last executing test programs:

15m37.442668215s ago: executing program 32 (id=45):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
syz_emit_vhci(0x0, 0x7)
read$msr(r3, &(0x7f0000003580)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)

15m23.008584088s ago: executing program 33 (id=75):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080), 0x651, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
add_key(&(0x7f0000001180)='asymmetric\x00', &(0x7f00000011c0), &(0x7f0000001200)="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", 0x1d8, 0xfffffffffffffffc)

14m57.374372885s ago: executing program 34 (id=159):
r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
lseek(r0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "2d09d98b"}, 0x0)
write(r1, 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x8)

14m30.491505654s ago: executing program 35 (id=225):
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000c80)='./file2\x00', 0x21c90c, &(0x7f0000001080)={[{@delalloc}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@barrier_val}, {@resgid, 0x32}]}, 0x1e, 0x4db, &(0x7f0000001140)="$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")
mount(0x0, &(0x7f0000000bc0)='.\x00', 0x0, 0x2210024, 0x0)

14m28.215503679s ago: executing program 36 (id=231):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x1, 0x2040)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0)

14m19.079736413s ago: executing program 37 (id=248):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{}, {0x6, 0xdc, 0x5, 0x2}]})

14m16.883634387s ago: executing program 38 (id=255):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8001, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x181842)
clock_gettime(0x0, 0x0)
clock_gettime(0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x200002e6)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x2010000, &(0x7f0000000400)={[{@jqfmt_vfsold}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x550, &(0x7f0000000440)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040)

14m5.706367341s ago: executing program 39 (id=262):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000581000/0x400000)=nil)

13m57.513730161s ago: executing program 40 (id=272):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, &(0x7f0000000300)={[{@nodecompose}, {@barrier}]}, 0x2, 0x6b9, &(0x7f0000000b00)="$eJzs3U+IXVcdB/DvfXl5kxclnf5LoxQ6JFC0wWQmj5oIQqOIZBEk6KbbIZk0QyZpmUwlLWJe1FZw5Uq6cFGRuOhKRIS6EutaENy4yj7gzkUEdeTed9+bNzNvJjPJTN6k/Xzg5p57zz3n/M6P++f9yfACfGadez37uyly7vj5m+X23Tudhbt3Otf65SQTSRpJs7dK0U6KT5Kz6S35Qrmz7q7YaJxX731cND/4qNPbatZLdXzZabe11YBHjtBNDgw29iWZ6hX/s9Ve1/dXLVU/F1f6e0jFIO4yYcf6iYNxW16nu1LZeGDzDa934Mlxq/fcXGcyOZje07V8HZD67vDgO8P4bXhv+vfquxwAAAA8qUa+lx/21P3cz80cejzhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0fvNwKJeGv3yVIr+7/+3hn5TvzXmcB/Re5er1XefGncgAAAAAAAAAPBIXrqf+7mZQ/3t5aL6zv/oRLnxXLXrc3k7NzKXxZzIzcxmKUtZzEySyaGOWjdnl5YWZ3I0a1r+ImXL5eXlW3XLUyNbnlodV3dtoKP+p8G6gwAAAAAAAADgM+tHObfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwFRbKvt6qW5/rlyTSa9SGtYmpweGtsge6QP407AAAAANh97Xp9qPhfr7BcVO/5D1fv+w/k7VzPUuazlIXM5VL1WUDvXX/jb93Owt07nWvlsr7jb/xzW3FUPab32cPokaerI54ftDiXb+d7OZ6pXMhi5vP9zGYpc5nKt6rSbIpM1p9eTN69004/1vXxnl21dWFtbC/lwKBcxnekiqSdy5mvYjuRi61+6I36uCNDo/2hlawZ8XaZneK12hZzdKlelzP6eb3eQc2HbzpZzXz/ICPTde7LbDw9nPf1ud/mebJ2pJk0Bp9BPbcySrm5dqSHyvnBel3m+v2dz/mwbX6UtjoT3Z+VW/2z7/DmOU++/Pc/X7jSuH71yuUbx3dxSo/H2nOiM5SJF7aUiYX9V69c7j5CJg48Svw7p1Vno3cX3d7d8mjV9lDm8528mUuZy+lMZyZnMp2v5VQ6OTWU1+c3z2t1rTW2d60d+1JdKJ9JPx16Nj02ExtVlHl9eiivw3e6yapueM9Klp7ZQpaKVkZn6R8jQ2l+sS6UY/x46IkzfmszMTOUiWc3z8Sv/ruc5MbC9auLV2bf2uJ4L9fr8rJ9b/W9+dc7MqHtq6dbni/P9B+p72fV2VHWPTt43K7OV6v+xqVZd7aqrpXqeu7VPehKLXs6fHtUT726F0aO0qnqjgzVrXqVkzezMHgVAsAedvCVg632vfZf2x+2f9K+0j5/4JsTZyZebGX/X5p/3Pfbxm8aXy9eyYf5YQ6NO1IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg0uPHOu1dnFxbmFvdgIY0d7vD2yKp+Knp7Wntj7k9qYWKzM+p3STZp3tqlwD6/2THtJHsidWk+hrEmMqLq/GBPO2kM4klydY/8wB2wG04uXXvr5I133v3K/LXZN+bemLt+6szp1053vjpz6+Tl+YW56d6/444S2A0rLwPGHQkAAAAAAAAAAACwVTv/lwaZXLdnvaI7hrkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT6Zzr2d/N0Vmpk9Ml9t373QWyqVfXjmymaSRpPhBUnySnE1vyeRQd8VG47x67+NfvvzBR52Vvpr94xtr2v3+X8vL25xFt14ylWRfva69uHGziS31d3Gov+42A+spBjMsE3asnzgYt/8HAAD//ws5CrY=")
r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
readv(r2, &(0x7f0000000380)=[{&(0x7f0000001040)=""/8, 0x8}], 0x1)

13m54.473214895s ago: executing program 41 (id=280):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002600)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000002640)='./tracing\x00', &(0x7f0000002680)='tracefs\x00', 0x1800000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000026c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000002700)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000002740)='.\x00', &(0x7f0000002780), 0x800000, &(0x7f00000027c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

13m21.892020963s ago: executing program 42 (id=344):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xa, 0x1c, &(0x7f0000001240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

12m55.525200318s ago: executing program 4 (id=438):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000801c, &(0x7f0000000140)=ANY=[], 0x0, 0x1559, &(0x7f0000000400)="$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")
stat(&(0x7f0000001ec0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

12m54.860560975s ago: executing program 43 (id=439):
syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005e05b14021040203e8450000000109025100010000000009040900000202ff00052406000105240000000d24b8fe3f9ea3a0e8ca0800ff06241a05002a052401010305240600010524"], 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setscheduler(0x0, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000005ec0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
socket$inet6_tcp(0xa, 0x1, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$loop(&(0x7f0000000240), 0x440, 0x888e2)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000e00)={0x2020}, 0x2020)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

12m54.851836535s ago: executing program 4 (id=442):
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={[], [], 0x2c}, 0x1, 0x477, &(0x7f00000003c0)="$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")
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x2, 0x50, 0x0, 0x2000000b, 0x7, 0x2, 0x9, 0x1, 0x8, 0x0, 0x51, 0x0, 0x40004, 0x10, 0xff, 0xb, 0x2, 0xf, '\x00', 0x2, 0x4080000000000005})

12m54.147979852s ago: executing program 4 (id=445):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

12m53.958011367s ago: executing program 4 (id=446):
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000000400)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x890)
open(0x0, 0x24842, 0x1a6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0xc41a, &(0x7f0000000740)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000001440)='./proc\x00', &(0x7f0000001480)='proc\x00', 0x1, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000014c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000001540)={0x840, 0x140, 0x10}, 0x18)

12m53.493856828s ago: executing program 4 (id=448):
r0 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000dcd000/0x2000)=nil, 0x7000)
mremap(&(0x7f0000c46000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

12m51.740698051s ago: executing program 4 (id=451):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd25, 0x1, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4040000)

12m51.158888225s ago: executing program 44 (id=451):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd25, 0x1, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4040000)

12m47.121902354s ago: executing program 6 (id=456):
r0 = socket$inet(0x2, 0x1, 0x6)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000140)=0x1, 0x4)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

12m46.934467718s ago: executing program 6 (id=457):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = memfd_create(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0x16, &(0x7f0000000380)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
lseek(r3, 0x0, 0x4)
sendfile(r3, r3, &(0x7f0000000a00), 0x7fa)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000b80)='./tracing\x00', &(0x7f0000000bc0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x42, 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r4, &(0x7f0000000cc0)='p:p1 ./file0:0', 0xe)

12m45.505977773s ago: executing program 6 (id=458):
syz_usb_connect$uac2(0x5, 0x9d, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x7, 0x0, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x1ff, 0x7, 0x2, 0x0, 0xec, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3e}, @as_header={0x10, 0x24, 0x1, 0x5, 0x1, 0x3, 0x3, 0x3, 0x9, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x23, 0xff, 0xd, {0x8, 0x25, 0x1, 0x81, 0xc, 0x2, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x10, 0xfc, {0x8, 0x25, 0x1, 0x82, 0xc, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})

12m43.58810732s ago: executing program 6 (id=460):
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000000400)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x890)
open(0x0, 0x24842, 0x1a6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000001440)='./proc\x00', &(0x7f0000001480)='proc\x00', 0x1, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000014c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000001540)={0x840, 0x140, 0x10}, 0x18)

12m43.353974946s ago: executing program 6 (id=461):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
fsopen(0x0, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x800})

12m42.756184201s ago: executing program 6 (id=463):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x0, 0x10, 0x10, &(0x7f0000000c80)="0000000012000000", &(0x7f0000000cc0)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

12m42.325472881s ago: executing program 45 (id=463):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x0, 0x10, 0x10, &(0x7f0000000c80)="0000000012000000", &(0x7f0000000cc0)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

11m25.495918488s ago: executing program 0 (id=695):
r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x3)
r1 = fanotify_init(0x1a, 0x1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r1, 0x541, 0x1023, r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000280)={{0x12, 0x1, 0xedbaa90d035fe9fb, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3f19, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x80, 0x0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2000, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x9, 0x0, {0x7, 0x25, 0x1, 0xc, 0x5, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xff, 0x2, 0x3, {0x7, 0x25, 0x1, 0x8, 0x9, 0x2}}}}}}}}]}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

11m24.343660606s ago: executing program 0 (id=700):
socket$igmp6(0xa, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2048cc, &(0x7f0000000940)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0], 0x1, 0x35b, &(0x7f0000001a80)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001e40)='.\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffffc, 0x2)
getdents(r0, 0x0, 0x54)

11m23.852592958s ago: executing program 0 (id=702):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000940)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="20000000020000001f"], 0x8600)

11m23.600183304s ago: executing program 0 (id=703):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x1802, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpu.stat\x00', 0x275a, 0x0)
write$uinput_user_dev(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0)

11m23.303987201s ago: executing program 0 (id=706):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='r', 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb8}}, 0x14040050)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, r0, 0x20, 0x0, @void}, 0x10)
truncate(&(0x7f0000000040)='./file0\x00', 0x9)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r5, 0x0, 0x8, 0x0, 0x0)

11m22.278502496s ago: executing program 0 (id=712):
mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000b80)='./tracing\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000cc0)='p:p1 ./file0:0', 0xe)

11m3.564770583s ago: executing program 46 (id=712):
mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000b80)='./tracing\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000cc0)='p:p1 ./file0:0', 0xe)

4m48.416965728s ago: executing program 7 (id=2487):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file7\x00', 0x21081e, &(0x7f00000000c0)={[{@noinit_itable}, {@errors_remount}, {@noauto_da_alloc}]}, 0x1, 0x51f, &(0x7f00000001c0)="$eJzs3c9vI1cdAPDvzK6T7G7abEsPgKBd2sKCVutsvO2q6gHKCSFUCdEjSNuQeKNV7DiKndKElUjPXJGoxAmO/AGce+LOBcGNSzkg8SMCNUgcBs14kvUmduL94TiKPx9p5Pfmjf19b73z3syz4xfAxLoWETsRMRUR70fEXLk/Kbd4p7vlx322+2Bpb/fBUhJZ9t4/k6I83xc9z8ldKV9zJiJ+8J2IHydH47a3tlcXG436Rpmf7zTX59tb2zfvNxdX6iv1tVrtzsKdW2/dfrP2GK2ZObb0leZUmfryp3/Y+cZP82rNlnt62/EsdZteOYiTuxgR3xtFsDG4ULZn6smefvwbxsilEfFiRLxanP9zcaF4NwGA8yzL5iKb680DAOddWsyBJWm1nAuYjTStVrtzeC/F5bTRandu3Gttri1358quRiW9d79Rv1XOFV6NSpLnF4r0w3ztUP52RLwQEb+YvlTkq0utxvI4L3wAYIJdOTT+/2e6O/4DAOecb2EAwOQx/gPA5DH+A8DkMf4DwOTpjv+XHvdpWZb9bBTVAQBOgft/AJg8xn8AmCjff/fdfMv2yt+/Xv5ga3O19cHN5Xp7tdrcXKoutTbWqyut1krxmz3Nk16v0WqtL7wRmx9e/eZ6uzPf3tq+22xtrnXuFr/rfbdeKY7aOYWWAQCDvPDKJ39O8hH57UvFFj1rOVTGWjNg1NJxVwAYmwvjrgAwNlb7gsn18B7/sb8EYHoAzok+S/Q+YqbfHwhlWZaNrkrAiF3/gvl/mFQ98/++BQwT5qT5/2JtYB8Swrlk/h8mV5Ylw675H8MeCACcbcfM8V89zesQYHwGfP7/Yvn42/LDgR8tHz7i41HWCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM62/fV/q+Uyv7ORptVqxHPFAkCV5N79Rv1WRDwfEX+arkzn+YUx1xkAeFrp35Jy/a/rc6/PPlL08pWD5FRE/ORX7/3yw8VOZ+OPEVPJv6b393c+LvfXTgw2M4oWAADH2x+ni8eeG/nPdh8s7W+nWZ+/f7t7VZDH3dudir2D+BfjYvE4E5WIuPzvpMx3JT1zF09j56OI+Hy/9icxW8yBdC9ZDsfPYz93qvHTR+Kn5QLNaflv8blnUBeYNJ/k/c87/c6/NK4Vj/3P/5mih3p6Zf+Xv9TSXtEHPoy/3/9dGND/XRs2xhu//243delo2UcRX7wYsR97r6f/2Y+fDIj/+pDx//Kll18dVJb9OuJ69I/fG2u+01yfb29t37zfXFypr9TXarU7C3duvXX7zdp8MUc9P3g0+MfbN54fVJa3//KA+DMntP+rQ7b/N/97/4dfOSb+11/rFz+Nl46Jn4+JXxsy/uLl3w28787jLx9tfzLM+39jyPif/nX7yLLhAMD4tLe2VxcbjfqGhMTZT+T/Zc9ANfomvnVasaaif9HPX+ue04eKsuyJYg3qMZ7FrBtwFhyc9BHx33FXBgAAAAAAAAAAAAAA6Os0/mJp3G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/Pp/AAAA//8TpdPg")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x0, 0x42)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40042, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000740)={@id={0x2, 0x0, @d}})

4m47.064797221s ago: executing program 7 (id=2489):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x8d, 0xfffffffd, 0xffffffff, 0xe, 0xa0, "fff903e70000ff0000fbffffffffffffff00", 0x400, 0x81})
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000300), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cd", @ANYBLOB], 0x2c}}, 0x0)
r5 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
pwritev(r5, &(0x7f0000000580)=[{&(0x7f00000005c0)="a9", 0x1}], 0x1, 0x9, 0xfffff800)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000600)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008", 0x1d)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@abort}, {@acl}, {@oldalloc}, {@jqfmt_vfsv0}]}, 0x1, 0x5cb, &(0x7f0000000fc0)="$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")
keyctl$search(0xa, 0x0, &(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file2\x00', 0x80000, 0x40)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4m45.987666467s ago: executing program 7 (id=2491):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m45.608129276s ago: executing program 7 (id=2492):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x3, 0x0, 0x0, 0x2, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]})
unlink(&(0x7f0000000040)='./file1\x00')

4m44.572960792s ago: executing program 7 (id=2493):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b80), 0x2041, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x5)

4m41.964010075s ago: executing program 7 (id=2500):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$evdev(&(0x7f00000009c0), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$EVIOCRMFF(r0, 0x5509, 0x0)

4m41.270786943s ago: executing program 47 (id=2500):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$evdev(&(0x7f00000009c0), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$EVIOCRMFF(r0, 0x5509, 0x0)

2m25.731061922s ago: executing program 2 (id=2897):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x100}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00", @ANYRES64=r3], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

2m22.376437534s ago: executing program 2 (id=2905):
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
ioctl(r0, 0x1, 0x0)
mlockall(0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000f40)={0x300, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000f80)={[0x4, 0x6, 0x4, 0x10043, 0x5, 0x2, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0xeef, 0x1, 0x0, 0x9], 0xeeee8000, 0x283a02})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
clock_getres(0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)

2m21.733901129s ago: executing program 2 (id=2908):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20048053}, 0x20000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r4, &(0x7f0000000940)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019940)=0x7)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000019980)={'veth1\x00', 0x0})
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_netfilter(r0, &(0x7f0000019a00)={0x0, 0x0, &(0x7f0000019a40)={&(0x7f0000019a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003"], 0xbc}}, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000008c0)={@my=0x1})
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./proc/fs/nfsd\x00')

