last executing test programs:

9m32.189207294s ago: executing program 0 (id=120):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0)

9m32.188924825s ago: executing program 0 (id=121):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20)
sendto(r0, &(0x7f0000000800)="01", 0x1, 0x0, 0x0, 0x0)

9m32.188757054s ago: executing program 0 (id=122):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x11})
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200))
close(r1)

9m32.134288597s ago: executing program 0 (id=124):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@empty, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x1c0, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @loopback, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

9m31.992235854s ago: executing program 0 (id=128):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000400)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

9m31.86903588s ago: executing program 0 (id=129):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000032400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c00028005000d0001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
syz_open_procfs(0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40043d14, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x8000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff9a}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbb5fe98722f00000000000000ffff0a010100fe8084e241c3eca56298770300000000c0dd818bf1dd7468c143e89c64cb17bf540da1e5f5e464d40d6c0cad48bded8a89499b76a62348451347d63cfbb87ebffeebfd69f8720f09e98e1f782906c88ed6126f02d94a106f5acca91dab6a84622fee827ede2e007791e3c63d520ea472fe563ccc7033abf29006aae3189bbc149b6f766f7e023b67088f567bd1fca3b91467b398155f391a0d33a2d6edb9f5ab656aafe6bd5afe8d6eb4bb817359d3c4e1eebc092eab3c2d2082edcda6d4"], 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x26000000, 0x1f000000, 0x3000000})
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

9m16.549513628s ago: executing program 32 (id=129):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000032400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c00028005000d0001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
syz_open_procfs(0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40043d14, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x8000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff9a}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbb5fe98722f00000000000000ffff0a010100fe8084e241c3eca56298770300000000c0dd818bf1dd7468c143e89c64cb17bf540da1e5f5e464d40d6c0cad48bded8a89499b76a62348451347d63cfbb87ebffeebfd69f8720f09e98e1f782906c88ed6126f02d94a106f5acca91dab6a84622fee827ede2e007791e3c63d520ea472fe563ccc7033abf29006aae3189bbc149b6f766f7e023b67088f567bd1fca3b91467b398155f391a0d33a2d6edb9f5ab656aafe6bd5afe8d6eb4bb817359d3c4e1eebc092eab3c2d2082edcda6d4"], 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x26000000, 0x1f000000, 0x3000000})
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

8.590802417s ago: executing program 1 (id=2607):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c)
listen(r4, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4044c40)
setns(r0, 0x20000000)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="b5e1d40a563d18", 0x7}], 0x1, 0x5, 0x6)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x32600)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='bdev\x00', 0x0, &(0x7f0000000380)='source')
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r6 = socket$pptp(0x18, 0x1, 0x2)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000002c0))
setsockopt(r0, 0xc4, 0x8000, &(0x7f0000000000)="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", 0xfc)

8.143466288s ago: executing program 1 (id=2609):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000043c0))
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00')
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'syztnl2\x00', <r5=>0x0, 0x1, 0x80, 0x0, 0x0, {{0xe, 0x4, 0x1, 0x18, 0x38, 0x67, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0xe9, 0x0, 0x5, [0x45]}, @rr={0x7, 0x1b, 0x57, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xb, @dev={0xac, 0x14, 0x14, 0x17}, @empty, @empty]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg1\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'pim6reg\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r9, @ANYBLOB="12"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000ec0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x2b8, 0x0, 0x220, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x144, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "fdbc6b8fb6333f5966ef554451d533ff925096f29405d73382ca50b842a171e124cb8882adae9e8401336704e7e2761fd53d8fcb4c6c70b79b6e72c5a89cb7263d15c3714f6c05f3fa61224c26040e9c138e83dd0102f450d85bab53bca4a5081f8156f0d57b3a739ba25a35ab3a632f139a6550564f0edac7b5a1031496c622ea059a97f261109610412314"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "b38ed8ccde232b1014bdb06e8823531e6cd5f1592aa28f6c87bae3a36285550f5c14bc3760c45061c7aaece7ab1e44124b2c3b1c1dfba6aff2bb147d081edf672ca71c030522e1f6678cf864f6b2569feadedbb2634e1e75844f9f2cc874de75c5e4149767530b6a73047e0e304fb4f9b011ee9eeb883bb8429fa25e6716e70c37a290ab473dab22702a5d9621c05391787d67d54918eb3f5a394523dc94839728"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x7c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',]\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c8c0)
open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)

7.25484398s ago: executing program 1 (id=2611):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40000002, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.05114629s ago: executing program 1 (id=2614):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0)={[{@i_version}, {@nolazytime}, {@mb_optimize_scan}, {@grpjquota}, {@errors_remount}]}, 0x2, 0x29f, &(0x7f0000000b00)="$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")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000200)=r0}, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)="0e", 0xfec3, 0x8000c61)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r3, r4, 0x0, 0xe3aa6ea)

6.638816949s ago: executing program 1 (id=2618):
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa9\xed\xcf\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffe8f, 0x0, 0x0, &(0x7f0000000840), 0x100}, 0x20)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], 0x0, 0x100000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6.160800141s ago: executing program 4 (id=2621):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
sendmsg$nl_xfrm(r1, 0x0, 0x200408d0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
read(r3, &(0x7f00000002c0)=""/138, 0x8a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
write(r2, &(0x7f00000002c0)='0', 0x1)
syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x1)
r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000580)='./file1\x00', 0x1000c01, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r3, @ANYRESHEX, @ANYBLOB="870aec78d5e1a4f9e5d97c86bf", @ANYRESOCT, @ANYRESHEX=r4], 0x2, 0x231, &(0x7f0000000240)="$eJzsmb9rFEEUx78zu7e5i6JYaGFzTcAIZm93TyWNaOwDQiJqeZg1RDc5uRySBCyCjY1/gP+IRSoLsbGzsLJQQbAwpaCIjsyv3bkfq3fedXkfyOQ77+a9e2/m9i3sgiCII8unj98+PLu+uHoBwHHMYcbYv3h2hQ/urH//3KsY+WrrxOOD/ngMgBDF3C/5XrskAPBy6SQAHVYI1xuYMzFXwZWW3ATHeaNvgSG0ub7+lXunYLhjzPcd3a7hhxJZyu62s7V7G1kaySGWQyKHZpGdzv9wn2ENQNXk59a0vbv3oJUBHS2y1IqKiVFYRhQc/ZaSLSzyW+K4YvdVCCHP6/bTJ/tyHhp75OxfDI7Y6CYYVoxexAzCMKybaRo79Z/1i/iePjZ4ef2j1lYdZ/Hk4tTCpHGujlegvXp6P/otsvS7mHqBQc9PcPKA8jL7X3eZh7HItEb04vXcK/8oGLBMXTAjrgFQglkh15w5PHgz6PW5x/Juuewr2Ci125NTlmMY3ITpCtW4hh3u29ksWx7qddqIWt5ohkW2dZT+JHT/YD5wzulPvnNXaHQ3Hza2d/cWNjZb6+l6upUkzcvRxSi6lDRUb9bjX/pfVfWnWSd+pWRtwALstLrdTrwDdDtxPk/06HTclRftr8qHq/7HMf9TaMw9K79R9sHMH1f/5dnOe6XJEwRBEARBEARBEARBEARB/BP9hk4/kqyDwTyrVC/jKuapaC9+cgOPasCfAAAA///ei1Cr")
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, 0x0)

5.783514169s ago: executing program 1 (id=2623):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x6, &(0x7f0000000000)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FS_IOC_FSGETXATTR(r4, 0x400455c8, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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")

3.688533587s ago: executing program 4 (id=2627):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000000000700000000000000000000000203000000000000000000000a0000000000000000002e"], 0x0, 0x43}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x2}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000)
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000440)={0x6, 0x1b4, 0x3, 0x8, 0xc0, "84f4a245df4684fa26343c888265f666f1acfe", 0x7, 0x1})
ptrace(0x10, r4)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000010800000004fcffffff00004c00", @ANYRES32=0x0, @ANYBLOB="e90402000005000008001b000000000000080028002945000000000000000000"], 0x38}, 0x1, 0xffffa888}, 0x20000880)
syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@broadcast}, {@remote}]}, @ssrr={0x89, 0x7, 0xce, [@dev]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

2.965129341s ago: executing program 2 (id=2632):
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
pipe2$9p(&(0x7f0000000080), 0x80800)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r7, &(0x7f0000000200)=[{&(0x7f0000000080)="6b4df78532ee9c37c12d0e55e0bfbc5a8d2c3e60"}, {&(0x7f0000000100)="79eb91ccd2f6e11d82984c6d46d0774ebb3b9ac5dcc6a04c744f8ec83c91f6b7012d13e832393ab15236dc2af61f5f2f1804ff8423e18a663d00db9b6e59866ba328fa68ee641c3182f9b15cb3b91fa09feac194b93b4265846f43d6eb85578804246f8d098fd7099623033d24634cc0977da0b6714ff265d750842e11f96f4f8c815327324ba8d0d5d9bdce04904ad0a2d5972bfc05cf6e095e5d91220a210ab7f5ae1d33509b979fd67b22d572ec9ad129f338a8c062feb20b9e49953d6fa6c4c6d4aff107d47ee10fdba64f448cebaa17fcf5557e72f2b9ddcf464247d851930215cbbbbdba7f45"}], 0x3)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r8, 0x400, 0x100, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

2.957457302s ago: executing program 2 (id=2633):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
sendmsg$inet(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x37fe0}, 0x48c0)

2.939448883s ago: executing program 2 (id=2634):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000043c0))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00')
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'syztnl2\x00', <r7=>0x0, 0x1, 0x80, 0x0, 0x0, {{0xe, 0x4, 0x1, 0x18, 0x38, 0x67, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0xe9, 0x0, 0x5, [0x45]}, @rr={0x7, 0x1b, 0x57, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xb, @dev={0xac, 0x14, 0x14, 0x17}, @empty, @empty]}]}}}}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'pim6reg\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r10, @ANYBLOB="12"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000ec0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x248, r5, 0x220, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x144, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "fdbc6b8fb6333f5966ef554451d533ff925096f29405d73382ca50b842a171e124cb8882adae9e8401336704e7e2761fd53d8fcb4c6c70b79b6e72c5a89cb7263d15c3714f6c05f3fa61224c26040e9c138e83dd0102f450d85bab53bca4a5081f8156f0d57b3a739ba25a35ab3a632f139a6550564f0edac7b5a1031496c622ea059a97f261109610412314"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "b38ed8ccde232b1014bdb06e8823531e6cd5f1592aa28f6c87bae3a36285550f5c14bc3760c45061c7aaece7ab1e44124b2c3b1c1dfba6aff2bb147d081edf672ca71c030522e1f6678cf864f6b2569feadedbb2634e1e75844f9f2cc874de75c5e4149767530b6a73047e0e304fb4f9b011ee9eeb883bb8429fa25e6716e70c37a290ab473dab22702a5d9621c05391787d67d54918eb3f5a394523dc94839728"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c8c0)
setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000080)={@remote}, 0x14)
open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)

2.805190149s ago: executing program 3 (id=2635):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.795112649s ago: executing program 4 (id=2636):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x103000, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=")
r4 = creat(0x0, 0x182)
fallocate(r4, 0x0, 0x1, 0x2000402)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x2}, {r5, 0x4400}], 0x2, &(0x7f0000000300)={0x77359400}, 0x0, 0x0)
lseek(r4, 0x403, 0x3)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000001080)={0x1f, 0x8, @none}, 0xe)

2.462766514s ago: executing program 3 (id=2637):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@oldalloc}, {@grpquota}, {@noinit_itable}]}, 0xff, 0x4be, &(0x7f0000000a00)="$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")
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x5eef161099e45cf8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044009}, 0x4)
fallocate(r0, 0x0, 0x0, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

1.753536268s ago: executing program 2 (id=2638):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
sendmsg$nl_xfrm(r1, 0x0, 0x200408d0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
read(r3, &(0x7f00000002c0)=""/138, 0x8a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
write(r2, &(0x7f00000002c0)='0', 0x1)
syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x1)
r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000580)='./file1\x00', 0x1000c01, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r3, @ANYRESHEX, @ANYBLOB="870aec78d5e1a4f9e5d97c86bf", @ANYRESOCT, @ANYRESHEX=r4], 0x2, 0x231, &(0x7f0000000240)="$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")
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, 0x0)

1.232957372s ago: executing program 5 (id=2639):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000099a8000000d98ad8", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000000010000000000000000000000a464357177330772"], 0x48}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x6)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000000c0)=r2)
syz_usb_connect$uac1(0x5, 0x90, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/55, 0x0, 0x1ff8})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000002c0)={[{@errors_continue}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)

1.232040823s ago: executing program 3 (id=2640):
add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffc) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000001100)='coredump_filter\x00')
setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "c404dfaef30a6469", "8ff431ae486ed7a083f1600b0f92fdec810bf2f3495323be965718ab9a529a36", "0ee10b04", "9b65c73259e1c300"}, 0x38)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000340)='./bus\x00', 0x96, &(0x7f0000000600)=ANY=[@ANYBLOB='noextent_cache,inlinecrypt,jqfmt=vfsv0,quota,discard_unit=section,disable_roll_forward,inlinecrypt,noflush_merge,checkpoint=enable,background_gc=off,mode=fragment:block,disable_roll_forward,nouser_xattr,lazytime,rootcontext=sysadm_u,func=MMAP_CHECK,fowner=', @ANYRESDEC, @ANYBLOB="2c736d61636b66736861743d646973636172645f756e69743d73656374696f6e2f50311606ba2ad7bf4d2cf7dc22a35daeee112f7bea8b6593fae3971584de8397def1d49423da4e910ee56216518880bb8b944fb51ed3ade217b0017a18bd5672eaae074d9e8a463038757d9fb0a825ebd681ad129db3cef28c9179663c5978dec6d0abd068baabf8e4c94cd6691b6962b93e17e96bbc8e554f514f1656ac5dc2c76d1d211a36db7e7cc069d5f466ce8d138a4f1476595594e7429de63de55507f1d77514374cb49874cce78187dd7f6f8f910030b923bfee2bb3d3a24804626cb12c00"], 0x0, 0x5521, &(0x7f000000cf00)="$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") (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
syz_fuse_handle_req(r1, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', 0x0, 0x5d) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x4, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0) (async)
request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='asymmetric\x00', 0x0) (async)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) (async)
r6 = getpid()
kcmp(r5, r6, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x5, 0x4) (async)
getsockopt$inet6_buf(r4, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffec4)
syz_usb_control_io$uac3(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x51, @string={0x51, 0x3, "56e292c586d42d1d260387d1fd1ad880296807537a3b333abe3d27613e87198a5734530e71e82d157da7ef16b530bccd6b66e6a80e6c69c95890a57783fe5aaff4ef9adbaed15fb196d21b91b052f9"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0xe34a833e34a599, 0x6, 0x4, "6e5149c8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1)

1.170876535s ago: executing program 4 (id=2641):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1ff}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x9}]})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', <r10=>0x0})
sendmsg$can_raw(r9, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r10}, 0x10, &(0x7f00000003c0)={0x0}, 0x2, 0x0, 0x0, 0x1}, 0x4008010)
ioctl$TCSBRKP(r8, 0x5425, 0x0)
r11 = socket$tipc(0x1e, 0x5, 0x0)
listen(r11, 0x7)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r11])
r12 = getpid()
setuid(0xee00)
syz_pidfd_open(r12, 0x0)

940.830376ms ago: executing program 3 (id=2642):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="b71fe84fda50cf6fbefac5a5891d03a05027c0e6658ea94f09636160112a47b688552b72051bf0111daffbe0adef82589ee2fac726c31d20f98aa1f9761873cd604dab0d22b4b321f4c20044c5a8e018b51e52342814e4c33a7f4807781862b524b303c604203d95ef2faa04cfd7ddc4f2edca0adeae0088a8e16969e9000a6a9d85bf9d4ee333cf03763ad6506f66797f154f0923a63f106d908d1cf2a884e57ab63950b9883c40449a94847df80ca39e9394f8de077bfd7f0c81e773158bd33c339a0f92997d172adcde0c53c97cce8a0f42c862a0c88c9a25ccf6799b85dadc245f608d6cb5ded47e4a20ad821132952cc1884e1473794144bbd01594b306a04fc39f13202b4447f8bbccc51a6c4b555b46a2df7f0fe979ef6c31ef8c81a81c26e71f96ea1d8ed245277259bdf970db1f41c75d8384b6b23cf44e9b04527874daf6c34e4deda0da670addd7c8f5eab4410908517c88940d", @ANYRES16], 0xfe, 0x1520, &(0x7f00000006c0)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r0, &(0x7f0000000000)="2c0000001f0005000100000000000000050100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='mounts\x00')
r2 = socket(0x80000000000000a, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x78, 0x16d}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ftruncate(r2, 0x2)
read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x4c0, 0x2f0, 0x1e8, 0x1e8, 0x3d8, 0x3d8, 0x3d8, 0x4, &(0x7f0000000040), {[{{@arp={@empty, @loopback, 0x0, 0xff000000, 0x2, 0x1, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x5, 0x7, 0x6, 0x1, 0x14, 'ip6erspan0\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x110}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:xen_device_t:s0\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x347, {0x400}}}}, {{@arp={@broadcast, @loopback, 0xff, 0xffffff00, 0x1, 0x3, {@mac=@multicast, {[0xff, 0xff, 0xff, 0x101, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x7, 0x9fce, 0x1, 0x80, 0x87, 0x9, 'bond_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0xf, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x510)

