last executing test programs:

13m44.854567631s ago: executing program 32 (id=112):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x40, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
setuid(0xee00)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0)

12m4.229410455s ago: executing program 33 (id=515):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7a)

9m4.66223238s ago: executing program 6 (id=1258):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a0101"], 0xcc}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e001f", 0x7)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xc5833c80, 0x7}]}}}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x1)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000800)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x50}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1a}}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24018080)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)="50981a1f6d047db18cc91ee86ac4cfd7d07f078e2aaaa1eb956d2de729b2ecef010d49211ee022f211a069044ace6611443a36875edd0d27ad50c8c653d1fb2dfac7091bddeb0824db8841f5774babcc0cc9ec4beccbbd91a7ca72d0b60bdb9855239b5bbff1c7215bc682d6020238b79e56d9f50e5fd3c75bdaac15f068e5d41629b13f194340e6f014862516b96eda8a589306e95ad93e9b9a80f8c087555e549fbaee0096262bc0d8a993b2", 0xad}, {&(0x7f0000000600)="7164245da20fccdee39bb8f4f2055dfa97e2710832cd4a27793e79bc409cb5c38a8ad35c9ff44014744d4fab508d57d9fa7e1c831f7e576883c122358fec103da82522517d9243dfe9f77e8f69f4501e6070573756b0538bca622f5b51783625ac3ccea6782360267389f674cbf7e7c1d310bc9fb645bc7f20518e7ba5807ce4e54b1bd58f058215932892ed0a8a831b5441f58f6a2b63a2763923c51ae9b87c58417173a18b24e341ea0f0fc33f2cca12e0abfa556e7f8aceb8ee2a6759372832cb151e17", 0xc5}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9ebd9aed10aa3403a5e35a1116b7b", 0x70}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c28728a31fb2de8702c2d6995430d6a2b2f3562f772561d470e507a5028ffe0b524222b402d983bf26f200451ec6bf1c87b9eafb1d5f461d698c1794e3c12", 0xe6}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb562848ec35bfd1a443267ca11db6125b298f33c1fc9ab4fc7e8d2900d1d916b3c", 0x56}, {&(0x7f0000000980)="65b426e7fb8932534948519e6381e5e369fc65a3128f6056c7d77c618f08eae1cd2944eee2ab50617c99c5c7f640757950d3ec8b33b136a5c8a541bcacab7a99019c662a3067ab866343906828fc89ff22fa46ada5e8f982d95f8864918a64e524c6ade8a8cc941b477597003541256b96d62452cee334ec633c5c85bf32cc6a392ba272cc19f9bd340fe510698d64490ee9abdb8a5be8344574ab87681bc20dc2a2e182248f17c60920ac", 0xab}, {&(0x7f0000000ec0)="6598c590eb73ec1ac1cce9664c5dbc3b6d9685d587ebdf52f29b7cad419f7bb403de35224456e9f506a3ba418e022d95925faf708865169a6ba6250d6275cd6a87f81062b11c2cf0440cf3fb94fa8244fb33299dea4c69eda426e3f7475b57155062b609f56046302a44bfc56e32841c66b772326d2394596778149d4b1c9c788b1d70d0485447b3b2c683f8cdf37f5d5fcf837d48d671dbad0b918fcbc5633f56e4329d259d716c5f1fc663bbd106e9e3962ab76b0619d5329b39605552c5ed6e56d92fa515eb4bbb20defc655176a41edc1a4dc32b950579b8832ad92cc97914467ed3c7b24cf13032503e7d4a7332a07764f9853429c4", 0xf8}, {&(0x7f0000000e00)="bf83903af3912b25320771861a97d9099887b5133b772fd4b99cb75c05cc6056c51d5bb95835f9b0158c4cfee49435eee968d62cc9e3f2170f885492ef045fe78a057d2f5d22250b0d1832e4e7d9caf59cb596b09bdb792e92381b57fa01c34b662c00464d755260824c4afcf590616c92c6de993cbafa1a807e0aec7041984a7f5fa2427ca65c438e1d1cf9bb58e0c1c139d6d28f524a31d8f2494c216560c4d534b4e9007f21064e", 0xa9}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1d00f7f29636d7dac7bc12420fb69d5e42df30502a17b31b431ddab03dde401f0885b6a53679a53a202cf3caf0c10cdbd6477ff6eec4bd31367da38ad81f4425da68f6f42e5b7a97838921eff094558413b041a69b0b1fff19132c1616d214f35b149534c9cda29", 0xdc}], 0xa, 0xfffffffd, 0x2000008)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]})
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9m1.582647552s ago: executing program 6 (id=1267):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
syz_clone(0x40100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180))
syz_clone3(&(0x7f0000000d40)={0x20212a900, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
ioctl$FICLONERANGE(r3, 0x4020940d, 0x0)
mlockall(0x7)
capset(0x0, &(0x7f0000000080))
setpriority(0x2, 0x0, 0xf)
syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc}, &(0x7f0000000080), &(0x7f00000014c0))
io_destroy(0x0)

9m0.520029763s ago: executing program 6 (id=1269):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffffffffffff19}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)=0x7f, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x200000b0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x7fff, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0x0, 0x1d, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8], 0x0, 0x302000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m0.140735371s ago: executing program 6 (id=1272):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, 0x0, 0x1}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x3, 0x0, 0x0, 0xa, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x4, 0x0, 0x2, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
unshare(0x22020600)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
syz_clone3(0x0, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)

8m59.514308804s ago: executing program 6 (id=1276):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x5a050900)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000240)={0x0, 0x0, 0x80000})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@nouid32}]}, 0xff, 0x47b, &(0x7f0000000540)="$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")
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000010140)=""/159, 0x9f}], 0x1}, 0xfbfffffe}], 0x1, 0x40000002, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x3, 0x2, 0x8000c61)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58)

8m54.977386913s ago: executing program 6 (id=1287):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="02120805180000002dbd7000ffdbdf25070019000000000002004e21ac14140d00000000000000000a004e2200000009fe8000000000000000000000000000bb0600000000000000010016004e21000003001700328000000a"], 0xc0}}, 0x40c0)

8m54.85726166s ago: executing program 34 (id=1287):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="02120805180000002dbd7000ffdbdf25070019000000000002004e21ac14140d00000000000000000a004e2200000009fe8000000000000000000000000000bb0600000000000000010016004e21000003001700328000000a"], 0xc0}}, 0x40c0)

7m39.659028644s ago: executing program 4 (id=1480):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}]}, 0x24}}, 0x0)

7m39.52907385s ago: executing program 4 (id=1481):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0)
ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000180)=0x5)

7m39.405465597s ago: executing program 4 (id=1482):
setpriority(0x0, 0x0, 0x2a14b58)
getdents64(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x80000000)

7m38.791410081s ago: executing program 4 (id=1483):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, 0x0, 0x1}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x3, 0x0, 0x0, 0xa, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x4, 0x0, 0x2, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
unshare(0x22020600)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="825f9039183a1311cf12bf8d240000002000"], 0x24}, 0x1, 0x0, 0x0, 0x24048040}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0)
syz_clone3(&(0x7f0000001480)={0x40000, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58)
wait4(0x0, 0x0, 0x80000000, 0x0)

7m38.293365518s ago: executing program 4 (id=1485):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00')
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000001540)='./file0\x00', 0x1000000, &(0x7f0000000380)={[{@numtail}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@utf8no}, {@fat=@errors_continue}, {@uni_xlateno}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_win95}, {@shortname_win95}]}, 0x15, 0x2ae, &(0x7f0000000900)="$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")

7m35.315638419s ago: executing program 4 (id=1495):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe)
unshare(0x2040400)
pselect6(0x40, &(0x7f0000000000)={0x8, 0x1, 0x6, 0x2, 0xf037, 0x5, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0)

7m35.315595249s ago: executing program 35 (id=1495):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe)
unshare(0x2040400)
pselect6(0x40, &(0x7f0000000000)={0x8, 0x1, 0x6, 0x2, 0xf037, 0x5, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0)

6m36.610807047s ago: executing program 1 (id=1689):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x3b, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r2, 0x0, 0x4005)

6m35.487633416s ago: executing program 1 (id=1694):
r0 = socket$inet6(0xa, 0x802, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000640)={[{@data_err_ignore}, {@noquota}, {@barrier_val}, {@nojournal_checksum}, {@bh}, {@usrquota}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0xb8a5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x200000000008}}, {@user_xattr}, {@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = inotify_init1(0x800)
inotify_add_watch(r4, 0x0, 0x50007a2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = open$dir(0x0, 0x800, 0xa0)
preadv2(r5, 0x0, 0x0, 0x4, 0x4, 0xc)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)

6m34.410764794s ago: executing program 1 (id=1695):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xfffd, 0x1}, 0x6)

6m21.859750709s ago: executing program 1 (id=1733):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$eJzs2E9rXFUYB+D33kxi2sZOqi6sm4oVWpBO/rWhqZvWhSAIFgquVAx2koZMmpJJ0WSV4lIXLgQVEbQbFyLNQuhGNCD4AXRjv4IgKrpwIYzcySQN6SSNdeKh6fPAyZxz37n5vWeGucydAB5YTxZ/soi+iBiMiHLreB4RPc1Zb8TS6vNujCxfKkYWjcaFX7PitLg+snxp7X9lrccD0TwljkfEc89n8ejbd+bWFxanx2u16lxrPTA/c2WgvrB4YmpmfLI6Wb08PHz61NjJodHRsY7tdWggXvvuq7MvL527+uXgK7PTRb99rdrGfXRS1uZYKSJe3Y2wBLpa++nacCwrJWwIAIBtFd/zH4mIp5rf4crRFbe/vJXj1rdJmwMAAAA6onGkAQAAAOxxqX9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/tBoZNEAAAAA9rTUvz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB/uT6yfGlt/J+5v5yLiP7V/ButsVopxVLzsTe6I2L/H1mUNpyXRcRgB/KXrkXE4+32nzXz+6O3udqcn0fE+cT5r3cgHx5kK8X152y7z1++fv2JNp+/0upp/9na9e/GHde/2/ldW1z/ruww4/MfX3p3y/xrEU+U2uVn6/nZFvlLO8z/5sXDH21Va3wWcSza52/MGpifuTJQX1g8MTUzPlmdrF4eHj59auzk0Ojo2MDEVK06uPq3bcYnX7zz/Xb7379Vfhbbvv7v7XD/Rw89+/Wn2+QfP7r9+9/u9S96Wt5h/u8/HPx7q1qRf3GL/d/t/V/ZYf4LN8/f3OFTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI/KI6Issr6zP87xSiTgQEY/F/rw2W59/ZmL26uWLRS2iP7rzialadTAiyqvrrFgPNee318Ob1iMRcSgi3i/va64rb8zWLqbePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOsORERfZHklIvKI+LOc55VK6q4AAACAjutP3QAAAACw69z/AwAAwN7n/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddujIyq0sIpbO7GuOQk+r1p20M2C35akbAJLpSt0AkEwpdQNAMu7xgewu9d57qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xw7vHIri4ilM/uao9DTqnUn7QzYbXnqBoBkulI3ACRTSt0AkIx7fCC7S733HioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7D19zZHllYjIm/M8r1QiHo6I/ujOJqZq1cGIOBgRP5W7HyrWQ6mbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOPqC4vT47Vadc7ExMRkfZL6ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAr1hcXp8VqtOldP3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABp5T9nEVGMY+Wn+zZXe7K/ys3HiHjz4wsfvDU+Pz83VBz/bf34/Iet48Mp+gcAAAA2W7tPX7uPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Kn6wuL0eK1WndvFSeo9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zj8BAAD//5GsoMo=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

6m21.508461954s ago: executing program 1 (id=1737):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc)

6m21.048457088s ago: executing program 1 (id=1741):
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000440)='./file0\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0xf, 0x28, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
socket(0xa, 0x2, 0x0)

6m20.961540981s ago: executing program 36 (id=1741):
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000440)='./file0\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0xf, 0x28, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
socket(0xa, 0x2, 0x0)

6m12.568908187s ago: executing program 9 (id=1766):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="f4ffffff000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket(0x1, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x769c00, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB="07b0cf7e2c89cc"], 0x0)

6m10.714747709s ago: executing program 9 (id=1771):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x2, &(0x7f0000000040))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)

6m9.888802584s ago: executing program 9 (id=1772):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x624a9, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x1, 0x38d, &(0x7f0000001600)="$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")
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x3e, {0x2, 0x4e20, @empty}, 'veth0_virt_wifi\x00'})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002d80)={0x2, 0x0, [{0x0, 0x66, &(0x7f0000001b00)=""/102}, {0xdddd0000, 0x1e, &(0x7f0000001c00)=""/30}]})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

6m8.992495636s ago: executing program 9 (id=1775):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

6m8.188626385s ago: executing program 9 (id=1779):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0x8, 0x80, 0x401}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4001}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4)

6m4.311750858s ago: executing program 9 (id=1787):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@init_itable}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@lazytime}]}, 0xff, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x104)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0x80, 0x4, 0x10000, 0x0, 0x3})

6m3.733427469s ago: executing program 37 (id=1787):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@init_itable}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@lazytime}]}, 0xff, 0x501, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x104)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0x80, 0x4, 0x10000, 0x0, 0x3})

3m30.397607336s ago: executing program 2 (id=2270):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80e3000, 0x3000, 0x8, 0xf, 0x3, 0x1, 0x45, 0x5, 0x0, 0x9, 0x17}, {0x5000, 0x2, 0x8, 0x2, 0x40, 0x9, 0x7f, 0x15, 0x5, 0x5, 0x3}, {0x54000, 0x4000, 0xe, 0xb, 0x1, 0x9, 0x80, 0x60, 0x0, 0xa7, 0x8, 0x81}, {0x2000, 0x100000, 0x0, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x9, 0x49, 0xf}, {0xdddd0000, 0x4, 0xc, 0x0, 0x15, 0x6, 0xab, 0x6c, 0x1, 0x2, 0xf7, 0x6}, {0xeeee8000, 0xdddd0000, 0xc, 0xa0, 0xb1, 0x8, 0x7, 0x9, 0x9, 0x13, 0x1, 0xf}, {0xdddd1000, 0x6000, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x3, 0x71}, {0xeeee0000, 0x40000, 0xc, 0x5, 0xd, 0x7, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0x40002, 0x2f}, {0x3000, 0xfffd}, 0x80000031, 0x0, 0x6000, 0x2234, 0x7, 0x0, 0x3000, [0x6800000000000000, 0x5, 0x60, 0x3]})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, 0x0}], 0x1, 0x61, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003a8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)