2m20.751895013s ago: executing program 2 (id=2911):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x41, &(0x7f0000000080)=[@cr4={0x1, 0x408e2}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000001f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001f40), 0x0, 0x10, &(0x7f0000001f80), 0xfffffffffffffd00}, 0x48)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x24000045, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40104d06, 0x0)
r4 = socket(0xa, 0x3, 0x6)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x30)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write(r5, &(0x7f00000003c0)='1', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0)
write(r6, &(0x7f0000000440)='6', 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="400f23280f019c990e000000b91a0200000f32c344240000600000c744240200800000c7442406000000000f011c246566262e440f23b126673e660f382943b0c4c3914984fb499e00007fc744240000000000c744240278581667c74424060000000004011c2467440fc7580066b804008ee8", 0x73}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000020000000000000000000000180200002020702500000000002020207b0af8ff00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m16.904887607s ago: executing program 2 (id=2921):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, 0x0})

2m16.687625263s ago: executing program 2 (id=2922):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, 0x0, 0x20040084)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x20, 0x4, 0x3be5, 0x1}, 0x1b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x0)
close(r4)
socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000640), 0x56)
sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000007c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005)

2m1.665580089s ago: executing program 48 (id=2922):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, 0x0, 0x20040084)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x20, 0x4, 0x3be5, 0x1}, 0x1b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x0)
close(r4)
socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000640), 0x56)
sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000007c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005)

1m41.698882437s ago: executing program 3 (id=3012):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x7b0e7725a747373)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x7)

1m37.86788517s ago: executing program 3 (id=3019):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000019340)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58)
accept4$alg(r5, 0x0, 0x0, 0x80000)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000193c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x228, 0x2e8, 0x2e8, 0x228, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'macvlan1\x00', 'geneve1\x00'}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xffffff00], 0x4, 0x1, {0xfd}}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3ee, 0x0, 0xfffffffc, 0x7, 0x0, 0x5, 0x7]}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x6, 0x1}, {0x4}, 0x3800, 0x5d6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000019740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000197c0)={0x1, 0xa, &(0x7f0000019880)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
rmdir(0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000019900)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0xffe3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0xc880)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019980)=ANY=[@ANYBLOB="3c0000006a00010025bd7000fedbdf25020000000000000008000a00020000000400090004000b0008000a000200000004000b0008000500", @ANYRES32=r9, @ANYBLOB="54a47ac953af4d118755bf5ac2e16c801ce4b59e5a7c4fb72a8f12c7e8d32f98de92419949830f4fa59947fb6a031ddfae425302d2be57ed006802ddfba2ef861761601fcf0eafc419f26b6486c8b8"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x20008090)

1m35.81741665s ago: executing program 3 (id=3021):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xffe0}, {0x2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x8, 0x8, 0x40a, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xd4}, 0x40000c0)

1m31.981713454s ago: executing program 3 (id=3025):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file0\x00', 0x810000, &(0x7f0000006400)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@gid}, {@gid_forget}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@unhide}, {@uid}, {@uid}, {@uid_ignore}, {@shortad}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x7fffffff}}, {@uid_ignore}, {@uid_ignore}, {@shortad}]}, 0x4, 0xc24, &(0x7f0000000d00)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x170010, 0xffffffffffffffff, 0xccb53000)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020)

1m30.749378184s ago: executing program 3 (id=3027):
unshare(0x6020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
fspick(0xffffffffffffff9c, 0x0, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r1, &(0x7f0000000740)='7', 0x1)
fcntl$lock(r0, 0x26, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000780)={0x1, 0x1, 0x7, 0xf34})

1m27.312051948s ago: executing program 3 (id=3034):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7c2, &(0x7f0000003040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000680)=0xfffffffe)
socket$key(0xf, 0x3, 0x2)
syz_usb_connect(0x5, 0x39, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file1\x00', 0x129042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1m26.573823516s ago: executing program 49 (id=3034):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7c2, &(0x7f0000003040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000680)=0xfffffffe)
socket$key(0xf, 0x3, 0x2)
syz_usb_connect(0x5, 0x39, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file1\x00', 0x129042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

17.255250369s ago: executing program 5 (id=3171):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0xfca804a0, 0xd, 0x0, &(0x7f0000000240)="9b352e98d1dc0621a18bc4c5a6", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000f40)=""/102392, 0x18ff8)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000019f40)=[{&(0x7f0000019f80)='\f7', 0x2}], 0x1)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000019fc0)=0x1002, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x6040, &(0x7f000001a000)={0x2, 0x4e20}, 0x10)
recvfrom(r1, 0x0, 0x0, 0x12041, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f000001a080)={0x0, 0x4100, &(0x7f000001a0c0)=[{&(0x7f000001a100)='>', 0x33fe0}], 0x1}, 0x3)
close(r2)
sendmsg$inet6(0xffffffffffffffff, &(0x7f000001a140)={&(0x7f000001a180)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48003)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f000001a1c0), 0x121301, 0x0)
ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875)
ioctl$TCSETS(r4, 0x5402, &(0x7f000001a200)={0x200401, 0x0, 0x30000, 0xb99c, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f0000000300), 0x1, 0x4d7, &(0x7f0000000540)="$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")

16.189929395s ago: executing program 5 (id=3172):
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)

15.753681366s ago: executing program 9 (id=3173):
umount2(0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0802, 0x0)
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0xf}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000400)=""/102400, 0x19000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)

14.76972589s ago: executing program 9 (id=3174):
unshare(0x6020400)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r1, &(0x7f0000000740)='7', 0x1)
fcntl$lock(r0, 0x26, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000780)={0x1, 0x1, 0x7, 0xf34})

14.527237736s ago: executing program 8 (id=3175):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/102392, 0x18ff8)
connect$vsock_stream(0xffffffffffffffff, &(0x7f00000191c0)={0x28, 0x0, 0x2710}, 0x10)
socket$inet6(0xa, 0x2, 0x3a)
gettid()
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffe)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0)

13.389534293s ago: executing program 8 (id=3176):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
clock_gettime(0x8, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
r5 = syz_open_dev$vcsn(&(0x7f0000000280), 0x7, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000002c0)={0x78, 0x100071, 0x40000, {r5}}, 0x20)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0xfffd, 0xd, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x6}, 0x1c)

10.347317977s ago: executing program 8 (id=3178):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2800000, &(0x7f0000000180)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@test_dummy_encryption}, {@nodelalloc}, {@norecovery}, {@delalloc}, {@usrquota}, {@noinit_itable}]}, 0x1, 0xbdb, &(0x7f0000000a00)="$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")
chdir(&(0x7f0000001600)='./file0\x00')
getpid()
syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x100080d, &(0x7f0000001680)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="1f0d04d8858626b242e381e708f38e036ccecea771e4f8446147458236e3c36478fbcaf674d0fa6700d4f4a84cdb29f2716429474a14fa14ce679d17bfc359686057e006df88fd3693dc63144b1800a24a33f5167359534a677c6b705766f11e57747beaa2c1fbc10f56cea22e63fa6d2c5ed4f140572694ed8fa45119c9194ce8eed7e76a", @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYRES8], 0xff, 0x1fb, &(0x7f0000001a40)="$eJzsmb+LE0EUx78zu8mehwg2FjYWHniit7+ics0VJ4iVIERRy2A2IbhJJFkhCYgEGxtLEcHWf8DCIpWFnZ2tFioIFqYULISRmR03k8SEBI0RfB+4ue97M/Pem9nkpVgQBPHf8vHD1/cPz+9eOQ3gILbgaP9na7SGA5n17smdU4/2Ljx9/vbZq8ahu4PJeBsAhFg8vwz8ct9CoiwhxL3x+S05PB73XQXHSa2vgcFN5XehSI0IDDeUsoFMA80DWsSRe7MZlyu1OPLlEMghlEPBzCV3D/sM5exsQjBjvt3t3SrFcdSaFDnxM8/U1LJi3v2p+vY59rQt6+MArj+435e2vhv44OldAgjAEWhdAENR6104cF13dCXG+Y/ao/jWIudfl2Df0o+B9BzeWX89/5bI6ce2ghTCWWHxDv5gQDbpkV/ozHNkOHg9vevT8rn4X364DDM6jmpcADLPRb3mzWYcX/qNpHmdcXrKMvsTs4ETRn+yYWf9w0vqt712t7dTq5eqUTVqhGHhnH/G98+GXqXmwPdUO5rT/zZUf9o04ufMBcYPSp7l0SklSSvoAEkryOwwHY2OW3zR/KL2cNX/OLaPpzHkJatjO7+uh+k/rv5LtW3NLJ4gCIIgCIIgCIIgCIIgCGIpjoEhfQWiXlSJGYSX1eofAQAA///xJWk3")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001e80)="$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")
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x0)
statx(r2, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x0, 0x268, 0x33a, 0x268, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x2000000000, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0xd}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0)

9.458648099s ago: executing program 5 (id=3179):
socket$packet(0x11, 0x3, 0x300)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x9, 0x1, 0x2, 0x8}, 0x20)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0)

8.856159304s ago: executing program 9 (id=3180):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0xfca804a0, 0xd, 0x0, &(0x7f0000000240)="9b352e98d1dc0621a18bc4c5a6", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000f40)=""/102392, 0x18ff8)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000019f40)=[{&(0x7f0000019f80)='\f7', 0x2}], 0x1)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000019fc0)=0x1002, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x6040, &(0x7f000001a000)={0x2, 0x4e20}, 0x10)
recvfrom(r1, 0x0, 0x0, 0x12041, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f000001a080)={0x0, 0x4100, &(0x7f000001a0c0)=[{&(0x7f000001a100)='>', 0x33fe0}], 0x1}, 0x3)
close(r2)
sendmsg$inet6(0xffffffffffffffff, &(0x7f000001a140)={&(0x7f000001a180)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48003)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f000001a1c0), 0x121301, 0x0)
ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875)
ioctl$TCSETS(r4, 0x5402, &(0x7f000001a200)={0x200401, 0x0, 0x30000, 0xb99c, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f0000000300), 0x1, 0x4d7, &(0x7f0000000540)="$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")

8.021403044s ago: executing program 1 (id=3181):
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x4000000d20, 0x3, 0x0, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffdfa, 0x81, 0x100, 0x5, 0x933, 0x200000101, 0x3, 0x8001, 0x8000020000000400, 0x7, 0x1, 0x8, 0xa, 0x6, 0x100, 0x40, 0x83, 0x1e13, 0x9, 0xda, 0x2, 0x0, 0x4, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x2c, 0x5bc, 0x4, 0x7fffffff, 0x4, 0x8000, 0x4, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0x1, 0x1fcc, 0x6, 0x0, 0xae4, 0x22, 0x1, 0x7, 0x1, 0x1, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x3ff, 0xfffffffd, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0xffe, 0x8000000000000001, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x8000000000, 0x0, 0x9, 0x4, 0x7, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xc, 0x3]})
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)
prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000f80)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0)
read$msr(r4, &(0x7f0000001000)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f000001a000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f000001a040)='./tracing\x00', &(0x7f000001a080)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000001a0c0)='./tracing/uprobe_events\x00', 0x109e01, 0x0)
r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r5, 0x90}, &(0x7f0000001180)=ANY=[], &(0x7f0000000980)="929835a77d8fae0300000000000000a804bfc80349e1f140d6d7fe01e9c88fbc79dc97601bddeea9d91438988e1cee39ee49b5542d47923d8d802603a4e73dde649aacebb145381a46f82747f0db81470d91a84ea4cb1d1c8d6558aaab1171ba3dd7749ccdaa11a46f5c9d716c282058b525774e1af61664d062b5ad5d0f4c61431265373c44d5f91aeb92dfc0f7052f", 0x0)

7.969271416s ago: executing program 9 (id=3182):
umount2(0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0802, 0x0)
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0xf}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000400)=""/102400, 0x19000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)

7.049568948s ago: executing program 1 (id=3183):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080), 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x490, &(0x7f0000000380)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==")
setresuid(0x0, 0xee01, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x20000001)
getrandom(0x0, 0x0, 0x100000000000001)

5.992132064s ago: executing program 8 (id=3184):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000019340)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58)
accept4$alg(r5, 0x0, 0x0, 0x80000)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000193c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x228, 0x2e8, 0x2e8, 0x228, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'macvlan1\x00', 'geneve1\x00'}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xffffff00], 0x4, 0x1, {0xfd}}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3ee, 0x0, 0xfffffffc, 0x7, 0x0, 0x5, 0x7]}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x6, 0x1}, {0x4}, 0x3800, 0x5d6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
bpf$MAP_CREATE(0x0, &(0x7f0000019740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
rmdir(0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000019900)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0xffe3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0xc880)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019980)=ANY=[@ANYBLOB="3c0000006a00010025bd7000fedbdf25020000000000000008000a00020000000400090004000b0008000a000200000004000b0008000500", @ANYRES32=r8, @ANYBLOB="54a47ac953af4d118755bf5ac2e16c801ce4b59e5a7c4fb72a8f12c7e8d32f98de92419949830f4fa59947fb6a031ddfae425302d2be57ed006802ddfba2ef861761601fcf0eafc419f26b6486c8b8"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x20008090)

4.768786823s ago: executing program 8 (id=3185):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000240)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x1, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0x80000000]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0x8000ac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1003, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0x200f4240, 0x0, 0x0, 0x1}], '\x00', 0x81})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r1 = getpgrp(0x0)
r2 = socket$inet6(0xa, 0xa, 0x84)
connect$inet6(r2, &(0x7f00000001c0), 0x1c)
sched_setaffinity(r1, 0x8, &(0x7f00000004c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe)
listen(r3, 0x5)
poll(&(0x7f00000005c0)=[{r3, 0x4000}], 0x1, 0x9)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000500)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r6, &(0x7f0000002180)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
write$snddsp(r0, 0x0, 0x0)

3.412258907s ago: executing program 1 (id=3186):
r0 = fsopen(&(0x7f0000000440)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x100000000000000, 0x2c)

3.206203332s ago: executing program 9 (id=3187):
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)

3.044228476s ago: executing program 1 (id=3188):
unshare(0x6020400)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r1, &(0x7f0000000740)='7', 0x1)
fcntl$lock(r0, 0x26, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000780)={0x1, 0x1, 0x7, 0xf34})

2.044064121s ago: executing program 5 (id=3189):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
close(0x3)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)

318.044432ms ago: executing program 9 (id=3190):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0xfca804a0, 0xd, 0x0, &(0x7f0000000240)="9b352e98d1dc0621a18bc4c5a6", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000f40)=""/102392, 0x18ff8)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000019f40)=[{&(0x7f0000019f80)='\f7', 0x2}], 0x1)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000019fc0)=0x1002, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x6040, &(0x7f000001a000)={0x2, 0x4e20}, 0x10)
recvfrom(r1, 0x0, 0x0, 0x12041, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f000001a080)={0x0, 0x4100, &(0x7f000001a0c0)=[{&(0x7f000001a100)='>', 0x33fe0}], 0x1}, 0x3)
close(r2)
sendmsg$inet6(0xffffffffffffffff, &(0x7f000001a140)={&(0x7f000001a180)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48003)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f000001a1c0), 0x121301, 0x0)
ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875)
ioctl$TCSETS(r4, 0x5402, &(0x7f000001a200)={0x200401, 0x0, 0x30000, 0xb99c, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f0000000300), 0x1, 0x4d7, &(0x7f0000000540)="$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")

236.259154ms ago: executing program 5 (id=3191):
ioperm(0x4, 0x8, 0x5)
epoll_wait(0xffffffffffffffff, &(0x7f0000000200)=[{}], 0x1, 0x0)

213.521895ms ago: executing program 1 (id=3192):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94)

58.181229ms ago: executing program 8 (id=3193):
openat2(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x717101, 0x10}, 0x18)

173.68µs ago: executing program 5 (id=3194):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0)
r0 = getpid()
syz_emit_vhci(&(0x7f0000001640)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x1, 0xc9}}}, 0x6)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000015c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001640), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000001680), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000016c0)=0x6)
r3 = fanotify_init(0xf00, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000001700)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x2c)
fanotify_mark(r3, 0x1, 0x800002b, r4, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x300, 0x0)
setxattr$incfs_id(&(0x7f0000001740)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000001780), 0x0, 0x0, 0x1)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0)
syz_emit_vhci(&(0x7f0000001680)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2}, "1ec0"}, 0x6)
preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12)

