooth: hci0: command tx timeout
[  872.650199][T12785] input: syz0 as /devices/virtual/input/input56
[  874.032933][T12789] FAT-fs (loop1): Directory bread(block 64) failed
[  874.039677][T12789] FAT-fs (loop1): Directory bread(block 65) failed
[  874.046402][T12789] FAT-fs (loop1): Directory bread(block 66) failed
[  874.053074][T12789] FAT-fs (loop1): Directory bread(block 67) failed
[  874.059822][T12789] FAT-fs (loop1): Directory bread(block 68) failed
[  874.066469][T12789] FAT-fs (loop1): Directory bread(block 69) failed
[  874.073227][T12789] FAT-fs (loop1): Directory bread(block 70) failed
[  874.080250][T12789] FAT-fs (loop1): Directory bread(block 71) failed
[  874.086939][T12789] FAT-fs (loop1): Directory bread(block 72) failed
[  874.094647][T12789] FAT-fs (loop1): Directory bread(block 73) failed
[  874.864550][T12804] overlayfs: failed to resolve './file0': -2
[  875.402396][T12795] wg1 speed is unknown, defaulting to 1000
[  875.410645][T12804] bridge0: port 4(syz_tun) entered disabled state
[  875.417450][T12804] bridge0: port 3(ip6gretap1) entered disabled state
[  875.424453][T12804] bridge0: port 2(bridge_slave_1) entered disabled state
[  875.431884][T12804] bridge0: port 1(bridge_slave_0) entered disabled state
[  875.440556][T12804] bridge0: entered allmulticast mode
[  875.719908][T12730] chnl_net:caif_netlink_parms(): no params data found
[  876.208944][ T3433] hsr_slave_0: left promiscuous mode
[  876.216555][ T3433] hsr_slave_1: left promiscuous mode
[  876.223617][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  876.296935][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_0
[  876.325181][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  876.336394][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_1
[  876.346690][ T3433] bridge_slave_1: left allmulticast mode
[  876.359107][ T3433] bridge_slave_1: left promiscuous mode
[  876.364973][ T3433] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.381364][ T3433] bridge_slave_0: left allmulticast mode
[  876.387175][ T3433] bridge_slave_0: left promiscuous mode
[  876.393241][ T3433] bridge0: port 1(bridge_slave_0) entered disabled state
[  876.641971][ T3433] veth0_macvtap: left promiscuous mode
[  876.651415][ T3433] veth1_vlan: left promiscuous mode
[  876.671625][ T3433] veth0_vlan: left promiscuous mode
[  877.107354][ T3433] infiniband syz0: set down
[  877.965526][ T3433] team0 (unregistering): Port device team_slave_1 removed
[  878.038365][ T3433] team0 (unregistering): Port device team_slave_0 removed
[  878.107443][ T3433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  878.185271][ T3433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  878.437068][ T9072] smc: removing ib device syz0
[  879.795415][ T3433] bond0 (unregistering): Released all slaves
[  880.659161][ T5884] wg1 speed is unknown, defaulting to 1000
[  880.835069][T12730] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.849589][T12730] bridge0: port 1(bridge_slave_0) entered disabled state
[  880.873809][T12730] bridge_slave_0: entered allmulticast mode
[  880.885037][T12832] input: syz0 as /devices/virtual/input/input57
[  880.977537][T12730] bridge_slave_0: entered promiscuous mode
[  881.021902][T12730] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.040788][T12730] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.048066][T12730] bridge_slave_1: entered allmulticast mode
[  881.069203][T12730] bridge_slave_1: entered promiscuous mode
[  881.111710][T12841] input: syz0 as /devices/virtual/input/input58
[  882.533734][T12730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  882.786815][T12855] loop0: detected capacity change from 0 to 4096
[  882.879951][T12730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  882.926527][T12855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  883.253684][T12730] team0: Port device team_slave_0 added
[  883.382764][T12730] team0: Port device team_slave_1 added
[  883.517745][T12730] batman_adv: batadv0: Adding interface: batadv_slave_0
[  883.537145][T12730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  883.561634][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  883.599211][T12730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  883.635891][T12730] batman_adv: batadv0: Adding interface: batadv_slave_1
[  883.659083][T12730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  883.728224][T12730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  884.000485][T12730] hsr_slave_0: entered promiscuous mode
[  884.026384][T12730] hsr_slave_1: entered promiscuous mode
[  884.033884][T12730] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  884.048162][T12730] Cannot create hsr debugfs directory
[  885.021405][T12880] loop0: detected capacity change from 0 to 512
[  885.061265][T12880] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  885.147662][T12880] EXT4-fs (loop0): 1 truncate cleaned up
[  885.225068][T12880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  885.480189][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  886.540043][T12730] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  886.614075][T12730] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  886.643036][T12730] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  886.942506][T12730] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  887.274799][T12899] input: syz0 as /devices/virtual/input/input59
[  888.321788][T12919] loop1: detected capacity change from 0 to 512
[  888.362869][T12919] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1480: iget: bad extended attribute block 1
[  888.411012][T12919] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1480: couldn't read orphan inode 15 (err -117)
[  888.436139][T12919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  889.638605][T12926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1480'.