3m30.297058936s ago: executing program 2 (id=2271):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)=[0x0, 0x400, 0x3], 0x0, 0xd, 0x3, 0x1, r2}}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="030000000000000000000000000000000000000002585a63a3f4f0a49a9622daf1d1b0e29f44c829cc15df09e2513bfbaae3afd945a06b0f3557f67e5f076920443f6cfb7ec7396abef42f9583788d9d1d13827f0bd0bb13b862c6ccfd6befd0b2a3d3f97b580d49afcb705a45b6ac2f303e99", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
writev(r5, &(0x7f0000000300), 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_test={0x1a, 0x3, 0x4f0, 0x4, [0x4, 0xffffffff, 0xae, 0xc7f]}})
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000711813000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m29.265098283s ago: executing program 2 (id=2273):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@debug}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@grpjquota}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
getpid()
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)

3m28.216626976s ago: executing program 2 (id=2279):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080))
io_uring_setup(0x2cc1, &(0x7f0000000080)={0x0, 0x52b0, 0x2, 0x80002, 0xfb})

3m27.981297422s ago: executing program 2 (id=2280):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x3f7, &(0x7f0000000ac0)="$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")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc)
setresgid(0xee01, 0xee01, 0x0)
fallocate(r0, 0x0, 0x0, 0x8800000)

3m26.997313008s ago: executing program 2 (id=2283):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
getrandom(0x0, 0x0, 0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x102)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
epoll_create(0x7)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', 0x0})
mount(0x0, 0x0, 0x0, 0x200011, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001ac0)={'team_slave_0\x00', <r6=>0x0})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000", 0x10}], 0x2)
sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r6}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x4904}, 0x4040005)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0xe1)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0x8004587d, 0x0)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x2000000, &(0x7f0000000780)={[], [{@dont_hash}, {@fowner_gt}, {@obj_user={'obj_user', 0x3d, '\xc0\x0e\x9c<\x16\xe8\xdb\b'}}]}, 0x1, 0x782, &(0x7f0000000880)="$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")
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x80000)
getdents(r0, &(0x7f0000000280)=""/4097, 0x1001)

3m11.938332372s ago: executing program 38 (id=2283):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
getrandom(0x0, 0x0, 0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x102)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
epoll_create(0x7)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', 0x0})
mount(0x0, 0x0, 0x0, 0x200011, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001ac0)={'team_slave_0\x00', <r6=>0x0})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000", 0x10}], 0x2)
sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r6}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x4904}, 0x4040005)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0xe1)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0x8004587d, 0x0)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x2000000, &(0x7f0000000780)={[], [{@dont_hash}, {@fowner_gt}, {@obj_user={'obj_user', 0x3d, '\xc0\x0e\x9c<\x16\xe8\xdb\b'}}]}, 0x1, 0x782, &(0x7f0000000880)="$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")
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x80000)
getdents(r0, &(0x7f0000000280)=""/4097, 0x1001)

6.835538149s ago: executing program 0 (id=3008):
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
getpid()
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x42, 0x8001, 0x41400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

6.752494853s ago: executing program 0 (id=3009):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = dup(r4)
ioctl$PTP_EXTTS_REQUEST2(r5, 0xc0603d06, &(0x7f0000000040)={0x4001fc, 0x2})

5.695333255s ago: executing program 0 (id=3011):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)

5.472663134s ago: executing program 8 (id=3016):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
socket$pptp(0x18, 0x1, 0x2)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file3\x00', 0x56f000, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0xd3f0, 0x2000, 0x8, 0xadeb})
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', 0x0, r3, 0x3, 0x5}, 0x50)

5.175310389s ago: executing program 7 (id=3018):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x2, 0x0)
write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socket$inet_icmp(0x2, 0x2, 0x1)

5.048463546s ago: executing program 0 (id=3020):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.492616413s ago: executing program 5 (id=3022):
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x40000800)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = syz_io_uring_setup(0x2532, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0x20e}, &(0x7f0000000080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

4.113103572s ago: executing program 8 (id=3023):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
creat(&(0x7f0000000340)='./file0\x00', 0x44)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0)

3.727027181s ago: executing program 7 (id=3024):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000000400018008000740000004004c"], 0xc0}}, 0x200000b0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="83"], 0xa0}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x7fff, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0x0, 0x1d, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8], 0x0, 0x302000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.147345503s ago: executing program 8 (id=3029):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x20, 0x0, 0xffffffff, "0020742010000000000000000000fffb00"})

2.945386646s ago: executing program 3 (id=3031):
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x42, 0x8001, 0x41400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

2.891055036s ago: executing program 7 (id=3032):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x20000000, 0x2}, 0x1, r3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c884}, 0x0)

2.802954939s ago: executing program 7 (id=3033):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
socket$pptp(0x18, 0x1, 0x2)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file3\x00', 0x56f000, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0xd3f0, 0x2000, 0x8, 0xadeb})
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', 0x0, r3, 0x3, 0x5}, 0x50)

2.024041475s ago: executing program 5 (id=3034):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = gettid()
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
umount2(&(0x7f0000000500)='./file0\x00', 0x2)

2.002389401s ago: executing program 3 (id=3035):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@mcast2, 0x74})

1.984351358s ago: executing program 7 (id=3036):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = dup(r2)
ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d06, &(0x7f0000000040)={0x4001fc, 0x2})

1.829441609s ago: executing program 3 (id=3037):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000300), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)
socket(0x10, 0x3, 0x0)

1.803120114s ago: executing program 8 (id=3038):
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x3, 0xd, 0x24, 0x69, 0x0, 0x8, 0x2f, 0x0, @local, @private=0xa010100, {[@rr={0x7, 0xf, 0xd, [@local, @remote, @remote]}]}}}}}}, 0x0)

1.652881776s ago: executing program 3 (id=3039):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
creat(&(0x7f0000000340)='./file0\x00', 0x44)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0)

1.480128054s ago: executing program 8 (id=3040):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001a00)={0x8, {"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", 0x1000}}, 0x1006)

1.289436789s ago: executing program 5 (id=3041):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60)

1.227532918s ago: executing program 0 (id=3042):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20448a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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")
r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18)
unshare(0x20000400)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x3)

1.18391655s ago: executing program 5 (id=3043):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0xffff789c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r5, r4, 0x0, 0x6)
read$watch_queue(r5, &(0x7f0000000540)=""/4096, 0x1000)
r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3)
r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r6)
keyctl$invalidate(0x15, r7)
keyctl$KEYCTL_MOVE(0x1e, r6, r6, r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r8 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
write$binfmt_elf32(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
inotify_init1(0x0)
unshare(0x64000600)

1.166455006s ago: executing program 7 (id=3044):
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x40000800)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = syz_io_uring_setup(0x2532, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0x20e}, &(0x7f0000000080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

233.388024ms ago: executing program 8 (id=3045):
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x42, 0x8001, 0x41400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

204.959018ms ago: executing program 0 (id=3046):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
socket$pptp(0x18, 0x1, 0x2)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file3\x00', 0x56f000, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0xd3f0, 0x2000, 0x8, 0xadeb})
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', 0x0, r3, 0x3, 0x5}, 0x50)

184.377224ms ago: executing program 5 (id=3047):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
mkdir(0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000280)={{}, {}, [], {0x4, 0x7}}, 0x24, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7fffffff)

133.150055ms ago: executing program 3 (id=3048):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@nouser_xattr}, {@abort}, {@debug}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

52.18181ms ago: executing program 5 (id=3049):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
sendfile(r1, r2, &(0x7f00000001c0)=0x2811, 0x9)
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000840)={'binder1\x00'})
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)

0s ago: executing program 3 (id=3050):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

kernel console output (not intermixed with test programs):