0s ago: executing program 1 (id=3195):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')
lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='.\x02/file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x2)

kernel console output (not intermixed with test programs):

x90
[  792.679438][T16835]  ? clear_bhb_loop+0x40/0x90
[  792.684098][T16835]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  792.689975][T16835] RIP: 0033:0x7f2df199e1d9
[  792.694395][T16835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  792.714012][T16835] RSP: 002b:00007f2df2827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[  792.722410][T16835] RAX: ffffffffffffffda RBX: 00007f2df1c25fa0 RCX: 00007f2df199e1d9
[  792.730369][T16835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9
[  792.738322][T16835] RBP: 00007f2df1a35888 R08: 0000000000000000 R09: 0000000000000000
[  792.746275][T16835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  792.754232][T16835] R13: 00007f2df1c26038 R14: 00007f2df1c25fa0 R15: 00007ffe6a565ee8
[  792.762201][T16835]  </TASK>
[  792.911080][ T5805] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0
[  792.946500][ T5805] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0
[  792.962107][T16841] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2588'.
[  792.973770][ T5805] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0
[  793.010130][ T5805] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0
[  793.023127][ T5805] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0
[  793.050208][ T5805] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0
[  793.057234][ T5805] lenovo 0003:17EF:6047.0019: unbalanced collection at end of report description
[  793.114064][ T5805] lenovo 0003:17EF:6047.0019: hid_parse failed
[  793.135242][ T5805] lenovo: probe of 0003:17EF:6047.0019 failed with error -22
[  793.187118][ T5805] usb 4-1: USB disconnect, device number 10
[  793.261060][T16851] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  794.347864][T16867] FAULT_INJECTION: forcing a failure.
[  794.347864][T16867] name failslab, interval 1, probability 0, space 0, times 0
[  795.290474][T16867] CPU: 0 PID: 16867 Comm: syz.3.2594 Not tainted syzkaller #0
[  795.297965][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  795.308004][T16867] Call Trace:
[  795.311271][T16867]  <TASK>
[  795.314193][T16867]  dump_stack_lvl+0x18c/0x250
[  795.318861][T16867]  ? show_regs_print_info+0x20/0x20
[  795.324045][T16867]  ? load_image+0x420/0x420
[  795.328537][T16867]  ? __might_sleep+0xe0/0xe0
[  795.333114][T16867]  ? __lock_acquire+0x7eb0/0x7eb0
[  795.338124][T16867]  should_fail_ex+0x394/0x4c0
[  795.342816][T16867]  should_failslab+0x9/0x20
[  795.347316][T16867]  slab_pre_alloc_hook+0x59/0x300
[  795.352325][T16867]  kmem_cache_alloc+0x5a/0x2c0
[  795.357082][T16867]  ? fcntl_getlk+0x30/0xb10
[  795.361574][T16867]  fcntl_getlk+0x30/0xb10
[  795.365889][T16867]  ? __might_fault+0xaa/0x120
[  795.370548][T16867]  ? __might_fault+0xc6/0x120
[  795.375206][T16867]  ? __might_fault+0xaa/0x120
[  795.379895][T16867]  do_fcntl+0x926/0x14a0
[  795.384143][T16867]  ? kill_fasync+0x4b0/0x4b0
[  795.388734][T16867]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  795.394710][T16867]  ? tomoyo_file_fcntl+0x7b/0x220
[  795.399723][T16867]  ? bpf_lsm_file_fcntl+0x9/0x10
[  795.404647][T16867]  ? security_file_fcntl+0x80/0xa0
[  795.409750][T16867]  __se_sys_fcntl+0xc9/0x1a0
[  795.414338][T16867]  do_syscall_64+0x55/0xb0
[  795.418737][T16867]  ? clear_bhb_loop+0x40/0x90
[  795.423422][T16867]  ? clear_bhb_loop+0x40/0x90
[  795.428096][T16867]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  795.433991][T16867] RIP: 0033:0x7f77b4b9e1d9
[  795.438396][T16867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  795.458002][T16867] RSP: 002b:00007f77b599d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  795.466406][T16867] RAX: ffffffffffffffda RBX: 00007f77b4e25fa0 RCX: 00007f77b4b9e1d9
[  795.474366][T16867] RDX: 0000200000000780 RSI: 0000000000000024 RDI: 0000000000000007
[  795.482352][T16867] RBP: 00007f77b4c35888 R08: 0000000000000000 R09: 0000000000000000
[  795.490307][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  795.498262][T16867] R13: 00007f77b4e26038 R14: 00007f77b4e25fa0 R15: 00007ffcb2468228
[  795.506229][T16867]  </TASK>
[  798.558732][T16912] loop3: detected capacity change from 0 to 16
[  798.664229][T16912] erofs: (device loop3): mounted with root inode @ nid 36.
[  798.778903][T16912] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 89
[  798.888663][T16912] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89
[  799.719758][T16922] xt_hashlimit: max too large, truncated to 1048576
[  799.770205][T16912] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 89
[  799.962865][T16912] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89
[  800.038814][T16912] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 89
[  800.140688][T16912] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89
[  800.208991][T16912] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 89
[  800.273012][T16912] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 89
[  800.322172][T16912] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89
[  800.632983][T16944] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  803.854536][T16976] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  807.306179][T16994] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  807.516936][T16998] loop8: detected capacity change from 0 to 512
[  807.575827][T16998] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  807.650335][T16998] EXT4-fs (loop8): Test dummy encryption mode enabled
[  807.709462][T16998] EXT4-fs (loop8): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  807.871453][T16998] EXT4-fs error (device loop8): ext4_add_entry:2488: inode #2: comm syz.8.2622: Directory hole found for htree leaf block 0
[  807.952325][T16998] EXT4-fs (loop8): Remounting filesystem read-only
[  808.071712][T16393] EXT4-fs (loop8): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  808.234340][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  808.252795][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  809.961331][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  809.961342][   T27] audit: type=1326 audit(1792252294.695:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85af99e1d9 code=0x7ffc0000
[  811.005056][   T27] audit: type=1326 audit(1792252294.735:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85af99e1d9 code=0x7ffc0000
[  811.255334][   T27] audit: type=1326 audit(1792252294.735:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85af99e1d9 code=0x7ffc0000
[  811.360377][ T8332] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  811.421209][   T27] audit: type=1326 audit(1792252294.735:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85af99e1d9 code=0x7ffc0000
[  811.550508][   T27] audit: type=1326 audit(1792252294.735:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f85af99e1d9 code=0x7ffc0000
[  811.626495][ T8332] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  811.687394][ T8332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  811.753212][   T27] audit: type=1326 audit(1792252294.735:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85af99e1d9 code=0x7ffc0000
[  811.798201][ T8332] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  811.876335][ T8332] usb 2-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  811.923477][   T27] audit: type=1326 audit(1792252294.735:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85af99e1d9 code=0x7ffc0000
[  811.969331][ T8332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.024099][ T8332] usb 2-1: config 0 descriptor??
[  812.127696][   T27] audit: type=1326 audit(1792252294.735:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f85af99e1d9 code=0x7ffc0000
[  812.237969][T17053] loop1: detected capacity change from 0 to 512
[  812.320206][   T27] audit: type=1326 audit(1792252294.735:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f85af99e1d9 code=0x7ffc0000
[  812.477350][T17053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  812.553463][T17053] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  813.232376][T17087] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9559] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17087]
[  813.358871][T17092] loop3: detected capacity change from 0 to 512
[  813.435610][T17092] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  813.513422][T17092] EXT4-fs (loop3): 1 truncate cleaned up
[  813.547086][T17092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  813.645181][   T27] audit: type=1800 audit(1792252298.375:209): pid=17092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2647" name="file1" dev="loop3" ino=15 res=0 errno=0
[  813.870823][ T5775] Bluetooth: hci1: unexpected subevent 0x1a length: 12 > 6
[  813.940210][  T173] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  814.131655][  T173] usb 4-1: config 32 has an invalid interface number: 255 but max is 0
[  814.159378][  T173] usb 4-1: config 32 has no interface number 0
[  814.185417][  T173] usb 4-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30
[  814.230705][  T173] usb 4-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  814.313339][ T8332] usbhid 2-1:0.0: can't add hid device: -71
[  814.342723][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.361536][ T8332] usbhid: probe of 2-1:0.0 failed with error -71
[  814.388175][  T173] usb 4-1: config 32 interface 255 has no altsetting 0
[  814.418114][ T8332] usb 2-1: USB disconnect, device number 15
[  814.457107][  T173] usb 4-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00
[  814.529066][  T173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.595917][  T173] usb-storage 4-1:32.255: USB Mass Storage device detected
[  814.672336][  T173] usb-storage 4-1:32.255: Quirks match for vid 057b pid 0000: 1
[  814.767522][T17121] loop1: detected capacity change from 0 to 512
[  814.838558][T17121] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  814.912403][T17121] EXT4-fs (loop1): 1 truncate cleaned up
[  814.943564][T17121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  815.430835][T17129] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  815.648288][  T173] usb 4-1: USB disconnect, device number 11
[  815.677573][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  815.722428][T16234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.136814][T17146] loop3: detected capacity change from 0 to 1024
[  816.195211][T17146] EXT4-fs: Ignoring removed bh option
[  816.262054][T17146] EXT4-fs: Ignoring removed bh option
[  817.082856][T17146] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  817.250764][T17146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  817.381052][T17146] EXT4-fs error (device loop3): empty_inline_dir:1884: inode #12: block 7: comm syz.3.2665: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  817.523333][T17146] EXT4-fs (loop3): Remounting filesystem read-only
[  817.529897][T17146] EXT4-fs warning (device loop3): empty_inline_dir:1891: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  817.784131][T16234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  818.293160][T17174] loop8: detected capacity change from 0 to 128
[  818.355832][T17174] FAT-fs (loop8): Unrecognized mount option "" or missing value
[  818.431539][T17174] 9pnet_fd: Insufficient options for proto=fd
[  818.914783][T17183] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  819.288432][T17191] loop8: detected capacity change from 0 to 512
[  819.423000][T17191] EXT4-fs (loop8): orphan cleanup on readonly fs
[  819.497047][T17191] EXT4-fs error (device loop8): ext4_do_update_inode:5268: inode #15: comm syz.8.2674: corrupted inode contents
[  819.616814][T17205] loop3: detected capacity change from 0 to 512
[  819.623267][T17191] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  819.695312][T17191] EXT4-fs error (device loop8): ext4_do_update_inode:5268: inode #15: comm syz.8.2674: corrupted inode contents
[  819.736190][T17205] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.2677: corrupted inode contents
[  819.801346][T17191] EXT4-fs error (device loop8): ext4_evict_inode:302: inode #15: comm syz.8.2674: mark_inode_dirty error
[  819.862019][T17205] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  820.841966][T17191] EXT4-fs (loop8): 1 orphan inode deleted
[  820.850092][T17205] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.2677: corrupted inode contents
[  820.910900][T17191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  820.931712][T17205] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.2677: mark_inode_dirty error
[  821.040120][T17205] EXT4-fs (loop3): 1 orphan inode deleted
[  821.046535][T17205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  821.160820][T16393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  821.355800][T16234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  823.741114][T17239] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  825.104601][T17253] loop1: detected capacity change from 0 to 256
[  825.161226][T17253] exfat: Deprecated parameter 'namecase'
[  825.222948][T17253] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  826.190366][ T5829] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  826.412171][ T5829] usb 2-1: Using ep0 maxpacket: 32
[  826.446827][ T5829] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  826.480102][ T5829] usb 2-1: config 0 has no interface number 0
[  826.486216][ T5829] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  827.380729][ T5829] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  827.438953][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.479098][ T5829] usb 2-1: Product: syz
[  827.505025][ T5829] usb 2-1: Manufacturer: syz
[  827.529716][ T5829] usb 2-1: SerialNumber: syz
[  827.559713][ T5829] usb 2-1: config 0 descriptor??
[  827.585626][T17265] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  827.648903][T17296] loop8: detected capacity change from 0 to 128
[  827.793765][T17296] loop8: detected capacity change from 128 to 1
[  827.823149][T17265] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  827.832501][T17299] syz.8.2699: attempt to access beyond end of device
[  827.832501][T17299] loop8: rw=2049, sector=2, nr_sectors = 1 limit=1
[  827.908504][T17299] Buffer I/O error on dev loop8, logical block 2, lost sync page write
[  827.935278][T17299] syz.8.2699: attempt to access beyond end of device
[  827.935278][T17299] loop8: rw=0, sector=2, nr_sectors = 1 limit=1
[  827.989239][T17299] FAT-fs (loop8): Directory bread(block 2) failed
[  828.019840][T17299] syz.8.2699: attempt to access beyond end of device
[  828.019840][T17299] loop8: rw=2049, sector=3, nr_sectors = 1 limit=1
[  828.079916][ T5829] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  828.113612][T17299] Buffer I/O error on dev loop8, logical block 3, lost sync page write
[  828.150416][ T5829] asix: probe of 2-1:0.188 failed with error -32
[  828.210260][ T5829] usb 2-1: USB disconnect, device number 16
[  828.326092][T17267] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  829.337717][T17309] netlink: 200 bytes leftover after parsing attributes in process `syz.8.2702'.
[  832.589279][T17345] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2713'.
[  833.546455][T17355] loop1: detected capacity change from 0 to 512
[  833.641317][T17355] EXT4-fs (loop1): orphan cleanup on readonly fs
[  833.764304][T17355] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.2705: bad orphan inode 16
[  833.831241][T17355] ext4_test_bit(bit=15, block=18) = 1
[  833.862278][T17355] is_bad_inode(inode)=0
[  833.866448][T17355] NEXT_ORPHAN(inode)=83886080
[  833.913395][T17355] max_ino=32
[  833.916620][T17355] i_nlink=0
[  833.979551][ T3487] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  834.047830][ T3487] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1
[  834.134011][T17355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  834.176609][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2717'.
[  834.251963][T17375] bridge1: entered promiscuous mode
[  834.338075][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  835.591435][T17393] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2722'.
[  836.343974][T17400] loop8: detected capacity change from 0 to 256
[  836.402764][T17403] loop3: detected capacity change from 0 to 256
[  836.469662][T17403] exfat: Deprecated parameter 'namecase'
[  836.557803][T17403] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  837.552347][T17422] loop3: detected capacity change from 0 to 128
[  837.627275][T17422] FAT-fs (loop3): Unrecognized mount option "" or missing value
[  837.745523][T17422] 9pnet_fd: Insufficient options for proto=fd
[  837.978695][T17434] loop1: detected capacity change from 0 to 1024
[  838.731106][T17436] xt_hashlimit: max too large, truncated to 1048576
[  839.169485][T17444] loop1: detected capacity change from 0 to 512
[  839.209037][T17444] EXT4-fs: Ignoring removed nomblk_io_submit option
[  839.255019][T17444] EXT4-fs: test_dummy_encryption requires encrypt feature
[  840.006657][T17465] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[16393] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17465]
[  840.551016][T17472] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2735'.
[  841.491939][T17484] input: syz0 as /devices/virtual/input/input35
[  843.204612][T17527] loop8: detected capacity change from 0 to 2048
[  843.274539][T17527] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  844.280040][T17535] futex_wake_op: syz.2.2755 tries to shift op by 144; fix this program
[  844.288421][T17535] futex_wake_op: syz.2.2755 tries to shift op by 144; fix this program
[  844.759519][T17551] loop1: detected capacity change from 0 to 128
[  844.838883][T17551] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  844.929121][T17551] ext4 filesystem being mounted at /457/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  845.197333][ T9559] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  845.403186][T17566] loop1: detected capacity change from 0 to 1024
[  845.413320][T17568] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  845.498376][T17354] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  845.530520][T17566] syz_tun: entered allmulticast mode
[  846.345564][T17588] loop3: detected capacity change from 0 to 1024
[  846.377062][T17584] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  846.386953][T17588] EXT4-fs: Ignoring removed oldalloc option
[  846.439396][T17588] EXT4-fs: Ignoring removed orlov option
[  846.556931][T17588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  846.709195][T17588] EXT4-fs error (device loop3): __ext4_new_inode:1292: comm syz.3.2770: failed to insert inode 15: doubly allocated?
[  846.753800][T17598] loop1: detected capacity change from 0 to 256