[  889.678841][T12926] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  889.946659][T12730] 8021q: adding VLAN 0 to HW filter on device bond0
[  889.987678][T12730] 8021q: adding VLAN 0 to HW filter on device team0
[  890.017517][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state
[  890.024779][ T9072] bridge0: port 1(bridge_slave_0) entered forwarding state
[  890.056258][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  890.129237][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  890.136495][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  890.258021][T12730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  890.441616][T12938] overlayfs: failed to resolve './file0': -2
[  891.257459][T12943] loop1: detected capacity change from 0 to 512
[  891.284560][T12943] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  891.336462][T12943] EXT4-fs (loop1): 1 truncate cleaned up
[  891.372093][T12943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  892.465443][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  892.519999][T12730] 8021q: adding VLAN 0 to HW filter on device batadv0
[  892.970254][   T27] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  893.238216][   T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  893.544065][   T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  893.612827][   T27] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  893.655781][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.705877][   T27] usb 6-1: Product: syz
[  893.731280][   T27] usb 6-1: Manufacturer: syz
[  893.756086][   T27] usb 6-1: SerialNumber: syz
[  893.990848][T12975] input: syz0 as /devices/virtual/input/input61
[  894.010312][   T27] usb 6-1: 0:2 : does not exist
[  894.042233][   T27] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  894.129823][   T27] usb 6-1: USB disconnect, device number 6
[  894.257628][T12730] veth0_vlan: entered promiscuous mode
[  894.274917][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  894.293829][T12979] loop1: detected capacity change from 0 to 512
[  894.311559][T12730] veth1_vlan: entered promiscuous mode
[  894.331336][T12979] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1490: iget: bad extended attribute block 1
[  894.410594][T12979] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1490: couldn't read orphan inode 15 (err -117)
[  894.502626][T12730] veth0_macvtap: entered promiscuous mode
[  894.522461][T12979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  894.548321][T12730] veth1_macvtap: entered promiscuous mode
[  894.632581][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  894.685833][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  894.727055][T12982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1490'.
[  894.745193][T12982] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  894.817936][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  894.958889][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  895.093564][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  895.157281][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  895.172007][T12730] batman_adv: batadv0: Interface activated: batadv_slave_0
[  895.203571][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  895.222924][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  895.233352][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  895.244897][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  895.255114][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  895.265941][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  895.269724][T12985] loop5: detected capacity change from 0 to 512
[  895.280463][T12730] batman_adv: batadv0: Interface activated: batadv_slave_1
[  895.296338][T12730] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  895.305506][T12730] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  895.315164][T12730] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  895.322733][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  895.326551][T12985] EXT4-fs: Ignoring removed nomblk_io_submit option
[  895.342963][T12730] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  895.358020][T12985] EXT4-fs (loop5): Test dummy encryption mode enabled
[  895.402908][T12985] EXT4-fs (loop5): 1 truncate cleaned up
[  895.449698][T12985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  895.772698][ T5914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  895.828598][ T5914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  895.904486][T10598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  895.921967][T10598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  897.519522][T13008] 9pnet_fd: Insufficient options for proto=fd
[  899.074574][T13013] netlink: 'syz.6.1447': attribute type 3 has an invalid length.
