last executing test programs:

17m33.328624394s ago: executing program 32 (id=38):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
close(0xffffffffffffffff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200)

17m16.648013578s ago: executing program 33 (id=79):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
unshare(0x40000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0xc6b6f10a77087ab1, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_procfs(r0, &(0x7f0000000300)='net/ip_tables_targets\x00')
write$P9_RSTATu(r4, 0x0, 0x62)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
ioctl$XFS_IOC_AG_GEOMETRY(r5, 0xc080583d, &(0x7f00000000c0)={0x80, 0x6, 0x7, 0x40, 0x6d22, 0x1ff, 0x3, 0x8001})
socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0)
ioctl$SNAPSHOT_FREE(r6, 0x3305)

14m52.213122782s ago: executing program 34 (id=402):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"})

14m18.010569893s ago: executing program 35 (id=480):
socket$nl_route(0x10, 0x3, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x8001420, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x22842, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x82)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0)

9m17.148737778s ago: executing program 1 (id=1056):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f000000b8c0)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000)
r1 = socket(0x1, 0x5, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0xe000200c})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x201d})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x32, &(0x7f0000000000)=0x32a7, 0x27)
fsopen(0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3)
r4 = timerfd_create(0x0, 0x0)
timerfd_create(0x0, 0x0)
ppoll(&(0x7f0000000700)=[{r4, 0x3041}], 0x1, 0x0, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0xe040, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1000000000ac5)
sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x10, 0x70bd2c, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYBLOB="0f1ce55f3d8ef1600dc326829c231273d350e9f71d9273cf12333117af142dc615179c0f4618444f39149f9c44f09e314b6febe69f107858eefe789704d9f53715d4b69776717c2440c96ce542606ae25a3dec2de3835b9bd8405c2540"], 0x34, 0x2)
read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020}, 0x2020)

9m14.348363827s ago: executing program 36 (id=1057):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socket$netlink(0x10, 0x3, 0x8)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
sched_setscheduler(r1, 0x0, &(0x7f00000000c0)=0x8)
openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a)
r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r3, &(0x7f00000091c0)=""/16384, 0x4000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

9m14.317173007s ago: executing program 1 (id=1060):
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\b\x00\x00'], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000140)={0x6, 0x3, 0x4, 0x6})

9m11.658019944s ago: executing program 1 (id=1068):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40012100, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6)
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0)

9m6.614409945s ago: executing program 1 (id=1077):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000ac0)='./file1\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x4, 0x6ea, &(0x7f0000000280)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x88800, 0x0, 0x3, 0x0, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@random={'osx.', 'no\x02\x00l'})

9m5.11276826s ago: executing program 1 (id=1081):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054)

9m3.13465347s ago: executing program 1 (id=1085):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xfffffffffffffffe, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x4, 0xef9a5e7037ee9545, 0x0, 0x0, 0x0, 0x10000001}]}]}, 0xfc}}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
io_setup(0x3, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000))
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x40010, 0xffffffffffffffff, 0x77994000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newlink={0x3c, 0x10, 0xc09, 0x2, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x49}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}}, 0x0)

9m1.921383283s ago: executing program 37 (id=1085):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xfffffffffffffffe, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x4, 0xef9a5e7037ee9545, 0x0, 0x0, 0x0, 0x10000001}]}]}, 0xfc}}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
io_setup(0x3, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000))
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x40010, 0xffffffffffffffff, 0x77994000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newlink={0x3c, 0x10, 0xc09, 0x2, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x49}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}}, 0x0)

8m39.748537216s ago: executing program 9 (id=1133):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1eb)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = inotify_init1(0x800)
inotify_add_watch(r1, &(0x7f00000002c0)='./debug\x00', 0x90000870)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

8m38.567143908s ago: executing program 9 (id=1135):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000000000", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
ppoll(&(0x7f00000000c0)=[{r1, 0x40}, {r0, 0x4000}], 0x2, 0x0, 0x0, 0x0)

8m37.208801611s ago: executing program 9 (id=1138):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x6843, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0xffff, @none, 0x9}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x5420, 0x0)
pipe2$9p(&(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r6, &(0x7f0000000000)={0xef6f16ad20de71d8, 0x1b, 0x1}, 0xfffffe0b)
r7 = socket$alg(0x26, 0x5, 0x0)
r8 = creat(0x0, 0xca)
bind$alg(r8, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-neon)\x00'}, 0x58)
bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58)
r9 = accept4$alg(r7, 0x0, 0x0, 0x80800)
splice(r5, 0x0, r9, 0x0, 0x20000000000002, 0x2)

8m36.002098494s ago: executing program 9 (id=1139):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0xc, &(0x7f0000000300), 0x2, 0x53a, &(0x7f00000011c0)="$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")
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
r0 = inotify_init1(0x800)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00)
r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
fcntl$setown(r0, 0x8, r1)
inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa2000b60)
rmdir(&(0x7f00000000c0)='./control\x00')

8m33.648826648s ago: executing program 9 (id=1146):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x200, 0x0)
mmap(&(0x7f000093c000/0x2000)=nil, 0x2000, 0x1000005, 0x50, 0xffffffffffffffff, 0xd1643000)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = userfaultfd(0x80801)
r5 = msgget$private(0x0, 0x0)
msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x2000, 0x0)
msgctl$IPC_SET(r5, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x200000000000, 0x1, 0x8, 0x7f, 0x3})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x410})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, r7, 0x25, 0x16, @val=@netkit}, 0x1c)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0)

8m32.161807163s ago: executing program 9 (id=1155):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x824, 0x8, 0x101, 0x283f, 0x3, 0x7fff, 0xd, 0xf]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x10)

8m31.190445692s ago: executing program 38 (id=1155):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x824, 0x8, 0x101, 0x283f, 0x3, 0x7fff, 0xd, 0xf]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x10)

7m10.202008919s ago: executing program 6 (id=1316):
shmctl$IPC_RMID(0x0, 0x0)

7m9.968498232s ago: executing program 6 (id=1318):
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

7m8.900961892s ago: executing program 6 (id=1320):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f4b4f05"], 0x48)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x710, &(0x7f00000019c0)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe})
writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000d0c100000000000224e0000", 0x58}], 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50)
ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f00000000c0)=0xf73f)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, 0x0, &(0x7f0000001080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r6], 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{r5}, &(0x7f0000001740), &(0x7f0000001780)='%ps    \x00'}, 0x20)
fsmount(0xffffffffffffffff, 0x0, 0xa)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)=0x5)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)

7m4.271411109s ago: executing program 6 (id=1329):
r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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")
io_setup(0x1, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x57dc2ec1, 0x2000005, 0x13, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
flock(0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a)
socket$inet6(0xa, 0x3, 0xff)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0000000100001042bbd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="136f020080100000c000128009000100766c616e00000000b000028006000100020000000600050088a80000100004800c0001007c0000000a000000640003800c00010003000000020000000c00010003000000060000000c00010008000000018000000c000100ebffffffff0000000c0001000300000063d400000c00010002000000fbffffff0c00010000000000b01d00000c00010000010000008000001c0004800c00010009000000030000000c00010000000000400000000c000200160000000800000008000500", @ANYRES32=r3], 0xf0}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file1\x00', 0x100c404, &(0x7f0000001b80)=ANY=[@ANYBLOB='dmask=00000000000000000002001,flush,uid=', @ANYRESHEX=0x0, @ANYBLOB="0004074443", @ANYRESHEX, @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relax\t\x00\x00\x00\x00\x00\x00\x00s,sys_immutable,nodots,showexec,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1ff, &(0x7f00000008c0)="$eJzs3buKE1EYAOA/2VzFYjtBEEYstFrUJ1iRFcSAsJJCO0ErU+02WZvdx/AVfC8fQLZKI0fiTC7m5hrMjK7f1+Sf858/5zIwSZOTFLkvtz5Fp1OL+mEcxqgW+1GPiYsAAK6TUUrxNe1VPQ0AoET5539uTZdvJU8JANixV6/fvHjS6x0dZ1kn4vJi2B/289c8/+x57+hh9sP+rOpyOOzvTfOPssXvDuN8M24U+cd5fTZNtyKi34oH9/L8OPf0ZS/7ub4d73a8dgAAAAAAAAAAAAAAAAAAAAAAqMqdyCZWnu9zcLCY7xb5/GrufKCF83sacbtRXM6OB0rnZSwKAAAAAAAAAAAAAAAAAAAA/jGnZx8/vB0M3p/MgnZEzLc0VvRZH9SKN562tH6rvOygHtuVd4tlbjFordii3S6wu/rmXiWIxt9yd7YNsqWW+h/f8O7G7U1pHMTK8smxGGvLWxGxefT7x1eaajOWUqOU0uDz3ZPTs0gby2fPiHapTyQAAAAAAAAAAAAAAAAAAPh/zf3qe0mnigkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAVm//8/DpZbNgbnEXEzftl5MlYzOpWuFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOvrewAAAP//M04ZOg==")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
ioctl$FIBMAP(r4, 0x1, &(0x7f0000000000)=0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

7m1.792331474s ago: executing program 6 (id=1335):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x7d}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xc}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x10}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x8040)

7m1.486866627s ago: executing program 6 (id=1336):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xfffffffffffffffe, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x4, 0xef9a5e7037ee9545, 0x0, 0x0, 0x0, 0x10000001}]}]}, 0xfc}}, 0x0)
socket$inet6(0xa, 0x3, 0x1)
keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000))
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x40010, 0xffffffffffffffff, 0x77994000)
futex(0x0, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newlink={0x3c, 0x10, 0xc09, 0x2, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x49}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}}, 0x0)

6m46.446555669s ago: executing program 39 (id=1336):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xfffffffffffffffe, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x4, 0xef9a5e7037ee9545, 0x0, 0x0, 0x0, 0x10000001}]}]}, 0xfc}}, 0x0)
socket$inet6(0xa, 0x3, 0x1)
keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000))
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x40010, 0xffffffffffffffff, 0x77994000)
futex(0x0, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newlink={0x3c, 0x10, 0xc09, 0x2, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x49}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}}, 0x0)

5m5.208150751s ago: executing program 8 (id=1587):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000040)=""/44, 0x2c)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000140)={0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
r5 = syz_open_dev$sndpcmc(0x0, 0x0, 0x40001)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0xc0844123, 0x800000000000000)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

5m4.441223098s ago: executing program 8 (id=1590):
r0 = socket(0x2, 0x3, 0xff)
close_range(r0, r0, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8)
sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0xc044854)

5m3.436528509s ago: executing program 8 (id=1595):
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xa26}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x7f, 0x4, 0x5753a39e}, {0x6, 0x0, 0xdb, 0x3}]}, 0x10)
sendmmsg$inet(r3, &(0x7f0000002c40), 0x0, 0x0)

5m1.208751651s ago: executing program 8 (id=1599):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000200)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@errors_remount}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f0000000400)='./tracing/uprobe_events\x00', 0x10000, 0x85)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
syz_emit_ethernet(0x4e, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000180)="703a732f70202e2f66696c65303a300c24fed2849287cddd1218bf84", 0x1c)

5m0.616737747s ago: executing program 8 (id=1601):
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240000007058402"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0)

4m56.660103877s ago: executing program 8 (id=1612):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0})

4m55.861495645s ago: executing program 40 (id=1612):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0})

4m52.106582413s ago: executing program 5 (id=1624):
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
socket$inet6(0xa, 0x3, 0x5)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

4m49.303092841s ago: executing program 5 (id=1628):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fe00, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
shmctl$IPC_RMID(0x0, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r6, 0x34, 0x0, @void}, 0x10)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180))
socket$igmp(0x2, 0x3, 0x2)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c}, 0x38)

4m47.829536636s ago: executing program 5 (id=1629):
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
unshare(0x22020600)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]})
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil)

4m44.822462576s ago: executing program 5 (id=1637):
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x2100014, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0)

4m42.146305264s ago: executing program 5 (id=1641):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x6843, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0xffff, @none, 0x9}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x5420, 0x0)
pipe2$9p(&(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000000)={0xef6f16ad20de71d8, 0x1b, 0x1}, 0xfffffe0b)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = creat(0x0, 0xca)
bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-neon)\x00'}, 0x58)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58)
r8 = accept4$alg(r6, 0x0, 0x0, 0x80800)
splice(r4, 0x0, r8, 0x0, 0x20000000000002, 0x2)

4m31.852822147s ago: executing program 5 (id=1666):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000003c0)={[{@nobarrier}]}, 0x4, 0x521, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0)

4m31.307208143s ago: executing program 41 (id=1666):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000003c0)={[{@nobarrier}]}, 0x4, 0x521, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0)

18.932890629s ago: executing program 7 (id=2387):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fe00, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
shmctl$IPC_RMID(0x0, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r6, 0x34, 0x0, @void}, 0x10)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)
write$P9_RSTATu(r5, 0x0, 0x6e)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180))
socket$igmp(0x2, 0x3, 0x2)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c}, 0x38)

16.8831812s ago: executing program 7 (id=2391):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00')
preadv2(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1ff, 0x29eb, 0x6)
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810)

13.644670382s ago: executing program 4 (id=2400):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fe00, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
getpgrp(0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
shmctl$IPC_RMID(0x0, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r4, 0x34, 0x0, @void}, 0x10)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0)
write$P9_RSTATu(r3, 0x0, 0x6e)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f1360806"], 0x0)
socket$igmp(0x2, 0x3, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c, r5}, 0x38)

12.515521393s ago: executing program 4 (id=2402):
open(0x0, 0x108943, 0x148)
open(0x0, 0x108843, 0x55)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = userfaultfd(0x801)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r4, 0x5419, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x6)

12.262626066s ago: executing program 3 (id=2404):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x10, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef268563"], 0xffdd)

11.688913402s ago: executing program 2 (id=2406):
syz_open_dev$sndpcmc(0x0, 0x0, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x4}}, 0x9)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f4897b}, 0xc)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r1, 0x0, 0x0)

11.508596664s ago: executing program 3 (id=2407):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x2400c846, 0x0, 0x0)
ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x6, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x400, 0x200})
fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x205, 0x5})
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xfc01000000000000)
socket$inet(0x2, 0xa, 0xffffffff)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)