 T7809] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  676.146615][ T7809] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  676.162579][ T7809] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  676.180913][ T7809] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  676.201581][ T7809] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  676.230195][ T7809] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  676.325663][T13987] loop0: detected capacity change from 0 to 128
[  676.413979][T13975] loop8: detected capacity change from 0 to 131072
[  676.450084][ T4228] usb 8-1: USB disconnect, device number 7
[  676.456876][T13987] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  676.477413][T13987] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  676.498410][T13975] F2FS-fs (loop8): invalid crc value
[  676.613649][T13975] F2FS-fs (loop8): Found nat_bits in checkpoint
[  682.044371][T14055] loop0: detected capacity change from 0 to 512
[  682.127181][ T4173] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  682.135872][T14055] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  682.167627][T14055] ext4 filesystem being mounted at /129/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  686.137845][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  686.149667][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  686.191853][ T4173] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  686.370823][ T4173] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  686.431838][ T4173] usb 8-1: string descriptor 0 read error: -71
[  686.438067][ T4173] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  686.456156][ T4173] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  686.491853][ T4173] usb 8-1: can't set config #1, error -71
[  686.499271][ T4173] usb 8-1: USB disconnect, device number 8
[  686.623498][T14090] loop7: detected capacity change from 0 to 512
[  686.637643][T14090] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  686.650552][T14090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  686.659083][T14090] System zones: 1-12
[  686.851828][ T4228] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  687.060596][T14090] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.2248: corrupted in-inode xattr
[  687.422143][ T4228] usb 1-1: unable to get BOS descriptor or descriptor too short
[  687.526945][T14090] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2248: couldn't read orphan inode 15 (err -117)
[  687.557602][T14090] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  687.748439][ T4228] usb 1-1: not running at top speed; connect to a high speed hub
[  687.803088][T14108] device syzkaller0 entered promiscuous mode
[  687.961838][ T4228] usb 1-1: config 1 interface 0 has no altsetting 0
[  688.052362][T14112] loop5: detected capacity change from 0 to 256
[  688.091371][T14114] loop8: detected capacity change from 0 to 512
[  688.131841][T14112] /dev/loop5: Can't open blockdev
[  688.140900][T14114] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  688.183752][T14114] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  688.192244][ T4228] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  688.201736][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.210095][ T4228] usb 1-1: Product: syz
[  688.219726][T14114] System zones: 1-12
[  688.225322][ T4228] usb 1-1: Manufacturer: syz
[  688.229988][ T4228] usb 1-1: SerialNumber: syz
[  688.243861][T14114] EXT4-fs error (device loop8): ext4_iget_extra_inode:4566: inode #15: comm syz.8.2255: corrupted in-inode xattr
[  688.278801][T14114] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2255: couldn't read orphan inode 15 (err -117)
[  688.313602][T14114] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  688.651801][ T4228] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 2 proto 2 vid 0x04B8 pid 0x0202
[  688.674161][ T4228] usb 1-1: USB disconnect, device number 11
[  688.712025][ T4228] usblp0: removed
[  692.247399][T14150] loop8: detected capacity change from 0 to 512
[  692.284663][T14150] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  692.309444][T14150] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  692.317623][T14150] System zones: 1-12
[  692.321738][ T4173] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  692.323215][T14150] EXT4-fs error (device loop8): ext4_iget_extra_inode:4566: inode #15: comm syz.8.2265: corrupted in-inode xattr
[  692.372129][T14150] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2265: couldn't read orphan inode 15 (err -117)
[  692.408708][T14150] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  693.021957][ T4173] usb 1-1: unable to get BOS descriptor or descriptor too short
[  694.611818][ T4173] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  694.903005][T14170] loop8: detected capacity change from 0 to 512
[  694.952747][ T4173] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  695.021866][ T4173] usb 1-1: string descriptor 0 read error: -71
[  695.028147][ T4173] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40
[  695.047493][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.050659][T14170] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  695.067074][T14170] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  695.141794][ T4173] usb 1-1: can't set config #1, error -71
[  695.167404][T14170] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #2: comm syz.8.2267: corrupted inode contents
[  695.202122][ T4173] usb 1-1: USB disconnect, device number 12
[  695.281478][T14170] EXT4-fs error (device loop8): ext4_dirty_inode:6058: inode #2: comm syz.8.2267: mark_inode_dirty error
[  695.317630][T14170] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.2267: Invalid block bitmap block 0 in block_group 0
[  695.522295][T14170] EXT4-fs error (device loop8): __ext4_get_inode_loc:4327: comm syz.8.2267: Invalid inode table block 0 in block_group 0
[  695.540846][T14170] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  695.559726][T14170] EXT4-fs error (device loop8): ext4_dirty_inode:6058: inode #2: comm syz.8.2267: mark_inode_dirty error
[  695.577770][T14170] EXT4-fs error (device loop8): __ext4_get_inode_loc:4327: comm syz.8.2267: Invalid inode table block 0 in block_group 0
[  695.602234][T14170] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  695.616281][T14170] EXT4-fs error (device loop8): ext4_add_nondir:2855: inode #18: comm syz.8.2267: mark_inode_dirty error
[  695.643303][T14170] EXT4-fs error (device loop8): __ext4_get_inode_loc:4327: comm syz.8.2267: Invalid inode table block 0 in block_group 0
[  695.669838][T14170] EXT4-fs warning (device loop8): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[  695.834198][    T9] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  695.850351][    T9] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  696.221790][ T4173] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  697.187364][ T4173] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  697.201263][ T4173] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  697.216283][ T4173] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  697.221358][T14199] kvm [14198]: vcpu2, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc1 data 0xfffffc18
[  697.240979][T14199] kvm [14198]: vcpu2, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  697.299261][T14199] kvm [14198]: vcpu2, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0xfffffc18
[  697.314763][T14199] kvm [14198]: vcpu2, guest rIP: 0x9131 disabled perfctr wrmsr: 0x186 data 0xfffffc18
[  697.329006][T14199] kvm [14198]: vcpu2, guest rIP: 0x9131 disabled perfctr wrmsr: 0x187 data 0xfffffc18
[  697.387356][ T4173] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  697.399873][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  697.437114][ T4173] usb 1-1: Product: syz
[  697.446903][ T4173] usb 1-1: Manufacturer: syz
[  697.461495][ T4173] usb 1-1: SerialNumber: syz
[  698.292355][ T4173] usb 1-1: can't set config #1, error -71
[  698.302288][ T4173] usb 1-1: USB disconnect, device number 13
[  698.404531][T14219] loop0: detected capacity change from 0 to 128
[  698.426144][T14220] loop8: detected capacity change from 0 to 128
[  698.788564][T14225] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2289'.
[  698.906083][T14227] loop8: detected capacity change from 0 to 128
[  698.949054][T14227] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  698.974311][ T4277] attempt to access beyond end of device
[  698.974311][ T4277] loop0: rw=1, want=1041, limit=128
[  699.107225][T14229] loop8: detected capacity change from 0 to 1024
[  699.118316][T14229] EXT4-fs (loop8): Ignoring removed orlov option
[  699.187016][T14229] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none.
[  699.279024][T14229] EXT4-fs error (device loop8): __ext4_new_inode:1286: comm syz.8.2292: failed to insert inode 15: doubly allocated?
[  699.310478][T14229] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2807: Unable to expand inode 13. Delete some EAs or run e2fsck.
[  699.661114][T14243] loop8: detected capacity change from 0 to 256
[  699.734449][T14243] exfat: Deprecated parameter 'utf8'
[  699.740001][T14243] exfat: Deprecated parameter 'namecase'
[  699.745783][T14243] exfat: Deprecated parameter 'utf8'
[  699.821278][T14243] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  701.085572][T14211] loop5: detected capacity change from 0 to 40427
[  701.334195][T14249] loop0: detected capacity change from 0 to 40427
[  701.412734][T14249] F2FS-fs (loop0): Found nat_bits in checkpoint
[  701.572445][T14249] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  701.659504][   T26] audit: type=1804 audit(1772733042.408:60): pid=14249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2297" name="/newroot/141/file0/bus" dev="loop0" ino=10 res=1 errno=0
[  701.690683][T11798] attempt to access beyond end of device
[  701.690683][T11798] loop0: rw=2049, want=45104, limit=40427
[  701.852732][T14260] loop7: detected capacity change from 0 to 128
[  702.357633][T14263] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2301'.
[  702.401611][  T155] attempt to access beyond end of device
[  702.401611][  T155] loop7: rw=1, want=1041, limit=128
[  704.450713][T14303] loop8: detected capacity change from 0 to 512
[  704.606169][T14306] loop0: detected capacity change from 0 to 512
[  704.855687][T14306] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  705.022418][T14303] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  705.090816][T14306] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  705.269324][T14306] System zones: 1-12
[  705.393373][T14306] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.2314: corrupted in-inode xattr
[  705.452088][T14306] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2314: couldn't read orphan inode 15 (err -117)
[  705.484101][T14306] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  705.767095][T14316] loop8: detected capacity change from 0 to 512
[  706.269177][T14316] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  708.021382][T14328] loop8: detected capacity change from 0 to 4096
[  708.107497][T14328] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  708.178866][T14328] EXT4-fs (loop8): mounted filesystem without journal. Opts: data_err=abort,mblk_io_submit,,errors=continue. Quota mode: writeback.
[  711.527224][ T5775] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  711.563061][T14373] loop8: detected capacity change from 0 to 256
[  711.612353][T14373] exfat: Deprecated parameter 'utf8'
[  711.617781][T14373] exfat: Deprecated parameter 'namecase'
[  711.623599][T14373] exfat: Deprecated parameter 'utf8'
[  711.668398][T14373] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  711.782351][ T5775] usb 1-1: Using ep0 maxpacket: 32
[  711.922652][ T5775] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  711.931984][ T5775] usb 1-1: config 0 has no interface number 0
[  712.122265][ T5775] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  712.140790][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.172698][ T5775] usb 1-1: Product: syz
[  712.176945][ T5775] usb 1-1: Manufacturer: syz
[  712.189267][ T5775] usb 1-1: SerialNumber: syz
[  712.201111][ T5775] usb 1-1: config 0 descriptor??
[  712.252794][ T5775] smsc95xx v2.0.0
[  712.672197][ T5775] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  712.747946][ T5775] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  713.413370][T14382] chnl_net:caif_netlink_parms(): no params data found
[  713.543406][T14382] bridge0: port 1(bridge_slave_0) entered blocking state
[  713.551478][T14382] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.558739][ T5775] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71
[  713.569676][ T5775] smsc95xx: probe of 1-1:0.67 failed with error -71
[  713.577699][T14382] device bridge_slave_0 entered promiscuous mode
[  713.579075][ T5775] usb 1-1: USB disconnect, device number 14
[  713.633979][T14382] bridge0: port 2(bridge_slave_1) entered blocking state
[  713.641054][T14382] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.678623][T14382] device bridge_slave_1 entered promiscuous mode
[  713.738546][T14397] loop5: detected capacity change from 0 to 256
[  713.747528][T14382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  713.786330][T14382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  713.851603][T14382] team0: Port device team_slave_0 added
[  713.870873][T14382] team0: Port device team_slave_1 added
[  713.906489][T14382] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.921135][T14382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.965206][T14382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  713.985017][T14382] batman_adv: batadv0: Adding interface: batadv_slave_1
[  713.992555][T14382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  714.021691][T14382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  714.084953][T14382] device hsr_slave_0 entered promiscuous mode
[  714.105569][T14382] device hsr_slave_1 entered promiscuous mode
[  714.134617][T14401] loop0: detected capacity change from 0 to 256
[  714.182419][T14401] exfat: Deprecated parameter 'namecase'
[  714.188151][T14401] exfat: Unknown parameter 'keep_last_dots'
[  715.242251][ T4228] Bluetooth: hci5: command 0x0409 tx timeout
[  715.429889][T14423] loop0: detected capacity change from 0 to 1024
[  715.550723][T14423] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  715.766185][T14434] loop0: detected capacity change from 0 to 128
[  715.908502][T13669] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.383304][T13669] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.812519][T13669] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.017969][T13669] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.350692][ T4230] Bluetooth: hci5: command 0x041b tx timeout
[  717.396756][T13669] tipc: Left network mode
[  717.433998][T14382] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  717.464979][T14382] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  717.482665][T14382] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  717.535063][T14382] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  717.576242][T14465] loop8: detected capacity change from 0 to 512
[  717.657554][T14465] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  717.732043][T14465] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it
[  717.750229][T14465] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2352: Corrupt directory, running e2fsck is recommended
[  717.768579][T14465] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  717.803954][T14465] EXT4-fs error (device loop8): ext4_iget_extra_inode:4566: inode #15: comm syz.8.2352: corrupted in-inode xattr
[  717.820595][T14476] loop5: detected capacity change from 0 to 512
[  717.836361][T14478] loop7: detected capacity change from 0 to 512
[  717.843387][T14465] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2352: couldn't read orphan inode 15 (err -117)
[  717.869905][T14382] 8021q: adding VLAN 0 to HW filter on device bond0
[  717.879142][T14465] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  717.925222][T14478] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  717.949123][T14382] 8021q: adding VLAN 0 to HW filter on device team0
[  717.983070][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  717.991355][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  718.189258][T14478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  718.233302][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  718.258848][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  718.272673][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.279731][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  718.312977][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  718.349313][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  718.371033][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state
[  718.378154][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  718.398547][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  718.421099][T14478] System zones: 1-12
[  718.440496][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  718.456296][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  718.470712][T14478] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.2354: corrupted in-inode xattr
[  718.494858][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  718.518457][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  718.534973][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  718.547592][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  718.559829][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  718.589133][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  718.621338][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  718.633373][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  718.666768][T14465] EXT4-fs (loop8): re-mounted. Opts: . Quota mode: writeback.
[  718.670671][T14492] loop0: detected capacity change from 0 to 512
[  718.713515][T14492] EXT4-fs (loop0): Ignoring removed bh option
[  718.722613][T14382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  718.730088][T14492] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  718.747812][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  718.758332][T14492] EXT4-fs (loop0): 1 truncate cleaned up
[  718.777600][T14492] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  718.825697][T14478] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2354: couldn't read orphan inode 15 (err -117)
[  718.907773][T14492] overlayfs: upper fs needs to support d_type.