[  899.084660][T13013] netlink: 'syz.6.1447': attribute type 3 has an invalid length.
[  899.092765][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1447'.
[  899.561791][T13007] usb usb1: check_ctrlrecip: process 13007 (syz.6.1447) requesting ep 01 but needs 81
[  899.885026][T13007] usb usb1: usbfs: process 13007 (syz.6.1447) did not claim interface 0 before use
[  900.030226][T13018] input: syz0 as /devices/virtual/input/input62
[  900.062556][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  902.349059][T13043] syz.1.1503 uses obsolete (PF_INET,SOCK_PACKET)
[  905.771173][T13061] loop5: detected capacity change from 0 to 512
[  905.778456][T13061] EXT4-fs: Ignoring removed nomblk_io_submit option
[  907.778866][T13061] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5.
[  908.812328][T13065] loop0: detected capacity change from 0 to 512
[  909.003020][T13065] EXT4-fs: Ignoring removed nomblk_io_submit option
[  909.133152][T13065] EXT4-fs (loop0): Test dummy encryption mode enabled
[  909.338795][T13074] netlink: 'syz.5.1509': attribute type 3 has an invalid length.
[  909.349059][T13074] netlink: 'syz.5.1509': attribute type 3 has an invalid length.
[  909.357037][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1509'.
[  909.788512][T13065] EXT4-fs (loop0): 1 truncate cleaned up
[  909.823431][T13065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  910.026183][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  910.207485][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'.
[  910.233315][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'.
[  910.457152][T13093] loop6: detected capacity change from 0 to 512
[  910.534809][T13093] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  910.588270][T13093] EXT4-fs (loop6): 1 truncate cleaned up
[  910.869180][T13093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  911.472522][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  913.081984][T13119] loop1: detected capacity change from 0 to 512
[  913.090509][T13119] EXT4-fs: Ignoring removed nomblk_io_submit option
[  915.812532][T13119] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1.
[  916.576350][T13115] input: syz0 as /devices/virtual/input/input63
[  916.922386][T13126] loop1: detected capacity change from 0 to 512
[  916.957556][T13126] EXT4-fs: Ignoring removed nomblk_io_submit option
[  917.003939][T13126] EXT4-fs (loop1): Test dummy encryption mode enabled
[  917.098321][T13126] EXT4-fs (loop1): 1 truncate cleaned up
[  917.136985][T13126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  918.204048][T13141] loop0: detected capacity change from 0 to 1024
[  918.570963][T13141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  918.734385][T13144] fuse: Bad value for 'fd'
[  920.287174][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  920.311692][T13137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  921.387433][T13165] loop0: detected capacity change from 0 to 512
[  921.394934][T13165] EXT4-fs: Ignoring removed nomblk_io_submit option
[  925.323234][T13160] input: syz0 as /devices/virtual/input/input64
[  925.360245][T13165] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0.
[  925.670039][T13173] netlink: 'syz.1.1530': attribute type 3 has an invalid length.
[  925.678051][T13173] netlink: 'syz.1.1530': attribute type 3 has an invalid length.
[  925.685917][T13173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1530'.
[  928.180270][T13201] loop0: detected capacity change from 0 to 512
[  928.209978][T13201] EXT4-fs: Ignoring removed nomblk_io_submit option
[  928.231682][T13201] EXT4-fs (loop0): Test dummy encryption mode enabled
[  928.297983][T13201] EXT4-fs (loop0): 1 truncate cleaned up
[  928.342570][T13201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  929.508072][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  931.763058][T13242] loop0: detected capacity change from 0 to 512
[  931.770415][T13242] EXT4-fs: Ignoring removed nomblk_io_submit option
[  931.970396][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  931.976934][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  934.158132][T13242] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0.