[  846.826278][T17598] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  846.864639][T17588] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 13. Delete some EAs or run e2fsck.
[  846.985564][T17588] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem
[  847.720051][T17606] futex_wake_op: syz.2.2771 tries to shift op by 144; fix this program
[  847.728470][T17606] futex_wake_op: syz.2.2771 tries to shift op by 144; fix this program
[  847.798594][T16234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  851.064086][T17658] loop3: detected capacity change from 0 to 2048
[  851.098997][T17662] loop8: detected capacity change from 0 to 512
[  851.153046][T17658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  851.225189][   T27] audit: type=1800 audit(1792252335.955:210): pid=17662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2787" name="bus" dev="loop8" ino=1049139 res=0 errno=0
[  851.828739][T17684] loop1: detected capacity change from 0 to 764
[  851.863153][   T59] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  851.956507][   T59] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  852.026687][   T59] EXT4-fs (loop3): This should not happen!! Data will be lost
[  852.026687][   T59] 
[  852.084383][   T59] EXT4-fs (loop3): Total free blocks count 0
[  852.115859][   T59] EXT4-fs (loop3): Free/Dirty block details
[  852.157593][   T59] EXT4-fs (loop3): free_blocks=66060288
[  852.193739][   T59] EXT4-fs (loop3): dirty_blocks=32
[  852.220055][   T59] EXT4-fs (loop3): Block reservation details
[  852.226057][   T59] EXT4-fs (loop3): i_reserved_data_blocks=2
[  852.281716][   T59] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  852.444671][T17701] loop1: detected capacity change from 0 to 512
[  852.515395][T17701] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  852.528137][T17705] loop3: detected capacity change from 0 to 256
[  853.489869][T17723] loop8: detected capacity change from 0 to 2048
[  853.634983][T17723] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  854.210444][ T5829] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  854.357926][   T59] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  854.420137][ T5829] usb 4-1: Using ep0 maxpacket: 8
[  854.426890][   T59] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  854.475734][ T5829] usb 4-1: unable to get BOS descriptor or descriptor too short
[  854.505172][ T5829] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  854.516435][   T59] EXT4-fs (loop8): This should not happen!! Data will be lost
[  854.516435][   T59] 
[  854.547315][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.574962][   T59] EXT4-fs (loop8): Total free blocks count 0
[  854.595116][ T5829] usb 4-1: Product: syz
[  854.599294][ T5829] usb 4-1: Manufacturer: syz
[  854.617776][   T59] EXT4-fs (loop8): Free/Dirty block details
[  854.654708][ T5829] usb 4-1: SerialNumber: syz
[  854.659451][   T59] EXT4-fs (loop8): free_blocks=66060288
[  854.688122][   T59] EXT4-fs (loop8): dirty_blocks=32
[  854.739695][   T59] EXT4-fs (loop8): Block reservation details
[  854.759515][   T59] EXT4-fs (loop8): i_reserved_data_blocks=2
[  854.809828][ T3487] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  854.897840][ T5829] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[  854.918482][T17758] support for cryptoloop has been removed.  Use dm-crypt instead.
[  854.962353][ T5829] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  855.026139][ T5829] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  855.122289][ T5829] usb 4-1: USB disconnect, device number 12
[  855.215252][T17354] udevd[17354]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  855.397036][ T8332] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  855.407893][T17773] loop1: detected capacity change from 0 to 2048
[  855.483386][T17773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  855.600781][ T8332] usb 9-1: Using ep0 maxpacket: 16
[  855.621440][ T8332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  855.666635][ T8332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  855.718733][ T8332] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  855.785515][ T8332] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  855.823089][ T8332] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  855.862722][ T8332] usb 9-1: config 0 descriptor??
[  856.124402][ T1321] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  856.189863][ T1321] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  856.237904][ T1321] EXT4-fs (loop1): This should not happen!! Data will be lost
[  856.237904][ T1321] 
[  856.280227][ T1321] EXT4-fs (loop1): Total free blocks count 0
[  856.287122][T17799] loop3: detected capacity change from 0 to 128
[  856.310228][ T8332] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.001A/input/input36
[  856.325111][ T1321] EXT4-fs (loop1): Free/Dirty block details
[  856.335171][T17799] FAT-fs (loop3): Unrecognized mount option "" or missing value
[  856.367327][ T1321] EXT4-fs (loop1): free_blocks=66060288
[  856.401876][ T1321] EXT4-fs (loop1): dirty_blocks=32
[  856.416371][T17799] 9pnet_fd: Insufficient options for proto=fd
[  856.429188][ T1321] EXT4-fs (loop1): Block reservation details
[  856.465919][ T1321] EXT4-fs (loop1): i_reserved_data_blocks=2
[  856.480443][ T8332] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  856.544179][ T3487] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  856.615103][ T8332] usb 9-1: USB disconnect, device number 5
[  856.727901][T17805] loop3: detected capacity change from 0 to 1024
[  856.769237][T17803] fido_id[17803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  856.802483][T17805] hfsplus: invalid length 32517 has been corrected to 255
[  857.248295][T17824] loop1: detected capacity change from 0 to 512
[  857.281577][T17822] loop8: detected capacity change from 0 to 2048
[  857.308941][T17824] EXT4-fs: Ignoring removed nomblk_io_submit option
[  857.367591][T17824] EXT4-fs: inline encryption not supported
[  857.387486][T17822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  857.454855][T17824] EXT4-fs: Ignoring removed oldalloc option
[  857.485921][T17824] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  857.516204][T17822] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  857.568136][   T27] audit: type=1800 audit(1792252342.295:211): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2823" name="UDC" dev="configfs" ino=49999 res=0 errno=0
[  857.607419][T17824] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  857.656854][T17824] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  857.667007][T17822] fs-verity: sha512 using implementation "sha512-avx2"
[  857.684635][T17824] udc dummy_udc.0: failed to start g1: -22
[  857.713143][T17824] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  857.768747][T17824] UDC core: g1: couldn't find an available UDC or it's busy
[  857.795643][T16393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  857.952570][T17837] loop8: detected capacity change from 0 to 8
[  858.023973][T17837] SQUASHFS error: Failed to read block 0x8f: -5
[  858.058126][   T27] audit: type=1800 audit(1792252342.785:212): pid=17837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2826" name="file1" dev="loop8" ino=5 res=0 errno=0
[  858.227354][   T27] audit: type=1800 audit(1792252342.815:213): pid=17841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2826" name="file1" dev="loop8" ino=5 res=0 errno=0
[  859.962220][T17849] xt_hashlimit: max too large, truncated to 1048576
[  859.973078][T17849] loop3: detected capacity change from 0 to 512
[  859.980085][T17849] EXT4-fs: Ignoring removed nobh option
[  859.986140][T17849] EXT4-fs: user quota file already specified
[  860.041654][T17802] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  860.506139][T17862] loop1: detected capacity change from 0 to 1024
[  860.564692][T17862] EXT4-fs: inline encryption not supported
[  860.613449][T17862] EXT4-fs: Ignoring removed oldalloc option
[  860.619371][T17862] EXT4-fs: Ignoring removed oldalloc option
[  860.707436][T17862] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  860.870497][T17862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  861.545731][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  861.785469][T17876] Invalid ELF header magic: != ELF
[  861.909121][T17878] loop8: detected capacity change from 0 to 512
[  861.972766][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  861.994326][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  862.004413][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  862.012791][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  862.034056][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  862.041336][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  862.080209][T17878] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  862.088394][T17878] System zones: 1-12
[  862.103286][T17885] loop1: detected capacity change from 0 to 8
[  862.143768][T17887] loop3: detected capacity change from 0 to 512
[  862.190804][T17878] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #12: comm syz.8.2831: missing EA_INODE flag
[  862.205071][T17885] SQUASHFS error: Failed to read block 0x8f: -5
[  862.282975][   T27] audit: type=1800 audit(1792252347.005:214): pid=17885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2838" name="file1" dev="loop1" ino=5 res=0 errno=0
[  862.326009][T17878] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2831: error while reading EA inode 12 err=-117
[  862.403908][T17878] EXT4-fs (loop8): 1 orphan inode deleted
[  862.449744][T17878] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  862.515969][T17895] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2839'.
[  864.847819][   T51] Bluetooth: hci2: command tx timeout
[  866.052425][T16393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.103035][T17879] chnl_net:caif_netlink_parms(): no params data found
[  866.266231][T17908] loop3: detected capacity change from 0 to 2048
[  866.316802][T17908] EXT4-fs: Ignoring removed i_version option
[  866.489226][T17908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  866.527613][T17879] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.586922][T17879] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.594696][T17908] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  866.628872][T17879] bridge_slave_0: entered allmulticast mode
[  866.676152][T17879] bridge_slave_0: entered promiscuous mode
[  866.715139][T17879] bridge0: port 2(bridge_slave_1) entered blocking state
[  866.763042][T17879] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.796103][T17879] bridge_slave_1: entered allmulticast mode
[  866.835657][T16234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.848549][T17879] bridge_slave_1: entered promiscuous mode
[  866.875128][T17902] Bluetooth: hci2: command tx timeout
[  866.881065][T14591] Bluetooth: hci4: command 0x0406 tx timeout
[  866.987802][T17879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  867.149656][T17879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  867.308960][T17879] team0: Port device team_slave_0 added
[  867.316029][T17934] loop8: detected capacity change from 0 to 8
[  867.346822][T17879] team0: Port device team_slave_1 added
[  867.365417][T17934] SQUASHFS error: Failed to read block 0x8f: -5
[  867.380144][ T5825] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  867.412488][   T27] audit: type=1800 audit(1792252352.135:215): pid=17934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2846" name="file1" dev="loop8" ino=5 res=0 errno=0
[  867.537307][T17879] batman_adv: batadv0: Adding interface: batadv_slave_0
[  867.569179][T17879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  867.623757][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  867.638337][T17938] loop8: detected capacity change from 0 to 512
[  867.665571][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  867.736239][ T5825] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  867.757153][T17879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  867.812528][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.852509][T17879] batman_adv: batadv0: Adding interface: batadv_slave_1
[  867.859464][T17879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  867.921057][ T5825] usb 4-1: config 0 descriptor??
[  868.075596][T17879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  868.152328][T17949] loop1: detected capacity change from 0 to 256
[  868.220786][T17949] exfat: Deprecated parameter 'namecase'
[  868.295658][T17879] hsr_slave_0: entered promiscuous mode
[  868.303098][T17949] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  868.344288][T17879] hsr_slave_1: entered promiscuous mode
[  868.386816][T17879] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  868.418497][T17879] Cannot create hsr debugfs directory
[  868.538644][ T5825] hid-led: probe of 0003:27B8:01ED.001B failed with error -71
[  868.600212][ T5825] usb 4-1: USB disconnect, device number 13
[  868.943990][T17902] Bluetooth: hci2: command tx timeout
[  868.958724][T17964] loop8: detected capacity change from 0 to 8
[  869.025289][T17964] SQUASHFS error: Failed to read block 0x8f: -5
[  869.036285][T17879] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.077823][T17967] loop1: detected capacity change from 0 to 2048
[  869.103744][   T27] audit: type=1800 audit(1792252353.825:216): pid=17964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2854" name="file1" dev="loop8" ino=5 res=0 errno=0
[  869.243017][T17967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  869.351964][T17967] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  869.440329][T17879] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.531698][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  869.552369][T17982] loop8: detected capacity change from 0 to 256
[  869.668677][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  869.677088][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  869.725418][T17879] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.750496][ T5825] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  869.817722][T17985] loop1: detected capacity change from 0 to 256
[  869.852873][T17985] exfat: Deprecated parameter 'namecase'
[  869.936403][T17985] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  869.980176][ T5825] usb 4-1: Using ep0 maxpacket: 32
[  870.021016][ T5825] usb 4-1: config 7 has an invalid interface number: 161 but max is 2
[  870.060074][ T5825] usb 4-1: config 7 has an invalid interface number: 76 but max is 2
[  870.086283][ T5825] usb 4-1: config 7 has an invalid interface number: 76 but max is 2
[  870.100921][T17879] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.133983][ T5825] usb 4-1: config 7 has an invalid interface number: 177 but max is 2
[  870.181340][ T5825] usb 4-1: config 7 has no interface number 0
[  870.210137][ T5825] usb 4-1: config 7 has no interface number 1
[  870.216272][ T5825] usb 4-1: config 7 has no interface number 2
[  870.319192][ T5825] usb 4-1: config 7 interface 76 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  870.391383][ T5825] usb 4-1: config 7 interface 76 altsetting 2 endpoint 0x2 has invalid maxpacket 983, setting to 64
[  870.421053][T17993] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2861'.
[  870.481477][ T5825] usb 4-1: config 7 interface 76 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  870.549018][ T5825] usb 4-1: too many endpoints for config 7 interface 76 altsetting 39: 39, using maximum allowed: 30
[  870.595613][T17879] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  870.620737][ T5825] usb 4-1: config 7 interface 76 altsetting 39 bulk endpoint 0xF has invalid maxpacket 8
[  870.678767][T17879] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  870.696864][ T5825] usb 4-1: config 7 interface 76 altsetting 39 has 2 endpoint descriptors, different from the interface descriptor's value: 39
[  870.753235][T17879] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  870.777838][ T5825] usb 4-1: config 7 interface 161 has no altsetting 0
[  870.818194][T17879] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  870.831384][ T5825] usb 4-1: config 7 interface 76 has no altsetting 0
[  870.886926][ T5825] usb 4-1: config 7 interface 76 has no altsetting 1
[  870.929737][T18001] loop1: detected capacity change from 0 to 1024
[  870.954931][ T5825] usb 4-1: config 7 interface 177 has no altsetting 0
[  870.986118][ T5825] usb 4-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=ae.a0
[  871.011227][T18004] loop8: detected capacity change from 0 to 8
[  871.026452][T17902] Bluetooth: hci2: command tx timeout
[  871.072059][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.097339][T18001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  871.119528][T18004] SQUASHFS error: Failed to read block 0x8f: -5
[  871.155719][ T5825] usb 4-1: Product: syz
[  871.159899][ T5825] usb 4-1: Manufacturer: syz
[  871.189751][   T27] audit: type=1800 audit(1792252355.915:217): pid=18004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2864" name="file1" dev="loop8" ino=5 res=0 errno=0
[  871.215259][T17879] 8021q: adding VLAN 0 to HW filter on device bond0
[  871.243076][ T5825] usb 4-1: SerialNumber: syz
[  871.333441][T17879] 8021q: adding VLAN 0 to HW filter on device team0
[  871.376679][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  871.411940][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state
[  871.419080][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  871.491833][ T5825] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  871.537438][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  871.544568][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  871.580725][ T5825] snd-usb-audio: probe of 4-1:7.161 failed with error -2
[  871.632231][ T5825] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  871.673201][ T5825] snd-usb-audio: probe of 4-1:7.76 failed with error -2
[  871.738817][T17879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  871.779199][ T5825] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  871.886444][ T5825] snd-usb-audio: probe of 4-1:7.177 failed with error -2
[  871.911053][T18023] loop1: detected capacity change from 0 to 1024
[  871.986656][ T5825] usb 4-1: USB disconnect, device number 14
[  872.038233][T17905] udevd[17905]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.177/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  872.441787][T18039] loop1: detected capacity change from 0 to 8
[  873.271240][T18040] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  873.392677][T17879] 8021q: adding VLAN 0 to HW filter on device batadv0
[  873.415429][T18039] SQUASHFS error: Failed to read block 0x8f: -5
[  874.344915][   T27] audit: type=1800 audit(1792252359.075:218): pid=18039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2872" name="file1" dev="loop1" ino=5 res=0 errno=0