898.488408ms ago: executing program 4 (id=2643):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r0 = syz_clone(0xa3e80442a71f7731, &(0x7f0000000300)="fe54b75b28d3848a6e39dba77c2919cf244ed2d5c6820703c3760ff315730f350c9734adfc39dfd4e9ebde2b982162b3731e9a341a8a3195b12876cb6e64a56cbe56619b9c5b0d1329dbbcedf8413b86a32303c974cc7dc3aa0df6c76c965c72d2037bb647443f4d54191764c3c979c31afb030ec1e355503ca8e799135023a99f6b67c0525c464a9f91e8909c70d25ac0c2ce00df24b6296175a44b9c5ab90955151398ea6dc7dd817c3073306a4124b830ce1027d3d307941e280200d93fed69a8d5799badda8be8f7e79eaeeb", 0xce, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="dd96d85a33088bc247864b3a1453ec4566d606725e915d4da42becd844dda6da2dd2e19808955bf067bc00c274402c214276aeab")
sched_setscheduler(r0, 0x5, &(0x7f00000004c0)=0xd0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10)
write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x200000000622c, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2700007f215c8fb68cc77640001000010800000004fcffffff00004c00", @ANYRES32=0x0, @ANYBLOB="e90402000005000008001b00000000000500100005000000"], 0x30}, 0x1, 0xffffa888, 0x0, 0x4c081}, 0x20000880)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4)
r7 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f00000001c0)=[{0x80000006}]}, 0x10)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="2103000000000000c910fc0000000000000000000000000000000102000000011004410000000000"], 0x28)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
syz_emit_ethernet(0x5a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd6008120000242b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a02020100"], 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c)

837.110281ms ago: executing program 3 (id=2644):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, 0x453, 0x8, 0x70bd26, 0x25dfdbfe, "6f121603c85aeb0952bd03f7082947995a4f24e70aa57bccff55dbf6a121c88c3392383a9570ec3456c55b348ed8eb138465445cb1458f567f744df23ce8ae92a95ecbd6e79fe89179398c1f320b09968dd8c3b9a636e4b5aec768a2c5d4129652959cc1f59427a46dc810c03522a81c62770944afb18b1269c59b475eba3ec4013f15b19908fb2cc29664a99ce90825e166731a085157e44146ffd3987fd422092362828dd39514a8297193d641a62ddcbc1496a770d8d07da5f193b56f947195346f2eee1f", ["", "", "", ""]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x2c, 0x0, 0x1}]})
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101880, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0xd, 0xc, 0x0, 0x105, 0x4, 0x4002004c4, 0x1008, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x8000000b3, 0x8d], 0xeeee8000, 0x14d3})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="c8000000000201040000000000000100000000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0200000000000000000000000000010c00028005000100880000003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x0)

657.09917ms ago: executing program 3 (id=2645):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x6, &(0x7f0000000000)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=")

465.694468ms ago: executing program 5 (id=2646):
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa9\xed\xcf\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffe8f, 0x0, 0x0, &(0x7f0000000840), 0x100}, 0x20)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

391.998731ms ago: executing program 5 (id=2647):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

313.089805ms ago: executing program 5 (id=2648):
socket$inet6(0xa, 0x800000000000002, 0x0)
userfaultfd(0x80001)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x122, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
socket(0x1, 0x2, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

255.646998ms ago: executing program 2 (id=2649):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (rerun: 64)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB="18010000", @ANYRES16=r2, @ANYBLOB="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"], 0x118}}, 0x20000854) (async, rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) (async, rerun: 32)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) (async, rerun: 32)
r4 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) (rerun: 32)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0) (async)
r6 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0xd2ba, 0x10, 0x1, 0x3}, &(0x7f0000000440)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r7, r8, 0x2c, 0x10000) (async)
io_uring_enter(r6, 0x6516, 0x6d93, 0x8, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, 0x0, 0x0) (async)
r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0xc053, r10, 0xaccd5000) (async)
r11 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r11, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) (async)
io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000003f40)=[{&(0x7f00000003c0)={0x0, &(0x7f0000000340)="9f69f42d572c4c6ad9230d737a4acd323e1ae5b4ad59ea6bdbb5511e60d9511a2393854df49f30396d14684fadb2154a86c342faf6b8c66132433e72b47e71711de8cd229604ddb01dd5e073cee3412a39e5035b0d233a1e318a9eed94f2d44620d028e49ecd", 0x0, 0x66}, &(0x7f0000000480)="438865c8e45b549ed4f6813aa5106560dbb5d345d98d9f6a27db5fcc197ec2c72e4cacfa35b572a6b89555c3444a131763d40de14a2176d634357dc3d4b01140949321174517ce7b92e861bccbcce8b3557b98fb190f77dd000c30da6b76c698d70b98045f56817fedea4278519101c6d7972067bb7d217105367f77f7a9abf9b3b658ca5e65998cbe666566e34fd2f863fb59df44b8d5745acca5490e744b0f412d665ce55d15ce7cf75ef18e28940b", 0x0, 0xb0}, {&(0x7f00000020c0)={&(0x7f0000000640)={0x0, &(0x7f00000005c0)="deaf0ef03cdcaf48f452a963ec5a86aa407b027693ce18b3072cda21f48d39bcbf6849dd9e8bab8bb05600dd28b748e0515b17bb97ea65dbae0f0723549020f2ec66d30312e2370c39225e33ad7b49f9d42e70c84e8e85fb4f2dc98e204a52e5f9b619fb144d492271f084fe9fd2af", 0x0, 0x6f}, &(0x7f00000010c0)="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", 0x0, 0x1000}, &(0x7f0000002100)="3aff8247c8452494ea640a1a04f994cfd33a7a4b74c2796c374fcb2dcccce22631085d2e276ddf01aa15015e86a1dfda8466aab86b027a2c9c65acacd21810a7e9fde980b3a5b3ba1fd60da8a91d3b6bff94f8d6122a484aedb3b7582954fec371f26d584b922e20b268922bb65b0b84d5d2b20f46ef701b9708363855de9d21c38dccc89af407527e1c8e1de9f4f5f0e7fe0fdb33706e877d0dece09642ac8a72269624c57fb371324c3783c7576afe0698", 0x1, 0xb2}, {&(0x7f0000002300)={&(0x7f0000002280)={0x0, &(0x7f00000021c0)="ab364f3650a3bf5bdb756b5886fc1aed481679ac428589923fba6724fc7c98c6ab826b8bb195ebb29e1ab27e00509afacd56ffe94e0c622dedd5fe73a25316db555923f05e3f23669651b840a2905f059c1c61adf28d81628fb8bb8f0b236647ae5946f7987e2bf67e6be1c80bba694bfcb7d80581e63c1d055219a9a5bbff6f77f4503afe8ce7795fba5e3ac04525960d4d7caae76e107c65f8", 0x0, 0x9a}, &(0x7f00000022c0)="0590c02440fc83dc6addc4de053d7c257f35dcc6c2759d6f77ca29db8cddd3ff1c090337cfe58cfb2b5ce95785940567c5cfc9adc4b932", 0x2, 0x37}, &(0x7f0000002340)="dd5d0a57e87229935f5034b249a6f01750734e2d669c7766fbb53fdc83f71b24943c4ee00f4c2692ebb47d3c31d66ba3cbb8d4047b9f5b611d785d400faf54994ca75258eb", 0x0, 0x45}, {&(0x7f00000024c0)={&(0x7f0000002440)={0x0, &(0x7f00000023c0)="ffc715d07f54a956b34b28818eaadf556411dba2730c7448bc47f380de62b8b3428a3dd24d6bc0d4b87f8574a3ec6c598a7dc1578b00d795584dedcd336ca096f5b6", 0x0, 0x42}, &(0x7f0000002480)="b13c030c7e870e125fa9b99c7fefd30ed839393b0316810a5fdb03100cead43d126dd7d10c", 0x1, 0x25}, &(0x7f0000002500)="0372f1cb5abdbe4ab25105829eac33d2a797a991c02c6e8482ae5c49a6c41fb270d551cabb666139a9d47405b2fb82f1a7d82e02682d7e035146836f607fd9081bed8f6ce2a75ddad6331c8131bc164617a95e0648696109bdcb99bf95bd29cf8de0f6388e7cf0f6474b95cf7f67bd9b21edd21acef82f3197806ff883f1da7dac964634049f3b975c8386c95a5f61641f87b7a39aa296b41066c547c841b1a0e1da7aa393809442c3b8f0fdd4353d86ffdb61838d2b15b1ef04e64999adc2d6195ab59973bcb966199c", 0x2, 0xca}, {&(0x7f00000027c0)={&(0x7f00000026c0)={0x0, &(0x7f0000002600)="d72c478ba28db1a48a361d4ac0ab095a0b67d51a748c978e9af3922724b48e935ff475c12dc57155c94c8c649c1809f432bac251f48f215d235a0e955812091604414bcf30791d18159bb35213ddbde3478a04959966ab17395b1590503a325bb274a8615b7f12b5e02c671e5399757bfbad39b494ecc67730f6edb37d58f3df636a97585c7db5998024db876343c48ee13f99915c34322ca199b7bc8215627b0cff4b8365b50c62e9f70b4457afd360f401612e33b1", 0x1, 0xb6}, &(0x7f0000002700)="4a7d99a2b36cf8f2edbfb299d2d15d93b1f209023dcc61be2e3d67e0be5d72beb714d191a3c83c236720f1033c0c37ee31f6cd85f38085a5facb3b34596a64ed0c0961b87288e7ebaccaed885c7eed0941f2f8d7f35c5b21e25bfb3d8145cc4e55e9b07079b0bce8980bd7573b85a703164746a17eb3937b31322981cc12d84004764dbd3884a8808ff8f27ba7fc638b7fa9ac", 0x1, 0x93}, &(0x7f0000002800)="0fc0658e17e93b6a559c633e52032b060c6aeeca8a753672347f083c5f8f1fa0b5697a8b2b6a824bbf2166463a54917aa3e8b80e", 0x0, 0x34}, {&(0x7f0000002900)={0x0, &(0x7f0000002840)="4118cd6c488fb249118f9ce3372153e49d76ea8277e9779c25e17450366037fe0ac2260eac842ed6b13a85d18fb38abe1b0cf1672028f02553ccbe359eb50934d65bf7d91ac6f5bbafd59cfc621ee8fecb48d6f6ebeeafae5c1d267348a4e00342ded557da301d628e4ef4eb03777f7778d17b8e6e0329a466e43f3be2474d11ea743fff198fa0f5", 0x0, 0x88}, &(0x7f0000002940)="3cd5b824d84ce398ad68617685f1251e0bb2b8be12d218c7364b87c84c413e084b8437658595fa6a90eacd3fd840c6f6f484518dafdd4156d5f4859ab4945fdb0b525a80109871f5a2406f11efd5e19d1f98338ea2591dd42be7f5acceaeb4586b2c190693951f9c3c0e1016f5689877eb893840cb17511b80dc85a0931521c624f4", 0x0, 0x82}, {&(0x7f0000002b00)={&(0x7f0000002a40)={0x0, &(0x7f0000002a00)="8c40b3073bbcaa442a10ce43cfd04816172a72e07aa721ff2a84eaef19bd562abbb409bf6fbf14085490ea251bb2534f8a58b1e35b1ddf54", 0x0, 0x38}, &(0x7f0000002a80)="89978304590c4d69bcada7a08b285407c9fb4e232d07ae901264ef7d289db8779eda740ffc21b981c2461950382ecf0600aabc469c93ca81aaf8402cfef953db3963fa322be39061b42a51", 0x2, 0x4b}, &(0x7f0000002b40)="bff0ad43c9e54c2acb0d6d470d7a3ca5ee9c53919f5b230272b42a840ab37e50033e96f1d03a2ec951e1bb97ef5a198d9726cf668221651cf12cf988e1b8f55a1dda91b8a16476", 0x0, 0x47}, {&(0x7f0000002d40)={&(0x7f0000002cc0)={0x0, &(0x7f0000002bc0)="47970b6d5a7492b99684618bf393859ccb4ac1fe167803685ce4ea56d6e45afaf83340dd4f707964874d0e3f99aaa1d1c632e1b65e8fd67f2e6067b6cc94ed6ba511a34be9a651365312e7a55e9cc2cdaad652990900041c2564dc90a2261e2beacf286667962d9e1a8478e80082067c4284e98f9e21f8d7ec5f53118b215ccfb13585424de9c10ddb277692aaccdb302512dfd48f044eeeee3704dc5ca29560628986317f953c8e1de252a68139f11d19933ebdd150c479427aef55f6f79e9a20cba658344115ce84edbf864cb7335da07d350540633d54fc7895f528be501ccd37e7d299ca04767e8e192c30d2b27073b2", 0x0, 0xf2}, &(0x7f0000002d00), 0x2}, &(0x7f0000002d80)="7fd8b0fe72e7ca67072c62129dc38842029b5727b36bf95d7b560f442035790da197f39b13b8fcbbbff6a831656a926928e31dbf81693a68eb2dd7cc39432be4070c9e533ca42ee2b9d3e3e69b8000c5aee059fabc469eeb8ad32e97dc8de5fbf2d2768fa19731462b00850d0768305dcafc7c8ccb77815311b99b07bdc22787aefa5de1f1c82003777e846c9b03f1b1600a2c3c027f6306e32a9b693b9b452d666fbfb42001423dc15d", 0x0, 0xaa}, {&(0x7f0000002f00)={&(0x7f0000002e80)={0x0, &(0x7f0000002e40)="686bea2a8692fd6b834feb6472dcedce4a44eaa31925a549b1dd0a48b16ab287fb8b", 0x0, 0x22}, &(0x7f0000002ec0)="7b1f919b6c24027840b16e5ae3e74fe1df13c5c8feca59c77d2762fd9600d4662981bc642d633136c9332b9ec6747790cc027b0be02fd7e144d150aef15527", 0x0, 0x3f}, &(0x7f0000002f40)="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", 0x0, 0x1000}], 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)

230.510439ms ago: executing program 5 (id=2650):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x8004745a, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
socket(0x2, 0x1, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r7 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x1, @local}}, 0x1e)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0)

9.19933ms ago: executing program 2 (id=2651):
r0 = socket$inet(0x2, 0x3, 0x86)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000001000007000000830b040a0101027f000001010e0000001c"], 0x40}, 0xe610)

8.8154ms ago: executing program 5 (id=2652):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000099a8000000d98ad8", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000000010000000000000000000000a464357177330772"], 0x48}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x6)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000000c0)=r2)
syz_usb_connect$uac1(0x5, 0x90, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/55, 0x0, 0x1ff8})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000002c0)={[{@errors_continue}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)

0s ago: executing program 4 (id=2653):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r4=>0x0}, 0x8)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r5, r3, 0x4}, 0x5)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583033a"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x28d00, 0x0)

kernel console output (not intermixed with test programs):