[  934.840193][T13268] input: syz0 as /devices/virtual/input/input65
[  934.964313][T13272] loop5: detected capacity change from 0 to 512
[  935.121575][T13272] EXT4-fs: Ignoring removed nomblk_io_submit option
[  935.148046][T13272] EXT4-fs (loop5): Test dummy encryption mode enabled
[  935.193574][T13272] EXT4-fs (loop5): 1 truncate cleaned up
[  935.244798][T13276] loop1: detected capacity change from 0 to 512
[  936.808784][T13272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  936.849132][T13276] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  937.447362][T13276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  937.464453][T13276] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.1547: corrupted in-inode xattr: e_value size too large
[  937.492668][T13276] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1547: couldn't read orphan inode 15 (err -117)
[  937.516034][T13276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  938.795549][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  939.112661][T10010] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  939.751736][   T27] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  939.964600][   T27] usb 2-1: device descriptor read/64, error -71
[  940.653696][T13302] input: syz0 as /devices/virtual/input/input66
[  940.929081][   T27] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  941.099524][   T27] usb 2-1: device descriptor read/64, error -71
[  941.244217][   T27] usb usb2-port1: attempt power cycle
[  941.709107][   T27] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  941.790812][   T27] usb 2-1: device descriptor read/8, error -71
[  942.089352][   T27] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  942.164033][   T27] usb 2-1: device descriptor read/8, error -71
[  942.299473][   T27] usb usb2-port1: unable to enumerate USB device
[  942.859207][T10259] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  943.020029][T13336] ip6gretap1: entered allmulticast mode
[  943.064952][T13336] bridge0: port 3(syz_tun) entered blocking state
[  943.072186][T13336] bridge0: port 3(syz_tun) entered disabled state
[  943.080063][T13336] syz_tun: entered allmulticast mode
[  943.097875][T13336] syz_tun: entered promiscuous mode
[  943.811501][T10259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  943.835807][T10259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  943.909064][T10259] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  943.932152][T10259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  943.972356][T10259] usb 2-1: config 0 descriptor??
[  944.283411][T13346] loop5: detected capacity change from 0 to 16
[  944.315901][T13346] erofs: (device loop5): mounted with root inode @ nid 36.
[  944.342526][T13346] erofs: (device loop5): z_erofs_readahead: readahead error at folio 2 @ nid 89
[  944.401215][ T5791] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[8192]
[  944.421453][T13346] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[4096]
[  944.450202][   T28] audit: type=1800 audit(1753753101.088:23): pid=13346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1558" name="file3" dev="loop5" ino=89 res=0 errno=0
[  944.530556][T10259] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  945.529723][T13350] overlayfs: failed to resolve './file0': -2
[  946.164588][T10259] usb 2-1: USB disconnect, device number 22
[  946.383681][T13354] fido_id[13354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  949.132616][T13378] input: syz0 as /devices/virtual/input/input67
[  949.401990][T13386] loop6: detected capacity change from 0 to 256
[  949.689724][T13386] FAT-fs (loop6): Directory bread(block 64) failed
[  949.696518][T13386] FAT-fs (loop6): Directory bread(block 65) failed
[  949.704050][T13386] FAT-fs (loop6): Directory bread(block 66) failed
[  949.710867][T13386] FAT-fs (loop6): Directory bread(block 67) failed
[  949.718401][T13386] FAT-fs (loop6): Directory bread(block 68) failed
[  949.725381][T13386] FAT-fs (loop6): Directory bread(block 69) failed
[  949.732832][T13386] FAT-fs (loop6): Directory bread(block 70) failed
[  949.747514][T13386] FAT-fs (loop6): Directory bread(block 71) failed
[  949.759117][T13386] FAT-fs (loop6): Directory bread(block 72) failed
[  949.799420][T13386] FAT-fs (loop6): Directory bread(block 73) failed
[  951.315070][T13403] loop6: detected capacity change from 0 to 512
[  951.325059][T13403] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  953.617120][T13403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  953.952859][T13403] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz.6.1569: corrupted in-inode xattr: e_value size too large
[  954.610117][T13403] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1569: couldn't read orphan inode 15 (err -117)
[  954.640392][T13403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  954.790615][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  956.214193][T13419] loop6: detected capacity change from 0 to 512
[  956.257662][T13419] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  956.310409][T13419] EXT4-fs (loop6): 1 truncate cleaned up
[  956.370225][T13419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  956.517024][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  959.077079][T13446] loop6: detected capacity change from 0 to 512
[  959.359701][T13446] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  959.370329][T13446] EXT4-fs (loop6): orphan cleanup on readonly fs
[  959.384361][T13446] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  959.396617][T13446] EXT4-fs warning (device loop6): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  959.442488][T13446] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  959.460596][T13446] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.1575: bg 0: block 40: padding at end of block bitmap is not set
[  959.478325][T13446] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6642: Corrupt filesystem
[  959.490221][T13446] EXT4-fs (loop6): 1 truncate cleaned up
[  959.504793][T13446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  962.342261][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  963.750679][T13467] tty tty3: ldisc open failed (-12), clearing slot 2
[  963.918424][T13472] loop0: detected capacity change from 0 to 512
[  964.018860][T13472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  964.083403][T13472] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  965.289336][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  966.638050][T13491] input: syz0 as /devices/virtual/input/input68
[  966.715067][T13501] loop6: detected capacity change from 0 to 16
[  966.809660][T13501] erofs: (device loop6): mounted with root inode @ nid 36.