[  874.536916][T17879] veth0_vlan: entered promiscuous mode
[  874.624933][T17879] veth1_vlan: entered promiscuous mode
[  874.737310][T18048] loop1: detected capacity change from 0 to 4096
[  874.753044][T17879] veth0_macvtap: entered promiscuous mode
[  874.791107][T18048] EXT4-fs: Ignoring removed mblk_io_submit option
[  874.822333][T17879] veth1_macvtap: entered promiscuous mode
[  874.865294][T18048] EXT4-fs (loop1): Test dummy encryption mode enabled
[  874.921701][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  874.958507][T18048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  875.023063][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.096855][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  875.180585][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.240203][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  875.310729][T18048] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  875.320307][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.391133][T17879] batman_adv: batadv0: Interface activated: batadv_slave_0
[  875.462905][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  875.512374][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  875.540055][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.615469][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  875.670776][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.732113][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  876.660016][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.741441][T17879] batman_adv: batadv0: Interface activated: batadv_slave_1
[  876.822261][T17879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  876.876863][T17879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  876.907839][T17879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  876.958049][T17879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  877.351166][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  877.358995][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.331080][T18080] futex_wake_op: syz.8.2882 tries to shift op by 144; fix this program
[  878.339487][T18080] futex_wake_op: syz.8.2882 tries to shift op by 144; fix this program
[  878.374082][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.451442][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.466362][T18094] xt_hashlimit: max too large, truncated to 1048576
[  879.477170][T18094] loop3: detected capacity change from 0 to 512
[  879.484069][T18094] EXT4-fs: Ignoring removed nobh option
[  879.489620][T18094] EXT4-fs: user quota file already specified
[  879.575455][T17905] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  879.933593][T18107] loop2: detected capacity change from 0 to 512
[  880.086998][T18107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  880.178234][T18107] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  881.044118][T18113] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2879'.
[  881.292263][T17879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  882.183783][T18128] loop2: detected capacity change from 0 to 256
[  882.514926][T18132] loop8: detected capacity change from 0 to 8
[  882.591130][T18132] SQUASHFS error: Failed to read block 0x8f: -5
[  882.597596][   T27] audit: type=1800 audit(1792252367.325:219): pid=18132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2884" name="file1" dev="loop8" ino=5 res=0 errno=0
[  882.645844][T18134] loop3: detected capacity change from 0 to 1024
[  882.790063][   T27] audit: type=1800 audit(1792252367.485:220): pid=18134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2885" name="file1" dev="loop3" ino=20 res=0 errno=0
[  883.075654][T18143] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2892'.
[  883.290256][ T5825] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  883.317184][T18149] loop3: detected capacity change from 0 to 2048
[  884.115654][T18152] xt_hashlimit: max too large, truncated to 1048576
[  884.126746][T18152] loop1: detected capacity change from 0 to 512
[  884.133661][T18152] EXT4-fs: Ignoring removed nobh option
[  884.139209][T18152] EXT4-fs: user quota file already specified
[  884.184142][T17905] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  884.290023][ T5825] usb 9-1: Using ep0 maxpacket: 32
[  884.325775][ T5825] usb 9-1: unable to get BOS descriptor or descriptor too short
[  884.364444][ T5825] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  884.390870][T18149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  884.450030][ T5825] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  884.532113][ T5825] usb 9-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  884.614626][T18161] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  884.642564][ T5825] usb 9-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  884.700459][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.708469][ T5825] usb 9-1: Product: syz
[  884.749177][ T5825] usb 9-1: Manufacturer: syz
[  884.776442][T18161] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  885.706735][ T5825] usb 9-1: SerialNumber: syz
[  885.769613][T18161] EXT4-fs (loop3): This should not happen!! Data will be lost
[  885.769613][T18161] 
[  885.838859][T18161] EXT4-fs (loop3): Total free blocks count 0
[  885.860131][T18161] EXT4-fs (loop3): Free/Dirty block details
[  885.894508][T18161] EXT4-fs (loop3): free_blocks=66060288
[  885.934782][T18161] EXT4-fs (loop3): dirty_blocks=32
[  885.973796][T18140] loop8: detected capacity change from 0 to 16
[  886.005097][T18161] EXT4-fs (loop3): Block reservation details
[  886.030799][T18140] erofs: Unknown parameter './sys'
[  886.042555][T18161] EXT4-fs (loop3): i_reserved_data_blocks=2
[  886.124545][T17928] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  886.134563][ T5825] usb 9-1: unit 37 not found!
[  886.139241][ T5825] usb 9-1: unit 0 not found!
[  886.391809][ T5825] usb 9-1: USB disconnect, device number 6
[  886.823415][ T3487] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  888.016651][T18201] loop1: detected capacity change from 0 to 256
[  888.066458][T18201] exfat: Deprecated parameter 'namecase'
[  888.179024][T18201] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  888.237840][T18205] loop3: detected capacity change from 0 to 164
[  888.704351][T18217] loop1: detected capacity change from 0 to 512
[  889.075465][T18217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  889.168355][T18217] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  889.483461][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  890.606571][T18235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'.
[  892.223883][T18267] loop8: detected capacity change from 0 to 2048
[  892.429622][T18270] xt_hashlimit: max too large, truncated to 1048576
[  892.440547][T18270] loop3: detected capacity change from 0 to 512
[  892.448513][T18270] EXT4-fs: Ignoring removed nobh option
[  892.454136][T18270] EXT4-fs: user quota file already specified
[  892.534084][T18267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  892.568075][T17928] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  892.844303][T18267] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  892.970388][T18267] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  893.031779][T18267] EXT4-fs (loop8): This should not happen!! Data will be lost
[  893.031779][T18267] 
[  893.085095][T18267] EXT4-fs (loop8): Total free blocks count 0
[  893.134289][T18267] EXT4-fs (loop8): Free/Dirty block details
[  893.165812][T18267] EXT4-fs (loop8): free_blocks=66060288
[  893.212157][T18267] EXT4-fs (loop8): dirty_blocks=32
[  893.238102][T18267] EXT4-fs (loop8): Block reservation details
[  894.122669][T18284] loop3: detected capacity change from 0 to 1024
[  894.129712][T18284] hfsplus: unable to parse mount options
[  894.170085][T18267] EXT4-fs (loop8): i_reserved_data_blocks=2
[  894.280029][T17905] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  894.887431][   T42] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  895.917414][T18303] syzkaller0: entered promiscuous mode
[  896.000381][T18303] syzkaller0: entered allmulticast mode
[  897.906658][ T5775] Bluetooth: hci1: command 0x0406 tx timeout
[  898.483205][T18329] loop3: detected capacity change from 0 to 512
[  898.516974][T18329] EXT4-fs: Ignoring removed nobh option
[  898.567946][T18329] EXT4-fs: test_dummy_encryption requires encrypt feature
[  898.680711][T18329] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  901.389270][T18353] loop8: detected capacity change from 0 to 164
[  901.450072][T18353] rock: directory entry would overflow storage
[  901.456246][T18353] rock: sig=0x5252, size=5, remaining=3
[  901.531261][T18353] isofs_fill_super: root inode is not a directory. Corrupted media?
[  901.604796][T18353] loop8: detected capacity change from 0 to 512
[  901.676403][T18353] EXT4-fs (loop8): filesystem is read-only
[  901.723813][T18353] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  901.821039][T18353] EXT4-fs (loop8): failed to initialize system zone (-117)
[  901.828326][T18353] EXT4-fs (loop8): mount failed
[  903.561599][T18366] futex_wake_op: syz.1.2947 tries to shift op by 144; fix this program
[  903.570042][T18366] futex_wake_op: syz.1.2947 tries to shift op by 144; fix this program
[  906.775458][T18390] loop1: detected capacity change from 0 to 512
[  906.805956][T18390] EXT4-fs (loop1): first meta block group too large: 4278190080 (group descriptor block count 1)
[  908.628115][T18408] futex_wake_op: syz.1.2957 tries to shift op by 144; fix this program
[  908.636559][T18408] futex_wake_op: syz.1.2957 tries to shift op by 144; fix this program
[  910.758331][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  910.768985][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  910.777813][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  910.790796][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  910.800360][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  910.807503][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  911.540347][T18429] loop1: detected capacity change from 0 to 32768
[  911.568897][T18439] loop8: detected capacity change from 0 to 16
[  911.636608][T18439] erofs: (device loop8): mounted with root inode @ nid 36.
[  913.176795][ T5775] Bluetooth: hci3: command tx timeout
[  913.324013][T18466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2979'.
[  915.265068][T17902] Bluetooth: hci3: command tx timeout
[  916.256843][T18482] xt_hashlimit: max too large, truncated to 1048576
[  916.267662][T18482] loop3: detected capacity change from 0 to 512
[  916.274616][T18482] EXT4-fs: Ignoring removed nobh option
[  916.280224][T18482] EXT4-fs: user quota file already specified
[  916.327640][T18480] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  917.474112][T17902] Bluetooth: hci3: command tx timeout
[  918.915401][T18506] loop1: detected capacity change from 0 to 256
[  919.630133][T17902] Bluetooth: hci3: command tx timeout
[  920.501656][T18514] xt_hashlimit: max too large, truncated to 1048576
[  920.513146][T18514] loop8: detected capacity change from 0 to 512
[  920.520081][T18514] EXT4-fs: Ignoring removed nobh option
[  920.525630][T18514] EXT4-fs: user quota file already specified
[  920.635085][T18516] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  920.739737][T18425] chnl_net:caif_netlink_parms(): no params data found
[  921.572576][   T76] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.719811][T18425] bridge0: port 1(bridge_slave_0) entered blocking state
[  921.829060][T18425] bridge0: port 1(bridge_slave_0) entered disabled state
[  921.886500][T18425] bridge_slave_0: entered allmulticast mode
[  921.918054][T18425] bridge_slave_0: entered promiscuous mode
[  921.979253][T18425] bridge0: port 2(bridge_slave_1) entered blocking state
[  922.024892][T18425] bridge0: port 2(bridge_slave_1) entered disabled state
[  922.068886][T18425] bridge_slave_1: entered allmulticast mode
[  922.103978][T18425] bridge_slave_1: entered promiscuous mode
[  922.373367][   T76] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.536876][T18425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  922.628095][T18425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  922.765890][T18559] loop3: detected capacity change from 0 to 512
[  922.831281][   T76] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.850736][T18559] EXT4-fs: Ignoring removed bh option
[  922.902067][T18559] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  923.035413][T18559] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.2999: corrupted in-inode xattr: e_value size too large
[  923.166476][T18559] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2999: couldn't read orphan inode 15 (err -117)
[  923.225543][   T76] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  923.265130][T18559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  923.344769][T18425] team0: Port device team_slave_0 added
[  923.392930][T18425] team0: Port device team_slave_1 added
[  923.439703][T18559] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.2999: Unrecognised inode hash code 4
[  923.521472][T18559] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2999: Corrupt directory, running e2fsck is recommended
[  923.619780][T18559] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.2999: Unrecognised inode hash code 4
[  923.640649][T18425] batman_adv: batadv0: Adding interface: batadv_slave_0
[  924.382388][T18425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  924.420097][T18559] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2999: Corrupt directory, running e2fsck is recommended
[  924.543037][T18425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  924.626167][T16234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  924.635354][T18425] batman_adv: batadv0: Adding interface: batadv_slave_1
[  924.654753][T18425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  924.813633][T18425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  925.135848][T18425] hsr_slave_0: entered promiscuous mode
[  925.176557][T18425] hsr_slave_1: entered promiscuous mode
[  925.196134][T18425] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  925.232514][T18425] Cannot create hsr debugfs directory
[  926.114291][T18604] loop1: detected capacity change from 0 to 2048
[  926.522410][T18604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  930.110739][T18643] loop8: detected capacity change from 0 to 512
[  930.166429][T18643] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  930.248188][   T27] audit: type=1800 audit(1792252414.975:221): pid=18643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3014" name="file1" dev="loop8" ino=15 res=0 errno=0
[  930.337811][   T27] audit: type=1800 audit(1792252415.015:222): pid=18643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3014" name="file1" dev="loop8" ino=15 res=0 errno=0
[  930.497345][T16393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  931.679728][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  931.686064][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  931.806228][T18653] xt_hashlimit: max too large, truncated to 1048576
[  931.818651][T18653] loop8: detected capacity change from 0 to 512
[  931.825879][T18653] EXT4-fs: Ignoring removed nobh option
[  931.831542][T18653] EXT4-fs: user quota file already specified
[  931.930499][T18516] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  933.375511][T18425] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  934.488747][T18674] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  934.609322][T18425] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  934.657496][T18425] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  935.560522][T18425] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  936.010275][   T76] hsr_slave_0: left promiscuous mode
[  936.110660][   T76] hsr_slave_1: left promiscuous mode
[  937.063360][   T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  937.086565][   T76] batman_adv: batadv0: Removing interface: batadv_slave_0
[  937.140863][   T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  937.193653][   T76] batman_adv: batadv0: Removing interface: batadv_slave_1
[  937.295555][   T76] bridge_slave_1: left allmulticast mode
[  937.330002][   T76] bridge_slave_1: left promiscuous mode
[  937.335726][   T76] bridge0: port 2(bridge_slave_1) entered disabled state
[  937.443808][   T76] bridge_slave_0: left allmulticast mode
[  937.449490][   T76] bridge_slave_0: left promiscuous mode
[  937.490250][   T76] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.630183][T18557] syz.1.2995 (18557) used greatest stack depth: 18136 bytes left
[  937.744344][   T76] veth1_macvtap: left promiscuous mode
[  937.749863][   T76] veth0_macvtap: left promiscuous mode
[  937.787323][   T76] veth1_vlan: left promiscuous mode
[  937.800126][   T76] veth0_vlan: left promiscuous mode
[  939.646755][T18709] loop3: detected capacity change from 0 to 2048
[  939.730133][T18709] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  939.921555][T18709] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  939.986971][T18709] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  940.058360][T18709] UDF-fs: Scanning with blocksize 512 failed
[  940.150085][T18709] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  940.257639][T18709] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  940.440531][T18709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  941.031977][   T76] team0 (unregistering): Port device team_slave_1 removed
[  941.051213][T18718] loop8: detected capacity change from 0 to 164
[  941.224241][   T76] team0 (unregistering): Port device team_slave_0 removed
[  941.288465][   T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  941.365496][   T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  942.051474][T18724] loop8: detected capacity change from 0 to 32768
[  942.122910][T18724]  loop8: p1 p3 < >
[  942.479352][T18715] udevd[18715]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  942.505500][T18710] udevd[18710]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  943.581627][   T76] bond0 (unregistering): Released all slaves
[  943.737958][T18692] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3023'.
[  944.216487][T18425] 8021q: adding VLAN 0 to HW filter on device bond0
[  944.329843][T18425] 8021q: adding VLAN 0 to HW filter on device team0
[  944.411670][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state
[  944.418779][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state
[  944.629454][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state