3.501022][T11426] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  493.544571][T11437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2140'.
[  493.648155][T11426] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  493.786592][T11426] F2FS-fs (loop5): invalid crc value
[  493.864265][T11426] F2FS-fs (loop5): Found nat_bits in checkpoint
[  493.926892][T11426] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  493.934122][T11426] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  494.318355][ T2415] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  494.553317][T11456] loop3: detected capacity change from 0 to 40427
[  494.568589][ T2415] usb 5-1: Using ep0 maxpacket: 32
[  494.581773][T11458] loop2: detected capacity change from 0 to 40427
[  494.617262][T11460] loop1: detected capacity change from 0 to 40427
[  494.629377][T11456] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  494.639644][T11458] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  494.657601][T11458] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  494.666205][T11456] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  494.684829][T11456] F2FS-fs (loop3): invalid crc value
[  494.690366][T11458] F2FS-fs (loop2): invalid crc value
[  494.698434][ T2415] usb 5-1: unable to get BOS descriptor or descriptor too short
[  494.698739][T11458] F2FS-fs (loop2): Found nat_bits in checkpoint
[  494.712792][T11460] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  494.720712][T11456] F2FS-fs (loop3): Found nat_bits in checkpoint
[  494.748379][T11460] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  494.768645][T11460] F2FS-fs (loop1): invalid crc value
[  494.778382][ T2415] usb 5-1: unable to read config index 0 descriptor/start: -71
[  494.787582][ T2415] usb 5-1: can't read configurations, error -71
[  494.794861][T11460] F2FS-fs (loop1): Found nat_bits in checkpoint
[  494.879011][T11456] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  494.886105][T11456] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  494.897378][T11458] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  494.905528][T11460] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  494.918363][T11458] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  494.928422][T11460] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  495.081982][T11562] loop5: detected capacity change from 0 to 40427
[  495.092085][T11562] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  495.099978][T11562] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  495.128534][T11562] F2FS-fs (loop5): invalid crc value
[  495.174252][T11581] loop4: detected capacity change from 0 to 128
[  495.192114][T11562] F2FS-fs (loop5): Found nat_bits in checkpoint
[  495.208462][T11581] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  495.354915][T11562] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  495.368345][T11562] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  495.811630][T11562] handle_bad_sector: 3956 callbacks suppressed
[  495.811657][T11562] attempt to access beyond end of device
[  495.811657][T11562] loop5: rw=0, want=77832, limit=40427
[  495.844852][T11561] attempt to access beyond end of device
[  495.844852][T11561] loop5: rw=0, want=77832, limit=40427
[  495.868429][T11561] attempt to access beyond end of device
[  495.868429][T11561] loop5: rw=0, want=77832, limit=40427
[  495.880318][T11562] attempt to access beyond end of device
[  495.880318][T11562] loop5: rw=0, want=77832, limit=40427
[  495.892601][T11562] attempt to access beyond end of device
[  495.892601][T11562] loop5: rw=0, want=77832, limit=40427
[  495.918570][T11587] attempt to access beyond end of device
[  495.918570][T11587] loop5: rw=0, want=77832, limit=40427
[  495.944606][T11562] attempt to access beyond end of device
[  495.944606][T11562] loop5: rw=0, want=77832, limit=40427
[  495.970432][T11587] attempt to access beyond end of device
[  495.970432][T11587] loop5: rw=0, want=77832, limit=40427
[  495.994133][T11562] attempt to access beyond end of device
[  495.994133][T11562] loop5: rw=0, want=77832, limit=40427
[  496.026172][T11587] attempt to access beyond end of device
[  496.026172][T11587] loop5: rw=0, want=77832, limit=40427
[  496.360792][T11605] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  496.369482][T11605] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  496.378737][T11605] F2FS-fs (loop3): invalid crc value
[  496.389464][T11605] F2FS-fs (loop3): Found nat_bits in checkpoint
[  496.636154][T11605] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  496.644580][T11605] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  496.658385][ T2747] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  496.926976][ T2747] usb 2-1: Using ep0 maxpacket: 32
[  496.981947][T11718] set_capacity_and_notify: 1 callbacks suppressed
[  496.981968][T11718] loop2: detected capacity change from 0 to 40427
[  497.001389][T11700] loop1: detected capacity change from 0 to 128
[  497.021945][T11718] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  497.031120][T11718] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  497.040754][T11718] F2FS-fs (loop2): invalid crc value
[  497.058753][T11700] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none.
[  497.072126][T11700] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  497.092310][T11718] F2FS-fs (loop2): Found nat_bits in checkpoint
[  497.128375][ T2747] usb 2-1: unable to get BOS descriptor or descriptor too short
[  497.140219][T11718] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  497.147427][T11718] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  497.198355][ T2747] usb 2-1: unable to read config index 0 descriptor/start: -71
[  497.206206][ T2747] usb 2-1: can't read configurations, error -71
[  497.298440][ T3562] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  497.548487][ T3562] usb 6-1: Using ep0 maxpacket: 32
[  497.688368][ T3562] usb 6-1: unable to get BOS descriptor or descriptor too short
[  497.710324][T11736] loop1: detected capacity change from 0 to 128
[  497.758392][ T3562] usb 6-1: unable to read config index 0 descriptor/start: -71
[  497.770242][ T3562] usb 6-1: can't read configurations, error -71
[  497.821739][T11736] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none.
[  497.851383][T11736] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  497.938425][T11743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2161'.
[  498.215486][T11746] loop4: detected capacity change from 0 to 128
[  498.321911][T11746] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  498.818981][T11748] loop5: detected capacity change from 0 to 40427
[  498.837061][T11748] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  498.856055][T11748] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  498.866337][T11748] F2FS-fs (loop5): invalid crc value
[  498.894536][T11748] F2FS-fs (loop5): Found nat_bits in checkpoint
[  498.912366][T11760] loop3: detected capacity change from 0 to 1024
[  498.943754][T11748] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  498.951233][T11748] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  498.951236][T11760] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  498.969416][T11760] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  498.987310][T11760] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  499.251669][T11771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2167'.
[  499.483306][T11857] fuse: Bad value for 'fd'
[  499.882850][T11879] loop4: detected capacity change from 0 to 40427
[  499.893636][T11879] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  499.902030][T11879] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  499.911465][T11879] F2FS-fs (loop4): invalid crc value
[  499.924629][T11879] F2FS-fs (loop4): Found nat_bits in checkpoint
[  499.960464][T11877] loop1: detected capacity change from 0 to 40427
[  499.989252][T11877] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  500.007338][T11877] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  500.018122][T11879] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  500.026047][T11877] F2FS-fs (loop1): invalid crc value
[  500.032996][T11879] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  500.062372][T11877] F2FS-fs (loop1): Found nat_bits in checkpoint
[  500.148594][T11877] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  500.158356][   T39] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  500.166135][T11877] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  500.226924][T11883] loop3: detected capacity change from 0 to 40427
[  500.241828][T11883] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  500.268348][T11883] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  500.279306][T11883] F2FS-fs (loop3): invalid crc value
[  500.303323][T11883] F2FS-fs (loop3): Found nat_bits in checkpoint
[  500.375716][T11883] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  500.383001][T11883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  500.398360][   T39] usb 3-1: Using ep0 maxpacket: 32
[  500.529081][   T39] usb 3-1: unable to get BOS descriptor or descriptor too short
[  500.588342][   T39] usb 3-1: unable to read config index 0 descriptor/start: -71
[  500.595998][   T39] usb 3-1: can't read configurations, error -71
[  501.015119][T12013] loop2: detected capacity change from 0 to 128
[  501.020851][ T1030] handle_bad_sector: 1559 callbacks suppressed
[  501.020912][ T1030] attempt to access beyond end of device
[  501.020912][ T1030] loop1: rw=1, want=77832, limit=40427
[  501.048335][T12013] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  501.692317][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2179'.
[  501.807804][T12018] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  501.831282][T12018] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  501.910534][T12018] F2FS-fs (loop4): invalid crc value
[  501.947380][T12018] F2FS-fs (loop4): Found nat_bits in checkpoint
[  501.992401][T12137] set_capacity_and_notify: 1 callbacks suppressed
[  501.992420][T12137] loop2: detected capacity change from 0 to 1024
[  502.048504][T12137] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  502.079618][T12137] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  502.087236][T12137] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  502.108215][T12018] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  502.115761][T12018] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  502.205623][T12129] fuse: Unknown parameter '00000000000000000003'
[  502.233371][T12129] loop3: detected capacity change from 0 to 16
[  502.374217][T12143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2184'.
[  502.449958][T12129] erofs: (device loop3): mounted with root inode @ nid 36.
[  502.627653][T12129] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  502.647442][T12144] attempt to access beyond end of device
[  502.647442][T12144] loop4: rw=2049, want=79872, limit=40427
[  502.677280][T12129] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  502.712814][T12144] attempt to access beyond end of device
[  502.712814][T12144] loop4: rw=2049, want=81920, limit=40427
[  502.735550][T12144] attempt to access beyond end of device
[  502.735550][T12144] loop4: rw=2049, want=51200, limit=40427
[  502.784683][T12015] attempt to access beyond end of device
[  502.784683][T12015] loop4: rw=524288, want=78080, limit=40427
[  502.796489][T12015] attempt to access beyond end of device
[  502.796489][T12015] loop4: rw=0, want=77832, limit=40427
[  502.808095][T12015] attempt to access beyond end of device
[  502.808095][T12015] loop4: rw=0, want=77832, limit=40427
[  502.820663][T12015] attempt to access beyond end of device
[  502.820663][T12015] loop4: rw=0, want=77832, limit=40427
[  502.840956][T12015] attempt to access beyond end of device
[  502.840956][T12015] loop4: rw=0, want=77832, limit=40427
[  502.852645][T12015] attempt to access beyond end of device
[  502.852645][T12015] loop4: rw=0, want=77832, limit=40427
[  502.964482][T12156] loop2: detected capacity change from 0 to 1024
[  503.105875][T12156] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  503.131499][T12156] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  503.150902][T12156] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  503.431738][T12167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2187'.
[  503.659257][T12169] loop4: detected capacity change from 0 to 1024
[  503.690395][T12169] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  503.712401][T12169] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  503.720463][ T2747] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  503.734314][T12169] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  503.980960][T12178] loop5: detected capacity change from 0 to 128
[  504.272351][ T2747] usb 4-1: Using ep0 maxpacket: 32
[  504.338051][T12175] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  504.340912][T12178] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  504.388800][T12175] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  504.485267][ T2747] usb 4-1: unable to get BOS descriptor or descriptor too short
[  504.688358][ T2747] usb 4-1: unable to read config index 0 descriptor/start: -71
[  504.704421][ T2747] usb 4-1: can't read configurations, error -71
[  504.770285][T12191] fuse: Unknown parameter 'user_id00000000000000000000'
[  505.026204][T12293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2198'.
[  506.531120][T12316] loop3: detected capacity change from 0 to 1024
[  506.560833][T12320] loop2: detected capacity change from 0 to 1024
[  506.583027][T12316] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  506.600092][T12320] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  506.627974][T12316] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  506.640530][T12320] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  506.648490][T12316] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  506.661520][T12320] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  506.732717][T12311] loop4: detected capacity change from 0 to 40427
[  506.905102][T12311] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  507.214638][T12330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2206'.
[  507.329928][T12311] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  507.584654][T12311] F2FS-fs (loop4): invalid crc value
[  507.595369][T12335] loop2: detected capacity change from 0 to 1024
[  507.615560][T12311] F2FS-fs (loop4): Found nat_bits in checkpoint
[  507.658629][T12335] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  507.673987][T12335] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  507.688490][T12335] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  507.829600][T12311] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  507.836701][T12311] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  508.268869][T12311] handle_bad_sector: 48 callbacks suppressed
[  508.268887][T12311] attempt to access beyond end of device
[  508.268887][T12311] loop4: rw=2049, want=79872, limit=40427
[  508.298784][ T1152] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  508.300312][T12340] loop3: detected capacity change from 0 to 40427
[  508.340383][T12345] loop5: detected capacity change from 0 to 40427
[  508.349689][T12311] attempt to access beyond end of device
[  508.349689][T12311] loop4: rw=2049, want=80392, limit=40427
[  508.378976][T12345] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  508.386990][T12345] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  508.401820][T12340] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  508.412825][T12345] F2FS-fs (loop5): invalid crc value
[  508.448112][T12340] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  508.499282][T12340] F2FS-fs (loop3): invalid crc value
[  508.509381][T12345] F2FS-fs (loop5): Found nat_bits in checkpoint
[  508.519170][T12340] F2FS-fs (loop3): Found nat_bits in checkpoint
[  508.548355][ T1152] usb 2-1: Using ep0 maxpacket: 32
[  508.589002][T12345] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  508.596201][T12345] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  508.615086][T12340] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  508.622285][T12340] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  508.675666][  T306] attempt to access beyond end of device
[  508.675666][  T306] loop4: rw=1, want=77832, limit=40427
[  508.688406][ T1152] usb 2-1: unable to get BOS descriptor or descriptor too short
[  508.778391][ T1152] usb 2-1: unable to read config index 0 descriptor/start: -71
[  508.786080][ T1152] usb 2-1: can't read configurations, error -71
[  508.885442][T12340] attempt to access beyond end of device
[  508.885442][T12340] loop3: rw=2049, want=79872, limit=40427
[  508.902974][T12340] attempt to access beyond end of device
[  508.902974][T12340] loop3: rw=2049, want=81920, limit=40427
[  508.919101][T12340] attempt to access beyond end of device
[  508.919101][T12340] loop3: rw=2049, want=50064, limit=40427
[  508.952532][T12345] attempt to access beyond end of device
[  508.952532][T12345] loop5: rw=2049, want=79872, limit=40427
[  509.006043][T12345] attempt to access beyond end of device
[  509.006043][T12345] loop5: rw=2049, want=81920, limit=40427
[  509.064135][T12345] attempt to access beyond end of device
[  509.064135][T12345] loop5: rw=2049, want=51072, limit=40427
[  509.714381][T12376] cgroup: fork rejected by pids controller in /syz2
[  509.802061][T12376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2216'.
[  509.965545][ T7749] attempt to access beyond end of device
[  509.965545][ T7749] loop3: rw=1, want=77832, limit=40427
[  510.107549][T12381] loop4: detected capacity change from 0 to 1024
[  510.155419][T12381] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  510.195819][T12384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2218'.
[  510.218204][T12387] loop5: detected capacity change from 0 to 1024
[  510.227797][T12381] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  510.237647][T12381] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  510.354375][T12387] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  510.374808][T12387] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  510.384847][T12387] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  510.442317][T12393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2220'.
[  510.693791][T12395] loop2: detected capacity change from 0 to 128
[  510.740574][T12395] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none.
[  510.773994][T12395] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  511.032069][T12391] loop3: detected capacity change from 0 to 40427
[  511.538874][T12391] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  511.660257][T12502] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  511.669011][T12502] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  511.702077][T12391] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  511.720683][T12391] F2FS-fs (loop3): invalid crc value
[  511.730549][T12391] F2FS-fs (loop3): Found nat_bits in checkpoint
[  511.777290][T12391] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  511.784640][T12391] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  511.955030][T12522] loop1: detected capacity change from 0 to 1024
[  512.007208][T12522] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  512.397171][T12522] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  512.411150][T12522] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  513.308896][ T3673] Bluetooth: hci0: Frame reassembly failed (-84)
[  513.368096][ T3673] Bluetooth: hci0: Frame reassembly failed (-84)
[  513.964788][T12549] loop5: detected capacity change from 0 to 1024
[  514.038127][T12554] loop1: detected capacity change from 0 to 1024
[  514.129111][ T7749] handle_bad_sector: 1 callbacks suppressed
[  514.129131][ T7749] attempt to access beyond end of device
[  514.129131][ T7749] loop3: rw=1, want=79912, limit=40427
[  514.146377][T12554] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  514.155766][T12549] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  514.166481][T12554] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  514.174576][T12554] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  514.199869][T12549] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  514.203883][ T7749] attempt to access beyond end of device
[  514.203883][ T7749] loop3: rw=1, want=81920, limit=40427
[  514.207987][T12549] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  514.248876][ T7749] attempt to access beyond end of device