[  966.954055][T13501] erofs: (device loop6): z_erofs_readahead: readahead error at folio 26 @ nid 36
[  966.978255][T13501] erofs: (device loop6): z_erofs_readahead: readahead error at folio 25 @ nid 36
[  967.070429][T13501] erofs: (device loop6): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  967.149732][T13501] erofs: (device loop6): z_erofs_readahead: readahead error at folio 23 @ nid 36
[  967.221495][T13506] erofs: (device loop6): erofs_find_target_block: corrupted dir block 8200 @ nid 36
[  967.227271][T13501] erofs: (device loop6): z_erofs_readahead: readahead error at folio 22 @ nid 36
[  967.264441][T13501] erofs: (device loop6): z_erofs_readahead: readahead error at folio 21 @ nid 36
[  967.279613][T13501] erofs: (device loop6): z_erofs_readahead: readahead error at folio 20 @ nid 36
[  967.301658][T13501] erofs: (device loop6): z_erofs_readahead: readahead error at folio 18 @ nid 36
[  967.316328][T13501] erofs: (device loop6): z_erofs_readahead: readahead error at folio 16 @ nid 36
[  967.326575][T13501] erofs: (device loop6): z_erofs_readahead: readahead error at folio 12 @ nid 36
[  967.352190][T13501] syz.6.1588: attempt to access beyond end of device
[  967.352190][T13501] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16
[  967.375894][T13501] syz.6.1588: attempt to access beyond end of device
[  967.375894][T13501] loop6: rw=524288, sector=525144, nr_sectors = 16 limit=16
[  967.424231][T13501] syz.6.1588: attempt to access beyond end of device
[  967.424231][T13501] loop6: rw=524288, sector=16, nr_sectors = 8 limit=16
[  967.493492][T13501] syz.6.1588: attempt to access beyond end of device
[  967.493492][T13501] loop6: rw=524288, sector=13716630376, nr_sectors = 8 limit=16
[  967.600979][T13501] ==================================================================
[  967.609185][T13501] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x38c/0x460
[  967.617536][T13501] Read of size 4095 at addr ffff8880778ad400 by task syz.6.1588/13501
[  967.625719][T13501] 
[  967.628187][T13501] CPU: 0 PID: 13501 Comm: syz.6.1588 Not tainted 6.6.100-syzkaller #0
[  967.636353][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  967.646690][T13501] Call Trace:
[  967.649976][T13501]  <TASK>
[  967.652949][T13501]  dump_stack_lvl+0x16c/0x230
[  967.657844][T13501]  ? __lock_acquire+0x7c80/0x7c80
[  967.663001][T13501]  ? show_regs_print_info+0x20/0x20
[  967.668257][T13501]  ? load_image+0x3b0/0x3b0
[  967.672818][T13501]  ? __virt_addr_valid+0x469/0x540
[  967.678050][T13501]  print_report+0xac/0x200
[  967.682632][T13501]  ? z_erofs_transform_plain+0x38c/0x460
[  967.688314][T13501]  kasan_report+0x117/0x150
[  967.692874][T13501]  ? z_erofs_transform_plain+0x38c/0x460
[  967.698834][T13501]  kasan_check_range+0x288/0x290
[  967.703936][T13501]  ? z_erofs_transform_plain+0x38c/0x460
[  967.709621][T13501]  __asan_memcpy+0x29/0x70
[  967.714148][T13501]  z_erofs_transform_plain+0x38c/0x460
[  967.719657][T13501]  ? z_erofs_lz4_decompress+0x1720/0x1720
[  967.725520][T13501]  z_erofs_decompress_queue+0x16fb/0x2650
[  967.731374][T13501]  ? z_erofs_onlinepage_endio+0x350/0x350