[  944.636590][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  944.815456][T18425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  945.353947][   T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  945.747879][   T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  945.892514][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  945.906725][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  945.915508][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  945.925870][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  945.937198][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  945.948531][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  946.014526][T18425] 8021q: adding VLAN 0 to HW filter on device batadv0
[  946.051668][T18763] loop1: detected capacity change from 0 to 512
[  946.143686][T18763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  946.224281][   T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  946.235541][T18763] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  946.380540][T18763] EXT4-fs error (device loop1): ext4_empty_dir:3147: inode #12: block 32: comm syz.1.3037: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  946.452147][   T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  946.509499][T18763] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #12: comm syz.1.3037: directory missing '.'
[  946.707767][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  947.855519][T18790] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3040'.
[  947.981163][T17902] Bluetooth: hci2: command tx timeout
[  948.057958][T18758] chnl_net:caif_netlink_parms(): no params data found
[  949.135572][T18425] veth0_vlan: entered promiscuous mode
[  949.187399][T18425] veth1_vlan: entered promiscuous mode
[  949.388389][T18425] veth0_macvtap: entered promiscuous mode
[  949.543894][T18425] veth1_macvtap: entered promiscuous mode
[  949.944442][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  950.023803][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  950.065289][T17902] Bluetooth: hci2: command tx timeout
[  950.080838][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  950.140378][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  950.190068][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  950.236501][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  950.292921][T18425] batman_adv: batadv0: Interface activated: batadv_slave_0
[  950.389087][T18820] FAULT_INJECTION: forcing a failure.
[  950.389087][T18820] name fail_futex, interval 1, probability 0, space 0, times 1
[  950.460910][T18820] CPU: 0 PID: 18820 Comm: syz.1.3041 Not tainted syzkaller #0
[  950.468396][T18820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  950.478449][T18820] Call Trace:
[  950.481735][T18820]  <TASK>
[  950.484650][T18820]  dump_stack_lvl+0x18c/0x250
[  950.489315][T18820]  ? ____kasan_slab_free+0x126/0x1f0
[  950.494589][T18820]  ? show_regs_print_info+0x20/0x20
[  950.499770][T18820]  ? load_image+0x420/0x420
[  950.504272][T18820]  should_fail_ex+0x394/0x4c0
[  950.508938][T18820]  get_futex_key+0x136/0x1030
[  950.513602][T18820]  ? futex_setup_timer+0xc0/0xc0
[  950.518544][T18820]  futex_wake+0x127/0x4f0
[  950.522859][T18820]  ? futex_wake_mark+0x150/0x150
[  950.527780][T18820]  ? __lock_acquire+0x7eb0/0x7eb0
[  950.532793][T18820]  ? __might_fault+0xaa/0x120
[  950.537457][T18820]  do_futex+0x35d/0x3e0
[  950.541599][T18820]  ? _copy_to_user+0x85/0xa0
[  950.546202][T18820]  ? __ia32_sys_get_robust_list+0x110/0x110
[  950.552085][T18820]  __se_sys_futex+0x3a9/0x440
[  950.556746][T18820]  ? __x64_sys_futex+0xf0/0xf0
[  950.561494][T18820]  ? __x64_sys_futex+0x21/0xf0
[  950.566246][T18820]  do_syscall_64+0x55/0xb0
[  950.570645][T18820]  ? clear_bhb_loop+0x40/0x90
[  950.575301][T18820]  ? clear_bhb_loop+0x40/0x90
[  950.579958][T18820]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  950.585854][T18820] RIP: 0033:0x7f2df199e1d9
[  950.590256][T18820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  950.609867][T18820] RSP: 002b:00007f2df28270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  950.618266][T18820] RAX: ffffffffffffffda RBX: 00007f2df1c25fa8 RCX: 00007f2df199e1d9
[  950.626222][T18820] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2df1c25fac
[  950.634179][T18820] RBP: 00007f2df1c25fa0 R08: 0000000000745a2a R09: 0000000000000000
[  950.642132][T18820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  950.650082][T18820] R13: 00007f2df1c26038 R14: 00007ffe6a565e00 R15: 00007ffe6a565ee8
[  950.658049][T18820]  </TASK>
[  950.748929][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  950.767034][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  950.800185][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  951.416683][T18826] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3043'.
[  951.449351][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  951.480915][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  951.509676][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  951.540554][T18425] batman_adv: batadv0: Interface activated: batadv_slave_1
[  951.592411][T18758] bridge0: port 1(bridge_slave_0) entered blocking state
[  951.599493][T18758] bridge0: port 1(bridge_slave_0) entered disabled state
[  951.623758][T18758] bridge_slave_0: entered allmulticast mode
[  951.645195][T18758] bridge_slave_0: entered promiscuous mode
[  951.700659][T18425] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  951.709363][T18425] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  951.730591][T18425] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  951.770822][T18425] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  951.804695][T18758] bridge0: port 2(bridge_slave_1) entered blocking state
[  951.813002][T18758] bridge0: port 2(bridge_slave_1) entered disabled state
[  951.852599][T18758] bridge_slave_1: entered allmulticast mode
[  951.877789][T18758] bridge_slave_1: entered promiscuous mode
[  952.144131][T17902] Bluetooth: hci2: command tx timeout
[  952.243547][T18758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  952.312924][T18758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  952.712315][   T76] hsr_slave_0: left promiscuous mode
[  952.746102][   T76] hsr_slave_1: left promiscuous mode
[  952.797765][   T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  952.828513][   T76] batman_adv: batadv0: Removing interface: batadv_slave_0
[  952.878296][   T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  952.913897][   T76] batman_adv: batadv0: Removing interface: batadv_slave_1
[  952.946961][   T76] bridge_slave_1: left allmulticast mode
[  952.963542][   T76] bridge_slave_1: left promiscuous mode
[  953.778816][   T76] bridge0: port 2(bridge_slave_1) entered disabled state
[  953.825878][   T76] bridge_slave_0: left allmulticast mode
[  953.842874][   T76] bridge_slave_0: left promiscuous mode
[  953.864072][   T76] bridge0: port 1(bridge_slave_0) entered disabled state
[  953.961712][   T76] veth1_macvtap: left promiscuous mode
[  953.998598][   T76] veth0_macvtap: left promiscuous mode
[  954.016584][   T76] veth1_vlan: left promiscuous mode
[  954.041723][   T76] veth0_vlan: left promiscuous mode
[  954.996201][T17902] Bluetooth: hci2: command tx timeout
[  955.753664][T18863] loop8: detected capacity change from 0 to 512
[  955.848129][T18863] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  955.888943][T18863] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  955.996142][T16393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  956.122566][T18869] FAULT_INJECTION: forcing a failure.
[  956.122566][T18869] name failslab, interval 1, probability 0, space 0, times 0
[  956.154598][T18869] CPU: 0 PID: 18869 Comm: syz.8.3051 Not tainted syzkaller #0
[  956.162108][T18869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  956.172166][T18869] Call Trace:
[  956.175431][T18869]  <TASK>
[  956.178345][T18869]  dump_stack_lvl+0x18c/0x250
[  956.183012][T18869]  ? show_regs_print_info+0x20/0x20
[  956.188194][T18869]  ? load_image+0x420/0x420
[  956.192693][T18869]  ? __might_sleep+0xe0/0xe0
[  956.197274][T18869]  ? __lock_acquire+0x7eb0/0x7eb0
[  956.202294][T18869]  should_fail_ex+0x394/0x4c0
[  956.206962][T18869]  should_failslab+0x9/0x20
[  956.211451][T18869]  slab_pre_alloc_hook+0x59/0x300
[  956.216460][T18869]  kmem_cache_alloc+0x5a/0x2c0
[  956.221210][T18869]  ? fcntl_getlk+0x30/0xb10
[  956.225702][T18869]  fcntl_getlk+0x30/0xb10
[  956.230016][T18869]  ? __might_fault+0xaa/0x120
[  956.234675][T18869]  ? __might_fault+0xc6/0x120
[  956.239334][T18869]  ? __might_fault+0xaa/0x120
[  956.243994][T18869]  do_fcntl+0x926/0x14a0
[  956.248224][T18869]  ? kill_fasync+0x4b0/0x4b0
[  956.252803][T18869]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  956.258770][T18869]  ? tomoyo_file_fcntl+0x7b/0x220
[  956.263868][T18869]  ? bpf_lsm_file_fcntl+0x9/0x10
[  956.268786][T18869]  ? security_file_fcntl+0x80/0xa0
[  956.273882][T18869]  __se_sys_fcntl+0xc9/0x1a0
[  956.278460][T18869]  do_syscall_64+0x55/0xb0
[  956.282857][T18869]  ? clear_bhb_loop+0x40/0x90
[  956.287514][T18869]  ? clear_bhb_loop+0x40/0x90
[  956.292174][T18869]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  956.298056][T18869] RIP: 0033:0x7f412899e1d9
[  956.302453][T18869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  956.322043][T18869] RSP: 002b:00007f41298bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  956.330446][T18869] RAX: ffffffffffffffda RBX: 00007f4128c25fa0 RCX: 00007f412899e1d9
[  956.338411][T18869] RDX: 0000200000000780 RSI: 0000000000000024 RDI: 0000000000000007
[  956.346367][T18869] RBP: 00007f4128a35888 R08: 0000000000000000 R09: 0000000000000000
[  956.354323][T18869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  956.362273][T18869] R13: 00007f4128c26038 R14: 00007f4128c25fa0 R15: 00007ffd9f323d08
[  956.370255][T18869]  </TASK>
[  956.539844][   T76] team0 (unregistering): Port device team_slave_1 removed
[  956.615061][   T76] team0 (unregistering): Port device team_slave_0 removed
[  956.772133][   T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  957.692753][T18878] loop8: detected capacity change from 0 to 512
[  957.721806][T18878] EXT4-fs (loop8): Test dummy encryption mode enabled
[  957.753779][T18878] EXT4-fs error (device loop8): ext4_orphan_get:1408: inode #11: comm syz.8.3055: casefold flag without casefold feature
[  957.769376][T18878] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.3055: couldn't read orphan inode 11 (err -117)
[  957.785136][T18878] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  957.838643][   T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  958.267376][   T76] bond0 (unregistering): Released all slaves
[  958.365479][T16393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  958.477289][T18758] team0: Port device team_slave_0 added
[  958.516341][T18850] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3048'.
[  958.575768][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  958.640695][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  958.681328][T18758] team0: Port device team_slave_1 added
[  958.816327][T18758] batman_adv: batadv0: Adding interface: batadv_slave_0
[  958.830658][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  958.838487][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  958.890497][T18758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  959.023875][T18758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  959.114803][T18758] batman_adv: batadv0: Adding interface: batadv_slave_1
[  959.160108][T18758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  959.293025][T18758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  959.479778][T18758] hsr_slave_0: entered promiscuous mode
[  959.550887][T18758] hsr_slave_1: entered promiscuous mode
[  959.999433][T18898] loop8: detected capacity change from 0 to 1024
[  960.071211][T18898] EXT4-fs: Ignoring removed bh option
[  960.093531][T18901] FAULT_INJECTION: forcing a failure.
[  960.093531][T18901] name fail_futex, interval 1, probability 0, space 0, times 0
[  960.200504][T18901] CPU: 0 PID: 18901 Comm: syz.9.3059 Not tainted syzkaller #0
[  960.208001][T18901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  960.218045][T18901] Call Trace:
[  960.221312][T18901]  <TASK>
[  960.224231][T18901]  dump_stack_lvl+0x18c/0x250
[  960.228894][T18901]  ? ____kasan_slab_free+0x126/0x1f0
[  960.234170][T18901]  ? show_regs_print_info+0x20/0x20
[  960.239353][T18901]  ? load_image+0x420/0x420
[  960.243848][T18901]  should_fail_ex+0x394/0x4c0
[  960.248521][T18901]  get_futex_key+0x136/0x1030
[  960.253185][T18901]  ? futex_setup_timer+0xc0/0xc0
[  960.258110][T18901]  futex_wake+0x127/0x4f0
[  960.262425][T18901]  ? futex_wake_mark+0x150/0x150
[  960.267346][T18901]  ? __lock_acquire+0x7eb0/0x7eb0
[  960.272355][T18901]  ? __might_fault+0xaa/0x120
[  960.277030][T18901]  do_futex+0x35d/0x3e0
[  960.281169][T18901]  ? _copy_to_user+0x85/0xa0
[  960.285747][T18901]  ? __ia32_sys_get_robust_list+0x110/0x110
[  960.291625][T18901]  __se_sys_futex+0x3a9/0x440
[  960.296289][T18901]  ? __x64_sys_futex+0xf0/0xf0
[  960.301042][T18901]  ? __x64_sys_futex+0x21/0xf0
[  960.305786][T18901]  do_syscall_64+0x55/0xb0
[  960.310198][T18901]  ? clear_bhb_loop+0x40/0x90
[  960.314874][T18901]  ? clear_bhb_loop+0x40/0x90
[  960.319534][T18901]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  960.325420][T18901] RIP: 0033:0x7ff1bf39e1d9
[  960.329839][T18901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  960.349429][T18901] RSP: 002b:00007ff1c02d20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  960.357823][T18901] RAX: ffffffffffffffda RBX: 00007ff1bf625fa8 RCX: 00007ff1bf39e1d9
[  960.365777][T18901] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff1bf625fac
[  960.373731][T18901] RBP: 00007ff1bf625fa0 R08: 0000000000745a2a R09: 0000000000000000
[  960.381683][T18901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  960.389633][T18901] R13: 00007ff1bf626038 R14: 00007ffff7d818e0 R15: 00007ffff7d819c8
[  960.397600][T18901]  </TASK>
[  960.404496][T18898] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  960.593191][T16393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  961.896797][ T6921] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  962.064048][T18922] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3063'.
[  962.095553][ T6921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  962.150403][ T6921] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32
[  962.219451][ T6921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  962.259901][T18925] loop8: detected capacity change from 0 to 512
[  962.270626][ T6921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1280, setting to 1024
[  962.314023][T18925] EXT4-fs (loop8): first meta block group too large: 4278190080 (group descriptor block count 1)
[  962.401609][ T6921] usb 2-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40
[  962.440008][ T6921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.488349][ T6921] usb 2-1: Product: syz
[  962.518887][ T6921] usb 2-1: Manufacturer: syz
[  962.549177][ T6921] usb 2-1: SerialNumber: syz
[  962.606545][T18916] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  962.618312][T18916] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  962.937228][ T6921] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  962.958462][T18758] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  962.970591][ T6921] usb 2-1: MIDIStreaming interface descriptor not found
[  963.042475][T18758] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  963.143966][ T6921] usb 2-1: USB disconnect, device number 17
[  963.244662][T18758] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  963.369478][T18758] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  963.389384][T18954] udevd[18954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  963.656562][T18968] loop1: detected capacity change from 0 to 512
[  963.786648][T18968] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.3067: corrupted inode contents
[  963.859278][T18758] 8021q: adding VLAN 0 to HW filter on device bond0
[  963.895057][T18968] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  963.944834][T18758] 8021q: adding VLAN 0 to HW filter on device team0
[  963.964083][T18968] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.3067: corrupted inode contents
[  964.160827][T18968] EXT4-fs error (device loop1): ext4_evict_inode:302: inode #15: comm syz.1.3067: mark_inode_dirty error
[  964.173739][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.180969][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state
[  964.454319][T18968] EXT4-fs (loop1): 1 orphan inode deleted
[  964.479694][T18968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  964.493012][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.500109][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state
[  964.927634][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  965.184013][T18990] FAULT_INJECTION: forcing a failure.
[  965.184013][T18990] name failslab, interval 1, probability 0, space 0, times 0
[  965.270641][T18990] CPU: 0 PID: 18990 Comm: syz.1.3070 Not tainted syzkaller #0
[  965.278132][T18990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  965.288175][T18990] Call Trace:
[  965.291438][T18990]  <TASK>
[  965.294359][T18990]  dump_stack_lvl+0x18c/0x250
[  965.299023][T18990]  ? show_regs_print_info+0x20/0x20
[  965.304203][T18990]  ? load_image+0x420/0x420
[  965.308693][T18990]  ? __might_sleep+0xe0/0xe0
[  965.313265][T18990]  ? __lock_acquire+0x7eb0/0x7eb0
[  965.318280][T18990]  should_fail_ex+0x394/0x4c0
[  965.322984][T18990]  should_failslab+0x9/0x20
[  965.327474][T18990]  slab_pre_alloc_hook+0x59/0x300
[  965.332483][T18990]  kmem_cache_alloc+0x5a/0x2c0
[  965.337235][T18990]  ? fcntl_getlk+0x30/0xb10
[  965.341728][T18990]  fcntl_getlk+0x30/0xb10
[  965.346042][T18990]  ? __might_fault+0xaa/0x120
[  965.350698][T18990]  ? __might_fault+0xc6/0x120
[  965.355354][T18990]  ? __might_fault+0xaa/0x120
[  965.360020][T18990]  do_fcntl+0x926/0x14a0
[  965.364251][T18990]  ? kill_fasync+0x4b0/0x4b0
[  965.368831][T18990]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  965.374798][T18990]  ? tomoyo_file_fcntl+0x7b/0x220
[  965.379807][T18990]  ? bpf_lsm_file_fcntl+0x9/0x10
[  965.384727][T18990]  ? security_file_fcntl+0x80/0xa0
[  965.389825][T18990]  __se_sys_fcntl+0xc9/0x1a0
[  965.394411][T18990]  do_syscall_64+0x55/0xb0
[  965.398810][T18990]  ? clear_bhb_loop+0x40/0x90
[  965.403483][T18990]  ? clear_bhb_loop+0x40/0x90
[  965.408146][T18990]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  965.414034][T18990] RIP: 0033:0x7f2df199e1d9
[  965.418436][T18990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  965.438043][T18990] RSP: 002b:00007f2df2827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  965.446441][T18990] RAX: ffffffffffffffda RBX: 00007f2df1c25fa0 RCX: 00007f2df199e1d9
[  965.454396][T18990] RDX: 0000200000000780 RSI: 0000000000000024 RDI: 0000000000000007
[  965.462350][T18990] RBP: 00007f2df1a35888 R08: 0000000000000000 R09: 0000000000000000
[  965.470304][T18990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  965.478253][T18990] R13: 00007f2df1c26038 R14: 00007f2df1c25fa0 R15: 00007ffe6a565ee8