[  514.248876][ T7749] loop3: rw=1, want=51200, limit=40427
[  514.295859][ T7749] attempt to access beyond end of device
[  514.295859][ T7749] loop3: rw=1, want=53248, limit=40427
[  514.332297][ T7749] attempt to access beyond end of device
[  514.332297][ T7749] loop3: rw=1, want=59392, limit=40427
[  514.362712][ T7749] attempt to access beyond end of device
[  514.362712][ T7749] loop3: rw=1, want=62000, limit=40427
[  514.394162][T12563] loop2: detected capacity change from 0 to 128
[  514.439961][T12561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2233'.
[  514.581306][T12563] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none.
[  514.594706][T12563] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  515.397442][   T39] Bluetooth: hci0: command 0x1003 tx timeout
[  515.403587][   T47] Bluetooth: hci0: sending frame failed (-49)
[  515.423753][T12880] loop5: detected capacity change from 0 to 1024
[  515.504244][T12880] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  515.546142][T12880] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  515.554181][T12880] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  516.813979][T12890] loop2: detected capacity change from 0 to 512
[  516.898709][ T3673] Bluetooth: hci1: Frame reassembly failed (-84)
[  516.922025][T12890] EXT4-fs (loop2): 1 orphan inode deleted
[  516.927888][T12890] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  516.940133][T12890] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  517.017201][T13002] loop5: detected capacity change from 0 to 128
[  517.080004][T13002] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  517.220515][T13004] fuse: Unknown parameter '00000000000000000003'
[  517.227813][T13004] loop3: detected capacity change from 0 to 16
[  517.409078][T13004] erofs: (device loop3): mounted with root inode @ nid 36.
[  517.453638][T13004] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  517.476439][T13004] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  517.488338][ T3562] Bluetooth: hci0: command 0x1001 tx timeout
[  517.507769][ T3063] Bluetooth: hci0: sending frame failed (-49)
[  517.554064][T13115] loop1: detected capacity change from 0 to 1024
[  517.763925][T13115] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  517.774790][T13115] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  517.783999][T13115] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  517.998951][T13226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2251'.
[  518.239370][T13329] loop5: detected capacity change from 0 to 128
[  518.330181][T13329] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none.
[  518.343548][T13329] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  518.389197][   T39] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  518.778418][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.789785][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  518.800009][   T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  518.813237][   T39] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  518.822568][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.835578][   T39] usb 4-1: config 0 descriptor??
[  518.928827][ T3562] Bluetooth: hci1: command 0x1003 tx timeout
[  518.935308][ T3063] Bluetooth: hci1: sending frame failed (-49)
[  519.148338][ T2415] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  519.359350][T13338] loop1: detected capacity change from 0 to 1024
[  519.388392][   T39] usbhid 4-1:0.0: can't add hid device: -71
[  519.388390][ T2415] usb 6-1: Using ep0 maxpacket: 32
[  519.401395][T13338] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  519.410947][   T39] usbhid: probe of 4-1:0.0 failed with error -71
[  519.421030][T13338] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  519.422971][   T39] usb 4-1: USB disconnect, device number 30
[  519.436558][T13338] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  519.452571][T13335] loop5: detected capacity change from 0 to 128
[  519.551394][T13335] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none.
[  519.565100][T13335] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  519.575911][  T307] Bluetooth: hci0: command 0x1009 tx timeout
[  519.838403][ T2415] usb 6-1: unable to get BOS descriptor or descriptor too short
[  519.885919][T13347] loop3: detected capacity change from 0 to 128
[  519.898432][ T2415] usb 6-1: unable to read config index 0 descriptor/start: -71
[  519.906096][ T2415] usb 6-1: can't read configurations, error -71
[  519.922140][T13347] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  520.149968][T13355] loop3: detected capacity change from 0 to 40427
[  520.231095][T13355] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  520.239508][T13355] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  520.253704][T13355] F2FS-fs (loop3): invalid crc value
[  520.269011][T13355] F2FS-fs (loop3): Found nat_bits in checkpoint
[  520.349008][T13367] loop1: detected capacity change from 0 to 1024
[  520.372350][T13355] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  520.379622][T13355] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  520.444622][T13367] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  520.455432][T13367] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  520.463737][T13367] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  521.253241][ T3562] Bluetooth: hci1: command 0x1001 tx timeout
[  521.321499][ T3063] Bluetooth: hci1: sending frame failed (-49)
[  521.429806][T13475] attempt to access beyond end of device
[  521.429806][T13475] loop3: rw=2049, want=79872, limit=40427
[  521.446482][T13475] attempt to access beyond end of device
[  521.446482][T13475] loop3: rw=2049, want=81920, limit=40427
[  521.463806][T13475] attempt to access beyond end of device
[  521.463806][T13475] loop3: rw=2049, want=51200, limit=40427
[  521.482080][T13475] attempt to access beyond end of device
[  521.482080][T13475] loop3: rw=2049, want=53248, limit=40427
[  521.497869][T13476] loop5: detected capacity change from 0 to 1024
[  521.514302][T13475] attempt to access beyond end of device
[  521.514302][T13475] loop3: rw=2049, want=59408, limit=40427
[  521.573804][T13476] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  521.584621][T13476] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  521.592512][T13476] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  521.690606][T13355] attempt to access beyond end of device
[  521.690606][T13355] loop3: rw=524288, want=78080, limit=40427
[  521.702900][T13355] attempt to access beyond end of device
[  521.702900][T13355] loop3: rw=0, want=77832, limit=40427
[  521.714376][T13355] attempt to access beyond end of device
[  521.714376][T13355] loop3: rw=0, want=77832, limit=40427
[  521.725793][T13355] attempt to access beyond end of device
[  521.725793][T13355] loop3: rw=0, want=77832, limit=40427
[  521.737109][T13355] attempt to access beyond end of device
[  521.737109][T13355] loop3: rw=0, want=77832, limit=40427
[  522.032780][T13587] loop5: detected capacity change from 0 to 128
[  522.051121][T13587] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  522.264978][T13595] loop1: detected capacity change from 0 to 1024
[  522.282533][T13595] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  522.292938][T13595] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  522.305507][T13595] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  522.713878][T13605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2273'.
[  523.734901][  T307] Bluetooth: hci1: command 0x1009 tx timeout
[  523.999425][T13622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2279'.
[  524.421330][T13730] loop5: detected capacity change from 0 to 128
[  524.444343][T13730] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  524.457057][T13625] loop1: detected capacity change from 0 to 40427
[  524.472723][T13625] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  524.482274][T13625] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  524.497012][T13625] F2FS-fs (loop1): invalid crc value
[  524.516283][T13625] F2FS-fs (loop1): Found nat_bits in checkpoint
[  524.573706][T13625] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  524.581730][T13625] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  525.015472][T13749] loop3: detected capacity change from 0 to 1024
[  525.047628][T13749] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  525.073294][T13749] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  525.096340][T13749] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  525.278061][T13743] loop4: detected capacity change from 0 to 40427
[  525.297619][T13743] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  525.305786][T13743] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  525.318677][T13743] F2FS-fs (loop4): invalid crc value
[  525.476844][T13743] F2FS-fs (loop4): Found nat_bits in checkpoint
[  525.608636][T13743] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  525.615886][T13743] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  525.902924][T13758] loop5: detected capacity change from 0 to 40427
[  526.024833][T13758] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  526.035568][T13758] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  526.109010][ T7749] Bluetooth: hci0: Frame reassembly failed (-84)
[  526.265597][T13770] loop4: detected capacity change from 0 to 1024
[  526.294948][T13770] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  526.306047][T13770] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  526.314077][T13770] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  526.418349][T13758] F2FS-fs (loop5): invalid crc value
[  526.426018][T13758] F2FS-fs (loop5): Found nat_bits in checkpoint
[  526.585994][T13777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2292'.
[  526.617940][T13758] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  526.625299][T13758] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  527.177644][T13785] loop4: detected capacity change from 0 to 128
[  527.249297][T13785] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  527.388667][ T1030] handle_bad_sector: 845 callbacks suppressed
[  527.388697][ T1030] attempt to access beyond end of device
[  527.388697][ T1030] loop5: rw=1, want=79872, limit=40427
[  527.413595][ T1030] attempt to access beyond end of device
[  527.413595][ T1030] loop5: rw=1, want=81920, limit=40427
[  527.448173][ T1030] attempt to access beyond end of device
[  527.448173][ T1030] loop5: rw=1, want=51264, limit=40427
[  527.475556][ T1030] attempt to access beyond end of device
[  527.475556][ T1030] loop5: rw=1, want=53248, limit=40427
[  527.555147][ T1030] attempt to access beyond end of device
[  527.555147][ T1030] loop5: rw=1, want=59544, limit=40427
[  527.573877][ T1030] attempt to access beyond end of device
[  527.573877][ T1030] loop5: rw=1, want=61600, limit=40427
[  527.592140][ T1030] attempt to access beyond end of device
[  527.592140][ T1030] loop5: rw=1, want=63648, limit=40427
[  527.613299][T13889] loop2: detected capacity change from 0 to 1024
[  527.625282][ T1030] attempt to access beyond end of device
[  527.625282][ T1030] loop5: rw=1, want=65712, limit=40427
[  527.639179][T13889] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  527.655174][T13889] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  527.671876][T13889] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  527.791472][ T1030] attempt to access beyond end of device
[  527.791472][ T1030] loop5: rw=1, want=67792, limit=40427
[  527.826721][ T1030] attempt to access beyond end of device
[  527.826721][ T1030] loop5: rw=1, want=69096, limit=40427
[  527.952116][T13895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2296'.
[  528.167010][ T2415] Bluetooth: hci0: command 0x1003 tx timeout
[  528.173213][   T47] Bluetooth: hci0: sending frame failed (-49)
[  528.181098][T13893] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  528.207618][T13893] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  528.323115][T13900] loop5: detected capacity change from 0 to 1024
[  528.419680][T13906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2298'.
[  528.498779][T13900] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  528.608447][T13908] loop4: detected capacity change from 0 to 512
[  528.639751][T13900] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  528.760063][T13900] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  528.853422][T13908] EXT4-fs (loop4): 1 orphan inode deleted
[  528.859418][T13908] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  528.871511][T13908] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  529.952133][T14026] loop2: detected capacity change from 0 to 1024
[  529.964725][T14026] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  529.975252][T14026] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  529.983293][T14026] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  530.250630][T14136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2304'.
[  530.364891][  T325] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  530.648343][  T325] usb 2-1: Using ep0 maxpacket: 32
[  530.710311][T14021] loop1: detected capacity change from 0 to 128
[  530.878398][T14241] loop4: detected capacity change from 0 to 1024
[  530.888435][  T325] usb 2-1: unable to get BOS descriptor or descriptor too short
[  530.908569][T14241] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  530.921957][T14241] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  530.929915][T14241] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  530.958417][  T325] usb 2-1: unable to read config index 0 descriptor/start: -71
[  530.968363][  T325] usb 2-1: can't read configurations, error -71
[  531.028742][ T2415] Bluetooth: hci0: command 0x1001 tx timeout
[  531.034862][   T47] Bluetooth: hci0: sending frame failed (-49)
[  531.054898][T14244] loop5: detected capacity change from 0 to 128
[  531.080679][T14244] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  531.212032][T14249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2309'.
[  531.415431][T14246] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  531.423498][T14246] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  531.611757][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2311'.
[  532.037444][T14254] loop2: detected capacity change from 0 to 40427
[  532.103838][T14363] loop5: detected capacity change from 0 to 1024
[  532.111796][T14254] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  532.126400][T14363] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  532.138248][T14363] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  532.141285][T14254] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  532.146459][T14363] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  532.173137][T14364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2313'.
[  532.255567][T14254] F2FS-fs (loop2): invalid crc value
[  532.277663][T14254] F2FS-fs (loop2): Found nat_bits in checkpoint
[  532.463114][T14254] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  532.483453][T14254] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  532.676892][T14483] attempt to access beyond end of device
[  532.676892][T14483] loop2: rw=2049, want=79712, limit=40427
[  532.948414][T14480] loop4: detected capacity change from 0 to 40427
[  532.993895][T14480] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  533.016381][T14480] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  533.046739][T14480] F2FS-fs (loop4): invalid crc value
[  533.086403][T14480] F2FS-fs (loop4): Found nat_bits in checkpoint
[  533.098345][ T2747] Bluetooth: hci0: command 0x1009 tx timeout
[  533.181297][T14480] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  533.191867][T14480] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  533.319446][T14480] attempt to access beyond end of device
[  533.319446][T14480] loop4: rw=2049, want=80112, limit=40427
[  533.334919][T14480] attempt to access beyond end of device
[  533.334919][T14480] loop4: rw=2049, want=81248, limit=40427
[  533.394427][T14480] attempt to access beyond end of device
[  533.394427][T14480] loop4: rw=524288, want=78080, limit=40427
[  533.419292][T14480] attempt to access beyond end of device
[  533.419292][T14480] loop4: rw=0, want=77832, limit=40427
[  533.443752][T14480] attempt to access beyond end of device
[  533.443752][T14480] loop4: rw=0, want=77832, limit=40427
[  533.477041][T14479] attempt to access beyond end of device
[  533.477041][T14479] loop4: rw=0, want=77832, limit=40427
[  533.494699][T14495] loop2: detected capacity change from 0 to 1024
[  533.501270][T14479] attempt to access beyond end of device
[  533.501270][T14479] loop4: rw=0, want=77832, limit=40427
[  533.538470][T14480] attempt to access beyond end of device
[  533.538470][T14480] loop4: rw=0, want=77832, limit=40427
[  533.570102][T14489] attempt to access beyond end of device
[  533.570102][T14489] loop4: rw=0, want=77832, limit=40427
[  533.587667][T14495] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  533.628843][T14495] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  533.636473][T14495] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  533.858428][T14589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2319'.
[  533.892546][T14496] loop1: detected capacity change from 0 to 40427
[  533.986237][T14496] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  533.994493][T14496] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  534.008252][T14496] F2FS-fs (loop1): invalid crc value
[  534.128357][T14496] F2FS-fs (loop1): Found nat_bits in checkpoint
[  534.188651][T14496] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  534.195945][T14496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  535.097433][T14623] loop5: detected capacity change from 0 to 1024
[  535.165009][T14623] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  535.195665][T14623] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  535.212249][T14623] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  535.449386][T14628] fuse: Unknown parameter 'grou00000000000000000000'
[  535.460031][T14628] loop4: detected capacity change from 0 to 16
[  535.504969][T14628] erofs: (device loop4): mounted with root inode @ nid 36.
[  535.612178][T14737] cgroup: fork rejected by pids controller in /syz1
[  535.695635][T14740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2329'.
[  536.430748][T14858] loop1: detected capacity change from 0 to 512
[  537.647751][T14862] loop3: detected capacity change from 0 to 128
[  537.691656][T14858] EXT4-fs (loop1): 1 orphan inode deleted
[  537.697501][T14858] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  537.709249][T14858] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  537.726323][T14862] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  538.492061][T14876] loop1: detected capacity change from 0 to 1024
[  538.500947][T14865] loop4: detected capacity change from 0 to 40427
[  538.546897][T14876] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  538.557972][T14876] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  538.566064][T14876] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  538.583140][T14865] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  538.716939][T14865] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  538.831943][T14884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'.
[  539.251278][T14865] F2FS-fs (loop4): invalid crc value
[  539.271400][T14865] F2FS-fs (loop4): Found nat_bits in checkpoint
[  539.319441][T14865] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  539.326716][T14865] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  539.488571][T14903] loop5: detected capacity change from 0 to 128
[  539.515491][T14901] handle_bad_sector: 679 callbacks suppressed
[  539.515514][T14901] attempt to access beyond end of device
[  539.515514][T14901] loop4: rw=2049, want=79984, limit=40427
[  539.536968][T14910] 9pnet: Insufficient options for proto=fd
[  539.564600][T14903] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none.
[  539.584524][T14901] attempt to access beyond end of device
[  539.584524][T14901] loop4: rw=2049, want=81920, limit=40427
[  539.599726][T14903] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  539.649522][T14901] attempt to access beyond end of device
[  539.649522][T14901] loop4: rw=2049, want=51672, limit=40427
[  539.683725][T14901] attempt to access beyond end of device
[  539.683725][T14901] loop4: rw=2049, want=53248, limit=40427