10.020282409s ago: executing program 4 (id=2408):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1004a, &(0x7f0000000a80)={[{@test_dummy_encryption}, {@jqfmt_vfsold}, {@nogrpid}, {@debug}, {@discard}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '\'!'}}, {@measure}, {@hash}]}, 0xf7, 0x44f, &(0x7f0000000540)="$eJzs3MtvG8UfAPDvrp206eOX/Ep59AEECiLikTRpgR4QEggkLkhIcCjHkKRVqdugJki0qqAgxBVV4o44IvEXcIILAk5IiBt/AKpUoV5aOBmtvdvYjp3WqV0H/PlIG8/sjDPz9e7YsztxAhhak9mPJGJXRPweEeP1bHOFyfrDjWsXF/66dnEhiWr1zT+TWr3r1y4uFFWL5+3MM1NpRPppEgfatLty/sLp+Upl6VyeL+ePz5w6M39y6eTS2bljx44emX3+ublnNxvaQ42ZrE/X93+4fHDfa29ffn3h+OV3fvomKeJviaNHJl/coPDxarXHzQ3W7oZ0Uh5gR+hKKR97I7XxPx6lWDt44/HqJwPtHNBX1Wq1urNz8aUq8B+WxKB7AAxG8UGfXf8W212aemwJV1+qXwBlcd/It3pJOdK8zkjL9W0vTUbE8Ut/f5lt0Z/7EAAATb7L5j9Pt5v/pXFfQ73/5WtDExHx/4jYExH3RMTeiLg3olb3/oh4oMv2J1vy6+c/6ZVNBXabsvnfC/naVvP8r5j9xUQpz+2uxT+SnDhVWTqcvyZTMbIty89u0Mb3r/z6eaeyxvlftmXtF3PBvB9Xytuan7M4vzp/JzE3uvpxxP5yc/xjtZLk5kpAEhH7ImL/Jts49eTXBzuV3Tr+DfRgnan6VcQT9eN/KZqO/9oqaJaaWT3z3szK+Qtt1idntkdl6fBMcVas9/Mvn73Rqf07ir8HsuO/o+35fzP+iaRxvXalu9+/7Rblmz3/R5O3aunRfN8H86ur52YjRk83nBSlfP/c2q4iX9TP4p861H7874m1V+JARGQn8YP5wvLDed8fiYhHI+LQBjH++PJj724+/v7K4l/s6vivJUajdU/7ROn0D9/G9oZGJ7qJPzv+R2upqXxPh/e/3xozt9Ov7s9mAAAA+HdKI2JXJOn0zXSaTk/X/15+b+xIK8srq0+dWH7/7GL9OwITMZIWd7rGG+6HzuaX9UV+riV/JL9v/EVprJafXliuLA46eBhyOzuM/8wfpUH3Dug739eC4WX8w/Ay/mF4Gf8wvNqM/7FB9AO4+9p9/n80gH4Ad1/L+LfsB0PE9T8ML+MfhpfxD0NpZSxu/SV5CYl1iUi3RDf6mEjKW6IbfU1E/t9/1xcN+p0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgN/4JAAD//wUA5Iw=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$unix(0x1, 0x2, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0x3)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = open(&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00', 0x80242, 0x0)
sendfile(r5, r5, 0x0, 0x800000009)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x2e0, 0x118, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xffffff, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffff], 'xfrm0\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0xc, 0x5, 0x12}, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x0, 0x1, [0x27, 0x2, 0x6, 0x9b95, 0x2, 0x1, 0x1, 0x0, 0xbac3, 0xfffb, 0x3, 0x4, 0x5, 0x60, 0x4, 0x7fff], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff0000ff, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00, 0xff000000], 'veth1_macvtap\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x3b, 0x40, 0x1, 0x21}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)

8.971118869s ago: executing program 4 (id=2411):
r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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")
io_setup(0x1, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x57dc2ec1, 0x2000005, 0x13, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
flock(0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a)
socket$inet6(0xa, 0x3, 0xff)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="136f020080100000c000128009000100766c616e00000000b000028006000100020000000600050088a80000100004800c0001007c0000000a000000640003800c00010003000000020000000c00010003000000060000000c00010008000000018000000c000100ebffffffff0000000c0001000300000063d400000c00010002000000fbffffff0c00010000000000b01d00000c00010000010000008000001c0004800c00010009000000030000000c00010000000000400000000c000200160000000800000008000500", @ANYRES32=r5], 0xf0}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file1\x00', 0x100c404, &(0x7f0000001b80)=ANY=[@ANYBLOB='dmask=00000000000000000002001,flush,uid=', @ANYRESHEX=0x0, @ANYBLOB="0004074443", @ANYRESHEX, @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relax\t\x00\x00\x00\x00\x00\x00\x00s,sys_immutable,nodots,showexec,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1ff, &(0x7f00000008c0)="$eJzs3buKE1EYAOA/2VzFYjtBEEYstFrUJ1iRFcSAsJJCO0ErU+02WZvdx/AVfC8fQLZKI0fiTC7m5hrMjK7f1+Sf858/5zIwSZOTFLkvtz5Fp1OL+mEcxqgW+1GPiYsAAK6TUUrxNe1VPQ0AoET5539uTZdvJU8JANixV6/fvHjS6x0dZ1kn4vJi2B/289c8/+x57+hh9sP+rOpyOOzvTfOPssXvDuN8M24U+cd5fTZNtyKi34oH9/L8OPf0ZS/7ub4d73a8dgAAAAAAAAAAAAAAAAAAAAAAqMqdyCZWnu9zcLCY7xb5/GrufKCF83sacbtRXM6OB0rnZSwKAAAAAAAAAAAAAAAAAAAA/jGnZx8/vB0M3p/MgnZEzLc0VvRZH9SKN562tH6rvOygHtuVd4tlbjFordii3S6wu/rmXiWIxt9yd7YNsqWW+h/f8O7G7U1pHMTK8smxGGvLWxGxefT7x1eaajOWUqOU0uDz3ZPTs0gby2fPiHapTyQAAAAAAAAAAAAAAAAAAPh/zf3qe0mnigkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAVm//8/DpZbNgbnEXEzftl5MlYzOpWuFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOvrewAAAP//M04ZOg==")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
ioctl$FIBMAP(r6, 0x1, &(0x7f0000000000)=0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

8.9203999s ago: executing program 7 (id=2412):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fe00, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
shmctl$IPC_RMID(0x0, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r4, 0x34, 0x0, @void}, 0x10)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0)
write$P9_RSTATu(r3, 0x0, 0x6e)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f1360806"], 0x0)
socket$igmp(0x2, 0x3, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c, r5}, 0x38)

8.036496499s ago: executing program 7 (id=2413):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1004a, &(0x7f0000000a80)={[{@test_dummy_encryption}, {@jqfmt_vfsold}, {@nogrpid}, {@debug}, {@discard}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '\'!'}}, {@measure}, {@hash}]}, 0xf7, 0x44f, &(0x7f0000000540)="$eJzs3MtvG8UfAPDvrp206eOX/Ep59AEECiLikTRpgR4QEggkLkhIcCjHkKRVqdugJki0qqAgxBVV4o44IvEXcIILAk5IiBt/AKpUoV5aOBmtvdvYjp3WqV0H/PlIG8/sjDPz9e7YsztxAhhak9mPJGJXRPweEeP1bHOFyfrDjWsXF/66dnEhiWr1zT+TWr3r1y4uFFWL5+3MM1NpRPppEgfatLty/sLp+Upl6VyeL+ePz5w6M39y6eTS2bljx44emX3+ublnNxvaQ42ZrE/X93+4fHDfa29ffn3h+OV3fvomKeJviaNHJl/coPDxarXHzQ3W7oZ0Uh5gR+hKKR97I7XxPx6lWDt44/HqJwPtHNBX1Wq1urNz8aUq8B+WxKB7AAxG8UGfXf8W212aemwJV1+qXwBlcd/It3pJOdK8zkjL9W0vTUbE8Ut/f5lt0Z/7EAAATb7L5j9Pt5v/pXFfQ73/5WtDExHx/4jYExH3RMTeiLg3olb3/oh4oMv2J1vy6+c/6ZVNBXabsvnfC/naVvP8r5j9xUQpz+2uxT+SnDhVWTqcvyZTMbIty89u0Mb3r/z6eaeyxvlftmXtF3PBvB9Xytuan7M4vzp/JzE3uvpxxP5yc/xjtZLk5kpAEhH7ImL/Jts49eTXBzuV3Tr+DfRgnan6VcQT9eN/KZqO/9oqaJaaWT3z3szK+Qtt1idntkdl6fBMcVas9/Mvn73Rqf07ir8HsuO/o+35fzP+iaRxvXalu9+/7Rblmz3/R5O3aunRfN8H86ur52YjRk83nBSlfP/c2q4iX9TP4p861H7874m1V+JARGQn8YP5wvLDed8fiYhHI+LQBjH++PJj724+/v7K4l/s6vivJUajdU/7ROn0D9/G9oZGJ7qJPzv+R2upqXxPh/e/3xozt9Ov7s9mAAAA+HdKI2JXJOn0zXSaTk/X/15+b+xIK8srq0+dWH7/7GL9OwITMZIWd7rGG+6HzuaX9UV+riV/JL9v/EVprJafXliuLA46eBhyOzuM/8wfpUH3Dug739eC4WX8w/Ay/mF4Gf8wvNqM/7FB9AO4+9p9/n80gH4Ad1/L+LfsB0PE9T8ML+MfhpfxD0NpZSxu/SV5CYl1iUi3RDf6mEjKW6IbfU1E/t9/1xcN+p0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgN/4JAAD//wUA5Iw=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
socket$unix(0x1, 0x2, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0x3)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = open(&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00', 0x80242, 0x0)
sendfile(r5, r5, 0x0, 0x800000009)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x2e0, 0x118, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xffffff, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffff], 'xfrm0\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0xc, 0x5, 0x12}, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x0, 0x1, [0x27, 0x2, 0x6, 0x9b95, 0x2, 0x1, 0x1, 0x0, 0xbac3, 0xfffb, 0x3, 0x4, 0x5, 0x60, 0x4, 0x7fff], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff0000ff, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00, 0xff000000], 'veth1_macvtap\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x3b, 0x40, 0x1, 0x21}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)

7.85069242s ago: executing program 0 (id=2414):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x3}, 'syz1\x00', 0x33})
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0xba)
preadv(r1, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020)

7.087778668s ago: executing program 4 (id=2415):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fe00, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
shmctl$IPC_RMID(0x0, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r5, 0x34, 0x0, @void}, 0x10)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)
write$P9_RSTATu(r4, 0x0, 0x6e)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180))
socket$igmp(0x2, 0x3, 0x2)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c}, 0x38)

7.076053859s ago: executing program 3 (id=2416):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc)

5.780445972s ago: executing program 4 (id=2417):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1004a, &(0x7f0000000a80)={[{@test_dummy_encryption}, {@jqfmt_vfsold}, {@nogrpid}, {@debug}, {@discard}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '\'!'}}, {@measure}, {@hash}]}, 0xf7, 0x44f, &(0x7f0000000540)="$eJzs3MtvG8UfAPDvrp206eOX/Ep59AEECiLikTRpgR4QEggkLkhIcCjHkKRVqdugJki0qqAgxBVV4o44IvEXcIILAk5IiBt/AKpUoV5aOBmtvdvYjp3WqV0H/PlIG8/sjDPz9e7YsztxAhhak9mPJGJXRPweEeP1bHOFyfrDjWsXF/66dnEhiWr1zT+TWr3r1y4uFFWL5+3MM1NpRPppEgfatLty/sLp+Upl6VyeL+ePz5w6M39y6eTS2bljx44emX3+ublnNxvaQ42ZrE/X93+4fHDfa29ffn3h+OV3fvomKeJviaNHJl/coPDxarXHzQ3W7oZ0Uh5gR+hKKR97I7XxPx6lWDt44/HqJwPtHNBX1Wq1urNz8aUq8B+WxKB7AAxG8UGfXf8W212aemwJV1+qXwBlcd/It3pJOdK8zkjL9W0vTUbE8Ut/f5lt0Z/7EAAATb7L5j9Pt5v/pXFfQ73/5WtDExHx/4jYExH3RMTeiLg3olb3/oh4oMv2J1vy6+c/6ZVNBXabsvnfC/naVvP8r5j9xUQpz+2uxT+SnDhVWTqcvyZTMbIty89u0Mb3r/z6eaeyxvlftmXtF3PBvB9Xytuan7M4vzp/JzE3uvpxxP5yc/xjtZLk5kpAEhH7ImL/Jts49eTXBzuV3Tr+DfRgnan6VcQT9eN/KZqO/9oqaJaaWT3z3szK+Qtt1idntkdl6fBMcVas9/Mvn73Rqf07ir8HsuO/o+35fzP+iaRxvXalu9+/7Rblmz3/R5O3aunRfN8H86ur52YjRk83nBSlfP/c2q4iX9TP4p861H7874m1V+JARGQn8YP5wvLDed8fiYhHI+LQBjH++PJj724+/v7K4l/s6vivJUajdU/7ROn0D9/G9oZGJ7qJPzv+R2upqXxPh/e/3xozt9Ov7s9mAAAA+HdKI2JXJOn0zXSaTk/X/15+b+xIK8srq0+dWH7/7GL9OwITMZIWd7rGG+6HzuaX9UV+riV/JL9v/EVprJafXliuLA46eBhyOzuM/8wfpUH3Dug739eC4WX8w/Ay/mF4Gf8wvNqM/7FB9AO4+9p9/n80gH4Ad1/L+LfsB0PE9T8ML+MfhpfxD0NpZSxu/SV5CYl1iUi3RDf6mEjKW6IbfU1E/t9/1xcN+p0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgN/4JAAD//wUA5Iw=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
syz_open_dev$sndctrl(0x0, 0x1, 0x242)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000a40))
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0x0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xffffff, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xffffff], 'xfrm0\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0x6, 0x5, 0x8}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @local, [0xff0000ff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'ipvlan0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x3a, 0x6, 0x1, 0x20}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b0635965491f6531877000001e75fb667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3eb)

5.724637772s ago: executing program 3 (id=2418):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mount$tmpfs(0x0, 0x0, 0x0, 0x2000001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

5.524195634s ago: executing program 0 (id=2419):
open(0x0, 0x108943, 0x148)
open(0x0, 0x108843, 0x55)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = userfaultfd(0x801)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r4, 0x5419, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x6)

5.367897086s ago: executing program 2 (id=2420):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x50, 0x4000080}, 0x4000004)

5.144714918s ago: executing program 2 (id=2421):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
close(0x3)
recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000800)=""/111, 0x6f}], 0x1}, 0x40012040)

4.93050358s ago: executing program 7 (id=2422):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00')
preadv2(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1ff, 0x29eb, 0x6)
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810)

4.235589517s ago: executing program 2 (id=2423):
r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@data_journal}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000000580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getgroups(0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES16=r2], 0x18}}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r6, &(0x7f0000000040)=""/44, 0x2c)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0)
ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000140)={0x0, &(0x7f0000000100)})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x10, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
r9 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x0, 0x40001)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r9, 0xc0844123, 0x800000000000000)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

4.152937658s ago: executing program 0 (id=2424):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f63"], 0x0, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)

3.069007469s ago: executing program 2 (id=2425):
socketpair(0x1e, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
close(r3)

2.648730853s ago: executing program 0 (id=2426):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)

2.343966436s ago: executing program 3 (id=2427):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fe00, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
shmctl$IPC_RMID(0x0, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r5, 0x34, 0x0, @void}, 0x10)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)
write$P9_RSTATu(r4, 0x0, 0x6e)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180))
socket$igmp(0x2, 0x3, 0x2)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c}, 0x38)

1.019166249s ago: executing program 3 (id=2428):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)

838.936661ms ago: executing program 0 (id=2429):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

284.734047ms ago: executing program 0 (id=2430):
syz_open_dev$sndpcmc(0x0, 0x0, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x4}}, 0x9)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f4897b}, 0xc)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r1, 0x0, 0x0)

49.850499ms ago: executing program 2 (id=2431):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