[  965.486217][T18990]  </TASK>
[  965.673256][T18758] 8021q: adding VLAN 0 to HW filter on device batadv0
[  965.852909][T18999] loop9: detected capacity change from 0 to 512
[  966.004729][T18999] EXT4-fs (loop9): first meta block group too large: 4278190080 (group descriptor block count 1)
[  966.547483][T18758] veth0_vlan: entered promiscuous mode
[  966.613468][T18758] veth1_vlan: entered promiscuous mode
[  968.434914][T18758] veth0_macvtap: entered promiscuous mode
[  968.477210][T18758] veth1_macvtap: entered promiscuous mode
[  968.574935][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  968.635859][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  968.690060][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  968.754302][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  968.803259][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  968.854104][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  968.904930][T18758] batman_adv: batadv0: Interface activated: batadv_slave_0
[  968.954185][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  969.010339][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.051234][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  969.103436][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.160385][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  969.214182][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.256206][T18758] batman_adv: batadv0: Interface activated: batadv_slave_1
[  969.349374][T18758] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  969.403541][T18758] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  969.460072][T18758] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  969.468801][T18758] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  969.575433][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3081'.
[  969.755294][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  969.821037][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  969.891009][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  969.904413][T19022] loop1: detected capacity change from 0 to 512
[  969.935584][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  969.971143][T19022] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  970.074267][T19022] EXT4-fs (loop1): 1 truncate cleaned up
[  970.120976][T19022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  970.582067][   T27] audit: type=1800 audit(1792252455.295:223): pid=19028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3077" name="file3" dev="loop1" ino=16 res=0 errno=0
[  970.803882][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  970.944361][T19031] loop8: detected capacity change from 0 to 512
[  971.113532][T19041] FAULT_INJECTION: forcing a failure.
[  971.113532][T19041] name fail_futex, interval 1, probability 0, space 0, times 0
[  971.211297][T19041] CPU: 0 PID: 19041 Comm: syz.5.3084 Not tainted syzkaller #0
[  971.218775][T19041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  971.228827][T19041] Call Trace:
[  971.232093][T19041]  <TASK>
[  971.235010][T19041]  dump_stack_lvl+0x18c/0x250
[  971.239677][T19041]  ? ____kasan_slab_free+0x126/0x1f0
[  971.244966][T19041]  ? show_regs_print_info+0x20/0x20
[  971.250146][T19041]  ? load_image+0x420/0x420
[  971.254643][T19041]  should_fail_ex+0x394/0x4c0
[  971.259324][T19041]  get_futex_key+0x136/0x1030
[  971.263992][T19041]  ? futex_setup_timer+0xc0/0xc0
[  971.268915][T19041]  futex_wake+0x127/0x4f0
[  971.273234][T19041]  ? futex_wake_mark+0x150/0x150
[  971.278158][T19041]  ? __lock_acquire+0x7eb0/0x7eb0
[  971.283171][T19041]  ? __might_fault+0xaa/0x120
[  971.287830][T19041]  do_futex+0x35d/0x3e0
[  971.291970][T19041]  ? _copy_to_user+0x85/0xa0
[  971.296544][T19041]  ? __ia32_sys_get_robust_list+0x110/0x110
[  971.302429][T19041]  __se_sys_futex+0x3a9/0x440
[  971.307091][T19041]  ? __x64_sys_futex+0xf0/0xf0
[  971.311851][T19041]  ? __x64_sys_futex+0x21/0xf0
[  971.316615][T19041]  do_syscall_64+0x55/0xb0
[  971.321018][T19041]  ? clear_bhb_loop+0x40/0x90
[  971.325674][T19041]  ? clear_bhb_loop+0x40/0x90
[  971.330352][T19041]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  971.336233][T19041] RIP: 0033:0x7fc332b9e1d9
[  971.340630][T19041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  971.360241][T19041] RSP: 002b:00007fc333b420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  971.368644][T19041] RAX: ffffffffffffffda RBX: 00007fc332e25fa8 RCX: 00007fc332b9e1d9
[  971.376598][T19041] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc332e25fac
[  971.384552][T19041] RBP: 00007fc332e25fa0 R08: 0000000000745a2a R09: 0000000000000000
[  971.392507][T19041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  971.400547][T19041] R13: 00007fc332e26038 R14: 00007ffd0b988880 R15: 00007ffd0b988968
[  971.408515][T19041]  </TASK>
[  971.540142][T19031] EXT4-fs (loop8): first meta block group too large: 4278190080 (group descriptor block count 1)
[  972.748698][ T5805] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  972.965440][ T5805] usb 2-1: config 0 has no interfaces?
[  972.974602][ T5805] usb 2-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00
[  973.032239][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.097882][ T5805] usb 2-1: config 0 descriptor??
[  973.331451][ T5805] usb 2-1: USB disconnect, device number 18
[  973.999021][T19080] loop1: detected capacity change from 0 to 1024
[  974.072550][T19080] EXT4-fs: inline encryption not supported
[  974.078387][T19080] EXT4-fs: Ignoring removed nomblk_io_submit option
[  974.170569][T19080] EXT4-fs: quotafile must be on filesystem root
[  974.228101][T19020] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  974.609140][T19092] FAULT_INJECTION: forcing a failure.
[  974.609140][T19092] name failslab, interval 1, probability 0, space 0, times 0
[  975.733414][T19092] CPU: 0 PID: 19092 Comm: syz.8.3093 Not tainted syzkaller #0
[  975.740928][T19092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  975.750970][T19092] Call Trace:
[  975.754234][T19092]  <TASK>
[  975.757148][T19092]  dump_stack_lvl+0x18c/0x250
[  975.761829][T19092]  ? show_regs_print_info+0x20/0x20
[  975.767009][T19092]  ? load_image+0x420/0x420
[  975.771502][T19092]  ? __might_sleep+0xe0/0xe0
[  975.776078][T19092]  ? __lock_acquire+0x7eb0/0x7eb0
[  975.781088][T19092]  should_fail_ex+0x394/0x4c0
[  975.785759][T19092]  should_failslab+0x9/0x20
[  975.790248][T19092]  slab_pre_alloc_hook+0x59/0x300
[  975.795281][T19092]  kmem_cache_alloc+0x5a/0x2c0
[  975.800034][T19092]  ? fcntl_getlk+0x30/0xb10
[  975.804524][T19092]  fcntl_getlk+0x30/0xb10
[  975.808836][T19092]  ? __might_fault+0xaa/0x120
[  975.813512][T19092]  ? __might_fault+0xc6/0x120
[  975.818169][T19092]  ? __might_fault+0xaa/0x120
[  975.822846][T19092]  do_fcntl+0x926/0x14a0
[  975.827078][T19092]  ? kill_fasync+0x4b0/0x4b0
[  975.831663][T19092]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  975.837631][T19092]  ? tomoyo_file_fcntl+0x7b/0x220
[  975.842642][T19092]  ? bpf_lsm_file_fcntl+0x9/0x10
[  975.847565][T19092]  ? security_file_fcntl+0x80/0xa0
[  975.852671][T19092]  __se_sys_fcntl+0xc9/0x1a0
[  975.857252][T19092]  do_syscall_64+0x55/0xb0
[  975.861651][T19092]  ? clear_bhb_loop+0x40/0x90
[  975.866316][T19092]  ? clear_bhb_loop+0x40/0x90
[  975.870975][T19092]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  975.876857][T19092] RIP: 0033:0x7f412899e1d9
[  975.881260][T19092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  975.900851][T19092] RSP: 002b:00007f41298bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  975.909247][T19092] RAX: ffffffffffffffda RBX: 00007f4128c25fa0 RCX: 00007f412899e1d9
[  975.917223][T19092] RDX: 0000200000000780 RSI: 0000000000000024 RDI: 0000000000000006
[  975.925198][T19092] RBP: 00007f4128a35888 R08: 0000000000000000 R09: 0000000000000000
[  975.933162][T19092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  975.941122][T19092] R13: 00007f4128c26038 R14: 00007f4128c25fa0 R15: 00007ffd9f323d08
[  975.949106][T19092]  </TASK>
[  976.316016][T19104] loop5: detected capacity change from 0 to 512
[  976.386800][T19104] EXT4-fs: Ignoring removed nobh option
[  976.566857][T19104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  976.632287][T19104] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  976.839706][T19104] EXT4-fs error (device loop5): ext4_ext_check_inode:532: inode #2: comm syz.5.3086: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  977.099050][T19121] loop9: detected capacity change from 0 to 512
[  977.214214][T18758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  977.267482][T19121] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  977.350414][T19121] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  978.416318][T18425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  978.615749][   T27] audit: type=1326 audit(1792252463.345:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.9.3100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf39e1d9 code=0x7ffc0000
[  978.781189][   T27] audit: type=1326 audit(1792252463.345:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.9.3100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf39e1d9 code=0x7ffc0000
[  978.948021][   T27] audit: type=1326 audit(1792252463.345:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.9.3100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf39e1d9 code=0x7ffc0000
[  979.794756][T19147] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  979.990216][   T27] audit: type=1326 audit(1792252463.345:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.9.3100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf39e1d9 code=0x7ffc0000
[  980.161127][   T27] audit: type=1326 audit(1792252463.385:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.9.3100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7ff1bf39e1d9 code=0x7ffc0000
[  980.321294][   T27] audit: type=1326 audit(1792252463.385:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.9.3100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf39e1d9 code=0x7ffc0000
[  980.494717][   T27] audit: type=1326 audit(1792252463.385:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.9.3100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf39e1d9 code=0x7ffc0000
[  980.652951][   T27] audit: type=1326 audit(1792252463.385:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.9.3100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff1bf39e1d9 code=0x7ffc0000
[  980.827784][   T27] audit: type=1326 audit(1792252463.385:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.9.3100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff1bf39e1d9 code=0x7ffc0000
[  982.082324][T19169] xt_hashlimit: max too large, truncated to 1048576
[  982.093153][T19169] loop8: detected capacity change from 0 to 512
[  982.100096][T19169] EXT4-fs: Ignoring removed nobh option
[  982.105648][T19169] EXT4-fs: user quota file already specified
[  982.164549][T19020] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  982.192720][T19172] loop1: detected capacity change from 0 to 512
[  982.320150][T19172] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  983.184898][T17902] Bluetooth: hci1: command tx timeout
[  984.985143][T19200] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  987.514979][T19226] FAULT_INJECTION: forcing a failure.
[  987.514979][T19226] name fail_futex, interval 1, probability 0, space 0, times 0
[  987.569370][T19226] CPU: 0 PID: 19226 Comm: syz.1.3115 Not tainted syzkaller #0
[  987.576862][T19226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  987.586997][T19226] Call Trace:
[  987.590263][T19226]  <TASK>
[  987.593180][T19226]  dump_stack_lvl+0x18c/0x250
[  987.597862][T19226]  ? ____kasan_slab_free+0x126/0x1f0
[  987.603140][T19226]  ? show_regs_print_info+0x20/0x20
[  987.608323][T19226]  ? load_image+0x420/0x420
[  987.612819][T19226]  should_fail_ex+0x394/0x4c0
[  987.617488][T19226]  get_futex_key+0x136/0x1030
[  987.622154][T19226]  ? futex_setup_timer+0xc0/0xc0
[  987.627098][T19226]  futex_wake+0x127/0x4f0
[  987.631419][T19226]  ? futex_wake_mark+0x150/0x150
[  987.636342][T19226]  ? __lock_acquire+0x7eb0/0x7eb0
[  987.641359][T19226]  ? __might_fault+0xaa/0x120
[  987.646019][T19226]  do_futex+0x35d/0x3e0
[  987.650162][T19226]  ? _copy_to_user+0x85/0xa0
[  987.654740][T19226]  ? __ia32_sys_get_robust_list+0x110/0x110
[  987.660624][T19226]  __se_sys_futex+0x3a9/0x440
[  987.665305][T19226]  ? __x64_sys_futex+0xf0/0xf0
[  987.670056][T19226]  ? __x64_sys_futex+0x21/0xf0
[  987.674806][T19226]  do_syscall_64+0x55/0xb0
[  987.679210][T19226]  ? clear_bhb_loop+0x40/0x90
[  987.683896][T19226]  ? clear_bhb_loop+0x40/0x90
[  987.688564][T19226]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  987.694443][T19226] RIP: 0033:0x7f2df199e1d9
[  987.698862][T19226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  987.718513][T19226] RSP: 002b:00007f2df28270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  987.726941][T19226] RAX: ffffffffffffffda RBX: 00007f2df1c25fa8 RCX: 00007f2df199e1d9
[  987.734909][T19226] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2df1c25fac
[  987.742898][T19226] RBP: 00007f2df1c25fa0 R08: 0000000000745a2a R09: 0000000000000000
[  987.750878][T19226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  987.758852][T19226] R13: 00007f2df1c26038 R14: 00007ffe6a565e00 R15: 00007ffe6a565ee8
[  987.766831][T19226]  </TASK>
[  988.630922][T19235] loop8: detected capacity change from 0 to 512
[  988.642049][T19235] EXT4-fs (loop8): first meta block group too large: 4278190080 (group descriptor block count 1)
[  990.900670][T19271] loop8: detected capacity change from 0 to 4096
[  990.964838][T19271] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  991.139549][T16393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  991.175997][T19279] FAULT_INJECTION: forcing a failure.
[  991.175997][T19279] name fail_futex, interval 1, probability 0, space 0, times 0
[  991.281436][T19279] CPU: 0 PID: 19279 Comm: syz.5.3120 Not tainted syzkaller #0
[  991.288922][T19279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  991.298963][T19279] Call Trace:
[  991.302230][T19279]  <TASK>
[  991.305148][T19279]  dump_stack_lvl+0x18c/0x250
[  991.309815][T19279]  ? show_regs_print_info+0x20/0x20
[  991.314994][T19279]  ? load_image+0x420/0x420
[  991.319492][T19279]  should_fail_ex+0x394/0x4c0
[  991.324159][T19279]  get_futex_key+0x136/0x1030
[  991.328836][T19279]  ? verify_lock_unused+0x140/0x140
[  991.334039][T19279]  ? futex_setup_timer+0xc0/0xc0
[  991.338958][T19279]  ? perf_event_namespaces+0x196/0x9e0
[  991.344399][T19279]  ? perf_event_fork+0x1c0/0x1c0
[  991.349333][T19279]  futex_wake+0x127/0x4f0
[  991.353649][T19279]  ? futex_wake_mark+0x150/0x150
[  991.358575][T19279]  ? __lock_acquire+0x7eb0/0x7eb0
[  991.363590][T19279]  do_futex+0x35d/0x3e0
[  991.367729][T19279]  ? __ia32_sys_get_robust_list+0x110/0x110
[  991.373620][T19279]  ? fput+0x154/0x1a0
[  991.377599][T19279]  __se_sys_futex+0x3a9/0x440
[  991.382262][T19279]  ? __x64_sys_futex+0xf0/0xf0
[  991.387027][T19279]  ? __x64_sys_futex+0x21/0xf0
[  991.391777][T19279]  do_syscall_64+0x55/0xb0
[  991.396174][T19279]  ? clear_bhb_loop+0x40/0x90
[  991.400830][T19279]  ? clear_bhb_loop+0x40/0x90
[  991.405490][T19279]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  991.411376][T19279] RIP: 0033:0x7fc332b9e1d9
[  991.415777][T19279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  991.435455][T19279] RSP: 002b:00007fc333b420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  991.443857][T19279] RAX: ffffffffffffffda RBX: 00007fc332e25fa8 RCX: 00007fc332b9e1d9
[  991.451815][T19279] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc332e25fac
[  991.459788][T19279] RBP: 00007fc332e25fa0 R08: 0000000000745a2a R09: 0000000000000000
[  991.467741][T19279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  991.475700][T19279] R13: 00007fc332e26038 R14: 00007ffd0b988880 R15: 00007ffd0b988968
[  991.483673][T19279]  </TASK>
[  991.805108][T19290] loop8: detected capacity change from 0 to 128
[  992.545911][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  992.552293][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  992.586270][T19291] loop5: detected capacity change from 0 to 512
[  992.610405][T19291] EXT4-fs (loop5): first meta block group too large: 4278190080 (group descriptor block count 1)
[  992.650635][T19239] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  992.970213][T19302] netlink: 'syz.9.3127': attribute type 1 has an invalid length.
[  993.189451][T19306] FAULT_INJECTION: forcing a failure.
[  993.189451][T19306] name fail_futex, interval 1, probability 0, space 0, times 0
[  993.268220][T19306] CPU: 0 PID: 19306 Comm: syz.9.3134 Not tainted syzkaller #0
[  993.275719][T19306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  993.285765][T19306] Call Trace:
[  993.289047][T19306]  <TASK>
[  993.291967][T19306]  dump_stack_lvl+0x18c/0x250
[  993.296629][T19306]  ? ____kasan_slab_free+0x126/0x1f0
[  993.301900][T19306]  ? show_regs_print_info+0x20/0x20
[  993.307079][T19306]  ? load_image+0x420/0x420
[  993.311587][T19306]  should_fail_ex+0x394/0x4c0
[  993.316268][T19306]  get_futex_key+0x136/0x1030
[  993.320930][T19306]  ? futex_setup_timer+0xc0/0xc0
[  993.325855][T19306]  futex_wake+0x127/0x4f0
[  993.330173][T19306]  ? futex_wake_mark+0x150/0x150
[  993.335096][T19306]  ? __lock_acquire+0x7eb0/0x7eb0
[  993.340116][T19306]  ? __might_fault+0xaa/0x120
[  993.344794][T19306]  do_futex+0x35d/0x3e0
[  993.348932][T19306]  ? _copy_to_user+0x85/0xa0
[  993.353527][T19306]  ? __ia32_sys_get_robust_list+0x110/0x110
[  993.359411][T19306]  __se_sys_futex+0x3a9/0x440
[  993.364074][T19306]  ? __x64_sys_futex+0xf0/0xf0
[  993.368826][T19306]  ? __x64_sys_futex+0x21/0xf0
[  993.373573][T19306]  do_syscall_64+0x55/0xb0
[  993.377974][T19306]  ? clear_bhb_loop+0x40/0x90
[  993.382645][T19306]  ? clear_bhb_loop+0x40/0x90
[  993.387304][T19306]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  993.393189][T19306] RIP: 0033:0x7ff1bf39e1d9
[  993.397609][T19306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  993.417205][T19306] RSP: 002b:00007ff1c02d20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  993.425604][T19306] RAX: ffffffffffffffda RBX: 00007ff1bf625fa8 RCX: 00007ff1bf39e1d9
[  993.433560][T19306] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff1bf625fac
[  993.441514][T19306] RBP: 00007ff1bf625fa0 R08: 0000000000745a2a R09: 0000000000000000
[  993.449485][T19306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  993.457438][T19306] R13: 00007ff1bf626038 R14: 00007ffff7d818e0 R15: 00007ffff7d819c8
[  993.465401][T19306]  </TASK>
[  996.942690][T19335] loop9: detected capacity change from 0 to 512
[  996.955218][T19335] EXT4-fs (loop9): first meta block group too large: 4278190080 (group descriptor block count 1)