[  967.737205][T13501]  ? slab_free_freelist_hook+0x130/0x1b0
[  967.742865][T13501]  ? bio_truncate+0x6f0/0x6f0
[  967.747566][T13501]  ? z_erofs_decompressqueue_endio+0x5a0/0x5a0
[  967.753744][T13501]  z_erofs_runqueue+0x18a3/0x19d0
[  967.758794][T13501]  ? z_erofs_do_read_page+0x3680/0x3680
[  967.764382][T13501]  ? _raw_spin_unlock+0x28/0x40
[  967.769266][T13501]  ? lockref_put_or_lock+0x72/0xb0
[  967.774403][T13501]  z_erofs_readahead+0xa7c/0xd50
[  967.779368][T13501]  ? z_erofs_read_folio+0x540/0x540
[  967.784605][T13501]  ? __mod_lruvec_page_state+0xa5/0x420
[  967.790179][T13501]  ? folio_add_lru+0x320/0xd50
[  967.794975][T13501]  ? blk_start_plug+0x6e/0x1a0
[  967.799757][T13501]  read_pages+0x177/0x840
[  967.804152][T13501]  ? __lock_acquire+0x7c80/0x7c80
[  967.809301][T13501]  ? page_cache_ra_unbounded+0x770/0x770
[  967.814975][T13501]  ? folio_add_lru+0xd50/0xd50
[  967.819888][T13501]  ? folio_add_lru+0x54f/0xd50
[  967.824675][T13501]  ? filemap_add_folio+0x192/0x3c0
[  967.829836][T13501]  page_cache_ra_unbounded+0x692/0x770
[  967.835333][T13501]  force_page_cache_ra+0x2c1/0x320
[  967.840501][T13501]  generic_fadvise+0x44f/0x730
[  967.845296][T13501]  ? dump_task+0x5f0/0x5f0
[  967.849731][T13501]  ? __fget_files+0x28/0x4d0
[  967.854345][T13501]  ? __fdget+0x180/0x210
[  967.858607][T13501]  __x64_sys_fadvise64+0x140/0x180
[  967.863745][T13501]  do_syscall_64+0x55/0xb0
[  967.868202][T13501]  ? clear_bhb_loop+0x40/0x90
[  967.873133][T13501]  ? clear_bhb_loop+0x40/0x90
[  967.877855][T13501]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  967.883785][T13501] RIP: 0033:0x7f987778e9a9
[  967.888259][T13501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  967.907899][T13501] RSP: 002b:00007f987867b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  967.916338][T13501] RAX: ffffffffffffffda RBX: 00007f98779b5fa0 RCX: 00007f987778e9a9
[  967.924327][T13501] RDX: 000000000000ff39 RSI: 000000000000aa17 RDI: 0000000000000004
[  967.932314][T13501] RBP: 00007f9877810d69 R08: 0000000000000000 R09: 0000000000000000
[  967.940314][T13501] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  967.948306][T13501] R13: 0000000000000000 R14: 00007f98779b5fa0 R15: 00007ffc2a6ed9e8
[  967.956308][T13501]  </TASK>
[  967.959340][T13501] 
[  967.961668][T13501] The buggy address belongs to the physical page:
[  967.968103][T13501] page:ffffea0001de2b40 refcount:2 mapcount:0 mapping:ffff88805d3217d0 index:0x1 pfn:0x778ad
[  967.978285][T13501] memcg:ffff88805ba2c000
[  967.982644][T13501] aops:z_erofs_cache_aops ino:0
[  967.987539][T13501] flags: 0xfff40000008028(uptodate|lru|private|node=0|zone=1|lastcpupid=0x7ff)
[  967.996500][T13501] page_type: 0xffffffff()
[  968.000874][T13501] raw: 00fff40000008028 ffffea0000ba2cc8 ffffea00017c8e88 ffff88805d3217d0
[  968.009490][T13501] raw: 0000000000000001 ffff888052c46178 00000002ffffffff ffff88805ba2c000
[  968.018093][T13501] page dumped because: kasan: bad access detected
[  968.024615][T13501] page_owner tracks the page as allocated
[  968.030340][T13501] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13506, tgid 13500 (syz.6.1588), ts 967135010417, free_ts 966868830202