0s ago: executing program 7 (id=2432):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1004a, &(0x7f0000000a80)={[{@test_dummy_encryption}, {@jqfmt_vfsold}, {@nogrpid}, {@debug}, {@discard}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '\'!'}}, {@measure}, {@hash}]}, 0xf7, 0x44f, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
socket$unix(0x1, 0x2, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0x3)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = open(&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00', 0x80242, 0x0)
sendfile(r5, r5, 0x0, 0x800000009)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x2e0, 0x118, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xffffff, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffff], 'xfrm0\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0xc, 0x5, 0x12}, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x0, 0x1, [0x27, 0x2, 0x6, 0x9b95, 0x2, 0x1, 0x1, 0x0, 0xbac3, 0xfffb, 0x3, 0x4, 0x5, 0x60, 0x4, 0x7fff], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff0000ff, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00, 0xff000000], 'veth1_macvtap\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x3b, 0x40, 0x1, 0x21}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)

kernel console output (not intermixed with test programs):

 keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6
[  797.610802][T10495] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  798.809096][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  798.822200][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  798.835440][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'.
[  798.870396][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  798.883402][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  798.904494][T10608] device veth0_vlan entered promiscuous mode
[  798.937014][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  798.972113][T10959] loop3: detected capacity change from 0 to 256
[  798.981384][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  799.052491][T10608] device veth1_vlan entered promiscuous mode
[  799.086657][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  799.102110][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  799.117844][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  799.175564][ T4319] usb 9-1: USB disconnect, device number 24
[  799.184922][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  799.200058][ T4319] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  799.220900][ T4319] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  799.222060][T10608] device veth0_macvtap entered promiscuous mode
[  799.231024][ T4319] keyspan 9-1:1.0: device disconnected
[  799.373571][T10963] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  799.917946][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  799.967124][T10608] device veth1_macvtap entered promiscuous mode
[  801.079848][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.162642][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.203921][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.316491][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.371408][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.768881][T10987] netlink: 'syz.8.1440': attribute type 11 has an invalid length.
[  802.349796][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.372753][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  802.388435][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.407724][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  802.418611][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.439532][T10608] batman_adv: batadv0: Interface activated: batadv_slave_0
[  802.474937][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.514002][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.558540][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.575326][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.609681][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.687771][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.812148][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  803.097354][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  803.184180][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  803.210981][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  803.266548][ T9278] ffs_data_put(): freeing
[  803.287078][T10608] batman_adv: batadv0: Interface activated: batadv_slave_1
[  803.429651][T10608] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  803.438406][T10608] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  803.460243][T11004] loop3: detected capacity change from 0 to 256
[  803.467246][T10608] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  803.478170][T10608] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  803.493078][T11004] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  803.507006][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  803.530582][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  803.568244][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  803.597296][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  803.956409][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'.
[  804.063095][T11008] syz.3.1447: attempt to access beyond end of device
[  804.063095][T11008] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  804.077645][T11008] syz.3.1447: attempt to access beyond end of device
[  804.077645][T11008] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  804.212213][   T26] audit: type=1800 audit(1790256260.252:199): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1447" name="file1" dev="loop3" ino=1048729 res=0 errno=0
[  804.440338][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  804.478619][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  804.513510][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  804.606087][ T4773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  804.628257][ T4773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  804.662928][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  804.858093][T11022] loop3: detected capacity change from 0 to 1024
[  806.291194][T11039] loop3: detected capacity change from 0 to 128
[  807.469273][T11051] netlink: 'syz.0.1457': attribute type 11 has an invalid length.
[  807.547197][ T9641] ffs_data_put(): freeing
[  807.827879][T11062] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  807.871337][T11059] loop5: detected capacity change from 0 to 128
[  808.438684][T11063] loop3: detected capacity change from 0 to 256
[  808.492859][T11063] exfat: Deprecated parameter 'namecase'
[  808.498649][T11063] exfat: Deprecated parameter 'namecase'
[  808.567672][T11063] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  808.647645][T11070] Bluetooth: MGMT ver 1.22
[  808.741370][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  808.748263][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  808.910806][    T9] kworker/u4:0: attempt to access beyond end of device
[  808.910806][    T9] loop5: rw=1, sector=145, nr_sectors = 896 limit=128
[  810.230207][  T129] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  810.914660][  T129] usb 6-1: not running at top speed; connect to a high speed hub
[  810.933889][  T129] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  811.893908][T11109] netlink: 'syz.3.1471': attribute type 11 has an invalid length.
[  812.491223][  T129] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  812.504461][  T129] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  812.514195][  T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.640938][  T129] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  812.660309][T11113] Bluetooth: hci0: invalid length 0, exp 2 for type 8
[  812.690156][  T129] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[  812.697965][  T129] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  812.760077][  T129] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  812.860252][  T129] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  812.868024][  T129] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  812.895472][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'.
[  813.093481][  T129] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  813.211289][  T129] usb 6-1: USB disconnect, device number 4
[  813.227269][  T129] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  813.240154][  T129] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  813.257838][  T129] keyspan 6-1:1.0: device disconnected
[  813.317160][T11128] loop5: detected capacity change from 0 to 1024
[  813.584493][T11128] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  814.551516][T11128] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  814.618438][ T4289] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  816.165739][T10608] EXT4-fs (loop5): unmounting filesystem.
[  816.281623][T11158] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  817.413118][T11164] netlink: 'syz.5.1484': attribute type 11 has an invalid length.
[  818.037475][T11141] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  818.579776][T11180] loop3: detected capacity change from 0 to 256
[  818.620252][T11180] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  818.988177][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'.
[  819.004610][T11185] syz.3.1488: attempt to access beyond end of device
[  819.004610][T11185] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  819.019038][T11185] syz.3.1488: attempt to access beyond end of device
[  819.019038][T11185] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  819.034396][   T26] audit: type=1800 audit(1790256275.192:200): pid=11185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1488" name="file1" dev="loop3" ino=1048739 res=0 errno=0
[  819.034447][T11185] [syz.3.1488/11185] FS: loop3 File: /file1 would truncate fibmap result
[  821.426111][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'.
[  822.113458][T11216] bridge0: port 2(bridge_slave_1) entered disabled state
[  822.237298][T11216] device bridge_slave_1 left promiscuous mode
[  822.243638][T11216] bridge0: port 2(bridge_slave_1) entered disabled state
[  822.482137][T11226] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  823.207944][T11227] netlink: 'syz.8.1497': attribute type 11 has an invalid length.
[  823.287023][ T9278] ffs_data_put(): freeing
[  823.889438][ T4320] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  824.694928][ T4320] usb 6-1: not running at top speed; connect to a high speed hub
[  824.755182][ T4320] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  824.802174][ T4320] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  824.839365][ T4320] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[  825.750277][ T4320] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  825.760612][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.835631][ T4320] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  825.904152][ T4320] keyspan 6-1:1.0: unsupported endpoint type 0
[  825.936608][ T4320] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  825.992760][ T4320] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  826.062237][ T4320] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  826.117906][ T4320] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  826.175116][ T4320] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  826.819284][ T4369] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  827.020858][ T4369] usb 9-1: config 1 has an invalid interface number: 3 but max is 0
[  828.235774][ T4369] usb 9-1: config 1 has no interface number 0
[  828.286496][ T4369] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  828.335425][ T4369] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.455247][ T4369] usb 9-1: Product: syz
[  828.479415][ T4369] usb 9-1: Manufacturer: syz
[  828.484080][ T4369] usb 9-1: SerialNumber: syz
[  828.495025][ T4405] usb 6-1: USB disconnect, device number 5
[  828.584963][ T4405] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  828.662713][ T4405] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  828.734664][ T4405] keyspan 6-1:1.0: device disconnected
[  828.767173][ T4369] usb 9-1: 3:1 : does not exist
[  828.773888][ T4369] usb 9-1: 3:2 : does not exist
[  828.945669][ T4369] usb 9-1: USB disconnect, device number 25
[  829.638393][T11287] netlink: 'syz.5.1511': attribute type 11 has an invalid length.
[  830.879369][ T4369] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  831.089330][ T4369] usb 9-1: Using ep0 maxpacket: 8
[  831.098051][ T4369] usb 9-1: config 0 has an invalid interface number: 31 but max is 0
[  831.248210][T11307] loop3: detected capacity change from 0 to 256
[  831.255793][ T4369] usb 9-1: config 0 has no interface number 0
[  831.277069][T11307] exfat: Deprecated parameter 'namecase'
[  831.999268][T11307] exfat: Deprecated parameter 'namecase'
[  832.025682][ T4369] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  832.087173][T11307] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  832.568098][ T4369] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.576184][ T4369] usb 9-1: Product: syz
[  832.603071][ T4369] usb 9-1: Manufacturer: syz
[  832.619217][ T4369] usb 9-1: SerialNumber: syz
[  832.649997][ T4369] usb 9-1: config 0 descriptor??
[  832.918446][ T4369] usb 9-1: Found UVC 0.04 device syz (046d:08c3)
[  832.937681][ T4369] usb 9-1: No valid video chain found.
[  833.016682][ T4369] usb 9-1: USB disconnect, device number 26
[  833.569445][ T4318] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  833.780176][ T4318] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  833.811449][ T4318] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  833.829324][  T129] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  833.872013][ T4318] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[  833.906787][ T4318] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  833.925961][ T4318] usb 1-1: config 0 interface 0 has no altsetting 0
[  833.933005][ T4318] usb 1-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.00
[  833.963715][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.016207][ T4318] usb 1-1: config 0 descriptor??
[  834.025669][T11317] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  834.040185][  T129] usb 4-1: not running at top speed; connect to a high speed hub
[  834.080859][  T129] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  834.131717][  T129] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  834.189331][  T129] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[  834.229400][  T129] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  834.254494][T11331] loop8: detected capacity change from 0 to 2048
[  834.273319][  T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.307895][T11331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  834.359325][  T129] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  834.401143][  T129] keyspan 4-1:1.0: unsupported endpoint type 0
[  834.429461][  T129] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  834.510988][ T4318] apple 0003:05AC:024D.0008: unknown main item tag 0x2
[  834.612164][  T129] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  834.631091][ T4318] apple 0003:05AC:024D.0008: unknown main item tag 0x0
[  834.632120][  T129] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  834.700022][ T4318] apple 0003:05AC:024D.0008: unknown main item tag 0x0
[  834.830884][ T4318] apple 0003:05AC:024D.0008: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling
[  835.074272][ T4318] input: HID 05ac:024d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:024D.0008/input/input15
[  835.258531][  T129] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  835.276218][  T129] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  835.447426][ T4318] apple 0003:05AC:024D.0008: input,hidraw0: USB HID v0.40 Keyboard [HID 05ac:024d] on usb-dummy_hcd.0-1/input0
[  835.567859][ T4318] usb 1-1: USB disconnect, device number 11
[  836.307889][T11349] fido_id[11349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  836.550461][T11360] loop5: detected capacity change from 0 to 128
[  836.607591][T11360] FAT-fs (loop5): bogus number of reserved sectors
[  836.658279][T11360] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  836.773057][T11360] FAT-fs (loop5): Can't find a valid FAT filesystem
[  836.877051][ T4320] usb 4-1: USB disconnect, device number 4
[  836.907168][ T4320] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  837.037589][ T4320] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  837.080977][ T4320] keyspan 4-1:1.0: device disconnected
[  837.142741][T11360] loop5: detected capacity change from 0 to 512
[  837.314230][T11360] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  837.391911][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1519'.
[  838.100934][T11360] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  838.194891][T11360] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  839.693776][T11396] loop3: detected capacity change from 0 to 128
[  839.826157][T11396] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  839.917970][T10608] EXT4-fs (loop5): unmounting filesystem.
[  839.974686][T11396] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  840.269916][T11404] loop5: detected capacity change from 0 to 256
[  840.339775][T11404] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  840.404186][T11404] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  841.107917][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1537'.
[  842.889727][   T26] audit: type=1800 audit(1790256299.052:201): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1531" name="file1" dev="loop3" ino=94 res=0 errno=0
[  846.211270][T11470] loop5: detected capacity change from 0 to 1024
[  847.051615][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1552'.
[  847.161929][T11494] loop5: detected capacity change from 0 to 128
[  848.065671][T11502] process 'syz.0.1555' launched './file0' with NULL argv: empty string added
[  848.486434][T11517] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  849.778953][T11523] loop5: detected capacity change from 0 to 512
[  849.817057][T11523] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  849.963210][T11523] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  849.989389][T11523] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  849.993523][T11535] loop8: detected capacity change from 0 to 256
[  850.040291][T11535] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  850.049354][T10495] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  850.219431][  T129] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  850.265493][T10495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  850.296953][T10495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  850.400487][T10608] EXT4-fs (loop5): unmounting filesystem.