[  719.012528][T11798] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[  719.056240][T11798] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[  719.070677][T14478] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  719.101341][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  719.133992][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  719.148999][T11798] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[  719.152668][T14382] 8021q: adding VLAN 0 to HW filter on device batadv0
[  719.174650][T14512] loop8: detected capacity change from 0 to 128
[  719.556568][ T7809] Bluetooth: hci5: command 0x040f tx timeout
[  719.838879][T13669] device hsr_slave_0 left promiscuous mode
[  719.878073][T13669] device hsr_slave_1 left promiscuous mode
[  720.022505][T13669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  720.032729][T13669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  720.052508][T13669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  720.108318][T13669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  720.122470][T13669] device bridge_slave_1 left promiscuous mode
[  720.128661][T13669] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.164236][T13669] device bridge_slave_0 left promiscuous mode
[  720.198356][T13669] bridge0: port 1(bridge_slave_0) entered disabled state
[  720.254081][T13669] device veth1_macvtap left promiscuous mode
[  720.266491][T14529] kvm [14528]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00
[  720.276152][T13669] device veth0_macvtap left promiscuous mode
[  720.282322][T13669] device veth1_vlan left promiscuous mode
[  720.288386][T14529] kvm [14528]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00
[  720.297652][T13669] device veth0_vlan left promiscuous mode
[  720.308319][T14529] APIC base relocation is unsupported by KVM
[  720.602745][T13669] team0 (unregistering): Port device team_slave_1 removed
[  720.628798][T13669] team0 (unregistering): Port device team_slave_0 removed
[  720.645046][T13669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  720.660170][  T154] attempt to access beyond end of device
[  720.660170][  T154] loop8: rw=1, want=1041, limit=128
[  720.672057][T13669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  720.806086][T13669] bond0 (unregistering): Released all slaves
[  720.901500][T14549] loop7: detected capacity change from 0 to 512
[  721.037245][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  721.049453][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  721.058842][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  721.067165][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  721.085269][T14382] device veth0_vlan entered promiscuous mode
[  721.525225][T14382] device veth1_vlan entered promiscuous mode
[  721.634587][ T4234] Bluetooth: hci5: command 0x0419 tx timeout
[  721.772431][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  721.780280][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  721.889874][T14549] EXT4-fs (loop7): Ignoring removed bh option
[  721.935972][T14382] device veth0_macvtap entered promiscuous mode
[  721.955533][T14382] device veth1_macvtap entered promiscuous mode
[  721.963175][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  721.992596][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  722.008384][T14563] loop0: detected capacity change from 0 to 128
[  722.014913][T14562] binder: 14561:14562 ioctl c0306201 0 returned -14
[  722.030598][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  722.065153][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  722.119685][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  722.150047][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.150958][T14563] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  722.159940][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  722.159958][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.159978][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  722.159990][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.161327][T14382] batman_adv: batadv0: Interface activated: batadv_slave_0
[  722.209079][T14563] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  722.219186][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  722.239785][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.246971][T14549] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  722.249746][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  722.268518][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.278424][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  722.288945][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.364705][T14382] batman_adv: batadv0: Interface activated: batadv_slave_1
[  722.411821][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  722.420424][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  722.462766][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  722.482355][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  722.507724][T14382] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  722.517007][T14382] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  722.553949][T14382] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  722.557392][T14583] loop0: detected capacity change from 0 to 128
[  722.608202][T14382] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  722.730308][T14591] loop5: detected capacity change from 0 to 128
[  722.854064][T14549] EXT4-fs (loop7): 1 truncate cleaned up
[  722.902812][T14549] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  722.932681][ T5292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.950739][ T5292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.981489][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  723.058838][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.097273][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.177446][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  725.845603][T14639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  725.905113][  T154] attempt to access beyond end of device
[  725.905113][  T154] loop0: rw=1, want=1041, limit=128
[  725.922467][T14639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  725.948998][ T4173] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  726.124265][T14653] loop8: detected capacity change from 0 to 256
[  726.184890][T14657] loop0: detected capacity change from 0 to 256
[  726.222298][T14657] exfat: Deprecated parameter 'utf8'
[  726.227735][T14657] exfat: Deprecated parameter 'utf8'
[  726.295927][T14657] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  726.312963][ T4173] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  726.321240][ T4173] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  726.347235][ T4173] usb 4-1: config 220 has no interface number 2
[  726.353852][ T4173] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  726.389056][ T4173] usb 4-1: config 220 interface 0 has no altsetting 0
[  726.415574][ T4173] usb 4-1: config 220 interface 76 has no altsetting 0
[  726.575641][ T4173] usb 4-1: config 220 interface 1 has no altsetting 0
[  726.742448][ T4173] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  726.760987][ T4173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.784232][ T4173] usb 4-1: Product: syz
[  726.800191][ T4173] usb 4-1: Manufacturer: syz
[  726.810498][ T4173] usb 4-1: SerialNumber: syz
[  727.022908][T14681] loop7: detected capacity change from 0 to 1024
[  727.178556][T14681] EXT4-fs (loop7): Test dummy encryption mode enabled
[  727.202562][ T4173] usb 4-1: selecting invalid altsetting 0
[  727.214400][ T4173] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  727.235601][ T4173] usb 4-1: No valid video chain found.
[  727.268024][T14681] EXT4-fs (loop7): inline encryption not supported
[  727.322939][ T4173] usb 4-1: selecting invalid altsetting 0
[  727.363577][ T4173] usbtest: probe of 4-1:220.1 failed with error -22
[  727.414488][ T4173] usb 4-1: USB disconnect, device number 3
[  727.418384][T14681] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback.
[  727.637179][T14700] loop8: detected capacity change from 0 to 128
[  728.412206][T14714] loop0: detected capacity change from 0 to 512
[  728.766304][T14714] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  728.914891][T14714] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  729.343361][T14726] EXT4-fs warning (device loop0): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 2858806877
[  729.457221][T14714] EXT4-fs warning (device loop0): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 2858806877
[  729.515214][T14726] EXT4-fs warning (device loop0): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 2858806877
[  729.640306][T11798] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Out of memory
[  729.692068][T11798] EXT4-fs error (device loop0): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error
[  729.764164][T14733] loop5: detected capacity change from 0 to 256
[  729.831940][T14733] exfat: Deprecated parameter 'utf8'
[  729.859316][T14751] loop0: detected capacity change from 0 to 4096
[  729.872499][T14733] exfat: Deprecated parameter 'utf8'
[  729.918371][T14733] /dev/loop5: Can't open blockdev
[  729.965685][T14751] EXT4-fs (loop0): Ignoring removed nobh option
[  730.017810][T14751] EXT4-fs (loop0): inline encryption not supported
[  730.063192][T14751] EXT4-fs (loop0): Test dummy encryption mode enabled
[  730.146425][T14751] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  730.298528][ T4277] attempt to access beyond end of device
[  730.298528][ T4277] loop8: rw=1, want=1041, limit=128
[  730.327035][T14761] loop5: detected capacity change from 0 to 512
[  730.454773][T14768] loop0: detected capacity change from 0 to 512
[  730.504181][T14768] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  730.515774][T14768] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  731.835506][T14803] loop0: detected capacity change from 0 to 512
[  732.221773][T14803] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  732.456272][T14803] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  732.496531][T14803] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.2420: corrupted inode contents
[  732.529139][T14803] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #2: comm syz.0.2420: mark_inode_dirty error
[  732.645058][T14803] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.2420: corrupted inode contents
[  732.694495][T14825] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  732.735323][T14825] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  732.750308][T14803] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.2420: mark_inode_dirty error
[  733.115834][T14841] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  734.319119][T14856] loop0: detected capacity change from 0 to 40427
[  734.723200][T14856] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff
[  734.738657][T14856] F2FS-fs (loop0): invalid crc value
[  734.865093][T14856] F2FS-fs (loop0): Found nat_bits in checkpoint
[  735.003132][T14856] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  736.135404][T11798] attempt to access beyond end of device
[  736.135404][T11798] loop0: rw=2049, want=45104, limit=40427
[  736.281797][    T7] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  736.486283][T14892] loop3: detected capacity change from 0 to 256
[  736.513417][T14892] exfat: Deprecated parameter 'utf8'
[  736.518815][T14892] exfat: Unknown parameter 'keep_last_dots'
[  736.531831][    T7] usb 9-1: Using ep0 maxpacket: 32
[  736.701244][    T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  737.397257][    T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  737.410432][    T7] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  737.449082][    T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.469852][    T7] usb 9-1: config 0 descriptor??
[  737.479314][T14890] netlink: 'syz.7.2434': attribute type 12 has an invalid length.
[  737.516969][    T7] hub 9-1:0.0: USB hub found
[  737.581149][T14918] loop3: detected capacity change from 0 to 512
[  737.615973][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.627731][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.638430][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.649541][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.660354][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.660695][T14890] netlink: 'syz.7.2434': attribute type 29 has an invalid length.
[  737.680312][T14890] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2434'.
[  737.682064][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.709703][T14922] loop3: detected capacity change from 0 to 512
[  737.728003][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.741807][    T7] hub 9-1:0.0: 1 port detected
[  737.755766][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.765820][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.776414][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.786044][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.794282][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.803626][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  737.811513][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  738.894005][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0
[  738.951735][ T4173] hid-generic 0003:0004:FFFFFFFE.000C: hidraw0: USB HID v4.00 Device [syz0] on syz1
[  739.092913][T14943] fido_id[14943]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  739.867215][ T4228] usb 9-1: USB disconnect, device number 13
[  740.181761][ T4173] hub 9-1:0.0: activate --> -19
[  740.975633][T14983] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  741.004397][T14983] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  741.051589][T14987] loop5: detected capacity change from 0 to 256
[  741.119393][T14994] loop7: detected capacity change from 0 to 512
[  741.281768][ T4173] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  741.346931][T14994] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  741.359111][T14994] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  741.444618][T15004] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #2: comm syz.7.2455: corrupted inode contents
[  741.521707][ T4173] usb 4-1: Using ep0 maxpacket: 8
[  741.536078][T15004] EXT4-fs error (device loop7): ext4_dirty_inode:6058: inode #2: comm syz.7.2455: mark_inode_dirty error
[  741.561474][T15004] EXT4-fs warning (device loop7): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1194124586
[  741.618215][T15004] EXT4-fs warning (device loop7): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1194124586
[  741.648584][T15004] EXT4-fs warning (device loop7): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1194124586
[  741.680001][T15004] EXT4-fs warning (device loop7): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1194124586
[  741.695640][ T4173] usb 4-1: unable to get BOS descriptor or descriptor too short
[  741.722554][T15004] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Out of memory
[  741.741085][T15004] EXT4-fs error (device loop7): ext4_dirty_inode:6058: inode #2: comm syz.7.2455: mark_inode_dirty error
[  741.755139][T15004] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Out of memory
[  741.758574][T15016] loop5: detected capacity change from 0 to 512
[  741.777669][T15004] EXT4-fs error (device loop7): ext4_add_nondir:2855: inode #18: comm syz.7.2455: mark_inode_dirty error
[  741.789584][ T4173] usb 4-1: config 2 has an invalid interface number: 44 but max is 2
[  741.798375][ T4173] usb 4-1: config 2 has an invalid interface number: 24 but max is 2
[  741.819506][ T4173] usb 4-1: config 2 has an invalid interface number: 24 but max is 2
[  741.827756][T15004] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Out of memory
[  741.837173][ T4173] usb 4-1: config 2 has an invalid interface number: 73 but max is 2
[  741.848954][ T4173] usb 4-1: config 2 has an invalid interface number: 201 but max is 2
[  741.858140][ T4173] usb 4-1: config 2 has an invalid interface number: 6 but max is 2
[  741.867521][ T4173] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  741.879640][ T4173] usb 4-1: config 2 has 5 interfaces, different from the descriptor's value: 3
[  741.889937][ T4173] usb 4-1: config 2 has no interface number 0
[  741.896451][ T4173] usb 4-1: config 2 has no interface number 1
[  741.923607][ T4173] usb 4-1: config 2 has no interface number 2
[  741.929747][ T4173] usb 4-1: config 2 has no interface number 3
[  742.081757][ T4230] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  742.381880][ T4230] usb 1-1: Using ep0 maxpacket: 32
[  742.543035][ T4230] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[  742.577001][ T4230] usb 1-1: config 0 has no interface number 0
[  742.645428][ T4173] usb 4-1: config 2 has no interface number 4
[  742.651585][ T4173] usb 4-1: config 2 interface 44 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  742.662181][ T4173] usb 4-1: config 2 interface 44 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  742.673298][ T4173] usb 4-1: config 2 interface 44 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  742.684012][ T4173] usb 4-1: config 2 interface 44 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  742.735006][ T4173] usb 4-1: config 2 interface 44 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  742.738345][ T4230] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  742.750504][ T4173] usb 4-1: config 2 interface 44 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  742.760517][ T4230] usb 1-1: config 0 interface 196 has no altsetting 0
[  742.788587][T15004] EXT4-fs error (device loop7): ext4_evict_inode:282: inode #18: comm syz.7.2455: mark_inode_dirty error
[  742.795393][ T4173] usb 4-1: config 2 interface 44 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 15
[  742.823185][ T4173] usb 4-1: too many endpoints for config 2 interface 24 altsetting 130: 66, using maximum allowed: 30
[  742.823653][T15004] EXT4-fs warning (device loop7): ext4_evict_inode:285: couldn't mark inode dirty (err -12)
[  742.846762][ T4173] usb 4-1: config 2 interface 24 altsetting 130 endpoint 0xF has an invalid bInterval 124, changing to 10
[  742.851286][T14994] EXT4-fs warning (device loop7): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 2858806877
[  742.868699][ T4173] usb 4-1: config 2 interface 24 altsetting 130 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  742.924016][ T4173] usb 4-1: config 2 interface 24 altsetting 130 has a duplicate endpoint with address 0xA, skipping
[  742.938261][T15034] loop5: detected capacity change from 0 to 512