[  968.052508][T13501]  post_alloc_hook+0x1cd/0x210
[  968.057302][T13501]  get_page_from_freelist+0x195c/0x19f0
[  968.062870][T13501]  __alloc_pages+0x1e3/0x460
[  968.067491][T13501]  z_erofs_do_read_page+0x20c0/0x3680
[  968.072885][T13501]  z_erofs_read_folio+0x213/0x540
[  968.077921][T13501]  filemap_read_folio+0x167/0x760
[  968.082957][T13501]  do_read_cache_folio+0x470/0x7e0
[  968.088079][T13501]  erofs_bread+0x16f/0x630
[  968.092512][T13501]  erofs_namei+0x28c/0xf00
[  968.096956][T13501]  erofs_lookup+0x135/0x310
[  968.101486][T13501]  path_openat+0x10b8/0x3190
[  968.106097][T13501]  do_filp_open+0x1c5/0x3d0
[  968.110627][T13501]  do_sys_openat2+0x12c/0x1c0
[  968.115341][T13501]  __x64_sys_openat+0x139/0x160
[  968.120232][T13501]  do_syscall_64+0x55/0xb0
[  968.124673][T13501]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  968.130609][T13501] page last free stack trace:
[  968.135302][T13501]  free_unref_page_prepare+0x7ce/0x8e0
[  968.140801][T13501]  free_unref_page+0x32/0x2e0
[  968.145503][T13501]  __unfreeze_partials+0x1cf/0x210
[  968.150638][T13501]  put_cpu_partial+0x17c/0x250
[  968.155421][T13501]  __slab_free+0x31d/0x410
[  968.159860][T13501]  qlist_free_all+0x75/0xe0
[  968.164417][T13501]  kasan_quarantine_reduce+0x143/0x160
[  968.169894][T13501]  __kasan_slab_alloc+0x22/0x80
[  968.174768][T13501]  slab_post_alloc_hook+0x6e/0x4d0
[  968.179897][T13501]  kmem_cache_alloc+0x11e/0x2e0
[  968.184937][T13501]  getname_flags+0xbb/0x500
[  968.189459][T13501]  __x64_sys_unlink+0x3c/0x50
[  968.194151][T13501]  do_syscall_64+0x55/0xb0
[  968.198598][T13501]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  968.204521][T13501] 
[  968.206864][T13501] Memory state around the buggy address:
[  968.212601][T13501]  ffff8880778adf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  968.220680][T13501]  ffff8880778adf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  968.228759][T13501] >ffff8880778ae000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  968.236916][T13501]                                                        ^
[  968.244118][T13501]  ffff8880778ae080: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  968.252304][T13501]  ffff8880778ae100: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  968.260388][T13501] ==================================================================
[  968.365968][T13501] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  968.373204][T13501] CPU: 0 PID: 13501 Comm: syz.6.1588 Not tainted 6.6.100-syzkaller #0
[  968.381396][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  968.391456][T13501] Call Trace:
[  968.394739][T13501]  <TASK>
[  968.397676][T13501]  dump_stack_lvl+0x16c/0x230
[  968.402381][T13501]  ? show_regs_print_info+0x20/0x20
[  968.407610][T13501]  ? load_image+0x3b0/0x3b0
[  968.412136][T13501]  panic+0x2c0/0x710
[  968.416082][T13501]  ? bpf_jit_dump+0xd0/0xd0
[  968.420600][T13501]  ? _raw_spin_unlock_irqrestore+0xfa/0x110
[  968.426507][T13501]  ? _raw_spin_unlock+0x40/0x40
[  968.431378][T13501]  ? print_memory_metadata+0x314/0x400