[  850.470674][  T129] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  850.491809][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1566'.
[  850.508177][T11538] syz.8.1566: attempt to access beyond end of device
[  850.508177][T11538] loop8: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  850.523084][T11538] syz.8.1566: attempt to access beyond end of device
[  850.523084][T11538] loop8: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  850.538609][T11538] [syz.8.1566/11538] FS: loop8 File: /file1 would truncate fibmap result
[  850.568688][   T26] audit: type=1800 audit(1790256306.692:202): pid=11538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1566" name="file1" dev="loop8" ino=1048746 res=0 errno=0
[  850.989253][  T129] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  850.999386][T10495] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  851.013433][  T129] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  851.023340][T10495] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  851.033810][  T129] usb 1-1: New USB device found, idVendor=0a5c, idProduct=21e8, bcdDevice= 1.00
[  851.059579][T10495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.079342][  T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.092899][T10495] usb 4-1: config 0 descriptor??
[  851.109793][T11531] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  851.117067][T11531] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  851.507096][T10495] plantronics 0003:047F:FFFF.0009: unbalanced delimiter at end of report description
[  851.542470][T10495] plantronics 0003:047F:FFFF.0009: parse failed
[  851.569343][T10495] plantronics: probe of 0003:047F:FFFF.0009 failed with error -22
[  852.199425][T11525] device-mapper: ioctl: Invalid data size in the ioctl structure: 1819214136
[  852.337152][ T4318] usb 4-1: USB disconnect, device number 5
[  853.336400][ T4289] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  853.973373][T10495] usb 1-1: USB disconnect, device number 12
[  854.220226][T11581] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_fnek_si��syz ]
[  854.285631][T11581] ecryptfs_parse_options: eCryptfs: unrecognized option [��n��b%�/���+7zὛ����q�ݔ���X]K)]|������������گ{��]���Ƨ�:u���S�n����vU��N��Sz�*��L�^]��oU���q*z��Kۃ��S��n9N�~Ʃ����R��iy)�/���k�8h�݊�i��&.܍�_��S){�j�������AӴ�=*��������Q}5j�������Vt��2�D+~���dfZ_s�ڕ4�w��Y~g�>s4��X9>�:ͧ�S��Ĵ�Ψ}>�"�E��kъg�ϯ�'��L�/ƫ/?�?�V��q���͸�=����oo���_��]
[  854.389335][T11581] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes��)YJyptfs_ke���F�!�ݒ~>�}�
[  854.489240][ T4320] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  854.872815][T11581] Error parsing options; rc = [-22]
[  854.928080][T11587] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10)
[  855.067574][   T26] audit: type=1326 audit(1790256311.222:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11584 comm="syz.3.1581" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f631f79e159 code=0x0
[  855.109266][ T4320] usb 6-1: not running at top speed; connect to a high speed hub
[  855.368462][ T4320] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  855.412210][ T4320] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  855.481292][ T4320] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  855.984336][ T4320] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  855.999238][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.023185][ T4320] usb 6-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  856.226753][ T4320] usb 6-1: Failed to query (GET_INFO) UVC control 2 on unit 1: 0 (exp. 1).
[  856.632850][ T4320] usb 6-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1).
[  856.649539][ T4320] usb 6-1: No streaming interface found for terminal 2.
[  856.665463][ T4320] usb 6-1: USB disconnect, device number 6
[  857.229606][T11611] loop5: detected capacity change from 0 to 512
[  858.311725][T11629] loop3: detected capacity change from 0 to 1024
[  858.366724][T11629] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  858.443067][T11629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  858.678618][ T9641] EXT4-fs (loop3): unmounting filesystem.
[  861.215183][T11669] loop8: detected capacity change from 0 to 512
[  861.284519][T11669] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  861.380479][T11669] EXT4-fs (loop8): 1 truncate cleaned up
[  861.418705][T11669] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  862.181412][ T6614] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /210/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  862.277396][ T6614] EXT4-fs (loop8): Remounting filesystem read-only
[  862.399947][ T6614] EXT4-fs error (device loop8): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  862.438456][ T6614] EXT4-fs (loop8): Remounting filesystem read-only
[  862.450255][T11691] device-mapper: ioctl: Unable to rename non-existent device,  to 	
[  862.460449][ T6614] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /210/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  862.546639][ T6614] EXT4-fs (loop8): Remounting filesystem read-only
[  862.569548][ T6614] EXT4-fs error (device loop8): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  862.615015][ T6614] EXT4-fs (loop8): Remounting filesystem read-only
[  862.621994][ T6614] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /210/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  862.644561][ T6614] EXT4-fs (loop8): Remounting filesystem read-only
[  862.651488][ T6614] EXT4-fs error (device loop8): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  862.704890][ T6614] EXT4-fs (loop8): Remounting filesystem read-only
[  862.714683][ T6614] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /210/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  862.767638][ T6614] EXT4-fs (loop8): Remounting filesystem read-only
[  862.779674][ T6614] EXT4-fs error (device loop8): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  863.924848][ T6614] EXT4-fs (loop8): Remounting filesystem read-only
[  863.957921][ T6614] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /210/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  863.997457][ T6614] EXT4-fs (loop8): Remounting filesystem read-only
[  864.004498][ T6614] EXT4-fs error (device loop8): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  865.807217][   T47] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.131077][   T47] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.424231][   T47] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.624889][   T47] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.642341][T11743] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1611'.
[  869.112304][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  869.122555][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  869.131126][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  869.140473][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  869.179822][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  869.187132][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  869.295852][ T9128] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  869.453328][T11766] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  870.163116][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  870.169504][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  870.189039][ T9128] usb 4-1: not running at top speed; connect to a high speed hub
[  870.201162][ T9128] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  870.229352][ T9128] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  870.279504][ T9128] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[  870.319309][ T9128] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  870.328408][ T9128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.488190][ T9128] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  870.555412][ T9128] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  870.589558][ T9128] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  870.640860][ T9128] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  870.658868][ T9128] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  870.670520][ T9128] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  870.723453][ T9128] usb 4-1: USB disconnect, device number 6
[  870.750329][ T9128] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  870.791318][ T9128] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  870.822922][ T9128] keyspan 4-1:1.0: device disconnected
[  871.412425][ T4291] Bluetooth: hci0: command 0x0409 tx timeout
[  871.999896][T11782] netlink: 'syz.0.1621': attribute type 11 has an invalid length.
[  872.887470][T11790] loop3: detected capacity change from 0 to 128
[  872.957430][T11790] FAT-fs (loop3): bogus number of reserved sectors
[  872.991522][T11790] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  873.042425][T11790] FAT-fs (loop3): Can't find a valid FAT filesystem
[  873.181218][T11790] loop3: detected capacity change from 0 to 512
[  873.247883][T11790] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  874.415982][ T4291] Bluetooth: hci0: command 0x041b tx timeout
[  874.444809][T11790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  874.508640][T11790] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  874.804022][ T9641] EXT4-fs (loop3): unmounting filesystem.
[  875.738464][T11759] chnl_net:caif_netlink_parms(): no params data found
[  876.345946][T11759] bridge0: port 1(bridge_slave_0) entered blocking state
[  876.409426][T11759] bridge0: port 1(bridge_slave_0) entered disabled state
[  876.417865][T11759] device bridge_slave_0 entered promiscuous mode
[  876.479423][ T4291] Bluetooth: hci0: command 0x040f tx timeout
[  876.686232][T11759] bridge0: port 2(bridge_slave_1) entered blocking state
[  876.696285][T11759] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.721304][T11759] device bridge_slave_1 entered promiscuous mode
[  877.015055][T11759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  877.255576][T11759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  877.421835][T11759] team0: Port device team_slave_0 added
[  877.972991][T11839] netlink: 'syz.3.1636': attribute type 11 has an invalid length.
[  878.559127][ T4291] Bluetooth: hci0: command 0x0419 tx timeout
[  878.781011][T11759] team0: Port device team_slave_1 added
[  878.938086][   T47] device hsr_slave_0 left promiscuous mode
[  878.969595][   T47] device hsr_slave_1 left promiscuous mode
[  878.986452][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  879.017017][   T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[  879.038283][T11844] loop5: detected capacity change from 0 to 4096
[  879.088696][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  879.124308][   T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[  879.181460][T11844] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  879.226483][   T47] device bridge_slave_1 left promiscuous mode
[  879.233471][   T47] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.388800][   T47] device bridge_slave_0 left promiscuous mode
[  879.409405][   T47] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.491570][T11853] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present
[  879.571319][   T47] device veth1_macvtap left promiscuous mode
[  879.577611][   T47] device veth0_macvtap left promiscuous mode
[  879.604958][   T47] device veth1_vlan left promiscuous mode
[  879.629689][T11853] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  879.644955][   T47] device veth0_vlan left promiscuous mode
[  879.749306][T11853] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1637: Failed to acquire dquot type 1
[  879.856749][T11853] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  880.479583][T11868] loop3: detected capacity change from 0 to 512
[  880.586751][T11868] EXT4-fs: Ignoring removed bh option
[  880.607620][T11868] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  880.690083][T11868] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  882.975098][T11894] netlink: 'syz.0.1647': attribute type 11 has an invalid length.
[  884.640296][T11905] loop3: detected capacity change from 0 to 128
[  884.727624][T11905] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  884.747203][T11905] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  884.967796][ T9641] EXT4-fs (loop3): unmounting filesystem.
[  885.072981][T11909] loop3: detected capacity change from 0 to 256
[  885.170867][T11909] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  885.281778][   T47] team0 (unregistering): Port device team_slave_1 removed
[  886.504504][   T47] team0 (unregistering): Port device team_slave_0 removed
[  886.618043][   T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  886.715942][   T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  888.712480][   T47] bond0 (unregistering): Released all slaves
[  890.018862][T11759] batman_adv: batadv0: Adding interface: batadv_slave_0
[  890.039184][T11759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  890.109229][T11759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  890.270971][T11759] batman_adv: batadv0: Adding interface: batadv_slave_1
[  890.277964][T11759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  890.379214][T11759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  890.542373][T11759] device hsr_slave_0 entered promiscuous mode
[  890.596356][T11759] device hsr_slave_1 entered promiscuous mode
[  890.630966][T11759] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  890.638569][T11759] Cannot create hsr debugfs directory
[  892.906995][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  892.925081][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  892.934315][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  892.943549][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  892.956794][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  892.976354][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  894.530237][T11982] netlink: 'syz.3.1674': attribute type 11 has an invalid length.
[  895.108438][ T4289] Bluetooth: hci4: command 0x0409 tx timeout
[  895.233580][   T47] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.692182][   T47] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.967448][   T47] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.172050][   T47] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.392558][T11777] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  896.644806][T11777] usb 1-1: config 0 has no interfaces?
[  896.727163][T11777] usb 1-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40
[  896.883037][T11777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.950287][T11777] usb 1-1: Product: syz
[  896.954514][T11777] usb 1-1: Manufacturer: syz
[  896.969378][T11777] usb 1-1: SerialNumber: syz
[  896.980452][T11777] usb 1-1: config 0 descriptor??
[  897.052125][T11759] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  897.760965][ T4289] Bluetooth: hci4: command 0x041b tx timeout
[  897.780597][T11759] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  897.805106][T11777] usb 1-1: USB disconnect, device number 13
[  897.939302][T11759] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  898.006222][T11759] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  898.091082][T11969] chnl_net:caif_netlink_parms(): no params data found
[  899.700285][T11759] 8021q: adding VLAN 0 to HW filter on device bond0
[  899.707654][T11969] bridge0: port 1(bridge_slave_0) entered blocking state
[  899.719407][T11969] bridge0: port 1(bridge_slave_0) entered disabled state
[  899.766870][T11969] device bridge_slave_0 entered promiscuous mode
[  899.807242][T11969] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.288921][T12040] netlink: 'syz.0.1683': attribute type 11 has an invalid length.
[  900.879176][ T4289] Bluetooth: hci4: command 0x040f tx timeout
[  900.909551][T11969] bridge0: port 2(bridge_slave_1) entered disabled state
[  900.950548][T11969] device bridge_slave_1 entered promiscuous mode
[  901.138043][T12045] loop3: detected capacity change from 0 to 1024
[  901.167575][T11969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  901.361543][T11969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  901.381994][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  901.403888][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  901.531733][T11969] team0: Port device team_slave_0 added
[  901.541383][T11759] 8021q: adding VLAN 0 to HW filter on device team0
[  901.632676][T11969] team0: Port device team_slave_1 added
[  901.785629][T12056] loop3: detected capacity change from 0 to 256
[  901.796285][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  901.823416][T12056] exfat: Deprecated parameter 'namecase'
[  901.825355][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  901.866824][ T4687] bridge0: port 1(bridge_slave_0) entered blocking state
[  901.874018][ T4687] bridge0: port 1(bridge_slave_0) entered forwarding state
[  901.876064][T12056] exfat: Deprecated parameter 'namecase'
[  901.926788][T12056] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  901.939711][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  901.940346][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  902.019760][ T4687] bridge0: port 2(bridge_slave_1) entered blocking state
[  902.026918][ T4687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  902.069838][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  902.206373][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  902.232854][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  902.785011][T11969] batman_adv: batadv0: Adding interface: batadv_slave_0
[  902.824023][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  902.950161][ T4289] Bluetooth: hci4: command 0x0419 tx timeout
[  902.973778][T12069] loop3: detected capacity change from 0 to 128
[  903.597087][T12069] FAT-fs (loop3): bogus number of reserved sectors
[  903.608003][T12069] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  903.618688][T11969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  903.629310][T12069] FAT-fs (loop3): Can't find a valid FAT filesystem
[  903.704940][T12069] loop3: detected capacity change from 0 to 512
[  903.769901][T12069] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  903.888426][T12069] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  903.955322][T12069] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  904.111939][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  904.142394][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  904.320065][T11969] batman_adv: batadv0: Adding interface: batadv_slave_1