[  539.697528][T14901] attempt to access beyond end of device
[  539.697528][T14901] loop4: rw=2049, want=57856, limit=40427
[  539.898037][T15023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2350'.
[  540.483483][T15021] loop3: detected capacity change from 0 to 40427
[  540.508855][T15021] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  540.521275][T15021] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  540.533287][T15030] loop5: detected capacity change from 0 to 128
[  540.540665][T15021] F2FS-fs (loop3): invalid crc value
[  540.565649][T15030] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none.
[  540.579529][T15030] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  540.606021][T15021] F2FS-fs (loop3): Found nat_bits in checkpoint
[  540.617413][T15037] loop1: detected capacity change from 0 to 1024
[  540.664225][T15021] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  540.671405][T15021] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  540.716690][ T7749] attempt to access beyond end of device
[  540.716690][ T7749] loop4: rw=1, want=45104, limit=40427
[  540.729264][T15037] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  540.739394][ T7749] attempt to access beyond end of device
[  540.739394][ T7749] loop4: rw=1, want=77832, limit=40427
[  540.751135][T15037] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  540.758802][T15037] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  540.844077][T15021] attempt to access beyond end of device
[  540.844077][T15021] loop3: rw=2049, want=80256, limit=40427
[  540.861274][T15021] attempt to access beyond end of device
[  540.861274][T15021] loop3: rw=2049, want=81920, limit=40427
[  540.880414][T15021] attempt to access beyond end of device
[  540.880414][T15021] loop3: rw=2049, want=52008, limit=40427
[  540.972888][T15042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2354'.
[  541.539754][T15051] loop2: detected capacity change from 0 to 512
[  542.022859][T15051] EXT4-fs (loop2): 1 orphan inode deleted
[  542.029188][T15051] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  542.041411][T15051] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  543.157071][T15050] loop5: detected capacity change from 0 to 40427
[  543.177676][T15050] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  543.197687][T15050] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  543.213924][T15050] F2FS-fs (loop5): invalid crc value
[  543.238024][T15050] F2FS-fs (loop5): Found nat_bits in checkpoint
[  543.323465][T15050] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  543.332797][T15050] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  543.851327][T15082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2363'.
[  543.950025][T15079] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  543.978880][T15079] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  544.173620][T15090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2365'.
[  544.302560][T15074] loop3: detected capacity change from 0 to 40427
[  544.460167][T15074] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  544.480413][T15074] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  544.504272][T15074] F2FS-fs (loop3): invalid crc value
[  544.552186][T15074] F2FS-fs (loop3): Found nat_bits in checkpoint
[  544.668344][T15074] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  544.678576][T15074] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  544.742231][T15200] loop5: detected capacity change from 0 to 1024
[  544.749287][T15088] loop1: detected capacity change from 0 to 40427
[  544.759605][T15088] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  544.769757][T15088] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  544.778821][T15200] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  544.789953][T15088] F2FS-fs (loop1): invalid crc value
[  544.796250][T15200] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  544.811458][T15200] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  544.937915][T15088] F2FS-fs (loop1): Found nat_bits in checkpoint
[  545.143262][T15088] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  545.153101][T15088] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  545.675200][T15208] loop4: detected capacity change from 0 to 40427
[  545.740212][T15208] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  545.748047][T15208] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  545.828491][T15208] F2FS-fs (loop4): invalid crc value
[  545.879184][T15208] F2FS-fs (loop4): Found nat_bits in checkpoint
[  545.976279][T15208] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  545.983977][  T288] handle_bad_sector: 1497 callbacks suppressed
[  545.983997][  T288] attempt to access beyond end of device
[  545.983997][  T288] loop3: rw=2049, want=40968, limit=40427
[  546.012158][T15208] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  546.110130][  T286] attempt to access beyond end of device
[  546.110130][  T286] loop1: rw=2049, want=40968, limit=40427
[  546.286883][   T45] attempt to access beyond end of device
[  546.286883][   T45] loop4: rw=1, want=81920, limit=40427
[  546.307975][T15422] fuse: Unknown parameter 'use00000000000000000000'
[  546.317291][T15422] loop2: detected capacity change from 0 to 16
[  546.328568][   T45] attempt to access beyond end of device
[  546.328568][   T45] loop4: rw=1, want=51040, limit=40427
[  546.349383][T15427] attempt to access beyond end of device
[  546.349383][T15427] loop4: rw=2049, want=53248, limit=40427
[  546.393434][T15427] attempt to access beyond end of device
[  546.393434][T15427] loop4: rw=2049, want=59824, limit=40427
[  546.415441][T15422] erofs: (device loop2): mounted with root inode @ nid 36.
[  546.461661][T15427] attempt to access beyond end of device
[  546.461661][T15427] loop4: rw=2049, want=61008, limit=40427
[  546.534934][T15424] loop5: detected capacity change from 0 to 40427
[  546.544053][T15422] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  546.566573][T15422] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  546.632458][T15424] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  546.644445][T15424] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  546.664936][T15434] loop3: detected capacity change from 0 to 512
[  546.687087][T15424] F2FS-fs (loop5): invalid crc value
[  546.754063][T15434] EXT4-fs (loop3): 1 orphan inode deleted
[  546.760004][T15434] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  546.771722][T15434] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  546.878492][T15207] attempt to access beyond end of device
[  546.878492][T15207] loop4: rw=524288, want=77832, limit=40427
[  546.879677][T15426] attempt to access beyond end of device
[  546.879677][T15426] loop4: rw=524288, want=78080, limit=40427
[  546.907602][T15424] F2FS-fs (loop5): Found nat_bits in checkpoint
[  546.915841][T15426] attempt to access beyond end of device
[  546.915841][T15426] loop4: rw=0, want=77832, limit=40427
[  547.079561][T15424] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  547.095768][T15424] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  547.359901][T15433] fuse: Unknown parameter 'gr00000000000000000000'
[  547.379196][T15433] loop1: detected capacity change from 0 to 16
[  547.492951][T15433] erofs: (device loop1): mounted with root inode @ nid 36.
[  547.523962][T15433] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  547.605155][T15433] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  547.933967][T15448] loop3: detected capacity change from 0 to 128
[  548.048849][T15448] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none.
[  548.098427][T15448] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  548.610840][T15458] loop2: detected capacity change from 0 to 512
[  548.866873][T15458] EXT4-fs (loop2): 1 orphan inode deleted
[  548.872793][T15458] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  548.885349][T15458] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  550.137355][T15466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2378'.
[  550.464162][T15581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2384'.
[  550.578333][ T2747] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  550.598307][  T305] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  550.838325][  T305] usb 3-1: Using ep0 maxpacket: 32
[  550.958431][  T305] usb 3-1: unable to get BOS descriptor or descriptor too short
[  550.968435][ T2747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  550.985125][ T2747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  551.006161][ T2747] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  551.028370][  T305] usb 3-1: unable to read config index 0 descriptor/start: -71
[  551.033909][ T2747] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  551.035996][  T305] usb 3-1: can't read configurations, error -71
[  551.070252][ T2747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.092596][ T2747] usb 6-1: config 0 descriptor??
[  551.557293][T15700] loop3: detected capacity change from 0 to 512
[  551.671102][T15703] fuse: Unknown parameter 'gr00000000000000000000'
[  551.777442][T15700] EXT4-fs (loop3): 1 orphan inode deleted
[  551.783363][T15700] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  551.795485][T15700] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  552.476344][T15709] loop5: detected capacity change from 0 to 1024
[  552.558392][ T2747] usbhid 6-1:0.0: can't add hid device: -71
[  552.564467][ T2747] usbhid: probe of 6-1:0.0 failed with error -71
[  552.574100][ T2747] usb 6-1: USB disconnect, device number 53
[  552.602089][T15709] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  552.643633][T15699] loop2: detected capacity change from 0 to 40427
[  552.672071][T15709] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  552.686526][T15709] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  552.707560][T15699] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  552.725641][T15699] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  552.744379][T15699] F2FS-fs (loop2): invalid crc value
[  552.788863][T15699] F2FS-fs (loop2): Found nat_bits in checkpoint
[  553.067140][T15699] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  553.076082][T15726] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  553.081188][T15699] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  553.084889][T15726] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  553.241261][T15720] loop4: detected capacity change from 0 to 40427
[  553.311355][T15720] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  553.343480][T15835] handle_bad_sector: 1582 callbacks suppressed
[  553.343504][T15835] attempt to access beyond end of device
[  553.343504][T15835] loop2: rw=2049, want=81152, limit=40427
[  553.347271][T15720] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  553.361707][T15835] attempt to access beyond end of device
[  553.361707][T15835] loop2: rw=2049, want=81920, limit=40427
[  553.385142][T15720] F2FS-fs (loop4): invalid crc value
[  553.404428][T15841] loop5: detected capacity change from 0 to 128
[  553.416506][T15835] attempt to access beyond end of device
[  553.416506][T15835] loop2: rw=2049, want=51288, limit=40427
[  553.429819][T15841] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  553.440493][T15720] F2FS-fs (loop4): Found nat_bits in checkpoint
[  553.455567][T15835] attempt to access beyond end of device
[  553.455567][T15835] loop2: rw=2049, want=52240, limit=40427
[  553.574345][T15720] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  553.588060][T15720] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  553.795329][T15699] attempt to access beyond end of device
[  553.795329][T15699] loop2: rw=524288, want=78080, limit=40427
[  553.832835][T15699] attempt to access beyond end of device
[  553.832835][T15699] loop2: rw=0, want=77832, limit=40427
[  553.849992][  T734] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  553.864443][T15699] attempt to access beyond end of device
[  553.864443][T15699] loop2: rw=0, want=77832, limit=40427
[  553.886126][T15698] attempt to access beyond end of device
[  553.886126][T15698] loop2: rw=0, want=77832, limit=40427
[  553.915502][T15953] loop5: detected capacity change from 0 to 1024
[  553.938451][T15698] attempt to access beyond end of device
[  553.938451][T15698] loop2: rw=0, want=77832, limit=40427
[  553.961470][T15953] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  553.965417][T15835] attempt to access beyond end of device
[  553.965417][T15835] loop2: rw=0, want=77832, limit=40427
[  553.996891][T15953] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  554.008332][T15953] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  554.108324][  T734] usb 2-1: Using ep0 maxpacket: 32
[  554.468406][  T734] usb 2-1: unable to get BOS descriptor or descriptor too short
[  554.546924][  T734] usb 2-1: unable to read config index 0 descriptor/start: -71
[  554.556023][  T734] usb 2-1: can't read configurations, error -71
[  554.790884][T16065] loop3: detected capacity change from 0 to 512
[  554.969182][T16065] EXT4-fs (loop3): 1 orphan inode deleted
[  554.975716][T16065] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  554.988155][T16065] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  555.645450][T16071] loop2: detected capacity change from 0 to 128
[  555.775827][T16071] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  555.944662][T16069] loop1: detected capacity change from 0 to 40427
[  556.095865][T16069] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  556.183992][T16069] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  556.315860][T16069] F2FS-fs (loop1): invalid crc value
[  556.365652][T16069] F2FS-fs (loop1): Found nat_bits in checkpoint
[  556.566670][T16069] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  556.577059][T16069] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  556.631905][T16085] fuse: Unknown parameter 'gr00000000000000000000'
[  556.633939][T16079] loop5: detected capacity change from 0 to 40427
[  556.650062][T16085] loop4: detected capacity change from 0 to 16
[  556.679381][T16092] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  556.694251][T16092] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  556.702305][T16092] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  556.726273][T16085] erofs: (device loop4): mounted with root inode @ nid 36.
[  556.735594][T16079] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  556.760936][T16079] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  556.813927][T16085] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  556.828757][T16085] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117]
[  556.864350][T16079] F2FS-fs (loop5): invalid crc value
[  557.061882][T16079] F2FS-fs (loop5): Found nat_bits in checkpoint
[  557.068564][T16096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2411'.
[  557.132151][T16079] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  557.148293][T16079] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  557.839143][ T3673] Bluetooth: hci0: Frame reassembly failed (-84)
[  557.904796][T16118] fuse: Bad value for 'fd'
[  558.249975][T16114] cgroup: fork rejected by pids controller in /syz3
[  559.577444][T16236] loop4: detected capacity change from 0 to 40427
[  559.601424][T16236] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  559.625122][T16236] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  559.644886][T16236] F2FS-fs (loop4): invalid crc value
[  559.676877][T16236] F2FS-fs (loop4): Found nat_bits in checkpoint
[  559.765609][T16236] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  559.778442][T16236] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  559.888332][   T39] Bluetooth: hci0: command 0x1003 tx timeout
[  559.894600][   T47] Bluetooth: hci0: sending frame failed (-49)
[  559.937222][T16253] loop3: detected capacity change from 0 to 128
[  559.977935][T16253] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  560.074160][  T306] handle_bad_sector: 58 callbacks suppressed
[  560.074187][  T306] attempt to access beyond end of device
[  560.074187][  T306] loop4: rw=1, want=80640, limit=40427
[  560.158573][  T306] attempt to access beyond end of device
[  560.158573][  T306] loop4: rw=1, want=81920, limit=40427
[  560.177802][T16252] fuse: Unknown parameter 'gr00000000000000000000'
[  560.208559][T16252] loop1: detected capacity change from 0 to 16
[  560.283539][T16252] erofs: (device loop1): mounted with root inode @ nid 36.
[  560.466887][  T306] attempt to access beyond end of device
[  560.466887][  T306] loop4: rw=1, want=51200, limit=40427
[  560.528405][T16252] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  560.542601][T16252] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  560.559902][  T306] attempt to access beyond end of device
[  560.559902][  T306] loop4: rw=1, want=53248, limit=40427
[  560.577903][  T306] attempt to access beyond end of device
[  560.577903][  T306] loop4: rw=1, want=59400, limit=40427
[  560.601457][  T306] attempt to access beyond end of device
[  560.601457][  T306] loop4: rw=1, want=61528, limit=40427
[  560.621925][  T306] attempt to access beyond end of device
[  560.621925][  T306] loop4: rw=1, want=62600, limit=40427
[  560.844843][  T306] attempt to access beyond end of device
[  560.844843][  T306] loop4: rw=1, want=77832, limit=40427
[  560.884922][T16368] loop1: detected capacity change from 0 to 1024
[  560.901814][T16368] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  560.946116][T16368] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  560.960752][T16368] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  561.597888][T16376] loop5: detected capacity change from 0 to 40427
[  561.675363][T16376] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  561.699831][T16376] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  561.791669][T16376] F2FS-fs (loop5): invalid crc value
[  561.803025][T16376] F2FS-fs (loop5): Found nat_bits in checkpoint
[  561.918658][T16376] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  561.925794][T16376] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  561.968334][   T39] Bluetooth: hci0: command 0x1001 tx timeout
[  561.976777][   T47] Bluetooth: hci0: sending frame failed (-49)
[  562.102416][T16376] attempt to access beyond end of device
[  562.102416][T16376] loop5: rw=2049, want=79872, limit=40427
[  562.153515][T16376] attempt to access beyond end of device
[  562.153515][T16376] loop5: rw=2049, want=81232, limit=40427
[  562.214921][T16399] fuse: Bad value for 'fd'
[  562.228237][T16399] loop1: detected capacity change from 0 to 16
[  562.279912][T16399] erofs: (device loop1): mounted with root inode @ nid 36.
[  562.307326][T16399] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  562.331935][T16399] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  562.589188][T16404] loop4: detected capacity change from 0 to 40427
[  562.826432][T16508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2439'.
[  562.842111][T16404] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  562.850089][T16404] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  562.973280][T16404] F2FS-fs (loop4): invalid crc value
[  562.978769][T16511] loop5: detected capacity change from 0 to 128
[  563.009054][T16404] F2FS-fs (loop4): Found nat_bits in checkpoint
[  563.039641][T16511] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  563.048900][T16404] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  563.056042][T16404] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  563.462758][T16627] loop5: detected capacity change from 0 to 128
[  563.520719][T16627] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  563.886859][T16629] loop3: detected capacity change from 0 to 40427
[  563.995298][T16629] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  564.009722][T16629] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  564.038519][T16629] F2FS-fs (loop3): invalid crc value
[  564.048329][  T325] Bluetooth: hci0: command 0x1009 tx timeout
[  564.080172][T16629] F2FS-fs (loop3): Found nat_bits in checkpoint
[  564.169164][T16629] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  564.177194][T16629] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  564.499160][T16740] loop5: detected capacity change from 0 to 40427
[  564.561533][T16740] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  564.588289][T16740] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  564.618641][T16740] F2FS-fs (loop5): invalid crc value