[  742.941223][ T4173] usb 4-1: config 2 interface 24 altsetting 130 bulk endpoint 0x5 has invalid maxpacket 1024
[  742.958460][ T4173] usb 4-1: config 2 interface 24 altsetting 130 has a duplicate endpoint with address 0x3, skipping
[  742.969651][ T4173] usb 4-1: config 2 interface 24 altsetting 130 has 8 endpoint descriptors, different from the interface descriptor's value: 66
[  742.983162][ T4173] usb 4-1: config 2 interface 24 altsetting 23 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  742.995643][ T4173] usb 4-1: config 2 interface 24 altsetting 23 has an invalid endpoint with address 0x80, skipping
[  743.006705][ T4173] usb 4-1: config 2 interface 24 altsetting 23 has a duplicate endpoint with address 0x6, skipping
[  743.013970][ T4230] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  743.032865][ T4173] usb 4-1: config 2 interface 73 altsetting 212 has a duplicate endpoint with address 0xA, skipping
[  743.051089][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.051781][ T4173] usb 4-1: config 2 interface 73 altsetting 212 has an invalid endpoint with address 0x80, skipping
[  743.059732][ T4230] usb 1-1: Product: syz
[  743.075688][ T4230] usb 1-1: Manufacturer: syz
[  743.078340][ T4173] usb 4-1: config 2 interface 73 altsetting 212 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  743.083115][ T4230] usb 1-1: SerialNumber: syz
[  743.116847][ T4173] usb 4-1: too many endpoints for config 2 interface 201 altsetting 67: 246, using maximum allowed: 30
[  743.117299][ T4230] usb 1-1: config 0 descriptor??
[  743.145647][ T4173] usb 4-1: config 2 interface 201 altsetting 67 has a duplicate endpoint with address 0xE, skipping
[  743.176089][ T4173] usb 4-1: config 2 interface 201 altsetting 67 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  743.192063][T15014] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  743.198188][ T4173] usb 4-1: config 2 interface 201 altsetting 67 has 2 endpoint descriptors, different from the interface descriptor's value: 246
[  743.222798][ T4173] usb 4-1: too many endpoints for config 2 interface 6 altsetting 208: 116, using maximum allowed: 30
[  743.247471][ T4173] usb 4-1: config 2 interface 6 altsetting 208 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  743.271222][ T4173] usb 4-1: config 2 interface 6 altsetting 208 has a duplicate endpoint with address 0x5, skipping
[  743.291714][ T4173] usb 4-1: config 2 interface 6 altsetting 208 has 2 endpoint descriptors, different from the interface descriptor's value: 116
[  743.317773][ T4173] usb 4-1: config 2 interface 24 has no altsetting 0
[  743.334976][ T4173] usb 4-1: config 2 interface 24 has no altsetting 1
[  743.344608][ T4173] usb 4-1: config 2 interface 73 has no altsetting 0
[  743.351306][ T4173] usb 4-1: config 2 interface 201 has no altsetting 0
[  743.358939][ T4173] usb 4-1: config 2 interface 6 has no altsetting 0
[  743.522024][ T4173] usb 4-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=54.a3
[  743.536592][ T4173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.545947][ T9091] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Out of memory
[  743.562042][ T4173] usb 4-1: Product: syz
[  743.566331][ T4173] usb 4-1: Manufacturer: syz
[  743.570992][ T4173] usb 4-1: SerialNumber: syz
[  743.621965][ T9091] EXT4-fs error (device loop7): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error
[  743.657409][ T4230] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached
[  743.951870][ T4173] usb 4-1: Found UVC 2.07 device syz (046d:08c6)
[  743.959361][ T4173] usb 4-1: No valid video chain found.
[  743.961347][ T4230] usb 1-1: USB disconnect, device number 15
[  744.032127][ T4230] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected
[  744.081477][T15046] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  744.110446][T15046] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  744.151975][ T4173] usb 4-1: USB disconnect, device number 4
[  744.781805][ T5775] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  745.041767][ T5775] usb 4-1: Using ep0 maxpacket: 16
[  745.182003][ T5775] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  745.201768][ T5775] usb 4-1: config 0 has no interface number 0
[  745.228203][ T5775] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  745.280765][ T5775] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  745.475647][ T5775] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  745.496279][ T5775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.506077][ T5775] usb 4-1: Product: syz
[  745.510255][ T5775] usb 4-1: Manufacturer: syz
[  745.556390][T15099] loop0: detected capacity change from 0 to 40427
[  745.662611][ T5775] usb 4-1: SerialNumber: syz
[  745.668988][ T5775] usb 4-1: config 0 descriptor??
[  745.688434][T15123] loop7: detected capacity change from 0 to 512
[  745.695109][T15095] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  745.695588][T15099] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[  745.702461][T15095] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  745.879462][T15123] EXT4-fs (loop7): Ignoring removed bh option
[  745.935146][T15127] loop0: detected capacity change from 0 to 1024
[  745.958062][T15095] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  745.965608][T15095] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  745.981039][T15123] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  746.038471][T15127] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  746.271413][ T5775] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  746.282586][ T5775] asix: probe of 4-1:0.34 failed with error -71
[  746.292434][ T5775] usb 4-1: USB disconnect, device number 5
[  746.399681][T15123] EXT4-fs (loop7): 1 truncate cleaned up
[  746.439080][T15123] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  746.944712][T15154] loop3: detected capacity change from 0 to 1024
[  746.996773][T15158] loop0: detected capacity change from 0 to 1024
[  747.051971][T15158] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  747.075870][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  747.082236][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  747.104144][T15158] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  748.066339][T15178] loop8: detected capacity change from 0 to 512
[  748.095572][T15178] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  748.160749][T15178] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  748.191985][T15187] overlayfs: overlapping lowerdir path
[  748.198216][T15178] System zones: 1-12
[  748.209932][T15178] EXT4-fs error (device loop8): ext4_iget_extra_inode:4566: inode #15: comm syz.8.2479: corrupted in-inode xattr
[  748.289082][T15178] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2479: couldn't read orphan inode 15 (err -117)
[  748.318596][T15178] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  748.384230][T15195] loop3: detected capacity change from 0 to 512
[  748.804049][T15201] fuse: Bad value for 'fd'
[  750.348072][T15235] loop0: detected capacity change from 0 to 128
[  750.478916][T15239] loop3: detected capacity change from 0 to 1024
[  750.597920][T15245] loop3: detected capacity change from 0 to 1024
[  751.352139][T15257] loop5: detected capacity change from 0 to 512
[  753.632913][T15298] loop3: detected capacity change from 0 to 128
[  754.414619][T15293] loop5: detected capacity change from 0 to 512
[  755.349398][T15287] loop0: detected capacity change from 0 to 40427
[  755.403342][T15287] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  755.530502][T15287] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  755.573056][T15287] F2FS-fs (loop0): invalid crc value
[  755.615011][T15287] F2FS-fs (loop0): Found nat_bits in checkpoint
[  755.891465][T15336] loop8: detected capacity change from 0 to 128
[  755.905716][T15333] loop7: detected capacity change from 0 to 512
[  756.149706][T15342] loop8: detected capacity change from 0 to 256
[  756.173630][T15342] exfat: Deprecated parameter 'utf8'
[  756.176824][T15333] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  756.192145][T15342] exfat: Unknown parameter 'keep_last_dots'
[  756.276379][T15347] loop0: detected capacity change from 0 to 512
[  756.337654][T15347] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.2508: iget: bad i_size value: 38620345925642
[  756.442539][T15347] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2508: couldn't read orphan inode 15 (err -117)
[  756.498989][T15333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  756.527401][T15347] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,,errors=continue. Quota mode: writeback.
[  756.578097][T15333] System zones: 1-12
[  756.621845][T15333] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.2505: corrupted in-inode xattr
[  756.881164][T15373] loop8: detected capacity change from 0 to 512
[  756.937402][T15377] loop0: detected capacity change from 0 to 256
[  756.948409][T15333] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2505: couldn't read orphan inode 15 (err -117)
[  756.981437][T15333] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  757.023710][T15377] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  757.045169][T15373] EXT4-fs (loop8): Ignoring removed bh option
[  757.056057][T15373] EXT4-fs (loop8): Ignoring removed oldalloc option
[  757.085465][T15373] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 not in group (block 4098031621)!
[  757.108247][T15373] EXT4-fs (loop8): group descriptors corrupted!
[  757.329810][T15384] loop0: detected capacity change from 0 to 1024
[  757.527699][T15384] EXT4-fs (loop0): Ignoring removed bh option
[  757.816248][T15384] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000005,nolazytime,debug_want_extra_isize=0x0000000000000080,debug_want_extra_isize=0x0000000000000006,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  758.006152][T15384] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.2519: Invalid inode table block 18320473405771217551 in block_group 0
[  758.067983][T15384] EXT4-fs (loop0): Remounting filesystem read-only
[  758.602861][T15410] erofs: (device loop8): mounted with root inode @ nid 36.
[  758.629490][T15410] attempt to access beyond end of device
[  758.629490][T15410] loop8: rw=524288, want=1072, limit=16
[  758.659619][ T4189] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  758.693806][   T26] audit: type=1800 audit(1772733099.448:61): pid=15410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2522" name="file2" dev="loop8" ino=89 res=0 errno=0
[  759.481844][ T4266] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  759.546063][ T5775] kernel write not supported for file /107/net/rt_cache (pid: 5775 comm: kworker/1:10)
[  759.872256][ T4266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  759.917157][ T4266] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  759.929118][ T4266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.950441][ T4266] usb 1-1: config 0 descriptor??
[  760.017101][T15440] set_capacity_and_notify: 2 callbacks suppressed
[  760.017135][T15440] loop3: detected capacity change from 0 to 40427
[  760.288051][ T4279] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  760.435306][ T4266] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  760.456698][ T4266] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input22
[  760.641755][ T4279] usb 9-1: Using ep0 maxpacket: 16
[  760.739382][ T4266] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  760.763426][ T4279] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  760.816586][ T4279] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  760.831462][ T4279] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  760.932595][ T4279] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  760.951229][ T4279] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  760.974061][ T4279] usb 9-1: SerialNumber: syz
[  761.012021][T15437] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  761.295147][ T4279] cdc_ether: probe of 9-1:1.0 failed with error -71
[  761.317543][ T4279] usb 9-1: USB disconnect, device number 14
[  761.864124][T15510] loop8: detected capacity change from 0 to 128
[  762.138563][ T4234] usb 1-1: USB disconnect, device number 16
[  763.344494][T15541] loop0: detected capacity change from 0 to 512
[  763.476841][T15541] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  763.518069][T15541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  763.533976][T15541] System zones: 1-12
[  763.548051][T15541] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.2542: corrupted in-inode xattr
[  763.605947][T15541] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2542: couldn't read orphan inode 15 (err -117)
[  763.862657][T15541] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  765.773560][T15569] loop8: detected capacity change from 0 to 128
[  765.889085][T15569] EXT4-fs (loop8): Test dummy encryption mode enabled
[  765.960584][T15569] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  765.976873][T15569] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  766.778215][T15572] loop3: detected capacity change from 0 to 512
[  767.336601][T15578] loop5: detected capacity change from 0 to 4096
[  767.792368][T15586] loop0: detected capacity change from 0 to 128
[  767.839713][T15592] loop5: detected capacity change from 0 to 512
[  770.768066][T15626] loop3: detected capacity change from 0 to 131072
[  770.866530][T15635] loop7: detected capacity change from 0 to 512
[  770.904665][T15637] loop0: detected capacity change from 0 to 1024
[  771.051123][T15637] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  771.080522][T15637] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  771.195193][T15635] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  771.461326][T15635] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  771.825642][T15635] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #2: comm syz.7.2565: corrupted inode contents
[  772.042509][T15635] EXT4-fs error (device loop7): ext4_dirty_inode:6058: inode #2: comm syz.7.2565: mark_inode_dirty error
[  772.058423][T15635] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #2: comm syz.7.2565: corrupted inode contents
[  772.147967][T15635] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #2: comm syz.7.2565: mark_inode_dirty error
[  777.371548][T15735] fuse: Bad value for 'fd'
[  777.930454][T15751] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  778.000704][T15752] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  779.520164][T15783] loop8: detected capacity change from 0 to 128
[  779.798784][   T26] audit: type=1800 audit(1772733120.548:62): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2597" name="bus" dev="loop8" ino=1049095 res=0 errno=0
[  781.439539][T15833] binder: 15831:15833 ioctl 400c620e 2000000001c0 returned -22
[  781.760099][T15847] loop8: detected capacity change from 0 to 512
[  782.509889][T15844] loop0: detected capacity change from 0 to 40427
[  782.658385][T15844] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  782.666747][T15844] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  782.686637][T15844] F2FS-fs (loop0): invalid crc value
[  782.726004][T15844] F2FS-fs (loop0): Found nat_bits in checkpoint
[  782.797459][T15847] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  782.830527][T15844] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  782.838012][T15844] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  782.866275][T15847] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  782.936770][T15847] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #2: comm syz.8.2611: corrupted inode contents
[  782.972606][T15863] loop3: detected capacity change from 0 to 128
[  783.013805][T15847] EXT4-fs error (device loop8): ext4_dirty_inode:6058: inode #2: comm syz.8.2611: mark_inode_dirty error
[  783.039349][T11798] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  783.039372][T11798] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  783.064998][T11798] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  783.077985][T15860] attempt to access beyond end of device
[  783.077985][T15860] loop0: rw=10241, want=45104, limit=40427
[  783.080091][T15847] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #2: comm syz.8.2611: corrupted inode contents
[  783.086581][T15860] attempt to access beyond end of device
[  783.086581][T15860] loop0: rw=2049, want=45112, limit=40427
[  783.101733][T11798] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  783.125175][T15847] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #2: comm syz.8.2611: mark_inode_dirty error
[  783.148535][T11798] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  783.148556][T11798] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  783.158949][T11798] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  783.260916][T15873] loop5: detected capacity change from 0 to 128
[  784.269578][T15890] loop3: detected capacity change from 0 to 1024
[  785.088449][T15687] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  785.468703][T15918] loop7: detected capacity change from 0 to 128
[  785.632671][T15687] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  785.648624][T15687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  785.668359][T15687] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  785.697447][T15687] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.871940][T15687] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  785.885247][T15687] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  785.903733][T15687] usb 1-1: Product: syz
[  785.913844][T15687] usb 1-1: Manufacturer: syz
[  785.963964][T15687] cdc_wdm 1-1:1.0: skipping garbage
[  785.969559][T15687] cdc_wdm 1-1:1.0: skipping garbage
[  785.988950][T15687] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  786.002447][T15687] cdc_wdm 1-1:1.0: Unknown control protocol
[  786.197950][T15687] usb 1-1: USB disconnect, device number 17
[  786.623549][T15953] loop8: detected capacity change from 0 to 128
[  786.821854][T15687] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  786.888383][T15962] loop8: detected capacity change from 0 to 2048
[  786.966099][T15962] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  787.094782][T15962] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2628: bg 0: block 234: padding at end of block bitmap is not set
[  787.149820][T15962] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 92 with error 28
[  787.190981][T15962] EXT4-fs (loop8): This should not happen!! Data will be lost
[  787.190981][T15962] 