[  904.351288][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  904.765162][T11969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  904.795886][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  904.813797][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  904.832795][ T9641] EXT4-fs (loop3): unmounting filesystem.
[  904.840988][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  905.495656][T12090] netlink: 'syz.0.1692': attribute type 11 has an invalid length.
[  906.453856][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  906.465306][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  906.495635][T11969] device hsr_slave_0 entered promiscuous mode
[  906.508265][T11969] device hsr_slave_1 entered promiscuous mode
[  906.531039][T11969] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  906.544016][T11969] Cannot create hsr debugfs directory
[  906.675829][   T47] device hsr_slave_0 left promiscuous mode
[  906.742868][   T47] device hsr_slave_1 left promiscuous mode
[  906.761924][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  906.775021][   T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[  906.784275][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  906.796223][   T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[  906.806092][   T47] device bridge_slave_1 left promiscuous mode
[  906.817183][   T47] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.826816][   T47] device bridge_slave_0 left promiscuous mode
[  906.833911][   T47] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.863774][   T47] device veth1_macvtap left promiscuous mode
[  906.871370][   T47] device veth0_macvtap left promiscuous mode
[  906.877627][   T47] device veth1_vlan left promiscuous mode
[  906.884447][   T47] device veth0_vlan left promiscuous mode
[  907.438474][T12117] loop3: detected capacity change from 0 to 512
[  907.504398][T12117] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  907.656272][T12117] EXT4-fs (loop3): 1 truncate cleaned up
[  907.674446][T12117] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  907.964484][ T9641] EXT4-fs (loop3): unmounting filesystem.
[  908.888719][T12129] futex_wake_op: syz.3.1697 tries to shift op by 144; fix this program
[  909.026853][   T47] team0 (unregistering): Port device team_slave_1 removed
[  909.199592][   T47] team0 (unregistering): Port device team_slave_0 removed
[  909.304713][   T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  909.494721][   T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  910.936290][   T47] bond0 (unregistering): Released all slaves
[  911.106945][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  911.117291][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  911.128726][T11759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  911.262848][T12150] loop3: detected capacity change from 0 to 128
[  911.812371][T12155] netlink: 'syz.0.1701': attribute type 11 has an invalid length.
[  912.488017][T12150] FAT-fs (loop3): bogus number of reserved sectors
[  912.511176][T12150] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  912.565756][T12150] FAT-fs (loop3): Can't find a valid FAT filesystem
[  912.781178][T12150] loop3: detected capacity change from 0 to 512
[  912.814339][T12150] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  913.662302][T12150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  913.711125][T12150] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  913.886302][ T9641] EXT4-fs (loop3): unmounting filesystem.
[  914.131696][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  914.155570][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  914.181497][T11759] 8021q: adding VLAN 0 to HW filter on device batadv0
[  914.470207][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  914.494947][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  914.791933][T11759] device veth0_vlan entered promiscuous mode
[  914.845115][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  915.475629][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  915.535197][T11759] device veth1_vlan entered promiscuous mode
[  915.577354][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  915.593576][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  916.508993][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  916.534106][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  916.654450][T11759] device veth0_macvtap entered promiscuous mode
[  917.358861][T11759] device veth1_macvtap entered promiscuous mode
[  917.502554][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.540327][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.580293][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.623388][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.658527][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.723952][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.744228][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.788738][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.830881][T11759] batman_adv: batadv0: Interface activated: batadv_slave_0
[  917.838403][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  917.873929][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  917.896787][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  917.933983][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  917.980968][T11969] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  918.020505][T11969] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  918.052162][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  918.069259][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.099264][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  918.132070][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.168831][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  918.202297][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.243558][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  918.289860][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.324452][T11759] batman_adv: batadv0: Interface activated: batadv_slave_1
[  918.344051][T11969] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  918.365510][T11969] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  918.465822][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  918.497379][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  918.528773][T11759] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  918.558303][T11759] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  918.589367][T11759] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  918.617474][T11759] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  919.825911][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  919.846078][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  919.895305][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  919.948461][T11969] 8021q: adding VLAN 0 to HW filter on device bond0
[  919.986003][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  920.000813][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  920.036902][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  920.045306][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  920.109837][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  920.132647][T11969] 8021q: adding VLAN 0 to HW filter on device team0
[  920.210641][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  920.270119][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  920.306158][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state
[  920.313386][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  920.963569][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  921.013146][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  921.046022][T12247] loop2: detected capacity change from 0 to 512
[  921.068567][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  921.110160][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state
[  921.117298][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  921.150519][T12247] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  921.177599][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  921.210316][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  921.240875][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  921.363787][T12247] EXT4-fs (loop2): 1 truncate cleaned up
[  921.379336][T12247] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  921.422466][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  921.516742][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  921.570485][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  921.615603][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  921.680014][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  921.734229][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  921.778179][T11969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  921.804370][T11759] EXT4-fs (loop2): unmounting filesystem.
[  921.814976][T11969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  921.864335][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  921.890209][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  922.701685][T12290] loop3: detected capacity change from 0 to 128
[  922.780522][T12290] FAT-fs (loop3): bogus number of reserved sectors
[  922.796523][T12280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  922.889734][T12290] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  922.917953][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  922.932188][T12290] FAT-fs (loop3): Can't find a valid FAT filesystem
[  922.939704][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  923.000277][T11969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  923.092890][T12290] loop3: detected capacity change from 0 to 512
[  923.240255][T12290] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  923.391213][T12290] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  923.629806][T12290] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  924.164758][ T9641] EXT4-fs (loop3): unmounting filesystem.
[  925.776269][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  925.812506][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  925.889658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  925.909972][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  925.941589][T11969] device veth0_vlan entered promiscuous mode
[  925.955229][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  926.002169][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  926.034101][T11969] device veth1_vlan entered promiscuous mode
[  926.222312][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  926.489668][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  927.079613][T12342] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1735'.
[  927.312441][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  927.374756][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  927.412956][T11969] device veth0_macvtap entered promiscuous mode
[  927.435875][T12342] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  927.445427][T12342] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  927.456240][T12342] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  927.456803][T11969] device veth1_macvtap entered promiscuous mode
[  927.985782][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.006712][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.088525][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.120367][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.215656][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.256859][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.287410][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.307627][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.347292][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.378509][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.435066][T11969] batman_adv: batadv0: Interface activated: batadv_slave_0
[  928.522294][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  928.540089][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  928.588083][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.679248][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.769290][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.799376][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.822287][T12371] loop2: detected capacity change from 0 to 128
[  928.839268][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.890367][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.929222][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.942562][T12371] FAT-fs (loop2): bogus number of reserved sectors
[  929.009245][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.070424][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  929.085563][T12371] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  929.165234][T12371] FAT-fs (loop2): Can't find a valid FAT filesystem
[  929.176467][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.210722][T11969] batman_adv: batadv0: Interface activated: batadv_slave_1
[  929.297762][T12371] loop2: detected capacity change from 0 to 512
[  930.053516][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  930.070106][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  930.145195][T11969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  930.165225][T12371] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  930.179284][T11969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  930.249340][T11969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  930.258179][T11969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  930.382823][T12371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  930.523138][T12371] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  930.750518][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.774880][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.812492][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  930.838716][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.848816][T11759] EXT4-fs (loop2): unmounting filesystem.
[  930.884995][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  931.110498][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  931.305055][T12402] loop3: detected capacity change from 0 to 1024
[  931.457246][T12402] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  931.581640][T12402] EXT4-fs (loop3): orphan cleanup on readonly fs
[  931.595197][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  931.608028][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  932.064906][T12402] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.1749: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0)
[  932.179718][T12402] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.1749: Bad quota inode: 3, type: 0
[  932.239912][T12402] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  932.374407][T12402] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  932.523939][T12402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  933.436468][T12425] loop4: detected capacity change from 0 to 128
[  933.462314][T12402] netlink: 'syz.3.1749': attribute type 4 has an invalid length.
[  933.522548][T12425] FAT-fs (loop4): Unrecognized mount option "��������" or missing value
[  933.654440][T12425] loop4: detected capacity change from 0 to 2048
[  933.879101][T12425]  loop4: p1 < > p2 p3 < > p4 < p5 >
[  933.884641][T12425] loop4: partition table partially beyond EOD, truncated
[  933.919675][T12425] loop4: p1 start 3405774849 is beyond EOD, truncated
[  934.611415][T12425] loop4: p3 start 4225 is beyond EOD, truncated
[  934.670254][ T9641] EXT4-fs (loop3): unmounting filesystem.
[  936.391334][T12451] loop4: detected capacity change from 0 to 764
[  937.296254][T12459] netlink: 'syz.2.1763': attribute type 11 has an invalid length.
[  939.240911][T12477] loop3: detected capacity change from 0 to 128
[  939.383719][T12477] FAT-fs (loop3): Unrecognized mount option "��������" or missing value
[  940.126971][T12486] loop4: detected capacity change from 0 to 512
[  940.236525][T12486] EXT4-fs (loop4): Test dummy encryption mode enabled
[  940.289227][T12486] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  940.328487][T12477] loop3: detected capacity change from 0 to 2048
[  940.410450][T12486] EXT4-fs (loop4): 1 truncate cleaned up
[  940.426691][T12486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  940.479651][T12486] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #15: comm syz.4.1770: bad extra_isize 62 (inode size 256)
[  940.499742][T12486] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #15: comm syz.4.1770: bad extra_isize 62 (inode size 256)
[  940.529623][T12494] EXT4-fs (loop4): shut down requested (1)
[  940.550517][T12486] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #15: comm syz.4.1770: bad extra_isize 62 (inode size 256)
[  940.699817][T12486] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -5)
[  941.012594][T11969] EXT4-fs (loop4): unmounting filesystem.
[  943.479473][T12520] netlink: 'syz.0.1774': attribute type 11 has an invalid length.
[  943.909894][T12531] loop2: detected capacity change from 0 to 256
[  946.289109][T11777] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  946.519476][T11777] usb 5-1: Using ep0 maxpacket: 32
[  946.526419][T11777] usb 5-1: config 64 has an invalid interface number: 102 but max is 0
[  946.599281][T11777] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  946.625697][T11777] usb 5-1: config 64 has no interface number 0
[  946.641812][T11777] usb 5-1: config 64 interface 102 has no altsetting 0
[  946.662668][T12546] loop2: detected capacity change from 0 to 128
[  946.690635][T11777] usb 5-1: New USB device found, idVendor=2899, idProduct=012c, bcdDevice=fd.42
[  946.729749][T11777] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  946.737972][T11777] usb 5-1: Product: syz
[  946.743633][T12546] FAT-fs (loop2): Unrecognized mount option "��������" or missing value
[  946.789292][T11777] usb 5-1: SerialNumber: syz
[  946.858173][T12546] loop2: detected capacity change from 0 to 2048
[  947.042956][T11777] usb 5-1: bad CDC descriptors
[  947.059306][T11777] gspca_main: spca500-2.14.0 probing 2899:012c
[  947.849358][T11777] usb 5-1: USB disconnect, device number 14
[  948.090289][T12560] loop2: detected capacity change from 0 to 512
[  948.180310][T12560] ext4: Unknown parameter 'smackfstransmute'
[  948.598962][T12566] ip6t_REJECT: ECHOREPLY is not supported
[  952.154438][T12588] loop2: detected capacity change from 0 to 512
[  952.327871][T12588] EXT4-fs (loop2): orphan cleanup on readonly fs
[  952.358255][T12588] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.1790: ea_inode with extended attributes
[  952.434214][T12588] EXT4-fs (loop2): Remounting filesystem read-only