[  564.657263][T16740] F2FS-fs (loop5): Found nat_bits in checkpoint
[  564.733665][T16748] loop1: detected capacity change from 0 to 40427
[  564.740867][T16740] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  564.750504][T16740] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  564.769617][T16748] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  564.777421][T16748] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  564.829259][T16748] F2FS-fs (loop1): invalid crc value
[  564.879395][T16748] F2FS-fs (loop1): Found nat_bits in checkpoint
[  564.958638][T16748] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  564.965943][T16748] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  565.084953][T16740] handle_bad_sector: 2534 callbacks suppressed
[  565.084979][T16740] attempt to access beyond end of device
[  565.084979][T16740] loop5: rw=2049, want=80616, limit=40427
[  565.175823][T16761] attempt to access beyond end of device
[  565.175823][T16761] loop1: rw=2049, want=79880, limit=40427
[  565.203801][T16761] attempt to access beyond end of device
[  565.203801][T16761] loop1: rw=2049, want=81920, limit=40427
[  565.227031][T16761] attempt to access beyond end of device
[  565.227031][T16761] loop1: rw=2049, want=49504, limit=40427
[  565.228804][T16740] attempt to access beyond end of device
[  565.228804][T16740] loop5: rw=2049, want=81920, limit=40427
[  565.333451][T16740] attempt to access beyond end of device
[  565.333451][T16740] loop5: rw=2049, want=51024, limit=40427
[  565.446337][T16748] attempt to access beyond end of device
[  565.446337][T16748] loop1: rw=524288, want=78080, limit=40427
[  565.468542][T16748] attempt to access beyond end of device
[  565.468542][T16748] loop1: rw=0, want=77832, limit=40427
[  565.479800][ T7749] attempt to access beyond end of device
[  565.479800][ T7749] loop5: rw=1, want=77832, limit=40427
[  565.495301][T16748] attempt to access beyond end of device
[  565.495301][T16748] loop1: rw=0, want=77832, limit=40427
[  565.743871][T16818] loop3: detected capacity change from 0 to 40427
[  565.841454][T16818] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  565.858306][T16818] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  565.889708][T16818] F2FS-fs (loop3): invalid crc value
[  565.912391][T16818] F2FS-fs (loop3): Found nat_bits in checkpoint
[  566.019141][T16818] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  566.026266][T16818] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  566.590792][T16880] loop1: detected capacity change from 0 to 40427
[  566.613212][T16880] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  566.629180][T16885] loop5: detected capacity change from 0 to 40427
[  566.635818][T16880] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  566.668969][T16880] F2FS-fs (loop1): invalid crc value
[  566.689368][T16880] F2FS-fs (loop1): Found nat_bits in checkpoint
[  566.705621][T16885] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  566.728115][T16885] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  566.749565][T16891] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  566.761539][T16885] F2FS-fs (loop5): invalid crc value
[  566.787376][T16885] F2FS-fs (loop5): Found nat_bits in checkpoint
[  566.806512][T16880] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  566.897501][T16880] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  566.938654][T16885] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  566.945761][T16885] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  567.728104][T16909] set_capacity_and_notify: 1 callbacks suppressed
[  567.728123][T16909] loop4: detected capacity change from 0 to 128
[  568.702086][T17029] loop5: detected capacity change from 0 to 40427
[  568.724414][T17029] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  568.742569][T17029] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  568.763610][T17029] F2FS-fs (loop5): invalid crc value
[  568.806934][T17029] F2FS-fs (loop5): Found nat_bits in checkpoint
[  568.915135][T17029] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  568.927954][T17029] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  568.938403][T17042] loop4: detected capacity change from 0 to 512
[  569.024833][T17045] loop2: detected capacity change from 0 to 128
[  569.128806][T17031] loop1: detected capacity change from 0 to 40427
[  569.187877][T17042] EXT4-fs (loop4): 1 orphan inode deleted
[  569.196750][T17031] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  569.209019][T17031] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  569.239007][T17031] F2FS-fs (loop1): invalid crc value
[  569.240776][T17042] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  569.278591][T17031] F2FS-fs (loop1): Found nat_bits in checkpoint
[  569.287216][T17042] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  569.427621][T17031] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  569.453288][T17039] loop3: detected capacity change from 0 to 40427
[  569.460032][T17031] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  569.519327][T17039] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  569.552745][T17039] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  569.568953][T17039] F2FS-fs (loop3): invalid crc value
[  569.601359][T17039] F2FS-fs (loop3): Found nat_bits in checkpoint
[  569.682461][T17039] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  569.689609][T17039] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  570.096868][T17061] loop2: detected capacity change from 0 to 40427
[  570.194706][T17061] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  570.209874][T17061] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  570.245870][T17061] F2FS-fs (loop2): invalid crc value
[  570.280614][T17061] F2FS-fs (loop2): Found nat_bits in checkpoint
[  570.408098][T17061] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  570.425449][T17061] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  570.588094][ T3673] handle_bad_sector: 1756 callbacks suppressed
[  570.618322][ T3673] attempt to access beyond end of device
[  570.618322][ T3673] loop3: rw=1, want=79872, limit=40427
[  570.665113][ T3673] attempt to access beyond end of device
[  570.665113][ T3673] loop3: rw=1, want=81920, limit=40427
[  570.681874][T17073] attempt to access beyond end of device
[  570.681874][T17073] loop2: rw=2049, want=79880, limit=40427
[  570.698082][ T3673] attempt to access beyond end of device
[  570.698082][ T3673] loop3: rw=1, want=49664, limit=40427
[  570.709350][T17068] loop1: detected capacity change from 0 to 40427
[  570.728350][T17068] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  570.747527][T17068] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  570.767401][T17068] F2FS-fs (loop1): invalid crc value
[  570.801110][T17068] F2FS-fs (loop1): Found nat_bits in checkpoint
[  570.828539][T17073] attempt to access beyond end of device
[  570.828539][T17073] loop2: rw=2049, want=81920, limit=40427
[  570.888660][T17068] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  570.895813][T17068] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  570.907524][T17073] attempt to access beyond end of device
[  570.907524][T17073] loop2: rw=2049, want=53240, limit=40427
[  570.933917][T17082] loop4: detected capacity change from 0 to 1024
[  570.951472][T17073] attempt to access beyond end of device
[  570.951472][T17073] loop2: rw=2049, want=53248, limit=40427
[  570.977684][T17073] attempt to access beyond end of device
[  570.977684][T17073] loop2: rw=2049, want=57808, limit=40427
[  571.069810][T17084] loop3: detected capacity change from 0 to 1024
[  571.077024][T17082] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  571.098529][T17082] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  571.106266][T17082] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  571.123585][T17084] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  571.149879][T17084] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  571.157801][T17084] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  571.336956][T17073] attempt to access beyond end of device
[  571.336956][T17073] loop2: rw=524288, want=78080, limit=40427
[  571.358587][T17060] attempt to access beyond end of device
[  571.358587][T17060] loop2: rw=0, want=77832, limit=40427
[  571.649100][T17087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2476'.
[  572.192348][T17103] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  572.209800][T17103] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  572.217510][T17103] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  572.805263][T17101] fuse: Unknown parameter '00000000000000000003'
[  572.824062][T17101] set_capacity_and_notify: 1 callbacks suppressed
[  572.824083][T17101] loop3: detected capacity change from 0 to 16
[  572.905294][T17101] erofs: (device loop3): mounted with root inode @ nid 36.
[  573.001255][T17101] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  573.017815][T17112] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  573.047447][T17112] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  573.057086][T17101] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  573.096734][T17110] loop1: detected capacity change from 0 to 40427
[  573.166536][T17110] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  573.177898][T17118] loop2: detected capacity change from 0 to 1024
[  573.184568][T17110] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  573.259024][T17110] F2FS-fs (loop1): invalid crc value
[  573.283734][T17110] F2FS-fs (loop1): Found nat_bits in checkpoint
[  573.291655][T17118] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  573.356475][T17118] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  573.414931][T17118] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  573.538631][T17110] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  573.545958][T17110] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  573.575592][T17228] loop3: detected capacity change from 0 to 128
[  573.947858][T17230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2483'.
[  574.146945][T17232] loop5: detected capacity change from 0 to 1024
[  574.202727][T17116] loop4: detected capacity change from 0 to 40427
[  574.219922][T17228] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  574.234002][T17232] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  574.269865][T17232] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  574.277505][T17232] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  574.348683][T17116] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  574.717448][T17116] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  574.800999][T17116] F2FS-fs (loop4): invalid crc value
[  575.087419][T17116] F2FS-fs (loop4): Found nat_bits in checkpoint
[  575.162784][T17349] loop3: detected capacity change from 0 to 128
[  575.225352][T17116] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  575.238301][T17116] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  575.281150][T17235] loop2: detected capacity change from 0 to 40427
[  575.373739][T17235] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  575.404522][T17235] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  575.439287][T17235] F2FS-fs (loop2): invalid crc value
[  575.479236][T17235] F2FS-fs (loop2): Found nat_bits in checkpoint
[  575.595399][T17235] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  575.608348][T17235] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  575.823071][T17565] fuse: Unknown parameter 'gr00000000000000000000'
[  575.896140][ T7749] handle_bad_sector: 811 callbacks suppressed
[  575.896164][ T7749] attempt to access beyond end of device
[  575.896164][ T7749] loop4: rw=1, want=79896, limit=40427
[  575.932456][ T7749] attempt to access beyond end of device
[  575.932456][ T7749] loop4: rw=1, want=81920, limit=40427
[  575.961935][ T7749] attempt to access beyond end of device
[  575.961935][ T7749] loop4: rw=1, want=51016, limit=40427
[  576.034608][T17567] loop5: detected capacity change from 0 to 40427
[  576.058326][T17567] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  576.066124][T17567] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  576.089417][T17567] F2FS-fs (loop5): invalid crc value
[  576.115143][T17567] F2FS-fs (loop5): Found nat_bits in checkpoint
[  576.189717][T17567] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  576.196822][T17567] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  576.460513][T17574] loop3: detected capacity change from 0 to 40427
[  576.471563][T17579] attempt to access beyond end of device
[  576.471563][T17579] loop5: rw=2049, want=80520, limit=40427
[  576.482890][T17574] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  576.495521][T17579] attempt to access beyond end of device
[  576.495521][T17579] loop5: rw=2049, want=81920, limit=40427
[  576.507165][T17574] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  576.516534][T17574] F2FS-fs (loop3): invalid crc value
[  576.525821][T17579] attempt to access beyond end of device
[  576.525821][T17579] loop5: rw=2049, want=49184, limit=40427
[  576.608893][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  576.615445][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  576.700657][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  576.931326][T17574] F2FS-fs (loop3): Found nat_bits in checkpoint
[  576.963926][T17584] EXT4-fs (loop2): 1 orphan inode deleted
[  576.969853][T17584] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  576.981920][T17584] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  577.428421][T17574] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  577.493306][T17574] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  577.778150][T17591] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  577.790051][T17567] attempt to access beyond end of device
[  577.790051][T17567] loop5: rw=524288, want=78080, limit=40427
[  577.791713][T17591] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  577.809481][T17591] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  577.894324][T17567] attempt to access beyond end of device
[  577.894324][T17567] loop5: rw=0, want=77832, limit=40427
[  577.908728][T17594] set_capacity_and_notify: 2 callbacks suppressed
[  577.908747][T17594] loop4: detected capacity change from 0 to 128
[  577.938443][T17567] attempt to access beyond end of device
[  577.938443][T17567] loop5: rw=0, want=77832, limit=40427
[  578.016488][T17566] attempt to access beyond end of device
[  578.016488][T17566] loop5: rw=0, want=77832, limit=40427
[  578.688493][  T305] Bluetooth: hci0: command 0x1003 tx timeout
[  578.705270][   T47] Bluetooth: hci0: sending frame failed (-49)
[  578.767803][T17705] loop3: detected capacity change from 0 to 40427
[  578.823725][T17705] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  578.859708][T17705] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  578.887733][T17705] F2FS-fs (loop3): invalid crc value
[  578.909432][T17705] F2FS-fs (loop3): Found nat_bits in checkpoint
[  579.044861][T17705] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  579.062629][T17705] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  580.034487][T17933] fuse: Unknown parameter 'fd00000000000000000003'
[  580.042245][T17933] loop1: detected capacity change from 0 to 16
[  580.089002][T17933] erofs: (device loop1): mounted with root inode @ nid 36.
[  580.109243][T17933] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  580.123942][T17933] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  580.409751][T17942] loop4: detected capacity change from 0 to 40427
[  580.470021][T17942] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  580.488966][T17942] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  580.518169][T17942] F2FS-fs (loop4): invalid crc value
[  580.565997][T17942] F2FS-fs (loop4): Found nat_bits in checkpoint
[  580.613789][T18044] loop5: detected capacity change from 0 to 40427
[  580.645250][T17942] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  580.652661][T17942] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  580.674673][T18044] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  580.690490][T18044] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  580.726793][T18044] F2FS-fs (loop5): invalid crc value
[  580.768561][ T1199] Bluetooth: hci0: command 0x1001 tx timeout
[  580.775554][T18044] F2FS-fs (loop5): Found nat_bits in checkpoint
[  580.783119][   T47] Bluetooth: hci0: sending frame failed (-49)
[  580.864923][T18044] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  580.878385][T18044] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  581.068099][T18062] loop3: detected capacity change from 0 to 1024
[  581.086069][T18060] handle_bad_sector: 1169 callbacks suppressed
[  581.086093][T18060] attempt to access beyond end of device
[  581.086093][T18060] loop5: rw=2049, want=81280, limit=40427
[  581.114042][T18058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2515'.
[  581.175838][T18062] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  581.196908][T18062] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  581.218034][T18062] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  581.249510][T18044] attempt to access beyond end of device
[  581.249510][T18044] loop5: rw=524288, want=78080, limit=40427
[  581.278854][T18044] attempt to access beyond end of device
[  581.278854][T18044] loop5: rw=0, want=77832, limit=40427
[  581.361780][T18043] attempt to access beyond end of device
[  581.361780][T18043] loop5: rw=0, want=77832, limit=40427
[  581.392675][T18043] attempt to access beyond end of device
[  581.392675][T18043] loop5: rw=0, want=77832, limit=40427
[  581.489140][T18044] attempt to access beyond end of device
[  581.489140][T18044] loop5: rw=0, want=77832, limit=40427
[  581.553533][T18044] attempt to access beyond end of device
[  581.553533][T18044] loop5: rw=0, want=77832, limit=40427
[  581.612159][  T289] attempt to access beyond end of device
[  581.612159][  T289] loop4: rw=2049, want=40968, limit=40427
[  581.641441][T18060] attempt to access beyond end of device
[  581.641441][T18060] loop5: rw=0, want=77832, limit=40427
[  581.707951][T18060] attempt to access beyond end of device
[  581.707951][T18060] loop5: rw=0, want=77832, limit=40427
[  582.169940][T18175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2520'.
[  582.474753][T18168] loop1: detected capacity change from 0 to 40427
[  582.502294][T18168] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  582.521631][T18168] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  582.537189][T18185] loop5: detected capacity change from 0 to 1024
[  582.545041][T18168] F2FS-fs (loop1): invalid crc value
[  582.553570][T18168] F2FS-fs (loop1): Found nat_bits in checkpoint
[  582.599270][T18168] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  582.606476][T18168] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  582.642395][T18185] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  582.660219][T18185] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  582.668393][T18185] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  582.848349][ T1199] Bluetooth: hci0: command 0x1009 tx timeout
[  583.300164][T18254] loop3: detected capacity change from 0 to 40427
[  583.348765][T18254] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  583.356609][T18254] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  583.369073][T18254] F2FS-fs (loop3): invalid crc value
[  583.398395][T18301] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  583.411100][T18254] F2FS-fs (loop3): Found nat_bits in checkpoint
[  583.433522][T18301] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  583.507617][T18299] loop5: detected capacity change from 0 to 40427
[  583.514471][T18254] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  583.521734][T18254] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  583.539949][T18299] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  583.547743][T18299] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  583.577207][T18299] F2FS-fs (loop5): invalid crc value
[  583.603929][T18299] F2FS-fs (loop5): Found nat_bits in checkpoint
[  583.702803][T18299] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  583.710073][T18299] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  583.789526][T18311] fuse: Unknown parameter 'gr00000000000000000000'
[  584.064283][T18323] loop1: detected capacity change from 0 to 128
[  584.126879][T18323] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  584.210515][T18325] loop3: detected capacity change from 0 to 1024