[  787.237483][T15687] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  787.246223][T15962] EXT4-fs (loop8): Total free blocks count 0
[  787.261636][T15687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  787.281567][T15962] EXT4-fs (loop8): Free/Dirty block details
[  787.287742][T15962] EXT4-fs (loop8): free_blocks=0
[  787.298630][T15687] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  787.307821][T15962] EXT4-fs (loop8): dirty_blocks=96
[  787.321702][T15687] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  787.333083][T15962] EXT4-fs (loop8): Block reservation details
[  787.339073][T15962] EXT4-fs (loop8): i_reserved_data_blocks=6
[  787.371830][T15976] netlink: 'syz.5.2629': attribute type 3 has an invalid length.
[  787.491399][T15979] hub 8-0:1.0: USB hub found
[  787.502685][T15687] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  787.518985][T15687] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  787.549513][T15687] usb 1-1: Product: syz
[  787.558106][T15687] usb 1-1: Manufacturer: syz
[  787.598299][T15979] hub 8-0:1.0: 1 port detected
[  787.646991][T15687] cdc_wdm 1-1:1.0: skipping garbage
[  787.698050][T15687] cdc_wdm 1-1:1.0: skipping garbage
[  787.833420][T15687] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  787.929028][T15687] cdc_wdm 1-1:1.0: Unknown control protocol
[  788.411949][ T4230] usb 1-1: USB disconnect, device number 18
[  788.571510][T15993] loop8: detected capacity change from 0 to 512
[  788.631901][T15993] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  788.831201][T16001] loop7: detected capacity change from 0 to 512
[  788.867213][T15993] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.2634: bg 0: block 104: invalid block bitmap
[  788.920654][T15993] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6192: Corrupt filesystem
[  788.940278][T15993] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2634: invalid indirect mapped block 1 (level 1)
[  789.009691][T15993] EXT4-fs (loop8): 1 truncate cleaned up
[  789.016264][T15997] loop5: detected capacity change from 0 to 512
[  789.026376][T15993] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  789.157014][T16008] syz.0.2638 (16008): /proc/16008/oom_adj is deprecated, please use /proc/16008/oom_score_adj instead.
[  789.209268][T16001] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,barrier,journal_dev=0x00000000460b8000,,errors=continue. Quota mode: writeback.
[  789.224659][T16001] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  789.246309][T16012] loop0: detected capacity change from 0 to 128
[  789.251007][   T26] audit: type=1800 audit(1772733129.998:63): pid=16001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2635" name="file1" dev="loop7" ino=15 res=0 errno=0
[  789.944496][T16018] device syzkaller0 entered promiscuous mode
[  790.435839][T16032] binder: 16031:16032 ioctl c0306201 200000000080 returned -14
[  791.063963][T16047] loop8: detected capacity change from 0 to 256
[  791.079404][T16048] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  791.216006][T16055] binder: Unknown parameter 'context'
[  791.280576][T16056] loop3: detected capacity change from 0 to 4096
[  791.716326][T16068] kvm: pic: non byte write
[  791.827883][ T7082] attempt to access beyond end of device
[  791.827883][ T7082] loop0: rw=1, want=1041, limit=128
[  792.023446][T16076] loop0: detected capacity change from 0 to 1024
[  792.056479][T16076] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5
[  792.056479][T16076] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  792.056479][T16076] 
[  792.092321][T16076] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  792.166337][T16076] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,noblock_validity,init_itable=0x0000000000004068,auto_da_alloc,max_dir_size_kb=0x00000000004007b2,data_err=ignore,nouid32,quota,user_xattr,noacl,dioread_nolock,,errors=continue. Quota mode: writeback.
[  792.229778][T16081] loop7: detected capacity change from 0 to 512
[  792.305479][T16081] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  792.393985][T16073] loop8: detected capacity change from 0 to 40427
[  792.873919][T16081] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  792.955479][T16081] System zones: 1-12
[  792.961202][T16081] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.2658: corrupted in-inode xattr
[  793.052594][T16084] loop3: detected capacity change from 0 to 40427
[  793.095010][T16081] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2658: couldn't read orphan inode 15 (err -117)
[  793.163590][T16081] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  793.308111][T16084] Invalid argument reading file caps for ./file0
[  794.498192][T16106] loop3: detected capacity change from 0 to 4096
[  794.544338][T16110] raw_sendmsg: syz.0.2666 forgot to set AF_INET. Fix it!
[  794.561485][T16107] ipt_CLUSTERIP: Please specify destination IP
[  797.215949][T16139] loop3: detected capacity change from 0 to 512
[  797.564186][T16146] loop3: detected capacity change from 0 to 128
[  797.820419][T16149] loop3: detected capacity change from 0 to 512
[  798.114729][T16154] binder: 16148:16154 ioctl c0306201 0 returned -14
[  798.624237][T16159] loop8: detected capacity change from 0 to 1024
[  798.690736][T16159] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  798.947149][T15804] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  799.243099][T15804] usb 4-1: Using ep0 maxpacket: 16
[  799.372043][T15804] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  799.390966][T15804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  799.401427][T15804] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  799.415913][T15804] usb 4-1: config 1 has no interface number 1
[  799.422122][T15804] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  799.444328][T15804] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  799.522695][T16143] loop5: detected capacity change from 0 to 40427
[  799.647440][T15804] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  799.666957][T15804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.681818][ T4230] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  800.283975][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short
[  800.325376][T15804] usb 4-1: Product: syz
[  800.329565][T15804] usb 4-1: Manufacturer: syz
[  800.411495][T15804] usb 4-1: SerialNumber: syz
[  800.491688][ T4230] usb 1-1: unable to read config index 0 descriptor/start: -71
[  800.649514][ T4230] usb 1-1: can't read configurations, error -71
[  801.802835][T15804] usb 4-1: USB disconnect, device number 6
[  802.552213][T16200] loop7: detected capacity change from 0 to 512
[  802.773664][T14118] udevd[14118]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  802.792338][T16200] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  803.921642][T16213] loop5: detected capacity change from 0 to 1024
[  804.084199][ T5775] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  804.094141][T16221] loop8: detected capacity change from 0 to 128
[  804.125486][ T5775] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  804.161202][T16198] loop0: detected capacity change from 0 to 40427
[  804.242123][T16198] F2FS-fs (loop0): invalid crc value
[  804.260721][T16223] fido_id[16223]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  804.302920][T16198] F2FS-fs (loop0): Found nat_bits in checkpoint
[  804.343655][T16200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  804.349103][T16227] loop8: detected capacity change from 0 to 1024
[  804.442128][T16200] System zones: 1-12
[  804.457570][T16200] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.2694: corrupted in-inode xattr
[  804.480157][T16198] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  804.505985][T16227] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  804.522812][T16200] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2694: couldn't read orphan inode 15 (err -117)
[  804.539733][T16200] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  805.128151][T16234] fuse: Bad value for 'fd'
[  807.484586][T16243] loop0: detected capacity change from 0 to 1024
[  807.565867][T16243] EXT4-fs (loop0): Ignoring removed orlov option
[  807.659840][T16243] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  807.774475][T16256] loop8: detected capacity change from 0 to 128
[  807.974361][T16263] loop0: detected capacity change from 0 to 256
[  808.133253][T16269] loop3: detected capacity change from 0 to 256
[  808.347131][T16254] loop7: detected capacity change from 0 to 128
[  808.486142][T16283] loop3: detected capacity change from 0 to 512
[  808.516523][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  808.522852][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  808.842426][T16288] binder: 16281:16288 ioctl c0306201 0 returned -14
[  810.000835][ T4248] attempt to access beyond end of device
[  810.000835][ T4248] loop8: rw=1, want=1009, limit=128
[  810.261798][T15803] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  810.377290][T16320] loop8: detected capacity change from 0 to 1024
[  810.446448][T16320] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  810.563756][T16320] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  810.718135][T16309] loop0: detected capacity change from 0 to 40427
[  810.790297][T16309] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  810.852615][T16309] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  810.871723][T15803] usb 6-1: unable to read config index 0 descriptor/start: -71
[  810.879297][T15803] usb 6-1: can't read configurations, error -71
[  810.984054][T16309] F2FS-fs (loop0): Found nat_bits in checkpoint
[  811.032158][T16339] loop7: detected capacity change from 0 to 128
[  811.178740][T16309] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  811.198193][T16309] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  811.609177][T16346] loop5: detected capacity change from 0 to 512
[  811.857037][T16349] loop3: detected capacity change from 0 to 512
[  812.232646][T16356] binder: 16348:16356 ioctl c0306201 0 returned -14
[  812.284510][T16352] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  812.303949][T16352] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  812.544238][T16358] fuse: Bad value for 'fd'
[  812.549797][T16358] 9pnet: Insufficient options for proto=fd
[  814.472081][T16378] device vlan0 entered promiscuous mode
[  814.661800][T16388] set_capacity_and_notify: 1 callbacks suppressed
[  814.661816][T16388] loop0: detected capacity change from 0 to 128
[  814.835000][T16383] loop7: detected capacity change from 0 to 512
[  815.105420][T16398] loop8: detected capacity change from 0 to 512
[  815.328432][T16401] fuse: Bad value for 'fd'
[  815.337535][T16398] EXT4-fs (loop8): 1 truncate cleaned up
[  815.343265][T16398] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,inode_readahead_blks=0x0000000000000001,nouid32,,errors=continue. Quota mode: none.
[  815.617869][T16383] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  815.636028][T16383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  815.650777][T16383] System zones: 1-12
[  815.662977][T16383] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.2735: corrupted in-inode xattr
[  815.681412][T16383] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2735: couldn't read orphan inode 15 (err -117)
[  815.701414][T16383] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  815.820190][T16412] loop5: detected capacity change from 0 to 128
[  817.758757][T16433] loop8: detected capacity change from 0 to 512
[  817.845782][T16433] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  817.925499][T16433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  818.131879][T16433] System zones: 1-12
[  818.159553][T16433] EXT4-fs error (device loop8): ext4_iget_extra_inode:4566: inode #15: comm syz.8.2755: corrupted in-inode xattr
[  818.705978][T16440] loop3: detected capacity change from 0 to 128
[  818.781228][T16433] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2755: couldn't read orphan inode 15 (err -117)
[  818.863004][T16433] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  819.275315][T16453] fuse: Bad value for 'fd'
[  819.426770][T16457] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  819.535695][T16457] kvm: pic: non byte read
[  819.540750][T16457] kvm: pic: single mode not supported
[  819.540918][T16457] kvm: pic: level sensitive irq not supported
[  819.547399][T16457] kvm: pic: non byte read
[  819.563965][T16457] kvm: pic: non byte read
[  819.568840][T16457] kvm: pic: single mode not supported
[  819.568988][T16457] kvm: pic: non byte read
[  819.580750][T16457] kvm: pic: non byte read
[  819.773728][T16472] loop0: detected capacity change from 0 to 512
[  819.945581][T16472] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  820.105680][T16472] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  820.358403][T16472] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.2766: Failed to acquire dquot type 1
[  820.676461][T16472] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  820.767318][T16472] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  820.777759][T16472] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.2766: Failed to acquire dquot type 1
[  820.799445][T16472] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2766: bg 0: block 248: padding at end of block bitmap is not set
[  820.827115][T16472] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem
[  820.836181][ T7820] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  820.854109][T16472] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  820.880174][T16472] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  820.902714][T16472] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.2766: Failed to acquire dquot type 1
[  820.942938][T16472] EXT4-fs (loop0): 1 orphan inode deleted
[  820.955296][T16472] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  820.979983][T16472] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  821.044976][T16472] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[  821.058374][T16472] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  821.072834][T16483] loop3: detected capacity change from 0 to 128
[  821.110540][T16472] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback.
[  821.359497][ T7820] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  821.370588][ T7820] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8196, setting to 1024
[  821.382848][ T7820] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  821.403570][ T7820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.425373][ T7820] usb 8-1: config 0 descriptor??
[  822.320717][T16491] loop8: detected capacity change from 0 to 128
[  822.427596][T16496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2773'.
[  822.573868][ T7820] holtek_kbd 0003:04D9:A055.000F: unknown main item tag 0x0
[  822.581437][ T7820] holtek_kbd 0003:04D9:A055.000F: unknown main item tag 0x0
[  822.591566][ T7820] holtek_kbd 0003:04D9:A055.000F: unknown main item tag 0x0
[  822.599310][ T7820] holtek_kbd 0003:04D9:A055.000F: unknown main item tag 0x0
[  822.609869][ T7820] holtek_kbd 0003:04D9:A055.000F: unknown main item tag 0x0
[  822.617779][ T7820] holtek_kbd 0003:04D9:A055.000F: unknown main item tag 0x0
[  822.627887][ T7820] holtek_kbd 0003:04D9:A055.000F: unknown main item tag 0x0
[  822.711305][ T7820] holtek_kbd 0003:04D9:A055.000F: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.7-1/input0
[  822.722982][T16500] fuse: Bad value for 'fd'
[  823.038564][T16503] loop5: detected capacity change from 0 to 512
[  823.932235][ T7820] usb 8-1: USB disconnect, device number 9
[  824.530635][T16517] loop0: detected capacity change from 0 to 512
[  824.580959][T16519] loop5: detected capacity change from 0 to 256
[  824.589914][T16512] loop8: detected capacity change from 0 to 40427
[  824.612945][T16519] exfat: Deprecated parameter 'namecase'
[  824.675383][T16519] /dev/loop5: Can't open blockdev
[  824.718832][T16526] loop0: detected capacity change from 0 to 512
[  824.721211][T16512] F2FS-fs (loop8): invalid crc value
[  824.756074][T16512] F2FS-fs (loop8): Found nat_bits in checkpoint
[  824.806389][T16526] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  824.867495][T16512] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  824.875168][T16526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  824.908861][T16526] System zones: 1-12
[  824.933981][T16526] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.2783: corrupted in-inode xattr
[  824.949966][   T26] audit: type=1804 audit(1772733165.698:64): pid=16512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2778" name="/newroot/337/file0/file0" dev="loop8" ino=10 res=1 errno=0
[  824.994218][T16538] loop3: detected capacity change from 0 to 512
[  825.010730][T16526] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2783: couldn't read orphan inode 15 (err -117)
[  825.024630][T16526] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  825.121177][T10265] attempt to access beyond end of device
[  825.121177][T10265] loop8: rw=2049, want=45104, limit=40427
[  829.044903][T16570] loop8: detected capacity change from 0 to 512
[  829.082449][T16573] loop0: detected capacity change from 0 to 256
[  829.089678][T16570] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[  829.097883][ T7809] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  829.112600][T16570] System zones: 1-12
[  829.127822][T16570] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.2788: missing EA_INODE flag
[  829.142219][T16570] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2788: error while reading EA inode 12 err=-117
[  829.146818][T16573] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  829.181936][T16570] EXT4-fs (loop8): 1 orphan inode deleted
[  829.187701][T16570] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback.
[  829.377060][T15804] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  829.732306][ T7809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  829.769025][ T7809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  829.833294][ T7809] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  829.882292][ T7809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.990508][ T7809] usb 8-1: config 0 descriptor??
[  830.289190][T16586] loop0: detected capacity change from 0 to 512
[  830.313985][T16586] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.2802: iget: bad i_size value: 38620345925642
[  830.349832][T16586] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2802: couldn't read orphan inode 15 (err -117)