[  952.449537][T12588] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1790: error while reading EA inode 11 err=-117
[  952.479679][T12588] EXT4-fs (loop2): Remounting filesystem read-only
[  952.510411][T12588] EXT4-fs (loop2): 1 orphan inode deleted
[  952.557411][T12588] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  952.799249][T11777] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  952.989346][T11777] usb 4-1: Using ep0 maxpacket: 8
[  952.995698][T11777] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  953.009566][T12604] netlink: 'syz.4.1792': attribute type 11 has an invalid length.
[  953.055331][T11777] usb 4-1: config 0 has no interface number 0
[  953.070385][T11759] EXT4-fs (loop2): unmounting filesystem.
[  953.119748][T11777] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  953.150679][T11777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.169918][T11777] usb 4-1: Product: syz
[  953.229294][T11777] usb 4-1: Manufacturer: syz
[  953.970091][T11777] usb 4-1: SerialNumber: syz
[  954.017900][T11777] usb 4-1: config 0 descriptor??
[  954.271696][T11777] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[  954.278085][T11777] usb 4-1: No valid video chain found.
[  954.502475][ T4369] usb 4-1: USB disconnect, device number 7
[  955.049292][ T4279] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  955.241306][ T4279] usb 3-1: unable to get BOS descriptor or descriptor too short
[  955.319377][ T4279] usb 3-1: not running at top speed; connect to a high speed hub
[  955.365036][ T4279] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  955.899411][ T4279] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  955.982361][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.039228][ T4279] usb 3-1: Product: syz
[  956.043798][ T4279] usb 3-1: Manufacturer: syz
[  956.048421][ T4279] usb 3-1: SerialNumber: syz
[  956.337851][ T4279] usb 3-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  957.036306][ T4369] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  957.079342][ T4279] usb 3-1: found format II with max.bitrate = 512, frame size=4095
[  957.128166][ T4279] usb 3-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  957.173081][ T4279] usb 3-1: found format II with max.bitrate = 512, frame size=4095
[  957.229651][ T4279] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  957.259350][ T4369] usb 5-1: Using ep0 maxpacket: 16
[  957.289310][ T4369] usb 5-1: unable to get BOS descriptor or descriptor too short
[  957.318731][ T4279] usb 3-1: USB disconnect, device number 8
[  957.361636][ T4369] usb 5-1: unable to read config index 0 descriptor/start: -71
[  957.459391][ T4369] usb 5-1: can't read configurations, error -71
[  958.723977][T12659] udevd[12659]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  958.845524][T12662] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  959.521442][T12681] loop4: detected capacity change from 0 to 128
[  961.034872][   T47] kworker/u4:3: attempt to access beyond end of device
[  961.034872][   T47] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[  962.729403][T12706] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1819'.
[  962.789699][T12706] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1819'.
[  964.162163][T12711] loop4: detected capacity change from 0 to 128
[  964.328090][T12711] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  966.198506][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1829'.
[  967.786108][T12756] loop3: detected capacity change from 0 to 128
[  967.951404][T12659] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  970.672572][T12781] loop3: detected capacity change from 0 to 128
[  970.740832][T12659] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  970.831768][T12784] loop2: detected capacity change from 0 to 128
[  970.884072][T12784] FAT-fs (loop2): Unrecognized mount option "��������" or missing value
[  970.995823][T12784] loop2: detected capacity change from 0 to 2048
[  971.074221][T12784]  loop2: p1 < > p2 p3 < > p4 < p5 >
[  971.079631][T12784] loop2: partition table partially beyond EOD, truncated
[  971.087001][T12784] loop2: p1 start 3405774849 is beyond EOD, truncated
[  971.140465][T12784] loop2: p3 start 4225 is beyond EOD, truncated
[  971.447557][T11903] udevd[11903]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  971.467534][T12670] udevd[12670]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  971.487131][T12659] udevd[12659]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  975.622729][T12845] Config c/1 of g1 needs at least one function.
[  975.629418][T12845] udc dummy_udc.0: failed to start g1: -22
[  975.635301][T12845] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  975.648134][T12845] UDC core: g1: couldn't find an available UDC or it's busy
[  976.812962][T12853] loop4: detected capacity change from 0 to 256
[  976.910899][T12853] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  978.138315][T12873] loop2: detected capacity change from 0 to 512
[  978.150314][T12873] ext4: Unknown parameter 'smackfstransmute'
[  978.426159][T12659] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  979.735590][T12883] loop3: detected capacity change from 0 to 128
[  979.782981][T12885] loop2: detected capacity change from 0 to 128
[  979.838490][T12659] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  979.863669][T12883] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  979.893587][T12883] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  979.902857][T12885] FAT-fs (loop2): bogus number of reserved sectors
[  979.966915][T12885] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  980.109205][T12885] FAT-fs (loop2): Can't find a valid FAT filesystem
[  981.061067][T12902] loop4: detected capacity change from 0 to 1024
[  983.167341][T12924] loop2: detected capacity change from 0 to 1024
[  983.376786][T12900] netlink: 'syz.3.1868': attribute type 11 has an invalid length.
[  985.134841][T11759] hfsplus: node 4:3 still has 2 user(s)!
[  985.299502][T12939] loop2: detected capacity change from 0 to 128
[  985.333944][T12939] FAT-fs (loop2): bogus number of reserved sectors
[  985.368275][T12939] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  985.414227][T12939] FAT-fs (loop2): Can't find a valid FAT filesystem
[  985.503389][T12939] loop2: detected capacity change from 0 to 512
[  985.557972][T12939] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  985.647000][T12939] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  985.692323][T12939] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  985.907100][T11759] EXT4-fs (loop2): unmounting filesystem.
[  986.694859][T12964] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6330] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12964]
[  987.540597][T11777] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  989.342315][T11777] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  989.374345][T11777] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  989.426239][T11777] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[  989.460306][T11777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.815442][T13004] loop3: detected capacity change from 0 to 128
[  989.892856][T13004] FAT-fs (loop3): bogus number of reserved sectors
[  989.920255][T13004] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  989.931476][T13004] FAT-fs (loop3): Can't find a valid FAT filesystem
[  990.001883][T13004] loop3: detected capacity change from 0 to 512
[  990.074199][T13004] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  990.332236][T13004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  990.959457][T13004] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  991.193504][T11777] pegasus 5-1:1.0: can't reset MAC
[  991.200211][T11777] pegasus: probe of 5-1:1.0 failed with error -5
[  991.225384][ T9641] EXT4-fs (loop3): unmounting filesystem.
[  991.260418][T11777] usb 5-1: USB disconnect, device number 17
[  991.306421][T13020] netlink: 'syz.2.1891': attribute type 11 has an invalid length.
[  991.645028][T13036] loop3: detected capacity change from 0 to 512
[  991.684787][T13036] ext4: Unknown parameter 'smackfstransmute'
[  993.911188][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  993.921010][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  993.958917][T13053] loop2: detected capacity change from 0 to 1024
[  994.377501][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1908'.
[  995.663094][T13078] loop2: detected capacity change from 0 to 2048
[  995.772976][T13078]  loop2: p1 < > p2 p3 < > p4 < p5 >
[  995.829264][T13078] loop2: partition table partially beyond EOD, truncated
[  995.836704][T13078] loop2: p1 start 3405774849 is beyond EOD, truncated
[  995.894015][T13078] loop2: p3 start 4225 is beyond EOD, truncated
[  997.499802][T13096] loop4: detected capacity change from 0 to 1024
[  997.876645][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1920'.
[  998.915630][T13108] loop4: detected capacity change from 0 to 512
[  999.482276][T13108] FAT-fs (loop4): Directory bread(block 199916) failed
[  999.499560][T13108] FAT-fs (loop4): Directory bread(block 199917) failed
[  999.506671][T13108] FAT-fs (loop4): Directory bread(block 199918) failed
[  999.626022][T13108] FAT-fs (loop4): Directory bread(block 199919) failed
[  999.679286][T13108] FAT-fs (loop4): Directory bread(block 199920) failed
[  999.686410][T13108] FAT-fs (loop4): Directory bread(block 199921) failed
[  999.799475][T13108] FAT-fs (loop4): Directory bread(block 199922) failed
[  999.806731][T13108] FAT-fs (loop4): Directory bread(block 199923) failed
[ 1000.034082][T13122] loop2: detected capacity change from 0 to 512
[ 1000.169428][ T4369] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1000.254779][T13122] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[ 1000.369278][ T4369] usb 5-1: Using ep0 maxpacket: 8
[ 1000.377305][ T4369] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[ 1000.417983][ T4369] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1000.458980][ T4369] usb 5-1: config 0 has no interface number 0
[ 1000.465557][ T4369] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 255, changing to 11
[ 1000.478408][T13122] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1925: corrupted in-inode xattr
[ 1000.519281][ T4369] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 59391, setting to 1024
[ 1000.572464][T13122] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1925: couldn't read orphan inode 15 (err -117)
[ 1000.594912][ T4369] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1000.679108][ T4369] usb 5-1: config 0 interface 52 has no altsetting 0
[ 1000.679536][T13122] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1000.719856][ T4369] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1000.759639][ T4369] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 1000.790132][ T4369] usb 5-1: Manufacturer: syz
[ 1000.836667][ T4369] usb 5-1: config 0 descriptor??
[ 1000.864668][ T4369] hub 5-1:0.52: bad descriptor, ignoring hub
[ 1000.935357][ T4369] hub: probe of 5-1:0.52 failed with error -5
[ 1001.047445][T11759] EXT4-fs (loop2): unmounting filesystem.
[ 1001.057924][ T4369] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input17
[ 1001.338093][T13108] FAT-fs (loop4): FAT read failed (blocknr 128)
[ 1001.529674][ T4369] usb 5-1: USB disconnect, device number 18
[ 1002.155224][T13160] loop2: detected capacity change from 0 to 512
[ 1002.263106][T13160] ext4: Unknown parameter 'smackfstransmute'
[ 1003.415441][T13174] netlink: 'syz.4.1934': attribute type 11 has an invalid length.
[ 1007.297781][T13220] netlink: 'syz.0.1946': attribute type 11 has an invalid length.
[ 1007.711657][T13230] udc dummy_udc.0: soft-connect without a gadget driver
[ 1007.744799][T13228] loop4: detected capacity change from 0 to 2048
[ 1007.804824][T13228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1008.057011][T13238] loop2: detected capacity change from 0 to 256
[ 1008.383703][T13243] loop2: detected capacity change from 0 to 1024
[ 1009.088082][T13264] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1009.701995][T13255] netlink: 'syz.4.1958': attribute type 11 has an invalid length.
[ 1010.020880][T13281] ffs_data_put(): freeing
[ 1010.291122][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'.
[ 1010.330761][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'.
[ 1010.380766][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'.
[ 1010.497451][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'.
[ 1010.549429][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'.
[ 1010.568405][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'.
[ 1010.619418][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'.
[ 1010.628505][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'.
[ 1010.730546][T13295] loop4: detected capacity change from 0 to 2048
[ 1010.741209][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'.
[ 1010.789554][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'.
[ 1010.869598][T13295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1011.369980][T13307] loop3: detected capacity change from 0 to 1024
[ 1011.664100][T13316] loop2: detected capacity change from 0 to 512
[ 1011.706432][T13316] ext4: Unknown parameter 'smackfstransmute'
[ 1012.006566][T13325] loop4: detected capacity change from 0 to 128
[ 1013.441392][T11969] ffs_data_put(): freeing
[ 1014.201491][T13345] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1014.644991][T13354] loop2: detected capacity change from 0 to 2048
[ 1014.701739][T13318] netlink: 'syz.0.1975': attribute type 11 has an invalid length.
[ 1014.741492][T13354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1015.246130][T13362] loop3: detected capacity change from 0 to 512
[ 1015.574417][T13362] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1015.667437][T13362] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1015.720206][T13362] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1015.799960][T13371] loop2: detected capacity change from 0 to 1024
[ 1016.031505][T13376] loop4: detected capacity change from 0 to 128
[ 1016.281217][ T9641] EXT4-fs (loop3): unmounting filesystem.
[ 1016.515752][T13383] loop3: detected capacity change from 0 to 512
[ 1016.610551][T13383] ext4: Unknown parameter 'smackfstransmute'
[ 1016.639724][T11969] ffs_data_put(): freeing
[ 1016.839259][T11777] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[ 1017.049949][T11777] usb 3-1: not running at top speed; connect to a high speed hub
[ 1017.096211][T11777] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1017.218972][T11777] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[ 1017.355386][T13392] netlink: 'syz.7.1996': attribute type 29 has an invalid length.
[ 1017.375153][T11777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.426858][T13392] __nla_validate_parse: 32 callbacks suppressed
[ 1017.426942][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1996'.
[ 1017.459312][T11777] usb 3-1: Product: syz
[ 1017.463618][T11777] usb 3-1: Manufacturer: syz
[ 1017.552611][T11777] usb 3-1: SerialNumber: syz
[ 1017.570054][T13392] netlink: 'syz.7.1996': attribute type 29 has an invalid length.
[ 1017.578450][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1996'.
[ 1017.606480][T11777] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected
[ 1017.618681][T11777] keyspan 3-1:1.0: unsupported endpoint type 0
[ 1017.631459][T11777] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[ 1017.659925][T13395] netlink: 'syz.7.1996': attribute type 29 has an invalid length.
[ 1017.669458][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1996'.
[ 1017.691619][T11777] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[ 1017.736750][T11777] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[ 1017.775457][T11777] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[ 1018.017279][ T4352] usb 3-1: USB disconnect, device number 9
[ 1018.062946][ T4352] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[ 1018.125619][ T4352] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[ 1018.143043][T13409] loop3: detected capacity change from 0 to 512
[ 1018.204963][T13409] EXT4-fs: Ignoring removed oldalloc option
[ 1018.254641][T13409] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[ 1018.366306][ T4352] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[ 1018.425387][ T4352] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[ 1018.513588][T13415] loop4: detected capacity change from 0 to 1024
[ 1018.592432][ T4352] keyspan 3-1:1.0: device disconnected
[ 1018.722193][T13417] loop3: detected capacity change from 0 to 1024
[ 1018.842613][T13422] loop2: detected capacity change from 0 to 512
[ 1018.991106][T13417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1019.046008][T13422] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1019.132018][T13422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1019.150388][T13431] loop4: detected capacity change from 0 to 1024
[ 1019.243993][T13422] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1019.348707][ T9641] EXT4-fs (loop3): unmounting filesystem.
[ 1019.540033][T11759] EXT4-fs (loop2): unmounting filesystem.
[ 1019.588804][T13437] input: syz1 as /devices/virtual/input/input18
[ 1019.828305][T13447] loop4: detected capacity change from 0 to 164
[ 1020.413806][T13461] loop4: detected capacity change from 0 to 2048
[ 1020.507641][T13461] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1021.485234][ T4352] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1021.939382][ T4352] usb 3-1: Using ep0 maxpacket: 8
[ 1021.947313][ T4352] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1021.970641][ T4352] usb 3-1: config 150 has an invalid interface number: 124 but max is 1
[ 1021.999185][ T4352] usb 3-1: config 150 has no interface number 1
[ 1022.019210][ T4352] usb 3-1: config 150 interface 0 has no altsetting 0
[ 1022.059617][ T4352] usb 3-1: config 150 interface 124 has no altsetting 0
[ 1022.089020][ T4352] usb 3-1: New USB device found, idVendor=03f0, idProduct=371d, bcdDevice=30.63
[ 1022.111369][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.150134][ T4352] usb 3-1: Product: syz
[ 1022.154354][ T4352] usb 3-1: Manufacturer: syz
[ 1022.158978][ T4352] usb 3-1: SerialNumber: syz
[ 1022.432349][ T4352] usb 3-1: unknown number of interfaces: 2
[ 1022.477204][ T4352] usb 3-1: USB disconnect, device number 10
[ 1023.316694][T13499] loop4: detected capacity change from 0 to 1024
[ 1023.873533][T13507] loop3: detected capacity change from 0 to 1024
[ 1024.792090][ T4352] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1025.130827][ T4352] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1025.152551][ T4352] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[ 1025.170879][T13516] loop3: detected capacity change from 0 to 2048