[  584.298065][T18325] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  584.309171][T18325] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  584.316853][T18325] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  584.987703][T18437] fuse: Unknown parameter 'gr00000000000000000000'
[  584.995449][T18437] loop5: detected capacity change from 0 to 16
[  585.038332][ T2747] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  585.059732][T18437] erofs: (device loop5): mounted with root inode @ nid 36.
[  585.189134][T18443] loop3: detected capacity change from 0 to 128
[  585.213936][T18441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2533'.
[  585.288315][ T2747] usb 5-1: Using ep0 maxpacket: 32
[  585.408401][ T2747] usb 5-1: unable to get BOS descriptor or descriptor too short
[  585.468321][ T2747] usb 5-1: unable to read config index 0 descriptor/start: -71
[  585.476164][ T2747] usb 5-1: can't read configurations, error -71
[  585.507104][T18549] loop1: detected capacity change from 0 to 40427
[  585.561199][T18549] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  585.569380][T18549] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  585.581693][T18549] F2FS-fs (loop1): invalid crc value
[  585.588481][T18549] F2FS-fs (loop1): Found nat_bits in checkpoint
[  585.619772][T18549] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  585.626879][T18549] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  585.910307][T18563] loop3: detected capacity change from 0 to 128
[  585.962880][T18567] loop5: detected capacity change from 0 to 1024
[  586.028677][T18567] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  586.057343][T18567] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  586.068477][T18567] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  586.316755][T18560] loop4: detected capacity change from 0 to 40427
[  586.361178][T18560] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  586.380336][   T45] handle_bad_sector: 4216 callbacks suppressed
[  586.380360][   T45] attempt to access beyond end of device
[  586.380360][   T45] loop1: rw=1, want=81920, limit=40427
[  586.399999][T18560] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  586.417966][T18560] F2FS-fs (loop4): invalid crc value
[  586.432266][   T45] attempt to access beyond end of device
[  586.432266][   T45] loop1: rw=1, want=51912, limit=40427
[  586.444777][T18560] F2FS-fs (loop4): Found nat_bits in checkpoint
[  586.463570][   T45] attempt to access beyond end of device
[  586.463570][   T45] loop1: rw=1, want=53248, limit=40427
[  586.499542][   T45] attempt to access beyond end of device
[  586.499542][   T45] loop1: rw=1, want=60664, limit=40427
[  586.516743][T18560] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  586.524277][T18560] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  586.541586][   T45] attempt to access beyond end of device
[  586.541586][   T45] loop1: rw=1, want=68360, limit=40427
[  586.660711][T18680] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  586.681258][T18680] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  586.689169][T18680] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  586.715770][T18681] attempt to access beyond end of device
[  586.715770][T18681] loop4: rw=2049, want=81208, limit=40427
[  586.730554][T18681] attempt to access beyond end of device
[  586.730554][T18681] loop4: rw=2049, want=81920, limit=40427
[  586.745352][T18681] attempt to access beyond end of device
[  586.745352][T18681] loop4: rw=2049, want=50144, limit=40427
[  586.828464][T18560] attempt to access beyond end of device
[  586.828464][T18560] loop4: rw=524288, want=78080, limit=40427
[  586.840223][T18560] attempt to access beyond end of device
[  586.840223][T18560] loop4: rw=0, want=77832, limit=40427
[  587.159192][   T30] audit: type=1400 audit(1790185402.197:252): avc:  denied  { write } for  pid=18922 comm="syz.5.2547" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  587.254412][T19000] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none.
[  587.259153][   T30] audit: type=1400 audit(1790185402.217:253): avc:  denied  { getopt } for  pid=18922 comm="syz.5.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  587.292831][T19000] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  587.519657][T19012] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  587.538308][ T1199] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  587.552700][T19012] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  587.568037][T19012] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  587.581215][T19021] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  587.610586][T19021] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  587.629814][T19021] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  587.998937][T19025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2552'.
[  588.038304][ T1199] usb 6-1: Using ep0 maxpacket: 32
[  588.117420][T19029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2553'.
[  588.218809][ T1199] usb 6-1: unable to get BOS descriptor or descriptor too short
[  588.468365][ T1199] usb 6-1: unable to read config index 0 descriptor/start: -71
[  588.476093][ T1199] usb 6-1: can't read configurations, error -71
[  588.512012][T19031] set_capacity_and_notify: 4 callbacks suppressed
[  588.512033][T19031] loop1: detected capacity change from 0 to 1024
[  588.609006][   T30] audit: type=1400 audit(1790185403.647:254): avc:  denied  { write } for  pid=19036 comm="syz.4.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  588.646564][T19031] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  588.737153][T19042] loop3: detected capacity change from 0 to 512
[  588.782794][   T45] Bluetooth: hci0: Frame reassembly failed (-84)
[  588.793701][T19031] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  588.801436][T19031] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  588.851057][   T30] audit: type=1400 audit(1790185403.887:255): avc:  denied  { write } for  pid=19043 comm="syz.2.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  589.001333][T19042] EXT4-fs (loop3): 1 orphan inode deleted
[  589.007311][T19042] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  589.019466][T19042] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  589.926377][   T30] audit: type=1400 audit(1790185403.907:256): avc:  denied  { nlmsg_write } for  pid=19043 comm="syz.2.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  590.339287][T19063] loop2: detected capacity change from 0 to 40427
[  590.351225][T19063] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  590.359695][T19063] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  590.406328][T19063] F2FS-fs (loop2): invalid crc value
[  590.431600][T19173] loop5: detected capacity change from 0 to 512
[  590.450056][T19063] F2FS-fs (loop2): Found nat_bits in checkpoint
[  590.475770][T19175] loop4: detected capacity change from 0 to 512
[  590.538833][T19063] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  590.548227][T19063] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  590.552873][T19173] EXT4-fs (loop5): Ignoring removed nobh option
[  590.568824][T19173] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  590.592900][T19175] EXT4-fs (loop4): 1 orphan inode deleted
[  590.625451][T19173] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  590.637798][T19175] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  590.665678][T19173] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  590.715686][T19173] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  590.726504][T19175] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.737913][T19173] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[  590.763867][T19173] EXT4-fs (loop5): failed to initialize system zone (-117)
[  590.771572][  T305] Bluetooth: hci0: command 0x1003 tx timeout
[  590.777846][   T47] Bluetooth: hci0: sending frame failed (-49)
[  590.807347][T19173] EXT4-fs (loop5): mount failed
[  590.929648][T19173] netlink: 'syz.5.2568': attribute type 34 has an invalid length.
[  591.045473][T19184] loop1: detected capacity change from 0 to 1024
[  591.079558][T19184] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  591.121085][T19184] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  591.188339][T19184] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  591.706739][T19289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2569'.
[  592.123702][T19292] loop5: detected capacity change from 0 to 16
[  592.148688][T19292] erofs: (device loop5): mounted with root inode @ nid 36.
[  592.152318][T19297] loop2: detected capacity change from 0 to 128
[  592.175217][T19292] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  592.198016][T19292] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117]
[  592.348294][ T1152] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  592.588319][ T1152] usb 2-1: Using ep0 maxpacket: 32
[  592.708321][ T1152] usb 2-1: unable to get BOS descriptor or descriptor too short
[  592.769369][ T1152] usb 2-1: unable to read config index 0 descriptor/start: -71
[  592.777016][ T1152] usb 2-1: can't read configurations, error -71
[  592.836793][T19316] loop4: detected capacity change from 0 to 1024
[  592.856411][  T305] Bluetooth: hci0: command 0x1001 tx timeout
[  592.865530][   T47] Bluetooth: hci0: sending frame failed (-49)
[  592.885906][T19316] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  592.897235][T19316] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  592.907241][T19316] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  593.339053][T19321] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  593.377815][T19321] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  593.480472][T19433] loop5: detected capacity change from 0 to 1024
[  593.578500][T19433] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  593.599592][T19433] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  593.607499][T19433] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  593.961138][T19542] tipc: Started in network mode
[  593.966441][T19542] tipc: Node identity _, cluster identity 4711
[  593.989885][T19542] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  594.127546][T19544] loop1: detected capacity change from 0 to 4096
[  594.148854][T19544] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  594.173933][T19544] EXT4-fs (loop1): Test dummy encryption mode enabled
[  594.187477][T19544] EXT4-fs (loop1): Mount option "nodelalloc" incompatible with ext3
[  594.239017][T19440] loop4: detected capacity change from 0 to 40427
[  594.250681][T19440] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  594.259517][T19440] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  594.300160][T19440] F2FS-fs (loop4): invalid crc value
[  594.349567][T19440] F2FS-fs (loop4): Found nat_bits in checkpoint
[  594.362987][T19546] loop5: detected capacity change from 0 to 40427
[  594.389499][T19546] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  594.417688][T19546] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  594.437168][T19546] F2FS-fs (loop5): invalid crc value
[  594.446916][T19551] loop2: detected capacity change from 0 to 128
[  594.469250][T19546] F2FS-fs (loop5): Found nat_bits in checkpoint
[  594.496432][T19440] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  594.506037][T19440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  594.587293][T19546] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  594.597108][T19546] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  594.836677][T19546] handle_bad_sector: 517 callbacks suppressed
[  594.836701][T19546] attempt to access beyond end of device
[  594.836701][T19546] loop5: rw=2049, want=79872, limit=40427
[  594.860740][T19546] attempt to access beyond end of device
[  594.860740][T19546] loop5: rw=2049, want=81920, limit=40427
[  594.899707][T19546] attempt to access beyond end of device
[  594.899707][T19546] loop5: rw=2049, want=53152, limit=40427
[  594.928360][  T305] Bluetooth: hci0: command 0x1009 tx timeout
[  594.935283][T19546] attempt to access beyond end of device
[  594.935283][T19546] loop5: rw=2049, want=53248, limit=40427
[  595.018022][T19546] attempt to access beyond end of device
[  595.018022][T19546] loop5: rw=2049, want=62144, limit=40427
[  595.083396][T19546] attempt to access beyond end of device
[  595.083396][T19546] loop5: rw=2049, want=66440, limit=40427
[  595.231442][ T3673] attempt to access beyond end of device
[  595.231442][ T3673] loop4: rw=1, want=79888, limit=40427
[  595.259504][ T3673] attempt to access beyond end of device
[  595.259504][ T3673] loop4: rw=1, want=81920, limit=40427
[  595.278542][ T3673] attempt to access beyond end of device
[  595.278542][ T3673] loop4: rw=1, want=52160, limit=40427
[  595.294862][ T3673] attempt to access beyond end of device
[  595.294862][ T3673] loop4: rw=1, want=53248, limit=40427
[  595.407598][   T30] audit: type=1400 audit(1790185410.437:257): avc:  denied  { create } for  pid=19665 comm="syz.5.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  595.433208][   T30] audit: type=1400 audit(1790185410.467:258): avc:  denied  { bind } for  pid=19665 comm="syz.5.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  595.455089][T19663] loop2: detected capacity change from 0 to 16
[  595.456428][   T30] audit: type=1326 audit(1790185410.467:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19665 comm="syz.5.2589" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99e9c19159 code=0x0
[  595.490196][T19663] erofs: (device loop2): mounted with root inode @ nid 36.
[  595.527155][T19663] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  595.549890][T19663] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  595.577863][   T30] audit: type=1400 audit(1790185410.607:260): avc:  denied  { search } for  pid=19672 comm="syz.4.2590" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  595.612160][   T30] audit: type=1400 audit(1790185410.607:261): avc:  denied  { write } for  pid=19672 comm="syz.4.2590" name="set_event" dev="tracefs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  595.677364][T19746] loop4: detected capacity change from 0 to 1024
[  595.708306][ T1199] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  595.750122][T19746] EXT4-fs (loop4): Test dummy encryption mode enabled
[  595.812362][T19777] loop5: detected capacity change from 0 to 1024
[  595.865722][T19777] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  595.882253][T19777] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  595.890436][T19777] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  596.018336][ T1199] usb 2-1: Using ep0 maxpacket: 32
[  596.208326][ T1199] usb 2-1: unable to get BOS descriptor or descriptor too short
[  596.278385][ T1199] usb 2-1: unable to read config index 0 descriptor/start: -71
[  596.319271][   T30] audit: type=1400 audit(1790185411.357:262): avc:  denied  { bind } for  pid=19880 comm="syz.2.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  596.319410][ T1199] usb 2-1: can't read configurations, error -71
[  596.403577][T19986] loop5: detected capacity change from 0 to 1024
[  596.448975][T19986] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  596.467991][T19986] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  596.475936][T19986] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  596.498368][T19673] loop4: detected capacity change from 0 to 131072
[  596.528945][   T30] audit: type=1400 audit(1790185411.557:263): avc:  denied  { create } for  pid=19880 comm="syz.2.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  596.550371][   T30] audit: type=1400 audit(1790185411.557:264): avc:  denied  { bind } for  pid=19880 comm="syz.2.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  596.571622][T19673] F2FS-fs (loop4): invalid crc value
[  596.577025][   T30] audit: type=1400 audit(1790185411.567:265): avc:  denied  { create } for  pid=19880 comm="syz.2.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  596.610634][T19673] F2FS-fs (loop4): Found nat_bits in checkpoint
[  596.647580][T19673] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  596.980420][T20102] netlink: 'syz.1.2598': attribute type 5 has an invalid length.
[  597.001403][T20102] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2598'.
[  597.010773][T20102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2598'.
[  597.022732][   T30] audit: type=1400 audit(1790185412.027:266): avc:  denied  { ioctl } for  pid=20096 comm="syz.1.2598" path="socket:[79220]" dev="sockfs" ino=79220 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  597.250161][T20104] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2600'.
[  597.277452][T20104] loop5: detected capacity change from 0 to 16
[  597.299961][T20104] erofs: (device loop5): mounted with root inode @ nid 36.
[  597.307895][T20104] erofs: (device loop5): init_inode_xattrs: xattr_isize 12 of nid 36 is not supported yet
[  597.312841][T20106] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22
[  597.327898][T20104] SELinux: (dev loop5, type erofs) has no security xattr handler
[  597.336729][T20106] SELinux:  duplicate or incompatible mount options
[  597.786772][T20330] FAULT_INJECTION: forcing a failure.
[  597.786772][T20330] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  597.800110][T20330] CPU: 1 PID: 20330 Comm: syz.4.2601 Not tainted syzkaller #0
[  597.807829][T20330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  597.817946][T20330] Call Trace:
[  597.821343][T20330]  <TASK>
[  597.824298][T20330]  __dump_stack+0x21/0x30
[  597.828849][T20330]  dump_stack_lvl+0x110/0x170
[  597.833573][T20330]  ? show_regs_print_info+0x20/0x20
[  597.838860][T20330]  dump_stack+0x15/0x20
[  597.843052][T20330]  should_fail+0x3ab/0x500
[  597.847621][T20330]  should_fail_usercopy+0x1a/0x20
[  597.852674][T20330]  _copy_from_user+0x20/0xd0
[  597.857613][T20330]  sock_setsockopt+0x2c1/0x2470
[  597.862632][T20330]  ? __sock_set_mark+0x160/0x160
[  597.867612][T20330]  ? selinux_socket_setsockopt+0x282/0x360
[  597.873551][T20330]  ? selinux_socket_getsockopt+0x340/0x340
[  597.879392][T20330]  ? plist_del+0x3ec/0x400
[  597.883950][T20330]  ? __fget_files+0x2e1/0x340
[  597.888718][T20330]  ? security_socket_setsockopt+0x82/0xa0
[  597.894516][T20330]  __sys_setsockopt+0x261/0x470
[  597.899400][T20330]  ? __ia32_sys_recv+0xb0/0xb0
[  597.904368][T20330]  ? ksys_write+0x1fa/0x260
[  597.908998][T20330]  ? __kasan_check_write+0x14/0x20
[  597.914242][T20330]  __x64_sys_setsockopt+0xbf/0xd0
[  597.919385][T20330]  x64_sys_call+0x982/0x9a0
[  597.924008][T20330]  do_syscall_64+0x4c/0xa0
[  597.928481][T20330]  ? clear_bhb_loop+0x50/0xa0
[  597.933298][T20330]  ? clear_bhb_loop+0x50/0xa0
[  597.938026][T20330]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  597.943970][T20330] RIP: 0033:0x7fc335491159
[  597.948470][T20330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.968109][T20330] RSP: 002b:00007fc333ea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  597.976663][T20330] RAX: ffffffffffffffda RBX: 00007fc335719180 RCX: 00007fc335491159
[  597.984816][T20330] RDX: 000000000000001d RSI: 0000000000000001 RDI: 0000000000000005
[  597.992834][T20330] RBP: 00007fc333ea8090 R08: 0000000000000004 R09: 0000000000000000
[  598.000839][T20330] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  598.008840][T20330] R13: 00007fc335719218 R14: 00007fc335719180 R15: 00007ffe7e3a08e8
[  598.016872][T20330]  </TASK>
[  598.144404][T20332] EXT4-fs (loop2): 1 orphan inode deleted
[  598.150536][T20332] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  598.162872][T20332] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  598.182373][T20335] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  598.212816][T20335] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  598.220538][  T325] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  598.228845][T20335] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  598.642665][T20339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2609'.
[  598.698384][  T325] usb 6-1: Using ep0 maxpacket: 32
[  598.818309][  T325] usb 6-1: unable to get BOS descriptor or descriptor too short
[  598.826643][T20341] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  598.838997][T20341] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  598.848143][T20341] F2FS-fs (loop4): invalid crc value
[  598.859118][T20341] F2FS-fs (loop4): Found nat_bits in checkpoint
[  598.878319][  T325] usb 6-1: unable to read config index 0 descriptor/start: -71
[  598.886042][  T325] usb 6-1: can't read configurations, error -71