[  830.367830][T16586] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[  830.451797][T15804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  830.525347][T16591] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2802: bg 0: block 5: invalid block bitmap
[  830.550602][T16591] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  830.570017][T16591] EXT4-fs (loop0): This should not happen!! Data will be lost
[  830.570017][T16591] 
[  830.597649][T16591] EXT4-fs (loop0): Total free blocks count 0
[  830.606386][T16591] EXT4-fs (loop0): Free/Dirty block details
[  830.638933][T16591] EXT4-fs (loop0): free_blocks=0
[  830.644365][T16591] EXT4-fs (loop0): dirty_blocks=2740
[  830.650269][T16591] EXT4-fs (loop0): Block reservation details
[  830.656575][T16591] EXT4-fs (loop0): i_reserved_data_blocks=2740
[  830.972493][ T7809] hid-led: probe of 0003:27B8:01ED.0010 failed with error -71
[  831.110982][ T7809] usb 8-1: USB disconnect, device number 10
[  832.171749][T15804] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  832.180822][T15804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.260595][T16596] loop8: detected capacity change from 0 to 1024
[  832.369299][T16596] EXT4-fs (loop8): Ignoring removed orlov option
[  832.380919][T16598] loop3: detected capacity change from 0 to 512
[  832.443287][T16596] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  832.930067][T15804] usb 4-1: Product: syz
[  832.934306][T15804] usb 4-1: Manufacturer: syz
[  832.938895][T15804] usb 4-1: SerialNumber: syz
[  832.981876][T15804] usb 4-1: can't set config #1, error -71
[  832.989245][T15804] usb 4-1: USB disconnect, device number 7
[  833.040505][T16607] binder: 16597:16607 ioctl c0306201 0 returned -14
[  834.174432][T16628] loop8: detected capacity change from 0 to 512
[  834.249706][T16632] loop7: detected capacity change from 0 to 512
[  834.296780][T16628] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  834.307969][T16632] EXT4-fs (loop7): Ignoring removed orlov option
[  834.321851][T16632] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  834.350721][T16628] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  834.382513][T16628] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #2: comm syz.8.2815: corrupted inode contents
[  834.399346][T16632] EXT4-fs (loop7): orphan cleanup on readonly fs
[  834.412036][T16628] EXT4-fs error (device loop8): ext4_dirty_inode:6058: inode #2: comm syz.8.2815: mark_inode_dirty error
[  834.422249][T16632] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2814: bg 0: block 248: padding at end of block bitmap is not set
[  834.451033][T16632] Quota error (device loop7): write_blk: dquota write failed
[  834.458732][T16628] EXT4-fs warning (device loop8): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1194124586
[  834.473996][T16628] EXT4-fs warning (device loop8): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1194124586
[  834.489462][T16628] EXT4-fs warning (device loop8): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1194124586
[  834.504577][T16628] EXT4-fs warning (device loop8): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1194124586
[  834.521025][T16628] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5854: Out of memory
[  834.530296][T16632] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  834.540979][T16628] EXT4-fs error (device loop8): ext4_dirty_inode:6058: inode #2: comm syz.8.2815: mark_inode_dirty error
[  834.552666][T16632] EXT4-fs error (device loop7): ext4_acquire_dquot:6234: comm syz.7.2814: Failed to acquire dquot type 1
[  834.564031][T16628] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5854: Out of memory
[  834.573415][T16628] EXT4-fs error (device loop8): ext4_add_nondir:2855: inode #18: comm syz.8.2815: mark_inode_dirty error
[  834.585167][T16628] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5854: Out of memory
[  834.594513][T16628] EXT4-fs error (device loop8): ext4_evict_inode:282: inode #18: comm syz.8.2815: mark_inode_dirty error
[  834.606213][T16628] EXT4-fs warning (device loop8): ext4_evict_inode:285: couldn't mark inode dirty (err -12)
[  834.616775][T16632] EXT4-fs (loop7): 1 truncate cleaned up
[  834.616984][T16639] EXT4-fs warning (device loop8): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 2858806877
[  834.631051][T16632] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,min_batch_time=0x0000000000000008,bsdgroups,quota,grpjquota=,orlov,abort,jqfmt=vfsv1,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  834.688533][T16632] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  834.706372][T10265] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5854: Out of memory
[  834.733348][T10265] EXT4-fs error (device loop8): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error
[  834.767215][T16632] EXT4-fs error (device loop7): ext4_remount:6060: comm syz.7.2814: Abort forced by user
[  834.778256][T16632] EXT4-fs (loop7): Remounting filesystem read-only
[  834.785581][T16632] EXT4-fs (loop7): re-mounted. Opts: . Quota mode: writeback.
[  834.793723][T16632] ext4 filesystem being remounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  835.045014][T16650] loop8: detected capacity change from 0 to 256
[  835.083417][T16650] exfat: Deprecated parameter 'utf8'
[  835.090995][ T4225] Bluetooth: hci0: command 0x0401 tx timeout
[  835.101043][T16650] exfat: Deprecated parameter 'utf8'
[  835.110945][T16650] exfat: Deprecated parameter 'namecase'
[  835.166220][T16650] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  835.310265][T16656] loop5: detected capacity change from 0 to 256
[  835.337309][T16659] loop3: detected capacity change from 0 to 16
[  835.364243][T16659] erofs: (device loop3): mounted with root inode @ nid 36.
[  835.546978][ T7820] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  835.579583][T16665] device syzkaller0 entered promiscuous mode
[  835.825354][T16672] loop3: detected capacity change from 0 to 512
[  835.831709][ T7820] usb 8-1: Using ep0 maxpacket: 16
[  837.242737][T15803] Bluetooth: hci5: command 0x0406 tx timeout
[  837.301515][T16672] xt_hashlimit: size too large, truncated to 1048576
[  837.332285][ T7820] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  837.341002][ T7820] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  837.419817][ T7820] usb 8-1: config 0 has no interface number 0
[  837.603203][ T7820] usb 8-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  837.623427][ T7820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  837.631434][ T7820] usb 8-1: Product: syz
[  837.645199][T16686] loop5: detected capacity change from 0 to 512
[  837.651356][ T7820] usb 8-1: Manufacturer: syz
[  837.662515][ T7820] usb 8-1: SerialNumber: syz
[  837.686211][ T7820] usb 8-1: config 0 descriptor??
[  837.707257][T16670] loop8: detected capacity change from 0 to 40427
[  837.832129][T16670] F2FS-fs (loop8): Found nat_bits in checkpoint
[  837.982472][T16654] fuse: Bad value for 'fd'
[  838.089651][T16670] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  838.628375][ T4229] usb 8-1: USB disconnect, device number 11
[  838.739361][T16701] loop0: detected capacity change from 0 to 128
[  838.820935][T16703] loop7: detected capacity change from 0 to 512
[  838.869679][T16704] attempt to access beyond end of device
[  838.869679][T16704] loop8: rw=2049, want=80888, limit=40427
[  839.062478][T10265] attempt to access beyond end of device
[  839.062478][T10265] loop8: rw=2049, want=45104, limit=40427
[  839.755876][T16703] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  839.803431][ T5292] attempt to access beyond end of device
[  839.803431][ T5292] loop0: rw=1, want=1041, limit=128
[  839.888241][T16703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  839.896610][T16703] System zones: 1-12
[  839.909316][T16703] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.2835: corrupted in-inode xattr
[  839.927675][T16703] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2835: couldn't read orphan inode 15 (err -117)
[  840.060563][T16703] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  840.399893][T16722] device syzkaller0 entered promiscuous mode
[  844.631114][T16756] loop3: detected capacity change from 0 to 512
[  844.781428][T16752] loop8: detected capacity change from 0 to 40427
[  844.827940][T16752] F2FS-fs (loop8): invalid crc value
[  844.897100][T16752] F2FS-fs (loop8): Found nat_bits in checkpoint
[  845.067887][T16752] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  845.595646][T16767] F2FS-fs (loop8): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  846.896784][T16775] device syzkaller0 entered promiscuous mode
[  848.046566][T16782] loop8: detected capacity change from 0 to 1024
[  848.115329][T16784] loop0: detected capacity change from 0 to 512
[  848.181815][T16782] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  848.219284][T16784] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  848.272146][T16782] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  848.280336][T16782] System zones: 0-1, 3-36
[  848.290283][T16784] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2856: invalid indirect mapped block 256 (level 2)
[  848.393746][T16782] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,auto_da_alloc=0x0000000000000006,grpid,dioread_nolock,bsddf,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  848.413842][T16784] EXT4-fs (loop0): 2 truncates cleaned up
[  848.419576][T16784] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,dioread_nolock,minixdf,,errors=continue. Quota mode: writeback.
[  848.505743][   T26] audit: type=1800 audit(1772733189.258:65): pid=16784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2856" name="file1" dev="loop0" ino=15 res=0 errno=0
[  848.533633][T16784] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2856: bg 0: block 5: invalid block bitmap
[  848.593280][T16784] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28
[  848.614888][T16784] EXT4-fs (loop0): This should not happen!! Data will be lost
[  848.614888][T16784] 
[  848.630225][T16784] EXT4-fs (loop0): Total free blocks count 0
[  848.636579][T16784] EXT4-fs (loop0): Free/Dirty block details
[  848.642973][T16784] EXT4-fs (loop0): free_blocks=0
[  848.651936][T16784] EXT4-fs (loop0): dirty_blocks=44
[  848.657061][T16784] EXT4-fs (loop0): Block reservation details
[  848.700602][T16784] EXT4-fs (loop0): i_reserved_data_blocks=44
[  848.745513][ T4469] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  848.779209][ T4469] EXT4-fs (loop0): This should not happen!! Data will be lost
[  848.779209][ T4469] 
[  849.907893][T16799] loop3: detected capacity change from 0 to 1024
[  851.009109][T16813] device syzkaller0 entered promiscuous mode
[  851.936296][T16825] loop8: detected capacity change from 0 to 512
[  852.017175][T16825] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  852.191242][T16832] loop0: detected capacity change from 0 to 512
[  852.291435][T16832] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  852.372596][T16832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  852.380630][T16832] System zones: 1-12
[  852.386773][T16832] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.2870: corrupted in-inode xattr
[  852.417127][T16832] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2870: couldn't read orphan inode 15 (err -117)
[  852.444463][T16832] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  852.509031][T16836] loop8: detected capacity change from 0 to 4096
[  852.574306][T16836] EXT4-fs (loop8): inline encryption not supported
[  852.604201][T16836] EXT4-fs (loop8): Test dummy encryption mode enabled
[  852.625798][T16836] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  852.662340][T16836] System zones: 0-5
[  852.678857][T16836] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  852.760004][T16836] fs-verity: sha512 using implementation "sha512-avx2"
[  853.579774][T16851] loop3: detected capacity change from 0 to 1024
[  855.983966][T16851] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  856.438380][T16870] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  856.771577][T16878] loop5: detected capacity change from 0 to 512
[  856.874952][T16881] loop8: detected capacity change from 0 to 512
[  856.933361][T16881] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  856.996822][T16881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  857.716207][ T7820] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  857.782850][T16881] System zones: 1-12
[  857.798068][T16881] EXT4-fs error (device loop8): ext4_iget_extra_inode:4566: inode #15: comm syz.8.2884: corrupted in-inode xattr
[  857.817526][T16881] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2884: couldn't read orphan inode 15 (err -117)
[  857.848000][T16881] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  857.913984][T16890] loop0: detected capacity change from 0 to 512
[  858.009482][T16890] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  858.077011][T16890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  858.092162][T16890] System zones: 1-12
[  858.274834][T16890] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.2887: corrupted in-inode xattr
[  858.792271][T16890] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2887: couldn't read orphan inode 15 (err -117)
[  858.812993][T16890] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  858.844946][ T7820] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[  858.876085][ T7820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  858.970510][ T7820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  858.980311][ T7820] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  858.993307][ T7820] usb 4-1: config 0 interface 0 has no altsetting 0
[  858.999942][ T7820] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  859.009029][ T7820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.073070][ T7820] usb 4-1: config 0 descriptor??
[  860.943783][ T7820] ryos 0003:1E7D:3138.0011: unexpected long global item
[  860.953434][ T7820] ryos 0003:1E7D:3138.0011: parse failed
[  860.977697][ T7820] ryos: probe of 0003:1E7D:3138.0011 failed with error -22
[  861.181239][T16919] loop0: detected capacity change from 0 to 512
[  861.228990][T15804] usb 4-1: USB disconnect, device number 8
[  861.242816][T16923] loop8: detected capacity change from 0 to 512
[  861.257270][T16919] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  861.288465][T16919] EXT4-fs (loop0): 1 truncate cleaned up
[  861.302989][T16923] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  861.333077][T16919] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,auto_da_alloc,,errors=continue. Quota mode: none.
[  862.324935][T16945] binder_alloc: 16943: binder_alloc_buf, no vma
[  862.511109][T16960] loop0: detected capacity change from 0 to 512
[  862.595534][T16960] EXT4-fs (loop0): 1 truncate cleaned up
[  862.601204][T16960] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,inode_readahead_blks=0x0000000000000001,nouid32,,errors=continue. Quota mode: none.
[  863.819942][T16970] loop3: detected capacity change from 0 to 512
[  864.792338][T16976] fuse: Bad value for 'fd'
[  865.109900][T16979] loop0: detected capacity change from 0 to 512
[  865.148642][T16979] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  865.229398][T16979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  865.248698][T16979] System zones: 1-12
[  865.271037][T16979] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.2902: corrupted in-inode xattr
[  865.316005][T16979] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2902: couldn't read orphan inode 15 (err -117)
[  865.417685][T16979] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  865.528244][T16986] loop5: detected capacity change from 0 to 256
[  865.535710][T16987] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  865.555607][T16986] /dev/loop5: Can't open blockdev
[  865.571557][T16984] loop8: detected capacity change from 0 to 4096
[  865.654142][T16984] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  865.682575][T16984] EXT4-fs (loop8): Test dummy encryption mode enabled
[  865.698527][T16984] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,noquota,inode_readahead_blks=0x0000000000000000,auto_da_alloc=0x0000000000000001,minixdf,debug_want_extra_isize=0x0000000000000008,auto_da_alloc=0x000000000000000d,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  866.744354][T17006] loop3: detected capacity change from 0 to 512
[  867.449250][T17015] fuse: Bad value for 'fd'
[  868.538951][T17014] device batadv_slave_1 entered promiscuous mode
[  868.866616][T17005] loop0: detected capacity change from 0 to 131072
[  868.908609][T17005] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(5) blocks(1024)
[  869.001734][T17005] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  869.066013][T17005] F2FS-fs (loop0): Found nat_bits in checkpoint
[  869.121811][ T7820] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  869.228126][T17005] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  869.240928][T17005] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b
[  869.542017][ T7820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  869.581689][ T7820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  869.621688][ T7820] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  869.663279][ T7820] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  869.691754][ T7820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.749439][ T7820] usb 6-1: config 0 descriptor??
[  869.887447][T17033] loop3: detected capacity change from 0 to 256
[  869.920712][T17035] loop7: detected capacity change from 0 to 512
[  869.956179][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  869.962524][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  870.104614][T17035] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  870.138208][T17035] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  870.146387][T17035] System zones: 1-12
[  870.165175][T17035] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.2919: corrupted in-inode xattr
[  870.211519][T17040] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  870.225580][T17041] device syzkaller0 entered promiscuous mode
[  870.262898][T17035] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2919: couldn't read orphan inode 15 (err -117)
[  870.284977][T17035] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  870.316960][ T7820] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd
[  870.338157][ T7820] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  871.096297][ T7820] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  871.245292][T17055] loop0: detected capacity change from 0 to 1024