[ 1025.187504][ T4352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1025.220756][T13516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1025.265702][ T4352] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected
[ 1025.407040][ T4352] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81
[ 1025.638143][ T4352] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1
[ 1025.685773][ T4352] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84
[ 1025.704329][ T4352] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2
[ 1025.721245][ T4352] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1025.740622][ T4352] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88
[ 1025.753884][ T4352] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6
[ 1025.768260][ T4352] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1025.797817][ T4352] usb 3-1: USB disconnect, device number 11
[ 1025.817134][ T4352] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1025.847925][ T4352] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1025.868673][ T4352] keyspan 3-1:1.0: device disconnected
[ 1026.052602][T13526] loop3: detected capacity change from 0 to 8
[ 1026.244125][T13526] SQUASHFS error: Unable to read directory block [629:fe]
[ 1027.840414][T13551] loop2: detected capacity change from 0 to 512
[ 1027.889798][T13551] ext4: Unknown parameter 'smackfstransmute'
[ 1028.214536][T13554] ip6t_REJECT: ECHOREPLY is not supported
[ 1029.446234][T13560] loop3: detected capacity change from 0 to 16
[ 1029.462417][T13560] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1029.556694][T13560] syz.3.2043: attempt to access beyond end of device
[ 1029.556694][T13560] loop3: rw=0, sector=15300821024, nr_sectors = 8 limit=16
[ 1029.589596][T13560] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[ 1029.612549][T13563] loop2: detected capacity change from 0 to 1024
[ 1029.782517][T13567] loop4: detected capacity change from 0 to 1024
[ 1031.843746][T13567] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1031.860635][T13567] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1032.004160][T13567] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2045: bg 0: block 112: padding at end of block bitmap is not set
[ 1032.025865][T13582] loop3: detected capacity change from 0 to 1024
[ 1032.108130][T13567] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 17 with error 28
[ 1032.176034][T13567] EXT4-fs (loop4): This should not happen!! Data will be lost
[ 1032.176034][T13567] 
[ 1032.266532][T13567] EXT4-fs (loop4): Total free blocks count 0
[ 1032.348535][T13567] EXT4-fs (loop4): Free/Dirty block details
[ 1032.386011][T13567] EXT4-fs (loop4): free_blocks=0
[ 1032.426649][T13567] EXT4-fs (loop4): dirty_blocks=48
[ 1032.457143][T13567] EXT4-fs (loop4): Block reservation details
[ 1032.479094][T13567] EXT4-fs (loop4): i_reserved_data_blocks=3
[ 1032.788485][T11521] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:2: lblock 40 mapped to illegal pblock 8 (length 8)
[ 1033.053536][T11521] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117
[ 1034.716569][   T26] audit: type=1800 audit(1790256490.872:204): pid=13621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2057" name="sysfs" dev="sda1" ino=2068 res=0 errno=0
[ 1034.750696][T13621] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups)
[ 1035.886913][T13634] loop4: detected capacity change from 0 to 1024
[ 1036.142225][T13640] loop4: detected capacity change from 0 to 1024
[ 1036.488171][T13648] netlink: 'syz.2.2063': attribute type 4 has an invalid length.
[ 1037.003280][T13649] netlink: 'syz.2.2063': attribute type 4 has an invalid length.
[ 1040.294280][T13678] loop3: detected capacity change from 0 to 1024
[ 1042.182966][T13692] loop4: detected capacity change from 0 to 512
[ 1042.278327][T13694] loop3: detected capacity change from 0 to 1024
[ 1042.295865][T13692] ext4: Unknown parameter 'smackfstransmute'
[ 1042.566392][T13698] ip6t_REJECT: ECHOREPLY is not supported
[ 1043.260293][T13702] loop2: detected capacity change from 0 to 512
[ 1044.411627][T13702] ext4: Unknown parameter 'smackfstransmute'
[ 1044.581087][T13708] capability: warning: `syz.0.2071' uses 32-bit capabilities (legacy support in use)
[ 1044.757093][T13717] ip6t_REJECT: ECHOREPLY is not supported
[ 1046.924125][T13731] loop3: detected capacity change from 0 to 512
[ 1046.966214][T13731] ext4: Unknown parameter 'smackfstransmute'
[ 1047.176909][T13733] loop2: detected capacity change from 0 to 256
[ 1049.880114][T13747] loop3: detected capacity change from 0 to 256
[ 1049.950121][T13747] FAT-fs (loop3): Unrecognized mount option "0+d>��|��1��26"��=�" or missing value
[ 1050.507521][T13771] loop3: detected capacity change from 0 to 2048
[ 1050.931266][T13771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1051.960604][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[ 1052.236276][T13787] input: syz1 as /devices/virtual/input/input19
[ 1054.378333][T13809] loop3: detected capacity change from 0 to 2048
[ 1054.475332][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.481837][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.511997][T13809]  loop3: p1 < > p2 p3 < > p4 < p5 >
[ 1054.517657][T13809] loop3: partition table partially beyond EOD, truncated
[ 1054.559532][T13809] loop3: p1 start 3405774849 is beyond EOD, truncated
[ 1054.590740][T13809] loop3: p3 start 4225 is beyond EOD, truncated
[ 1054.967979][T13818] loop4: detected capacity change from 0 to 8
[ 1056.033068][T12659] udevd[12659]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[ 1056.636569][T13833] loop3: detected capacity change from 0 to 16
[ 1056.662320][T13833] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1057.602068][T13848] loop3: detected capacity change from 0 to 16
[ 1057.670152][T13848] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1057.835316][T13850] loop4: detected capacity change from 0 to 512
[ 1057.906572][T13850] ext4: Unknown parameter 'smackfstransmute'
[ 1057.975021][T13854] loop3: detected capacity change from 0 to 128
[ 1058.061056][T13854] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1058.372700][T13854] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1058.670961][ T9641] EXT4-fs (loop3): unmounting filesystem.
[ 1065.949641][T13957] FAULT_INJECTION: forcing a failure.
[ 1065.949641][T13957] name failslab, interval 1, probability 0, space 0, times 0
[ 1066.036103][T13957] CPU: 1 PID: 13957 Comm: syz.3.2137 Not tainted syzkaller #0
[ 1066.043624][T13957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1066.053731][T13957] Call Trace:
[ 1066.057037][T13957]  <TASK>
[ 1066.059987][T13957]  dump_stack_lvl+0x188/0x24e
[ 1066.064695][T13957]  ? show_regs_print_info+0x12/0x12
[ 1066.069918][T13957]  ? load_image+0x410/0x410
[ 1066.074450][T13957]  ? __might_sleep+0xd0/0xd0
[ 1066.079065][T13957]  ? __lock_acquire+0x7c40/0x7c40
[ 1066.084125][T13957]  should_fail_ex+0x390/0x4c0
[ 1066.088844][T13957]  should_failslab+0x5/0x20
[ 1066.093358][T13957]  slab_pre_alloc_hook+0x59/0x300
[ 1066.098581][T13957]  kmem_cache_alloc+0x56/0x2f0
[ 1066.103344][T13957]  ? __alloc_file+0x25/0x230
[ 1066.107935][T13957]  __alloc_file+0x25/0x230
[ 1066.112352][T13957]  alloc_empty_file+0x90/0x180
[ 1066.117111][T13957]  alloc_file+0x5b/0x5f0
[ 1066.121357][T13957]  alloc_file_pseudo+0x180/0x200
[ 1066.126292][T13957]  ? alloc_empty_file_noaccount+0x80/0x80
[ 1066.132012][T13957]  __shmem_file_setup+0x1cf/0x290
[ 1066.137105][T13957]  newseg+0x468/0xb00
[ 1066.141216][T13957]  ? rwsem_write_trylock+0x135/0x1c0
[ 1066.146504][T13957]  ? ksys_shmget+0x140/0x140
[ 1066.151100][T13957]  ipcget+0x1cd/0xe10
[ 1066.155074][T13957]  ? do_futex+0x310/0x320
[ 1066.159409][T13957]  ? __ia32_sys_get_robust_list+0x100/0x100
[ 1066.165299][T13957]  ? ipc_obtain_object_check+0x1a0/0x1a0
[ 1066.170942][T13957]  __x64_sys_shmget+0x13d/0x180
[ 1066.175801][T13957]  ? lock_chain_count+0x20/0x20
[ 1066.180682][T13957]  ? shm_more_checks+0x80/0x80
[ 1066.185453][T13957]  ? lockdep_hardirqs_on+0x94/0x140
[ 1066.190734][T13957]  do_syscall_64+0x4c/0xa0
[ 1066.195144][T13957]  ? clear_bhb_loop+0x60/0xb0
[ 1066.199816][T13957]  ? clear_bhb_loop+0x60/0xb0
[ 1066.204493][T13957]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1066.210387][T13957] RIP: 0033:0x7f631f79e159
[ 1066.214969][T13957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1066.234659][T13957] RSP: 002b:00007f6320707028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[ 1066.243073][T13957] RAX: ffffffffffffffda RBX: 00007f631fa25fa0 RCX: 00007f631f79e159
[ 1066.251036][T13957] RDX: 0000000000000080 RSI: 000000000000c000 RDI: 0000000000000000
[ 1066.259001][T13957] RBP: 00007f631f83506b R08: 0000000000000000 R09: 0000000000000000
[ 1066.266966][T13957] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1066.274928][T13957] R13: 00007f631fa26038 R14: 00007f631fa25fa0 R15: 00007ffe9aa0f938
[ 1066.282909][T13957]  </TASK>
[ 1066.286047][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1066.568415][T13962] loop2: detected capacity change from 0 to 256
[ 1066.622609][T13962] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[ 1068.041374][T13972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2140'.
[ 1068.727198][   T26] audit: type=1800 audit(1790256524.852:205): pid=13972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2140" name="file1" dev="loop2" ino=1048766 res=0 errno=0
[ 1069.109442][ T4352] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1069.311605][ T4352] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1069.331321][ T4352] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.392471][ T4352] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1069.466847][ T4352] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[ 1069.494748][ T4352] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[ 1069.508988][ T4352] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1069.520389][ T4352] usb 4-1: config 1 interface 1 has no altsetting 0
[ 1069.565690][ T4352] usb 4-1: string descriptor 0 read error: -22
[ 1069.585943][ T4352] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[ 1069.618276][ T4352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.923366][T13997] loop2: detected capacity change from 0 to 256
[ 1069.937938][T13997] exfat: Deprecated parameter 'utf8'
[ 1069.997732][T13997] exfat: Deprecated parameter 'namecase'
[ 1070.069234][T13997] exfat: Deprecated parameter 'utf8'
[ 1070.106978][T13997] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1070.331927][T13997] exFAT-fs (loop2): error, tried to truncate zeroed cluster.
[ 1070.896064][T13997] exFAT-fs (loop2): hint_cluster is invalid (1)
[ 1070.904070][ T4352] usb 4-1: 2:0: failed to get current value for ch 1 (-71)
[ 1070.931430][T13997] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000)
[ 1070.954188][T13997] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880721707e0 iblock : 9, err : -5)
[ 1070.968279][ T4352] usb 4-1: USB disconnect, device number 8
[ 1071.013379][T13997] exFAT-fs (loop2): error, tried to truncate zeroed cluster.
[ 1071.049553][T13997] exFAT-fs (loop2): error, tried to truncate zeroed cluster.
[ 1071.262813][ T4520] kworker/u4:12: attempt to access beyond end of device
[ 1071.262813][ T4520] loop2: rw=1, sector=34359738488, nr_sectors = 8 limit=256
[ 1071.368333][T14020] loop4: detected capacity change from 0 to 4096
[ 1071.463797][T14020] EXT4-fs: Ignoring removed orlov option
[ 1071.504933][T14020] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1071.729872][T14020] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1072.075591][T14020] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[ 1072.287947][T14058] loop3: detected capacity change from 0 to 512
[ 1072.309110][T14058] EXT4-fs: Ignoring removed i_version option
[ 1072.316685][T14058] EXT4-fs: Ignoring removed oldalloc option
[ 1072.379889][T14058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1072.451816][T11969] EXT4-fs (loop4): unmounting filesystem.
[ 1073.670868][ T9641] EXT4-fs (loop3): unmounting filesystem.
[ 1074.033841][T14086] loop3: detected capacity change from 0 to 2048
[ 1074.179246][T14086]  loop3: p1 < > p2 p3 < > p4 < p5 >
[ 1074.214355][T14086] loop3: partition table partially beyond EOD, truncated
[ 1074.268447][T14086] loop3: p1 start 3405774849 is beyond EOD, truncated
[ 1074.347959][T14086] loop3: p3 start 4225 is beyond EOD, truncated
[ 1074.420427][T14094] loop2: detected capacity change from 0 to 256
[ 1074.462100][T14094] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[ 1074.853752][T11903] udevd[11903]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[ 1074.858360][T12670] udevd[12670]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[ 1074.888870][T12659] udevd[12659]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[ 1075.229267][ T4319] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1075.285629][T14114] kvm [14113]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0xfe05
[ 1076.099581][ T4319] usb 4-1: Using ep0 maxpacket: 32
[ 1076.106517][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1076.154138][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1076.181704][ T4319] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1076.226374][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.270926][ T4319] usb 4-1: config 0 descriptor??
[ 1076.278958][ T4319] hub 4-1:0.0: USB hub found
[ 1076.485997][ T4319] hub 4-1:0.0: 1 port detected
[ 1076.693304][ T4319] hub 4-1:0.0: hub_hub_status failed (err = -71)
[ 1076.720346][ T4319] hub 4-1:0.0: config failed, can't get hub status (err -71)
[ 1076.761280][ T4319] usbhid 4-1:0.0: can't add hid device: -71
[ 1076.767300][ T4319] usbhid: probe of 4-1:0.0 failed with error -71
[ 1076.990880][ T4319] usb 4-1: USB disconnect, device number 9
[ 1077.533471][T14151] loop4: detected capacity change from 0 to 512
[ 1077.664231][T14151] ext4: Unknown parameter 'smackfstransmute'
[ 1077.998916][T14161] ip6t_REJECT: ECHOREPLY is not supported
[ 1080.605603][T14198] FAULT_INJECTION: forcing a failure.
[ 1080.605603][T14198] name failslab, interval 1, probability 0, space 0, times 0
[ 1080.618903][T14198] CPU: 0 PID: 14198 Comm: syz.3.2198 Not tainted syzkaller #0
[ 1080.626394][T14198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1080.636475][T14198] Call Trace:
[ 1080.639777][T14198]  <TASK>
[ 1080.642724][T14198]  dump_stack_lvl+0x188/0x24e
[ 1080.647444][T14198]  ? show_regs_print_info+0x12/0x12
[ 1080.652752][T14198]  ? load_image+0x410/0x410
[ 1080.657282][T14198]  should_fail_ex+0x390/0x4c0
[ 1080.662058][T14198]  should_failslab+0x5/0x20
[ 1080.666564][T14198]  slab_pre_alloc_hook+0x59/0x300
[ 1080.671605][T14198]  kmem_cache_alloc+0x56/0x2f0
[ 1080.676557][T14198]  ? radix_tree_node_alloc+0x7e/0x3a0
[ 1080.682338][T14198]  radix_tree_node_alloc+0x7e/0x3a0
[ 1080.688089][T14198]  idr_get_free+0x28b/0xa10
[ 1080.692620][T14198]  idr_alloc_cyclic+0x286/0x610
[ 1080.697540][T14198]  ? idr_alloc+0x2e0/0x2e0
[ 1080.701998][T14198]  ? do_raw_spin_lock+0x128/0x2f0
[ 1080.707049][T14198]  ? __radix_tree_preload+0x82/0x880
[ 1080.712375][T14198]  ? bpf_map_alloc_id+0x21/0xd0
[ 1080.717333][T14198]  bpf_map_alloc_id+0x40/0xd0
[ 1080.722165][T14198]  map_create+0xac9/0xff0
[ 1080.726515][T14198]  ? security_bpf+0x7a/0xa0
[ 1080.731288][T14198]  __sys_bpf+0x38b/0x780
[ 1080.735647][T14198]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1080.741094][T14198]  ? lock_chain_count+0x20/0x20
[ 1080.746088][T14198]  __x64_sys_bpf+0x78/0x90
[ 1080.750622][T14198]  do_syscall_64+0x4c/0xa0
[ 1080.755059][T14198]  ? clear_bhb_loop+0x60/0xb0
[ 1080.759776][T14198]  ? clear_bhb_loop+0x60/0xb0
[ 1080.764591][T14198]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1080.770498][T14198] RIP: 0033:0x7f631f79e159
[ 1080.774947][T14198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1080.795450][T14198] RSP: 002b:00007f6320707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1080.804438][T14198] RAX: ffffffffffffffda RBX: 00007f631fa25fa0 RCX: 00007f631f79e159
[ 1080.812804][T14198] RDX: 0000000000000050 RSI: 0000200000000740 RDI: 0000000000000000
[ 1080.820813][T14198] RBP: 00007f631f83506b R08: 0000000000000000 R09: 0000000000000000
[ 1080.828810][T14198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1080.836805][T14198] R13: 00007f631fa26038 R14: 00007f631fa25fa0 R15: 00007ffe9aa0f938
[ 1080.844828][T14198]  </TASK>
[ 1081.679018][T14210] loop3: detected capacity change from 0 to 1024
[ 1083.750248][T14226] loop2: detected capacity change from 0 to 512
[ 1083.757678][T14226] ext4: Unknown parameter 'smackfstransmute'
[ 1084.027837][T14229] ip6t_REJECT: ECHOREPLY is not supported
[ 1085.041267][T14240] loop4: detected capacity change from 0 to 512
[ 1085.410548][T14240] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1085.710269][T14243] loop2: detected capacity change from 0 to 1024
[ 1085.800117][T14240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1085.836906][T14240] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1085.983110][T11969] EXT4-fs (loop4): unmounting filesystem.
[ 1086.266332][T14264] 9pnet_fd: Insufficient options for proto=fd
[ 1086.780216][   T11] hfsplus: bad catalog file entry
[ 1086.804496][   T11] hfsplus: b-tree write err: -5, ino 3
[ 1088.830902][T14295] loop4: detected capacity change from 0 to 512
[ 1088.906058][T14295] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1088.974717][T14295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1088.999555][T14295] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1089.180817][T14302] loop3: detected capacity change from 0 to 512
[ 1089.226170][T14302] ext4: Unknown parameter 'smackfstransmute'
[ 1089.236992][T11969] EXT4-fs (loop4): unmounting filesystem.
[ 1089.490260][T14306] ip6t_REJECT: ECHOREPLY is not supported
[ 1089.613581][T14312] loop2: detected capacity change from 0 to 512
[ 1089.657286][T14312] ext4: Unknown parameter 'smackfstransmute'
[ 1090.863366][T14344] loop2: detected capacity change from 0 to 128
[ 1090.886073][T14343] loop4: detected capacity change from 0 to 512
[ 1091.010473][T14343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1091.245748][T14343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1091.280057][T14343] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1091.342334][T11759] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[ 1091.439746][T11759] FAT-fs (loop2): Filesystem has been set read-only
[ 1091.708006][T11969] EXT4-fs (loop4): unmounting filesystem.
[ 1093.077161][T14366] loop4: detected capacity change from 0 to 512
[ 1093.165331][T14366] ext4: Unknown parameter 'smackfstransmute'
[ 1093.443894][T14370] ip6t_REJECT: ECHOREPLY is not supported
[ 1094.696873][T14381] loop3: detected capacity change from 0 to 512
[ 1095.358290][T14381] ext4: Unknown parameter 'smackfstransmute'
[ 1095.747207][T14396] loop4: detected capacity change from 0 to 512