[  968.436851][T13501]  ? z_erofs_transform_plain+0x38c/0x460
[  968.442501][T13501]  check_panic_on_warn+0x84/0xa0
[  968.447465][T13501]  ? z_erofs_transform_plain+0x38c/0x460
[  968.453125][T13501]  end_report+0x6f/0x140
[  968.457384][T13501]  kasan_report+0x128/0x150
[  968.461905][T13501]  ? z_erofs_transform_plain+0x38c/0x460
[  968.467543][T13501]  kasan_check_range+0x288/0x290
[  968.472585][T13501]  ? z_erofs_transform_plain+0x38c/0x460
[  968.478317][T13501]  __asan_memcpy+0x29/0x70
[  968.482783][T13501]  z_erofs_transform_plain+0x38c/0x460
[  968.488346][T13501]  ? z_erofs_lz4_decompress+0x1720/0x1720
[  968.494091][T13501]  z_erofs_decompress_queue+0x16fb/0x2650
[  968.499834][T13501]  ? z_erofs_onlinepage_endio+0x350/0x350
[  968.505570][T13501]  ? slab_free_freelist_hook+0x130/0x1b0
[  968.511218][T13501]  ? bio_truncate+0x6f0/0x6f0
[  968.515926][T13501]  ? z_erofs_decompressqueue_endio+0x5a0/0x5a0
[  968.522182][T13501]  z_erofs_runqueue+0x18a3/0x19d0
[  968.527228][T13501]  ? z_erofs_do_read_page+0x3680/0x3680
[  968.532846][T13501]  ? _raw_spin_unlock+0x28/0x40
[  968.537736][T13501]  ? lockref_put_or_lock+0x72/0xb0
[  968.542863][T13501]  z_erofs_readahead+0xa7c/0xd50
[  968.547813][T13501]  ? z_erofs_read_folio+0x540/0x540
[  968.553011][T13501]  ? __mod_lruvec_page_state+0xa5/0x420
[  968.558576][T13501]  ? folio_add_lru+0x320/0xd50
[  968.563437][T13501]  ? blk_start_plug+0x6e/0x1a0
[  968.568236][T13501]  read_pages+0x177/0x840
[  968.572601][T13501]  ? __lock_acquire+0x7c80/0x7c80
[  968.577731][T13501]  ? page_cache_ra_unbounded+0x770/0x770
[  968.583386][T13501]  ? folio_add_lru+0xd50/0xd50
[  968.588178][T13501]  ? folio_add_lru+0x54f/0xd50
[  968.592954][T13501]  ? filemap_add_folio+0x192/0x3c0
[  968.598078][T13501]  page_cache_ra_unbounded+0x692/0x770
[  968.603879][T13501]  force_page_cache_ra+0x2c1/0x320
[  968.609114][T13501]  generic_fadvise+0x44f/0x730
[  968.613900][T13501]  ? dump_task+0x5f0/0x5f0
[  968.618328][T13501]  ? __fget_files+0x28/0x4d0
[  968.622939][T13501]  ? __fdget+0x180/0x210
[  968.627207][T13501]  __x64_sys_fadvise64+0x140/0x180
[  968.632333][T13501]  do_syscall_64+0x55/0xb0
[  968.636785][T13501]  ? clear_bhb_loop+0x40/0x90
[  968.641558][T13501]  ? clear_bhb_loop+0x40/0x90
[  968.646243][T13501]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  968.652167][T13501] RIP: 0033:0x7f987778e9a9
[  968.656596][T13501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  968.676797][T13501] RSP: 002b:00007f987867b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  968.686383][T13501] RAX: ffffffffffffffda RBX: 00007f98779b5fa0 RCX: 00007f987778e9a9
[  968.694456][T13501] RDX: 000000000000ff39 RSI: 000000000000aa17 RDI: 0000000000000004
[  968.702436][T13501] RBP: 00007f9877810d69 R08: 0000000000000000 R09: 0000000000000000
[  968.710417][T13501] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  968.718392][T13501] R13: 0000000000000000 R14: 00007f98779b5fa0 R15: 00007ffc2a6ed9e8
[  968.726391][T13501]  </TASK>
[  968.729582][T13501] Kernel Offset: disabled
[  968.733919][T13501] Rebooting in 86400 seconds..