[  871.263243][T17055] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  871.300961][ T7820] usb 6-1: USB disconnect, device number 13
[  871.309685][T17055] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  871.361405][T17013] device batadv_slave_1 left promiscuous mode
[  871.492824][T17058] loop3: detected capacity change from 0 to 512
[  872.278382][T17063] fuse: Bad value for 'fd'
[  872.435508][T17068] loop8: detected capacity change from 0 to 256
[  872.506947][T17072] loop0: detected capacity change from 0 to 256
[  872.557548][T17068] FAT-fs (loop8): bogus logical sector size 128
[  872.569878][T17068] FAT-fs (loop8): Can't find a valid FAT filesystem
[  872.600474][T17072] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  873.894297][T17086] device syzkaller0 entered promiscuous mode
[  873.947652][T17081] loop5: detected capacity change from 0 to 256
[  874.302401][T17081] /dev/loop5: Can't open blockdev
[  874.464964][T17095] loop0: detected capacity change from 0 to 512
[  874.500724][T17095] EXT4-fs (loop0): Ignoring removed nobh option
[  874.551587][T17095] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.2936: corrupted inode contents
[  874.569633][T17095] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #3: comm syz.0.2936: mark_inode_dirty error
[  874.616852][T17095] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.2936: corrupted inode contents
[  874.639682][T17095] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.2936: mark_inode_dirty error
[  874.670356][T17095] Quota error (device loop0): write_blk: dquota write failed
[  874.683603][T17095] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  874.700157][T17095] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.2936: Failed to acquire dquot type 0
[  874.715399][T17095] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.2936: corrupted inode contents
[  874.736320][T17095] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #16: comm syz.0.2936: mark_inode_dirty error
[  874.752059][T17095] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.2936: corrupted inode contents
[  874.770160][T17095] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.2936: mark_inode_dirty error
[  874.785674][T17095] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.2936: corrupted inode contents
[  874.798368][T17095] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  874.807619][T17095] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.2936: corrupted inode contents
[  874.825760][T17095] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.2936: mark_inode_dirty error
[  874.839766][T17095] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  874.854619][T17095] EXT4-fs (loop0): 1 truncate cleaned up
[  874.875191][T17095] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback.
[  874.905302][T17095] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  874.920368][T17102] loop3: detected capacity change from 0 to 1024
[  875.883075][T17109] loop8: detected capacity change from 0 to 1024
[  876.047941][T17113] 9pnet: p9_fd_create_unix (17113): problem connecting socket: éq‰Y’3aK: -91
[  876.090554][T17115] device syzkaller0 entered promiscuous mode
[  876.199390][T17109] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  876.845355][T17109] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  877.808794][T15803] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  878.279333][T17134] binder: 17129:17134 ioctl c0306201 0 returned -14
[  878.694930][T17140] xt_hashlimit: size too large, truncated to 1048576
[  879.032153][T15803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  879.054602][T15803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  879.089533][T15803] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  879.138419][T15803] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  879.168129][T15803] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.199777][T15803] usb 8-1: config 0 descriptor??
[  879.714020][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  879.726754][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  879.754675][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  879.777366][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  879.788323][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  879.852601][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  879.875421][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  879.897474][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  880.652532][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  880.659954][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  880.667717][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  880.689467][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  880.717998][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  880.774497][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  880.800400][T15803] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  880.829174][T15803] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[  880.860763][T15803] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  880.916833][T15803] usb 8-1: USB disconnect, device number 12
[  882.197102][T17183] fido_id[17183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[  882.357882][T17189] fuse: Bad value for 'fd'
[  882.646538][T17192] loop3: detected capacity change from 0 to 1024
[  883.861201][T17215] binder: 17202:17215 ioctl c0306201 0 returned -14
[  885.265201][T17239] fuse: Bad value for 'fd'
[  885.421407][T17243] loop8: detected capacity change from 0 to 512
[  885.668798][T17243] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  885.822233][T17253] loop3: detected capacity change from 0 to 1024
[  886.015707][T17243] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  886.084599][T17253] loop3: detected capacity change from 0 to 128
[  886.170791][T17243] System zones: 1-12
[  886.403010][T17243] EXT4-fs error (device loop8): ext4_iget_extra_inode:4566: inode #15: comm syz.8.2969: corrupted in-inode xattr
[  886.542221][T17243] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2969: couldn't read orphan inode 15 (err -117)
[  886.569177][T17257] loop0: detected capacity change from 0 to 512
[  886.687708][T17243] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  887.727438][T17257] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  887.803909][T17272] loop3: detected capacity change from 0 to 128
[  887.820547][T17257] ext4 filesystem being mounted at /298/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  888.129242][ T7820] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  888.167828][T17282] loop7: detected capacity change from 0 to 1024
[  889.111832][T17286] binder: 17269:17286 ioctl c0306201 0 returned -14
[  889.517235][T17282] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  889.581795][ T7820] usb 9-1: Using ep0 maxpacket: 32
[  889.693490][T17290] loop3: detected capacity change from 0 to 4096
[  889.729323][ T7820] usb 9-1: config 0 has an invalid interface number: 188 but max is 0
[  889.738261][ T7820] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  889.749288][ T7820] usb 9-1: config 0 has no interface number 0
[  889.762260][ T7820] usb 9-1: too many endpoints for config 0 interface 188 altsetting 14: 99, using maximum allowed: 30
[  889.777825][ T7820] usb 9-1: config 0 interface 188 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 99
[  889.823890][ T7820] usb 9-1: config 0 interface 188 has no altsetting 0
[  890.072054][ T7820] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  890.094363][ T7820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.125511][T17304] fuse: Bad value for 'fd'
[  890.140572][ T7820] usb 9-1: Product: syz
[  890.157100][ T7820] usb 9-1: Manufacturer: syz
[  890.164112][ T7820] usb 9-1: SerialNumber: syz
[  890.177912][ T7820] usb 9-1: config 0 descriptor??
[  890.380204][T17314] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  890.511307][T17323] loop7: detected capacity change from 0 to 512
[  890.557959][T17323] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  890.624761][T17323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003]
[  890.638545][T17323] System zones: 1-12
[  890.669340][T17323] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.2983: corrupted in-inode xattr
[  890.688072][T17323] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2983: couldn't read orphan inode 15 (err -117)
[  890.739293][T17323] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  891.015176][T17338] loop5: detected capacity change from 0 to 512
[  891.050277][T17342] loop3: detected capacity change from 0 to 128
[  891.142483][ T7820] asix: probe of 9-1:0.188 failed with error -22
[  892.365013][T15803] usb 9-1: USB disconnect, device number 15
[  894.516352][T17376] fuse: Bad value for 'fd'
[  895.659946][T17390] loop5: detected capacity change from 0 to 1024
[  895.727232][T17387] loop3: detected capacity change from 0 to 40427
[  895.774282][T17393] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  896.957452][T17406] loop0: detected capacity change from 0 to 512
[  897.046448][T17409] loop8: detected capacity change from 0 to 1024
[  897.122951][T17406] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0)
[  897.223113][T17409] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  897.228108][T17413] loop7: detected capacity change from 0 to 512
[  897.326411][T17409] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  897.356841][T17421] loop5: detected capacity change from 0 to 256
[  897.435353][T17421] exfat: Deprecated parameter 'utf8'
[  897.443918][T17424] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  897.505871][T17413] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  897.532663][T17421] /dev/loop5: Can't open blockdev
[  898.314292][T17413] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  898.607266][T17436] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  898.634690][T17440] loop3: detected capacity change from 0 to 512
[  898.661920][T17436] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  898.665855][T17438] loop0: detected capacity change from 0 to 512
[  898.736023][T17438] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  898.772376][T17438] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  898.905335][T17448] loop8: detected capacity change from 0 to 1024
[  898.924254][T17448] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  898.931993][T17454] loop7: detected capacity change from 0 to 256
[  898.972868][T17454] exfat: Deprecated parameter 'utf8'
[  898.986457][T17454] exfat: Deprecated parameter 'utf8'
[  899.015498][T17454] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  899.248609][T17458] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  900.700520][T17481] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  900.723465][T17481] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  900.899905][T17472] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  900.950940][T17472] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  901.374654][T17497] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  901.509391][T17501] set_capacity_and_notify: 1 callbacks suppressed
[  901.509409][T17501] loop7: detected capacity change from 0 to 1024
[  901.575436][T17501] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  902.414840][T17510] overlayfs: missing 'lowerdir'
[  902.886477][T17520] loop3: detected capacity change from 0 to 512
[  903.022585][T17527] loop0: detected capacity change from 0 to 512
[  903.203214][T17527] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  903.219893][T17527] ext4 filesystem being mounted at /312/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  903.241435][T17527] EXT4-fs warning (device loop0): ext4_group_extend:1823: can't shrink FS - resize aborted
[  904.127452][T17543] loop3: detected capacity change from 0 to 1024
[  904.127462][T17542] loop0: detected capacity change from 0 to 1024
[  904.167038][T17546] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  904.190381][T17542] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  904.300591][T17553] 
[  904.303950][T17553] =============================
[  904.308929][T17553] WARNING: suspicious RCU usage
[  904.314241][T17553] syzkaller #0 Not tainted
[  904.318738][T17553] -----------------------------
[  904.324009][T17553] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage!
[  904.333447][T17553] 
[  904.333447][T17553] other info that might help us debug this:
[  904.333447][T17553] 
[  904.352881][T17553] 
[  904.352881][T17553] rcu_scheduler_active = 2, debug_locks = 1
[  904.361894][T17553] 1 lock held by syz.3.3050/17553:
[  905.606346][T17553]  #0: ffffffff8c31ec20 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30
[  905.681210][T17553] 
[  905.681210][T17553] stack backtrace:
[  905.687566][T17553] CPU: 0 PID: 17553 Comm: syz.3.3050 Not tainted syzkaller #0
[  905.695037][T17553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  905.705093][T17553] Call Trace:
[  905.708425][T17553]  <TASK>
[  905.711392][T17553]  dump_stack_lvl+0x188/0x250
[  905.716105][T17553]  ? load_image+0x400/0x400
[  905.720602][T17553]  ? show_regs_print_info+0x20/0x20
[  905.725790][T17553]  ? print_tainted+0x148/0x170
[  905.730547][T17553]  ? lockdep_rcu_suspicious+0x110/0x180
[  905.736126][T17553]  get_callchain_entry+0x2a5/0x3b0
[  905.741225][T17553]  get_perf_callchain+0xab/0x460
[  905.746157][T17553]  ? put_callchain_entry+0xb0/0xb0
[  905.751255][T17553]  ? mark_lock+0x94/0x320
[  905.755572][T17553]  ? verify_lock_unused+0x140/0x140
[  905.760762][T17553]  ? __lock_acquire+0x13bc/0x7d10
[  905.765777][T17553]  __bpf_get_stack+0x2db/0x530
[  905.770537][T17553]  ? stack_map_get_build_id_offset+0x860/0x860
[  905.776681][T17553]  ? __cant_sleep+0x220/0x220
[  905.781345][T17553]  ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x220
[  905.787053][T17553]  bpf_get_stack_raw_tp+0x189/0x1c0
[  905.792242][T17553]  bpf_prog_b8a90dd1efcc4ad9+0x3d/0x220
[  905.797775][T17553]  bpf_prog_run_pin_on_cpu+0x63/0x140
[  905.803135][T17553]  bpf_prog_test_run_syscall+0x35a/0x4f0
[  905.808756][T17553]  ? sock_gen_cookie+0x60/0x60
[  905.813510][T17553]  ? sock_gen_cookie+0x60/0x60
[  905.818260][T17553]  bpf_prog_test_run+0x31e/0x390
[  905.823187][T17553]  __sys_bpf+0x5a5/0x6f0
[  905.827420][T17553]  ? bpf_link_show_fdinfo+0x380/0x380
[  905.832785][T17553]  ? vtime_user_exit+0x2c8/0x3e0
[  905.837716][T17553]  __x64_sys_bpf+0x78/0x90
[  905.842119][T17553]  do_syscall_64+0x4c/0xa0
[  905.846590][T17553]  ? clear_bhb_loop+0x30/0x80
[  905.851316][T17553]  ? clear_bhb_loop+0x30/0x80
[  905.855994][T17553]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  905.861883][T17553] RIP: 0033:0x7fad57f66799
[  905.866337][T17553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  905.885957][T17553] RSP: 002b:00007fad561c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  905.894364][T17553] RAX: ffffffffffffffda RBX: 00007fad581dffa0 RCX: 00007fad57f66799
[  905.902317][T17553] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[  905.910274][T17553] RBP: 00007fad57ffcbd9 R08: 0000000000000000 R09: 0000000000000000
[  905.918230][T17553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  905.926188][T17553] R13: 00007fad581e0038 R14: 00007fad581dffa0 R15: 00007fff491326d8
[  905.934165][T17553]  </TASK>
[  905.941496][T17553] 
[  905.944246][T17553] =============================
[  905.949245][T17553] WARNING: suspicious RCU usage
[  905.955066][T17553] syzkaller #0 Not tainted
[  905.960802][T17553] -----------------------------
[  905.965710][T17553] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage!
[  905.974448][T17553] 
[  905.974448][T17553] other info that might help us debug this:
[  905.974448][T17553] 
[  905.984716][T17553] 
[  905.984716][T17553] rcu_scheduler_active = 2, debug_locks = 1
[  905.993854][T17553] 1 lock held by syz.3.3050/17553:
[  905.998970][T17553]  #0: ffffffff8c31ec20 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30
[  906.029779][T17553] 
[  906.029779][T17553] stack backtrace:
[  906.039883][T17553] CPU: 0 PID: 17553 Comm: syz.3.3050 Not tainted syzkaller #0
[  906.047351][T17553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  906.057387][T17553] Call Trace:
[  906.060649][T17553]  <TASK>
[  906.063563][T17553]  dump_stack_lvl+0x188/0x250
[  906.068224][T17553]  ? load_image+0x400/0x400
[  906.072707][T17553]  ? show_regs_print_info+0x20/0x20
[  906.077892][T17553]  ? print_tainted+0x148/0x170
[  906.082659][T17553]  ? lockdep_rcu_suspicious+0x110/0x180
[  906.088192][T17553]  perf_callchain_user+0x3d6/0xfd0
[  906.093286][T17553]  ? get_callchain_entry+0x181/0x3b0
[  906.098552][T17553]  get_perf_callchain+0x33d/0x460
[  906.103564][T17553]  ? put_callchain_entry+0xb0/0xb0
[  906.108652][T17553]  ? mark_lock+0x94/0x320
[  906.112970][T17553]  ? verify_lock_unused+0x140/0x140
[  906.118173][T17553]  ? __lock_acquire+0x13bc/0x7d10
[  906.123195][T17553]  __bpf_get_stack+0x2db/0x530
[  906.127954][T17553]  ? stack_map_get_build_id_offset+0x860/0x860
[  906.134112][T17553]  ? __cant_sleep+0x220/0x220
[  906.138771][T17553]  ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x220
[  906.144496][T17553]  bpf_get_stack_raw_tp+0x189/0x1c0
[  906.149683][T17553]  bpf_prog_b8a90dd1efcc4ad9+0x3d/0x220
[  906.155218][T17553]  bpf_prog_run_pin_on_cpu+0x63/0x140
[  906.160577][T17553]  bpf_prog_test_run_syscall+0x35a/0x4f0
[  906.166196][T17553]  ? sock_gen_cookie+0x60/0x60
[  906.170952][T17553]  ? sock_gen_cookie+0x60/0x60
[  906.175698][T17553]  bpf_prog_test_run+0x31e/0x390
[  906.180622][T17553]  __sys_bpf+0x5a5/0x6f0
[  906.184849][T17553]  ? bpf_link_show_fdinfo+0x380/0x380
[  906.190214][T17553]  ? vtime_user_exit+0x2c8/0x3e0
[  906.195135][T17553]  __x64_sys_bpf+0x78/0x90
[  906.199532][T17553]  do_syscall_64+0x4c/0xa0
[  906.203928][T17553]  ? clear_bhb_loop+0x30/0x80
[  906.208585][T17553]  ? clear_bhb_loop+0x30/0x80
[  906.213259][T17553]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  906.219133][T17553] RIP: 0033:0x7fad57f66799
[  906.223536][T17553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  906.243121][T17553] RSP: 002b:00007fad561c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  906.251521][T17553] RAX: ffffffffffffffda RBX: 00007fad581dffa0 RCX: 00007fad57f66799
[  906.259475][T17553] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[  906.267434][T17553] RBP: 00007fad57ffcbd9 R08: 0000000000000000 R09: 0000000000000000
[  906.275399][T17553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  906.283368][T17553] R13: 00007fad581e0038 R14: 00007fad581dffa0 R15: 00007fff491326d8
[  906.291330][T17553]  </TASK>