[ 1095.805192][T14396] ext4: Unknown parameter 'smackfstransmute'
[ 1096.055439][T14402] ip6t_REJECT: ECHOREPLY is not supported
[ 1096.413402][T14414] loop2: detected capacity change from 0 to 1024
[ 1097.710054][T14414] hfsplus: request for non-existent node 16777216 in B*Tree
[ 1097.739317][T14414] hfsplus: request for non-existent node 16777216 in B*Tree
[ 1097.739682][T14414] hfsplus: request for non-existent node 16777216 in B*Tree
[ 1097.739738][T14414] hfsplus: request for non-existent node 16777216 in B*Tree
[ 1098.781658][ T4370] hfsplus: request for non-existent node 16777216 in B*Tree
[ 1098.781749][ T4370] hfsplus: request for non-existent node 16777216 in B*Tree
[ 1099.086281][T14442] loop3: detected capacity change from 0 to 128
[ 1099.575350][T14451] binder: 14447:14451 ioctl c0306201 200000000080 returned -14
[ 1099.617598][T14451] loop2: detected capacity change from 0 to 512
[ 1099.630012][T14451] EXT4-fs: Ignoring removed nobh option
[ 1099.752033][T14451] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1099.766817][T14451] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.2264: corrupted inode contents
[ 1099.788107][T14451] EXT4-fs (loop2): Remounting filesystem read-only
[ 1099.794904][T14451] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[ 1099.805533][T14451] EXT4-fs (loop2): Remounting filesystem read-only
[ 1099.812301][T14451] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.2264: corrupted inode contents
[ 1099.827799][T14451] EXT4-fs (loop2): Remounting filesystem read-only
[ 1099.834672][T14451] EXT4-fs error (device loop2): ext4_evict_inode:329: inode #15: comm syz.2.2264: mark_inode_dirty error
[ 1099.848080][T14451] EXT4-fs (loop2): Remounting filesystem read-only
[ 1099.855399][T14451] EXT4-fs (loop2): 1 orphan inode deleted
[ 1099.861482][T14451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1100.050289][T11759] EXT4-fs (loop2): unmounting filesystem.
[ 1103.469848][T14494] input: syz1 as /devices/virtual/input/input20
[ 1104.149194][T14509] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1106.280654][T14530] netlink: 'syz.7.2275': attribute type 4 has an invalid length.
[ 1106.347607][T14533] loop4: detected capacity change from 0 to 512
[ 1106.454998][T14533] ext4: Unknown parameter 'smackfstransmute'
[ 1106.758301][T14543] ip6t_REJECT: ECHOREPLY is not supported
[ 1107.196724][T14542] loop3: detected capacity change from 0 to 512
[ 1107.384510][T12659] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1108.779816][T14550] input: syz1 as /devices/virtual/input/input21
[ 1108.963884][T14562] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1110.787309][T14573] fuse: Bad value for 'fd'
[ 1112.075393][T14590] loop2: detected capacity change from 0 to 512
[ 1112.122830][T14590] ext4: Unknown parameter 'smackfstransmute'
[ 1112.716597][T14597] ip6t_REJECT: ECHOREPLY is not supported
[ 1113.000369][T14599] loop3: detected capacity change from 0 to 512
[ 1113.069507][T14599] ext4: Unknown parameter 'smackfstransmute'
[ 1113.295267][T14602] loop2: detected capacity change from 0 to 256
[ 1113.420882][T14602] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[ 1113.458665][T14608] loop4: detected capacity change from 0 to 512
[ 1113.466792][T14602] FAT-fs (loop2): Filesystem has been set read-only
[ 1113.499465][T14602] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[ 1113.508217][T14602] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[ 1113.588817][T14602] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[ 1113.689242][ T4279] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[ 1113.714852][T14614] input: syz1 as /devices/virtual/input/input22
[ 1113.785628][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2302'.
[ 1114.003603][T14602] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[ 1114.147151][T14602] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[ 1114.291187][T14602] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[ 1114.341962][T14602] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[ 1114.390529][T14602] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[ 1114.449286][T14602] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[ 1114.479385][   T26] audit: type=1800 audit(1790256570.632:206): pid=14602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2300" name="file1" dev="loop2" ino=1048779 res=0 errno=0
[ 1114.529873][ T4279] usb 3-1: config 0 has no interfaces?
[ 1114.535401][ T4279] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1114.581765][ T4279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1114.630075][ T4279] usb 3-1: config 0 descriptor??
[ 1114.809730][T14624] fuse: Bad value for 'fd'
[ 1114.879428][T12615] usb 3-1: USB disconnect, device number 12
[ 1114.995316][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2306'.
[ 1116.265470][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.284741][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.379621][ T4369] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1116.771546][ T4369] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1116.791244][ T4369] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[ 1116.846678][ T4369] usb 3-1: language id specifier not provided by device, defaulting to English
[ 1116.889538][ T4369] usb 3-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40
[ 1116.919355][ T4369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1116.927949][ T4369] usb 3-1: Product: syz
[ 1116.937362][ T4369] usb 3-1: Manufacturer: ꁾꨙ廆눱㮶꿭㤴鷹休לּ￥坖⽼櫥䄤巓²合茂䲈版粧鷸ご宫働撗ꤠ䒇ᮧ鐌큂ꫮ뜽ลஜၟ뷼⎖≊굝㼿⺟酠铑隀℈ઽ׋擻
[ 1117.011212][ T4369] usb 3-1: SerialNumber: syz
[ 1117.275157][ T4369] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[ 1117.349716][ T4369] usb 3-1: USB disconnect, device number 13
[ 1117.395503][T14654] ip6t_REJECT: ECHOREPLY is not supported
[ 1117.880744][T14657] loop3: detected capacity change from 0 to 2048
[ 1118.071470][T14660] loop2: detected capacity change from 0 to 256
[ 1118.104778][T14660] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[ 1118.141015][T14657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1118.831604][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'.
[ 1119.281673][   T26] audit: type=1800 audit(1790256575.442:207): pid=14668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2314" name="file1" dev="loop2" ino=1048781 res=0 errno=0
[ 1119.717505][T14678] input: syz1 as /devices/virtual/input/input23
[ 1120.787956][T14695] loop4: detected capacity change from 0 to 512
[ 1120.868154][T14695] ext4: Unknown parameter 'smackfstransmute'
[ 1121.905125][T14707] loop4: detected capacity change from 0 to 512
[ 1123.344736][T14713] loop2: detected capacity change from 0 to 1024
[ 1124.585323][T14729] ip6t_REJECT: ECHOREPLY is not supported
[ 1125.013464][T14732] loop2: detected capacity change from 0 to 256
[ 1125.289741][T14732] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[ 1125.529697][T14746] fuse: Bad value for 'fd'
[ 1125.921298][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'.
[ 1125.937936][T14755] syz.2.2327: attempt to access beyond end of device
[ 1125.937936][T14755] loop2: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[ 1125.952612][T14755] syz.2.2327: attempt to access beyond end of device
[ 1125.952612][T14755] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[ 1125.967521][T14755] [syz.2.2327/14755] FS: loop2 File: /file1 would truncate fibmap result
[ 1125.997729][   T26] audit: type=1800 audit(1790256582.122:208): pid=14755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2327" name="file1" dev="loop2" ino=1048783 res=0 errno=0
[ 1128.996530][T14787] loop4: detected capacity change from 0 to 512
[ 1129.048540][T14788] loop2: detected capacity change from 0 to 1024
[ 1129.080666][T14787] ext4: Unknown parameter 'smackfstransmute'
[ 1129.377973][T14791] ip6t_REJECT: ECHOREPLY is not supported
[ 1131.650433][T14827] loop4: detected capacity change from 0 to 512
[ 1131.677871][T14827] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 12
[ 1131.706286][T14828] loop3: detected capacity change from 0 to 256
[ 1131.978632][T14828] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[ 1133.051612][T14838] syz.3.2348: attempt to access beyond end of device
[ 1133.051612][T14838] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[ 1133.066191][T14838] syz.3.2348: attempt to access beyond end of device
[ 1133.066191][T14838] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[ 1133.081651][T14838] [syz.3.2348/14838] FS: loop3 File: /file1 would truncate fibmap result
[ 1133.110646][   T26] audit: type=1800 audit(1790256589.242:209): pid=14838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2348" name="file1" dev="loop3" ino=1048785 res=0 errno=0
[ 1133.418858][T14843] loop4: detected capacity change from 0 to 1024
[ 1133.447923][T14844] loop2: detected capacity change from 0 to 512
[ 1133.605042][T14844] ext4: Unknown parameter 'smackfstransmute'
[ 1134.443049][T14844] ip6t_REJECT: ECHOREPLY is not supported
[ 1134.762210][T14858] loop2: detected capacity change from 0 to 2048
[ 1134.771473][T14861] loop3: detected capacity change from 0 to 128
[ 1134.816347][T14858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1135.059238][ T4369] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1135.259259][ T4369] usb 5-1: Using ep0 maxpacket: 16
[ 1135.266798][ T4369] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1135.288826][ T4369] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1135.310736][ T4369] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1135.336753][ T4369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.352269][ T4369] usb 5-1: Product: syz
[ 1135.357031][ T4369] usb 5-1: Manufacturer: syz
[ 1135.374557][ T4369] usb 5-1: SerialNumber: syz
[ 1135.611724][ T4369] usb 5-1: 0:2 : does not exist
[ 1135.635473][ T4369] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 1135.688534][ T4369] usb 5-1: USB disconnect, device number 19
[ 1136.029933][T12659] udevd[12659]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1136.431258][T14886] input: syz1 as /devices/virtual/input/input24
[ 1137.093081][T14904] loop2: detected capacity change from 0 to 256
[ 1137.139557][T14904] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1137.171512][T14904] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[ 1137.231361][T14904] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1137.309585][T14904] exFAT-fs (loop2): failed to load alloc-bitmap
[ 1137.330299][T14904] exFAT-fs (loop2): failed to recognize exfat type
[ 1137.393136][T12659] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1137.448242][T14912] loop4: detected capacity change from 0 to 128
[ 1137.494523][T14913] loop3: detected capacity change from 0 to 512
[ 1137.653925][T14913] ext4: Unknown parameter 'smackfstransmute'
[ 1138.403048][T14913] ip6t_REJECT: ECHOREPLY is not supported
[ 1141.266718][T14948] loop3: detected capacity change from 0 to 2048
[ 1141.359456][T14948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1141.681630][T14960] loop4: detected capacity change from 0 to 256
[ 1141.777683][T14960] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[ 1142.847438][   T26] audit: type=1800 audit(1790256599.002:210): pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2380" name="file1" dev="loop4" ino=1048793 res=0 errno=0
[ 1143.608007][T14995] loop4: detected capacity change from 0 to 512
[ 1143.670363][T14995] ext4: Unknown parameter 'smackfstransmute'
[ 1144.053109][T14999] ip6t_REJECT: ECHOREPLY is not supported
[ 1147.150815][T15035] FAULT_INJECTION: forcing a failure.
[ 1147.150815][T15035] name failslab, interval 1, probability 0, space 0, times 0
[ 1147.179270][T15035] CPU: 0 PID: 15035 Comm: syz.3.2394 Not tainted syzkaller #0
[ 1147.186786][T15035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1147.196866][T15035] Call Trace:
[ 1147.200199][T15035]  <TASK>
[ 1147.203153][T15035]  dump_stack_lvl+0x188/0x24e
[ 1147.208215][T15035]  ? show_regs_print_info+0x12/0x12
[ 1147.213459][T15035]  ? load_image+0x410/0x410
[ 1147.217992][T15035]  ? __might_sleep+0xd0/0xd0
[ 1147.222600][T15035]  ? __lock_acquire+0x7c40/0x7c40
[ 1147.227653][T15035]  should_fail_ex+0x390/0x4c0
[ 1147.232353][T15035]  should_failslab+0x5/0x20
[ 1147.236860][T15035]  slab_pre_alloc_hook+0x59/0x300
[ 1147.241885][T15035]  kmem_cache_alloc_lru+0x49/0x2e0
[ 1147.247021][T15035]  ? __d_alloc+0x2e/0x6e0
[ 1147.251444][T15035]  __d_alloc+0x2e/0x6e0
[ 1147.255590][T15035]  ? d_alloc_pseudo+0xe/0x70
[ 1147.260177][T15035]  d_alloc_pseudo+0x19/0x70
[ 1147.264710][T15035]  alloc_file_pseudo+0xe0/0x200
[ 1147.269640][T15035]  ? alloc_empty_file_noaccount+0x80/0x80
[ 1147.275389][T15035]  ? alloc_anon_inode+0x22e/0x300
[ 1147.281118][T15035]  ? memcpy+0x3c/0x60
[ 1147.285255][T15035]  ? alloc_anon_inode+0x22e/0x300
[ 1147.290397][T15035]  aio_setup_ring+0x1f1/0xf50
[ 1147.295187][T15035]  ? free_ioctx_reqs+0x180/0x180
[ 1147.300151][T15035]  ioctx_alloc+0x315/0x7b0
[ 1147.304691][T15035]  __se_sys_io_setup+0x7b/0x190
[ 1147.311931][T15035]  do_syscall_64+0x4c/0xa0
[ 1147.316385][T15035]  ? clear_bhb_loop+0x60/0xb0
[ 1147.321190][T15035]  ? clear_bhb_loop+0x60/0xb0
[ 1147.326576][T15035]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1147.332495][T15035] RIP: 0033:0x7f631f79e159
[ 1147.336922][T15035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1147.356744][T15035] RSP: 002b:00007f6320707028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[ 1147.365391][T15035] RAX: ffffffffffffffda RBX: 00007f631fa25fa0 RCX: 00007f631f79e159
[ 1147.373458][T15035] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00000000000003ff
[ 1147.381432][T15035] RBP: 00007f631f83506b R08: 0000000000000000 R09: 0000000000000000
[ 1147.389400][T15035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1147.397470][T15035] R13: 00007f631fa26038 R14: 00007f631fa25fa0 R15: 00007ffe9aa0f938
[ 1147.405471][T15035]  </TASK>
[ 1147.610011][T15037] loop3: detected capacity change from 0 to 512
[ 1148.025816][T15037] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1148.720442][T15037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1148.842761][T15065] input: syz1 as /devices/virtual/input/input25
[ 1150.048362][ T9641] EXT4-fs (loop3): unmounting filesystem.
[ 1151.559991][T15105] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1152.422194][T15108] loop4: detected capacity change from 0 to 512
[ 1152.470296][T15108] ext4: Unknown parameter 'smackfstransmute'
[ 1152.767957][T15114] ip6t_REJECT: ECHOREPLY is not supported
[ 1153.407442][T15121] loop4: detected capacity change from 0 to 256
[ 1153.455085][T15121] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[ 1154.591611][T15130] syz.4.2411: attempt to access beyond end of device
[ 1154.591611][T15130] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[ 1154.606090][T15130] syz.4.2411: attempt to access beyond end of device
[ 1154.606090][T15130] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[ 1154.621026][T15130] [syz.4.2411/15130] FS: loop4 File: /file1 would truncate fibmap result
[ 1154.652596][   T26] audit: type=1800 audit(1790256610.782:211): pid=15130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2411" name="file1" dev="loop4" ino=1048795 res=0 errno=0
[ 1155.232329][T15133] input: syz1 as /devices/virtual/input/input26
[ 1157.305696][T15156] ip6t_REJECT: ECHOREPLY is not supported
[ 1157.438656][T15160] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1158.070796][T15163] loop2: detected capacity change from 0 to 512
[ 1159.512667][T15174] loop4: detected capacity change from 0 to 512
[ 1159.559977][T15174] ext4: Unknown parameter 'smackfstransmute'
[ 1162.370901][T15201] 
[ 1162.373793][T15201] =============================
[ 1162.378879][T15201] WARNING: suspicious RCU usage
[ 1162.384140][T15201] syzkaller #0 Not tainted
[ 1162.388575][T15201] -----------------------------
[ 1162.393917][T15201] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage!
[ 1162.402491][T15201] 
[ 1162.402491][T15201] other info that might help us debug this:
[ 1162.402491][T15201] 
[ 1162.412868][T15201] 
[ 1162.412868][T15201] rcu_scheduler_active = 2, debug_locks = 1
[ 1162.421036][T15201] 1 lock held by syz.2.2431/15201:
[ 1162.426167][T15201]  #0: ffffffff8cb2d960 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70
[ 1162.436980][T15201] 
[ 1162.436980][T15201] stack backtrace:
[ 1162.443039][T15201] CPU: 0 PID: 15201 Comm: syz.2.2431 Not tainted syzkaller #0
[ 1162.451037][T15201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1162.461114][T15201] Call Trace:
[ 1162.464422][T15201]  <TASK>
[ 1162.467352][T15201]  dump_stack_lvl+0x188/0x24e
[ 1162.472044][T15201]  ? show_regs_print_info+0x12/0x12
[ 1162.477244][T15201]  ? load_image+0x410/0x410
[ 1162.481785][T15201]  ? __lock_acquire+0x138a/0x7c40
[ 1162.486868][T15201]  lockdep_rcu_suspicious+0x1dd/0x300
[ 1162.492341][T15201]  get_callchain_entry+0x2a5/0x3b0
[ 1162.497497][T15201]  get_perf_callchain+0xc4/0x490
[ 1162.502455][T15201]  ? put_callchain_entry+0xb0/0xb0
[ 1162.507619][T15201]  ? plist_add+0x3d7/0x490
[ 1162.512153][T15201]  ? verify_lock_unused+0x140/0x140
[ 1162.517459][T15201]  __bpf_get_stack+0x2de/0x520
[ 1162.522329][T15201]  ? stack_map_get_build_id_offset+0x9d0/0x9d0
[ 1162.528507][T15201]  ? __cant_sleep+0x220/0x220
[ 1162.533198][T15201]  ? bpf_prog_14d9fb3786f83342+0x3d/0x41
[ 1162.538854][T15201]  bpf_get_stack_raw_tp+0x189/0x1c0
[ 1162.544167][T15201]  bpf_prog_14d9fb3786f83342+0x3d/0x41
[ 1162.549632][T15201]  bpf_prog_run_pin_on_cpu+0x64/0x150
[ 1162.555019][T15201]  bpf_prog_test_run_syscall+0x31c/0x4b0
[ 1162.560693][T15201]  ? sock_gen_cookie+0x60/0x60
[ 1162.565484][T15201]  ? sock_gen_cookie+0x60/0x60
[ 1162.570246][T15201]  bpf_prog_test_run+0x31c/0x390
[ 1162.575663][T15201]  __sys_bpf+0x62b/0x780
[ 1162.580042][T15201]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1162.585490][T15201]  ? lock_chain_count+0x20/0x20
[ 1162.590358][T15201]  __x64_sys_bpf+0x78/0x90
[ 1162.594796][T15201]  do_syscall_64+0x4c/0xa0
[ 1162.599230][T15201]  ? clear_bhb_loop+0x60/0xb0
[ 1162.603911][T15201]  ? clear_bhb_loop+0x60/0xb0
[ 1162.608846][T15201]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1162.614745][T15201] RIP: 0033:0x7ff35499e159
[ 1162.619161][T15201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1162.638860][T15201] RSP: 002b:00007ff3558c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1162.647275][T15201] RAX: ffffffffffffffda RBX: 00007ff354c25fa0 RCX: 00007ff35499e159
[ 1162.655244][T15201] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a
[ 1162.663301][T15201] RBP: 00007ff354a3506b R08: 0000000000000000 R09: 0000000000000000
[ 1162.671283][T15201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1162.679781][T15201] R13: 00007ff354c26038 R14: 00007ff354c25fa0 R15: 00007fff4716a938
[ 1162.687784][T15201]  </TASK>
[ 1162.728824][T15203] ip6t_REJECT: ECHOREPLY is not supported