[  598.914578][T20341] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  598.921768][T20341] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  599.240320][T20351] set_capacity_and_notify: 3 callbacks suppressed
[  599.240334][T20351] loop1: detected capacity change from 0 to 1024
[  599.278666][T20351] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  599.528846][T20351] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback.
[  599.670886][T20355] loop2: detected capacity change from 0 to 40427
[  599.771833][T20573] netlink: 'syz.5.2619': attribute type 13 has an invalid length.
[  599.789532][T20355] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  599.804228][T20355] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  599.841444][T20355] F2FS-fs (loop2): invalid crc value
[  599.868801][T20355] F2FS-fs (loop2): Found nat_bits in checkpoint
[  599.928852][T20572] mmap: syz.3.2616 (20572) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  599.997181][T20355] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  600.009406][T20355] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  600.053879][T20680] loop5: detected capacity change from 0 to 1024
[  600.123594][T20680] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  600.140012][T20680] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  600.148566][T20680] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  600.343537][T20355] handle_bad_sector: 357 callbacks suppressed
[  600.343561][T20355] attempt to access beyond end of device
[  600.343561][T20355] loop2: rw=2049, want=79872, limit=40427
[  600.531171][T20355] attempt to access beyond end of device
[  600.531171][T20355] loop2: rw=2049, want=81920, limit=40427
[  600.634685][T20355] attempt to access beyond end of device
[  600.634685][T20355] loop2: rw=2049, want=51208, limit=40427
[  600.754114][T20896] loop1: detected capacity change from 0 to 512
[  600.806729][T20355] attempt to access beyond end of device
[  600.806729][T20355] loop2: rw=2049, want=53248, limit=40427
[  600.819066][ T7749] Bluetooth: hci0: Frame reassembly failed (-84)
[  600.825793][ T7749] Bluetooth: hci0: Frame reassembly failed (-84)
[  600.957276][ T7749] Bluetooth: hci0: Frame reassembly failed (-84)
[  601.101796][T20896] EXT4-fs (loop1): 1 orphan inode deleted
[  601.107727][T20896] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  601.119754][T20896] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  601.876991][T20355] attempt to access beyond end of device
[  601.876991][T20355] loop2: rw=2049, want=58376, limit=40427
[  601.926600][T20711] attempt to access beyond end of device
[  601.926600][T20711] loop2: rw=524288, want=78080, limit=40427
[  601.938339][T20711] attempt to access beyond end of device
[  601.938339][T20711] loop2: rw=0, want=77832, limit=40427
[  601.949508][T20711] attempt to access beyond end of device
[  601.949508][T20711] loop2: rw=0, want=77832, limit=40427
[  601.960650][T20711] attempt to access beyond end of device
[  601.960650][T20711] loop2: rw=0, want=77832, limit=40427
[  601.971905][T20352] attempt to access beyond end of device
[  601.971905][T20352] loop2: rw=0, want=77832, limit=40427
[  601.990937][T20903] loop3: detected capacity change from 0 to 512
[  602.058414][  T305] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  602.084814][T20890] fuse: Bad value for 'fd'
[  602.109381][T20890] loop4: detected capacity change from 0 to 16
[  602.117836][T20903] EXT4-fs (loop3): 1 orphan inode deleted
[  602.156514][T20903] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  602.189040][T20890] erofs: (device loop4): mounted with root inode @ nid 36.
[  602.202518][T20903] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  602.232393][T20890] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  602.267237][T20890] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117]
[  602.338286][  T305] usb 6-1: Using ep0 maxpacket: 32
[  602.458369][  T305] usb 6-1: unable to get BOS descriptor or descriptor too short
[  602.528316][  T305] usb 6-1: unable to read config index 0 descriptor/start: -71
[  602.546223][  T305] usb 6-1: can't read configurations, error -71
[  602.675993][T20913] loop2: detected capacity change from 0 to 16
[  602.756271][T20915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2627'.
[  602.806428][   T39] Bluetooth: hci0: command 0x1003 tx timeout
[  602.820655][   T47] Bluetooth: hci0: sending frame failed (-49)
[  602.883325][T20913] erofs: (device loop2): mounted with root inode @ nid 36.
[  603.011202][T20913] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  603.098700][T20920] loop5: detected capacity change from 0 to 256
[  603.135861][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  603.135877][   T30] audit: type=1400 audit(1790185418.167:275): avc:  denied  { read } for  pid=20921 comm="syz.2.2631" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  603.137938][T20920] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  603.144173][   T30] audit: type=1400 audit(1790185418.177:276): avc:  denied  { open } for  pid=20921 comm="syz.2.2631" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  603.208744][   T30] audit: type=1400 audit(1790185418.237:277): avc:  denied  { ioctl } for  pid=20921 comm="syz.2.2631" path="/dev/usbmon0" dev="devtmpfs" ino=155 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  603.274473][T20925] xt_SECMARK: invalid mode: 2
[  603.347262][T20930] loop2: detected capacity change from 0 to 1024
[  603.363471][T20930] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  603.380089][T20930] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  603.387939][T20930] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  603.782745][T20935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2634'.
[  603.816731][T20939] loop3: detected capacity change from 0 to 512
[  604.266427][T20941] loop4: detected capacity change from 0 to 512
[  604.450074][T20939] EXT4-fs (loop3): Ignoring removed oldalloc option
[  604.642031][T20941] EXT4-fs (loop4): 1 orphan inode deleted
[  604.647913][T20941] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  604.659856][T20941] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  604.719938][   T30] audit: type=1400 audit(1790185419.747:278): avc:  denied  { bind } for  pid=20933 comm="syz.4.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  604.786873][T20939] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback.
[  604.941647][T20939] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  604.965682][   T30] audit: type=1400 audit(1790185419.997:279): avc:  denied  { ioctl } for  pid=20938 comm="syz.3.2637" path="/499/file1/file1" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  604.985409][  T305] Bluetooth: hci0: command 0x1001 tx timeout
[  604.997433][   T47] Bluetooth: hci0: sending frame failed (-49)
[  605.129910][   T30] audit: type=1400 audit(1790185420.167:280): avc:  denied  { write } for  pid=20950 comm="syz.3.2640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  605.167210][T20953] loop5: detected capacity change from 0 to 128
[  605.203973][T20948] fuse: Bad value for 'fd'
[  605.211420][T20948] loop2: detected capacity change from 0 to 16
[  605.268011][   T30] audit: type=1400 audit(1790185420.297:281): avc:  denied  { setopt } for  pid=20999 comm="syz.4.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  605.292629][T20948] erofs: (device loop2): mounted with root inode @ nid 36.
[  605.303018][T21060] loop3: detected capacity change from 0 to 256
[  605.313708][   T30] audit: type=1400 audit(1790185420.327:282): avc:  denied  { ioctl } for  pid=20999 comm="syz.4.2641" path="socket:[79737]" dev="sockfs" ino=79737 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  605.339383][T20948] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  605.341346][   T30] audit: type=1400 audit(1790185420.327:283): avc:  denied  { listen } for  pid=20999 comm="syz.4.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  605.388489][T21060] exFAT-fs (loop3): failed to read sector(0x100)
[  605.388489][T21060] 
[  605.396803][T20948] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  605.409086][T21060] exFAT-fs (loop3): failed to load upcase table
[  605.415707][T21060] exFAT-fs (loop3): failed to recognize exfat type
[  605.465353][T21064] xt_hashlimit: size too large, truncated to 1048576
[  605.476482][   T30] audit: type=1400 audit(1790185420.507:284): avc:  denied  { audit_write } for  pid=21065 comm="syz.3.2644" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  605.790414][T21073] loop3: detected capacity change from 0 to 512
[  605.894463][T21073] EXT4-fs (loop3): 1 orphan inode deleted
[  605.903730][T21073] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  605.938460][T21073] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  606.114528][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'.
[  606.139580][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'.
[  606.156950][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'.
[  606.166512][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'.
[  606.175748][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'.
[  606.184971][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'.
[  606.284841][T21088] ==================================================================
[  606.294183][T21088] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0
[  606.304558][T21088] Read of size 4 at addr ffff88812906d000 by task syz.5.2650/21088
[  606.313534][T21088] 
[  606.316072][T21088] CPU: 0 PID: 21088 Comm: syz.5.2650 Not tainted syzkaller #0
[  606.323964][T21088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  606.334603][T21088] Call Trace:
[  606.338160][T21088]  <TASK>
[  606.341171][T21088]  __dump_stack+0x21/0x30
[  606.345570][T21088]  dump_stack_lvl+0x110/0x170
[  606.350363][T21088]  ? show_regs_print_info+0x20/0x20
[  606.355774][T21088]  ? load_image+0x3f0/0x3f0
[  606.360309][T21088]  ? __local_bh_enable_ip+0x58/0x80
[  606.365658][T21088]  print_address_description+0x7f/0x2c0
[  606.371900][T21088]  ? pppol2tp_sock_to_session+0x1a0/0x1b0
[  606.377793][T21088]  kasan_report+0x10f/0x150
[  606.382338][T21088]  ? pppol2tp_sock_to_session+0x1a0/0x1b0
[  606.388184][T21088]  __asan_report_load4_noabort+0x14/0x20
[  606.394009][T21088]  pppol2tp_sock_to_session+0x1a0/0x1b0
[  606.399599][T21088]  pppol2tp_release+0x150/0x2b0
[  606.405985][T21088]  sock_close+0xb8/0x200
[  606.410536][T21088]  ? sock_mmap+0xa0/0xa0
[  606.414812][T21088]  __fput+0x22b/0x900
[  606.418833][T21088]  ____fput+0x15/0x20
[  606.422843][T21088]  task_work_run+0x127/0x190
[  606.427553][T21088]  do_exit+0xb70/0x29a0
[  606.431750][T21088]  ? __se_sys_clock_nanosleep+0x30b/0x3a0
[  606.437602][T21088]  ? put_task_struct+0x90/0x90
[  606.442450][T21088]  ? __kasan_check_write+0x14/0x20
[  606.447631][T21088]  __x64_sys_exit+0x40/0x40
[  606.452213][T21088]  x64_sys_call+0x44/0x9a0
[  606.456771][T21088]  do_syscall_64+0x4c/0xa0
[  606.461310][T21088]  ? clear_bhb_loop+0x50/0xa0
[  606.466021][T21088]  ? clear_bhb_loop+0x50/0xa0
[  606.470728][T21088]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  606.476648][T21088] RIP: 0033:0x7f99e9c19159
[  606.481093][T21088] Code: Unable to access opcode bytes at RIP 0x7f99e9c1912f.
[  606.488480][T21088] RSP: 002b:00007f99e8671ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[  606.497159][T21088] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f99e9c19159
[  606.505170][T21088] RDX: 00007f99e86729c8 RSI: 0000000000000000 RDI: 0000000000000000
[  606.513180][T21088] RBP: 00007f99e9cb006b R08: 0000000000000000 R09: 0000000000000058
[  606.521183][T21088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  606.529184][T21088] R13: 00007f99e9ea1038 R14: 00007f99e9ea0fa0 R15: 00007ffcabfb3868
[  606.537425][T21088]  </TASK>
[  606.540502][T21088] 
[  606.542855][T21088] Allocated by task 21085:
[  606.547380][T21088]  __kasan_kmalloc+0xd4/0x100
[  606.552097][T21088]  __kmalloc+0x13d/0x2c0
[  606.556403][T21088]  l2tp_session_create+0x39/0xb60
[  606.561470][T21088]  pppol2tp_connect+0xbf5/0x1640
[  606.566452][T21088]  __sys_connect+0x3cb/0x450
[  606.571235][T21088]  __x64_sys_connect+0x7a/0x90
[  606.576140][T21088]  x64_sys_call+0x7c/0x9a0
[  606.580829][T21088]  do_syscall_64+0x4c/0xa0
[  606.585450][T21088]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  606.591390][T21088] 
[  606.593738][T21088] Freed by task 7749:
[  606.597851][T21088]  kasan_set_track+0x4a/0x70
[  606.602476][T21088]  kasan_set_free_info+0x23/0x40
[  606.607470][T21088]  ____kasan_slab_free+0x125/0x160
[  606.612642][T21088]  __kasan_slab_free+0x11/0x20
[  606.617541][T21088]  slab_free_freelist_hook+0xc2/0x190
[  606.622945][T21088]  kfree+0xc4/0x270
[  606.626805][T21088]  l2tp_session_put+0xaf/0x1a0
[  606.631604][T21088]  l2tp_session_delete+0x3a9/0x4a0
[  606.636833][T21088]  l2tp_tunnel_del_work+0x180/0x3d0
[  606.642062][T21088]  process_one_work+0x6c8/0xbb0
[  606.647184][T21088]  worker_thread+0xaa0/0x1250
[  606.651909][T21088]  kthread+0x3f5/0x4f0
[  606.656021][T21088]  ret_from_fork+0x1f/0x30
[  606.660473][T21088] 
[  606.662815][T21088] The buggy address belongs to the object at ffff88812906d000
[  606.662815][T21088]  which belongs to the cache kmalloc-512 of size 512
[  606.676933][T21088] The buggy address is located 0 bytes inside of
[  606.676933][T21088]  512-byte region [ffff88812906d000, ffff88812906d200)
[  606.690094][T21088] The buggy address belongs to the page:
[  606.695762][T21088] page:ffffea0004a41b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12906c
[  606.706033][T21088] head:ffffea0004a41b00 order:2 compound_mapcount:0 compound_pincount:0
[  606.714383][T21088] flags: 0x4000000000010200(slab|head|zone=1)
[  606.720510][T21088] raw: 4000000000010200 ffffea0004a46900 0000000b00000002 ffff888100042f00
[  606.729124][T21088] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  606.737725][T21088] page dumped because: kasan: bad access detected
[  606.744159][T21088] page_owner tracks the page as allocated
[  606.749893][T21088] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 287, ts 25513345884, free_ts 0
[  606.765985][T21088]  post_alloc_hook+0x192/0x1b0
[  606.770935][T21088]  prep_new_page+0x1c/0x110
[  606.775488][T21088]  get_page_from_freelist+0x2c3a/0x2cd0
[  606.781092][T21088]  __alloc_pages+0x1a2/0x460
[  606.785716][T21088]  new_slab+0xa0/0x4d0
[  606.789818][T21088]  ___slab_alloc+0x3ac/0x840
[  606.794442][T21088]  __slab_alloc+0x49/0x90
[  606.798819][T21088]  __kmalloc+0x16a/0x2c0
[  606.803096][T21088]  fib6_info_alloc+0x34/0xe0
[  606.807807][T21088]  ip6_route_info_create+0x51b/0x14d0
[  606.813260][T21088]  ip6_route_add+0x27/0x130
[  606.817800][T21088]  addrconf_add_linklocal+0x3cd/0x660
[  606.823202][T21088]  addrconf_addr_gen+0x53f/0x6a0
[  606.828176][T21088]  addrconf_init_auto_addrs+0x867/0xbd0
[  606.833848][T21088]  addrconf_notify+0x95d/0xe00
[  606.838732][T21088]  raw_notifier_call_chain+0x90/0x100
[  606.844215][T21088] page_owner free stack trace missing
[  606.849694][T21088] 
[  606.852056][T21088] Memory state around the buggy address:
[  606.857704][T21088]  ffff88812906cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  606.865798][T21088]  ffff88812906cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  606.873884][T21088] >ffff88812906d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  606.881961][T21088]                    ^
[  606.886049][T21088]  ffff88812906d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  606.894140][T21088]  ffff88812906d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  606.902237][T21088] ==================================================================
[  606.910316][T21088] Disabling lock debugging due to kernel taint
[  606.925697][T21088] ------------[ cut here ]------------
[  606.931296][T21088] WARNING: CPU: 1 PID: 21088 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[  606.941894][T21088] Modules linked in:
[  606.945863][T21088] CPU: 1 PID: 21088 Comm: syz.5.2650 Tainted: G    B             syzkaller #0
[  606.954933][T21088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  606.965669][T21088] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[  606.972147][T21088] Code: 5d c3 e8 0c f9 0a fd be 02 00 00 00 eb 0a e8 00 f9 0a fd be 01 00 00 00 4c 89 f7 e8 03 69 f1 fd e9 0f ff ff ff e8 e9 f8 0a fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 d8 f8 0a fd 4c 89 f7 be 03
[  606.992273][T21088] RSP: 0018:ffffc90000d0fbf0 EFLAGS: 00010293
[  606.998575][T21088] RAX: ffffffff845eceb7 RBX: ffff888110ecf000 RCX: ffff888129318000
[  607.006866][T21088] RDX: 0000000000000000 RSI: 000000000e369880 RDI: 000000000c04eb7d
[  607.015124][  T305] Bluetooth: hci0: command 0x1009 tx timeout
[  607.027995][T21088] RBP: ffffc90000d0fc10 R08: 0000000000000003 R09: 0000000000000004
[  607.036469][T21088] R10: dffffc0000000000 R11: fffffbfff0e18e4c R12: dffffc0000000000
[  607.044836][T21088] R13: dffffc0000000000 R14: 000000000e369880 R15: ffff88812906d000
[  607.053484][T21088] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  607.062703][T21088] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  607.069610][T21088] CR2: 0000001b2ee22ff8 CR3: 000000010d460000 CR4: 00000000003506a0
[  607.077812][T21088] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  607.086049][T21088] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  607.094734][T21088] Call Trace:
[  607.098673][T21088]  <TASK>
[  607.101886][T21088]  pppol2tp_release+0x150/0x2b0
[  607.107031][T21088]  sock_close+0xb8/0x200
[  607.111830][T21088]  ? sock_mmap+0xa0/0xa0
[  607.116250][T21088]  __fput+0x22b/0x900
[  607.120866][T21088]  ____fput+0x15/0x20
[  607.125143][T21088]  task_work_run+0x127/0x190
[  607.130152][T21088]  do_exit+0xb70/0x29a0
[  607.134518][T21088]  ? __se_sys_clock_nanosleep+0x30b/0x3a0
[  607.140775][T21088]  ? put_task_struct+0x90/0x90
[  607.145759][T21088]  ? __kasan_check_write+0x14/0x20
[  607.151474][T21088]  __x64_sys_exit+0x40/0x40
[  607.156190][T21088]  x64_sys_call+0x44/0x9a0
[  607.161038][T21088]  do_syscall_64+0x4c/0xa0
[  607.165689][T21088]  ? clear_bhb_loop+0x50/0xa0
[  607.170811][T21088]  ? clear_bhb_loop+0x50/0xa0
[  607.175767][T21088]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  607.182542][T21088] RIP: 0033:0x7f99e9c19159
[  607.188709][T21088] Code: Unable to access opcode bytes at RIP 0x7f99e9c1912f.
[  607.196305][T21088] RSP: 002b:00007f99e8671ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[  607.205417][T21088] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f99e9c19159
[  607.214021][T21088] RDX: 00007f99e86729c8 RSI: 0000000000000000 RDI: 0000000000000000
[  607.222477][T21088] RBP: 00007f99e9cb006b R08: 0000000000000000 R09: 0000000000000058
[  607.230867][T21088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  607.239262][T21088] R13: 00007f99e9ea1038 R14: 00007f99e9ea0fa0 R15: 00007ffcabfb3868
[  607.247673][T21088]  </TASK>
[  607.251198][T21088] ---[ end trace 44fd87dbe42c776d ]---
[  607.274283][T21295] loop5: detected capacity change from 0 to 128
[  607.318777][T21295] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none.
[  607.350002][T21295] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  607.368361][ T1152] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  607.758374][ T1152] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  607.768332][ T1152] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  607.778097][ T1152] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  607.789033][ T1152] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  607.798095][ T1152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.818419][T21297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  607.825998][T21297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  607.838992][ T1152] pl2303 5-1:1.0: pl2303 converter detected
[  607.845920][ T1152] usb 5-1: pl2303 converter now attached to ttyUSB0
[  608.168366][T21297] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  608.198395][T21297] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  608.218366][T21297] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  608.238355][T21297] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  608.258446][T21297] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  609.058383][T21294] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  609.138355][T21294] pl2303 ttyUSB0: error sending break = -32
[  609.144673][ T2415] usb 5-1: USB disconnect, device number 54
[  609.151945][ T2415] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  609.160513][ T2415] pl2303 5-1:1.0: device disconnected