[  997.138076][T19340] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  998.974070][T19355] loop8: detected capacity change from 0 to 256
[  998.989501][T19355] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  999.000244][T19355] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  999.094890][T19355] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d)
[  999.108241][T19355] exFAT-fs (loop8): failed to load alloc-bitmap
[  999.114606][T19355] exFAT-fs (loop8): failed to recognize exfat type
[  999.347008][T19359] loop8: detected capacity change from 0 to 1024
[  999.417034][T19359] hfsplus: part requires an argument
[  999.485205][T19359] hfsplus: unable to parse mount options
[ 1000.521145][T19366] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1002.766221][T19399] FAULT_INJECTION: forcing a failure.
[ 1002.766221][T19399] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1002.879993][T19399] CPU: 0 PID: 19399 Comm: syz.9.3146 Not tainted syzkaller #0
[ 1002.887492][T19399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1002.897536][T19399] Call Trace:
[ 1002.900804][T19399]  <TASK>
[ 1002.903722][T19399]  dump_stack_lvl+0x18c/0x250
[ 1002.908398][T19399]  ? ____kasan_slab_free+0x126/0x1f0
[ 1002.913671][T19399]  ? show_regs_print_info+0x20/0x20
[ 1002.918849][T19399]  ? load_image+0x420/0x420
[ 1002.923343][T19399]  should_fail_ex+0x394/0x4c0
[ 1002.928010][T19399]  get_futex_key+0x136/0x1030
[ 1002.932677][T19399]  ? futex_setup_timer+0xc0/0xc0
[ 1002.937602][T19399]  futex_wake+0x127/0x4f0
[ 1002.941919][T19399]  ? futex_wake_mark+0x150/0x150
[ 1002.946843][T19399]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1002.951855][T19399]  ? __might_fault+0xaa/0x120
[ 1002.956517][T19399]  do_futex+0x35d/0x3e0
[ 1002.960659][T19399]  ? _copy_to_user+0x85/0xa0
[ 1002.965238][T19399]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1002.971121][T19399]  __se_sys_futex+0x3a9/0x440
[ 1002.975784][T19399]  ? __x64_sys_futex+0xf0/0xf0
[ 1002.980550][T19399]  ? __x64_sys_futex+0x21/0xf0
[ 1002.985301][T19399]  do_syscall_64+0x55/0xb0
[ 1002.989701][T19399]  ? clear_bhb_loop+0x40/0x90
[ 1002.994360][T19399]  ? clear_bhb_loop+0x40/0x90
[ 1002.999021][T19399]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1003.004906][T19399] RIP: 0033:0x7ff1bf39e1d9
[ 1003.009305][T19399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1003.028896][T19399] RSP: 002b:00007ff1c02d20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1003.037295][T19399] RAX: ffffffffffffffda RBX: 00007ff1bf625fa8 RCX: 00007ff1bf39e1d9
[ 1003.045249][T19399] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff1bf625fac
[ 1003.053204][T19399] RBP: 00007ff1bf625fa0 R08: 0000000000745a2a R09: 0000000000000000
[ 1003.061157][T19399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1003.069112][T19399] R13: 00007ff1bf626038 R14: 00007ffff7d818e0 R15: 00007ffff7d819c8
[ 1003.077079][T19399]  </TASK>
[ 1003.617037][T19407] loop1: detected capacity change from 0 to 1024
[ 1004.361956][T19407] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1004.408268][T19407] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1005.125683][T19411] loop8: detected capacity change from 0 to 512
[ 1005.136527][T19411] EXT4-fs (loop8): first meta block group too large: 4278190080 (group descriptor block count 1)
[ 1005.185334][T19407] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #3: block 1: comm syz.1.3152: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1005.319077][T19407] Quota error (device loop1): write_blk: dquota write failed
[ 1005.346235][T19407] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1005.424645][T19407] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.3152: Failed to acquire dquot type 0
[ 1005.505114][T19407] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.3152: Freeing blocks not in datazone - block = 0, count = 4096
[ 1005.596151][T19407] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3152: Invalid inode bitmap blk 0 in block_group 0
[ 1006.535903][   T76] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1006.568693][T19407] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem
[ 1006.623732][T19407] EXT4-fs (loop1): 1 orphan inode deleted
[ 1006.653243][   T76] Quota error (device loop1): remove_tree: Can't read quota data block 1
[ 1006.690712][T19407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1006.718354][   T76] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0
[ 1006.875105][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1007.565345][T19440] loop8: detected capacity change from 0 to 128
[ 1008.595005][T19446] loop8: detected capacity change from 0 to 256
[ 1009.690973][T19457] loop9: detected capacity change from 0 to 512
[ 1009.701785][T19457] EXT4-fs (loop9): first meta block group too large: 4278190080 (group descriptor block count 1)
[ 1009.750189][T19412] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1009.804523][T19462] FAULT_INJECTION: forcing a failure.
[ 1009.804523][T19462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1009.905506][T19462] CPU: 0 PID: 19462 Comm: syz.8.3162 Not tainted syzkaller #0
[ 1009.912990][T19462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1009.923035][T19462] Call Trace:
[ 1009.926307][T19462]  <TASK>
[ 1009.929232][T19462]  dump_stack_lvl+0x18c/0x250
[ 1009.933915][T19462]  ? show_regs_print_info+0x20/0x20
[ 1009.939099][T19462]  ? load_image+0x420/0x420
[ 1009.943592][T19462]  ? __might_fault+0xaa/0x120
[ 1009.948258][T19462]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1009.953277][T19462]  ? fcntl_getlk+0x924/0xb10
[ 1009.957854][T19462]  should_fail_ex+0x394/0x4c0
[ 1009.962523][T19462]  _copy_to_user+0x2f/0xa0
[ 1009.966964][T19462]  do_fcntl+0xc8d/0x14a0
[ 1009.971220][T19462]  ? kill_fasync+0x4b0/0x4b0
[ 1009.975822][T19462]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1009.981806][T19462]  ? tomoyo_file_fcntl+0x7b/0x220
[ 1009.986858][T19462]  ? bpf_lsm_file_fcntl+0x9/0x10
[ 1009.991792][T19462]  ? security_file_fcntl+0x80/0xa0
[ 1009.996895][T19462]  __se_sys_fcntl+0xc9/0x1a0
[ 1010.001481][T19462]  do_syscall_64+0x55/0xb0
[ 1010.005885][T19462]  ? clear_bhb_loop+0x40/0x90
[ 1010.010561][T19462]  ? clear_bhb_loop+0x40/0x90
[ 1010.015231][T19462]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1010.021125][T19462] RIP: 0033:0x7f412899e1d9
[ 1010.025529][T19462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1010.045124][T19462] RSP: 002b:00007f41298bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[ 1010.053527][T19462] RAX: ffffffffffffffda RBX: 00007f4128c25fa0 RCX: 00007f412899e1d9
[ 1010.061489][T19462] RDX: 0000200000000780 RSI: 0000000000000024 RDI: 0000000000000006
[ 1010.069447][T19462] RBP: 00007f4128a35888 R08: 0000000000000000 R09: 0000000000000000
[ 1010.077406][T19462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1010.085364][T19462] R13: 00007f4128c26038 R14: 00007f4128c25fa0 R15: 00007ffd9f323d08
[ 1010.093356][T19462]  </TASK>
[ 1015.034359][T19498] loop5: detected capacity change from 0 to 512
[ 1015.073840][T19498] EXT4-fs (loop5): first meta block group too large: 4278190080 (group descriptor block count 1)
[ 1016.700032][T19518] netlink: 252 bytes leftover after parsing attributes in process `syz.8.3167'.
[ 1016.720763][T19518] loop8: detected capacity change from 0 to 2048
[ 1016.754349][T19518] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1016.961119][T16393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1019.745420][T19546] FAULT_INJECTION: forcing a failure.
[ 1019.745420][T19546] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1019.814611][T19546] CPU: 0 PID: 19546 Comm: syz.9.3174 Not tainted syzkaller #0
[ 1019.822092][T19546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1019.832135][T19546] Call Trace:
[ 1019.835408][T19546]  <TASK>
[ 1019.838328][T19546]  dump_stack_lvl+0x18c/0x250
[ 1019.843000][T19546]  ? ____kasan_slab_free+0x126/0x1f0
[ 1019.848283][T19546]  ? show_regs_print_info+0x20/0x20
[ 1019.853469][T19546]  ? load_image+0x420/0x420
[ 1019.857978][T19546]  should_fail_ex+0x394/0x4c0
[ 1019.862655][T19546]  get_futex_key+0x136/0x1030
[ 1019.867340][T19546]  ? futex_setup_timer+0xc0/0xc0
[ 1019.872271][T19546]  futex_wake+0x127/0x4f0
[ 1019.876594][T19546]  ? futex_wake_mark+0x150/0x150
[ 1019.881517][T19546]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1019.886550][T19546]  ? __might_fault+0xaa/0x120
[ 1019.891239][T19546]  do_futex+0x35d/0x3e0
[ 1019.895399][T19546]  ? _copy_to_user+0x85/0xa0
[ 1019.899987][T19546]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1019.905875][T19546]  __se_sys_futex+0x3a9/0x440
[ 1019.910540][T19546]  ? __x64_sys_futex+0xf0/0xf0
[ 1019.915315][T19546]  ? __x64_sys_futex+0x21/0xf0
[ 1019.920068][T19546]  do_syscall_64+0x55/0xb0
[ 1019.924468][T19546]  ? clear_bhb_loop+0x40/0x90
[ 1019.929150][T19546]  ? clear_bhb_loop+0x40/0x90
[ 1019.933835][T19546]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1019.939742][T19546] RIP: 0033:0x7ff1bf39e1d9
[ 1019.944151][T19546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1019.963833][T19546] RSP: 002b:00007ff1c02d20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1019.972245][T19546] RAX: ffffffffffffffda RBX: 00007ff1bf625fa8 RCX: 00007ff1bf39e1d9
[ 1019.980207][T19546] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff1bf625fac
[ 1019.988196][T19546] RBP: 00007ff1bf625fa0 R08: 0000000000745a2a R09: 0000000000000000
[ 1019.996154][T19546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1020.004118][T19546] R13: 00007ff1bf626038 R14: 00007ffff7d818e0 R15: 00007ffff7d819c8
[ 1020.012089][T19546]  </TASK>
[ 1023.300818][T19563] loop9: detected capacity change from 0 to 512
[ 1023.360951][T19563] EXT4-fs (loop9): first meta block group too large: 4278190080 (group descriptor block count 1)
[ 1024.731499][T19575] loop8: detected capacity change from 0 to 4096
[ 1024.771373][T19575] EXT4-fs: inline encryption not supported
[ 1024.845289][T19575] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1024.896373][T19575] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1024.996198][T19575] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003]
[ 1025.043717][T19575] System zones: 0-5
[ 1025.077322][T19575] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1025.255356][T19575] xt_hashlimit: max too large, truncated to 1048576
[ 1025.275177][T19575] xt_hashlimit: overflow, try lower: 137438953472/8
[ 1025.484856][T16393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1026.497650][T19590] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1026.828313][T19596] loop1: detected capacity change from 0 to 512
[ 1026.884120][T19596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1027.019789][T19596] EXT4-fs (loop1): 1 truncate cleaned up
[ 1027.075151][T19596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1027.830642][T16400] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1028.027176][ T9559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1028.050392][T16400] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1028.075893][T16400] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1028.179592][T16400] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1028.232125][T16400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1028.283025][T16400] usb 6-1: SerialNumber: syz
[ 1028.490441][T19617] FAULT_INJECTION: forcing a failure.
[ 1028.490441][T19617] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1028.547534][T16400] usb 6-1: 0:2 : does not exist
[ 1028.580255][T19617] CPU: 0 PID: 19617 Comm: syz.1.3188 Not tainted syzkaller #0
[ 1028.587732][T19617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1028.597794][T19617] Call Trace:
[ 1028.601079][T19617]  <TASK>
[ 1028.603993][T19617]  dump_stack_lvl+0x18c/0x250
[ 1028.608663][T19617]  ? ____kasan_slab_free+0x126/0x1f0
[ 1028.613949][T19617]  ? show_regs_print_info+0x20/0x20
[ 1028.619132][T19617]  ? load_image+0x420/0x420
[ 1028.623638][T19617]  should_fail_ex+0x394/0x4c0
[ 1028.628322][T19617]  get_futex_key+0x136/0x1030
[ 1028.632989][T19617]  ? futex_setup_timer+0xc0/0xc0
[ 1028.637911][T19617]  futex_wake+0x127/0x4f0
[ 1028.642225][T19617]  ? futex_wake_mark+0x150/0x150
[ 1028.647160][T19617]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1028.652172][T19617]  ? __might_fault+0xaa/0x120
[ 1028.656832][T19617]  do_futex+0x35d/0x3e0
[ 1028.660969][T19617]  ? _copy_to_user+0x85/0xa0
[ 1028.665546][T19617]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1028.671428][T19617]  __se_sys_futex+0x3a9/0x440
[ 1028.676091][T19617]  ? __x64_sys_futex+0xf0/0xf0
[ 1028.680842][T19617]  ? __x64_sys_futex+0x21/0xf0
[ 1028.685589][T19617]  do_syscall_64+0x55/0xb0
[ 1028.689990][T19617]  ? clear_bhb_loop+0x40/0x90
[ 1028.694668][T19617]  ? clear_bhb_loop+0x40/0x90
[ 1028.699326][T19617]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1028.705206][T19617] RIP: 0033:0x7f2df199e1d9
[ 1028.709605][T19617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1028.729194][T19617] RSP: 002b:00007f2df28270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1028.737595][T19617] RAX: ffffffffffffffda RBX: 00007f2df1c25fa8 RCX: 00007f2df199e1d9
[ 1028.745552][T19617] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2df1c25fac
[ 1028.753505][T19617] RBP: 00007f2df1c25fa0 R08: 0000000000745a2a R09: 0000000000000000
[ 1028.761461][T19617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1028.769431][T19617] R13: 00007f2df1c26038 R14: 00007ffe6a565e00 R15: 00007ffe6a565ee8
[ 1028.777394][T19617]  </TASK>
[ 1028.800003][T16400] usb 6-1: unit 1 not found!
[ 1028.990723][T16400] usb 6-1: USB disconnect, device number 3
[ 1029.062996][T19604] udevd[19604]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1031.526021][T17902] 
[ 1031.528372][T17902] ======================================================
[ 1031.535367][T17902] WARNING: possible circular locking dependency detected
[ 1031.542376][T17902] syzkaller #0 Not tainted
[ 1031.546778][T17902] ------------------------------------------------------
[ 1031.553775][T17902] kworker/u5:2/17902 is trying to acquire lock:
[ 1031.559986][T17902] ffffffff8f364ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550
[ 1031.569187][T17902] 
[ 1031.569187][T17902] but task is already holding lock:
[ 1031.576526][T17902] ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x2e1/0xba0
[ 1031.586339][T17902] 
[ 1031.586339][T17902] which lock already depends on the new lock.
[ 1031.586339][T17902] 
[ 1031.596718][T17902] 
[ 1031.596718][T17902] the existing dependency chain (in reverse order) is:
[ 1031.605709][T17902] 
[ 1031.605709][T17902] -> #2 (hci_cb_list_lock){+.+.}-{3:3}:
[ 1031.613432][T17902]        __mutex_lock+0x135/0xc80
[ 1031.618438][T17902]        hci_remote_features_evt+0x535/0x900
[ 1031.624399][T17902]        hci_event_packet+0x807/0x1280
[ 1031.629851][T17902]        hci_rx_work+0x43a/0xd60
[ 1031.634772][T17902]        process_scheduled_works+0xa60/0x1600
[ 1031.640819][T17902]        worker_thread+0xa5e/0xfe0
[ 1031.645907][T17902]        kthread+0x2fa/0x390
[ 1031.650474][T17902]        ret_from_fork+0x48/0x80
[ 1031.655392][T17902]        ret_from_fork_asm+0x11/0x20
[ 1031.660659][T17902] 
[ 1031.660659][T17902] -> #1 (&hdev->lock){+.+.}-{3:3}:
[ 1031.667932][T17902]        __mutex_lock+0x135/0xc80
[ 1031.672949][T17902]        l2cap_chan_connect+0xfc/0xe30
[ 1031.678385][T17902]        l2cap_sock_connect+0x586/0x760
[ 1031.683911][T17902]        kernel_connect+0x142/0x1c0
[ 1031.689108][T17902]        rfcomm_dlc_open+0xa1f/0xec0
[ 1031.694373][T17902]        rfcomm_sock_connect+0x2ed/0x600
[ 1031.699996][T17902]        __sys_connect+0x3da/0x470
[ 1031.705085][T17902]        __x64_sys_connect+0x7a/0x90
[ 1031.710349][T17902]        do_syscall_64+0x55/0xb0
[ 1031.715276][T17902]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1031.721675][T17902] 
[ 1031.721675][T17902] -> #0 (rfcomm_mutex){+.+.}-{3:3}:
[ 1031.729034][T17902]        __lock_acquire+0x3a07/0x7eb0
[ 1031.734383][T17902]        lock_acquire+0x19e/0x420
[ 1031.739385][T17902]        __mutex_lock+0x135/0xc80
[ 1031.744389][T17902]        rfcomm_security_cfm+0x41/0x550
[ 1031.749913][T17902]        hci_auth_complete_evt+0x366/0xba0
[ 1031.755700][T17902]        hci_event_packet+0x807/0x1280
[ 1031.761138][T17902]        hci_rx_work+0x43a/0xd60
[ 1031.766055][T17902]        process_scheduled_works+0xa60/0x1600
[ 1031.772101][T17902]        worker_thread+0xa5e/0xfe0
[ 1031.777190][T17902]        kthread+0x2fa/0x390
[ 1031.781758][T17902]        ret_from_fork+0x48/0x80
[ 1031.786690][T17902]        ret_from_fork_asm+0x11/0x20
[ 1031.791956][T17902] 
[ 1031.791956][T17902] other info that might help us debug this:
[ 1031.791956][T17902] 
[ 1031.802166][T17902] Chain exists of:
[ 1031.802166][T17902]   rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock
[ 1031.802166][T17902] 
[ 1031.814652][T17902]  Possible unsafe locking scenario:
[ 1031.814652][T17902] 
[ 1031.822094][T17902]        CPU0                    CPU1
[ 1031.827436][T17902]        ----                    ----
[ 1031.832865][T17902]   lock(hci_cb_list_lock);
[ 1031.837348][T17902]                                lock(&hdev->lock);
[ 1031.843931][T17902]                                lock(hci_cb_list_lock);
[ 1031.850930][T17902]   lock(rfcomm_mutex);
[ 1031.855066][T17902] 
[ 1031.855066][T17902]  *** DEADLOCK ***
[ 1031.855066][T17902] 
[ 1031.863185][T17902] 4 locks held by kworker/u5:2/17902:
[ 1031.868531][T17902]  #0: ffff88803973cd38 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1031.879470][T17902]  #1: ffffc90003857d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1031.891462][T17902]  #2: ffff888068f480b8 (&hdev->lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x98/0xba0
[ 1031.901179][T17902]  #3: ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x2e1/0xba0
[ 1031.911418][T17902] 
[ 1031.911418][T17902] stack backtrace:
[ 1031.917282][T17902] CPU: 0 PID: 17902 Comm: kworker/u5:2 Not tainted syzkaller #0
[ 1031.924888][T17902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1031.934926][T17902] Workqueue: hci2 hci_rx_work
[ 1031.939588][T17902] Call Trace:
[ 1031.942851][T17902]  <TASK>
[ 1031.945769][T17902]  dump_stack_lvl+0x18c/0x250
[ 1031.950429][T17902]  ? load_image+0x420/0x420
[ 1031.954931][T17902]  ? show_regs_print_info+0x20/0x20
[ 1031.960110][T17902]  ? print_circular_bug+0x12b/0x1a0
[ 1031.965291][T17902]  check_noncircular+0x2fc/0x400
[ 1031.970209][T17902]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1031.975390][T17902]  ? lockdep_lock+0xf5/0x230
[ 1031.980031][T17902]  ? _find_first_zero_bit+0xd6/0x100
[ 1031.985343][T17902]  __lock_acquire+0x3a07/0x7eb0
[ 1031.990195][T17902]  ? verify_lock_unused+0x140/0x140
[ 1031.995389][T17902]  ? l2cap_security_cfm+0x1277/0x1300
[ 1032.000834][T17902]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1032.005845][T17902]  lock_acquire+0x19e/0x420
[ 1032.010354][T17902]  ? rfcomm_security_cfm+0x41/0x550
[ 1032.015537][T17902]  ? __might_sleep+0xe0/0xe0
[ 1032.020107][T17902]  ? read_lock_is_recursive+0x20/0x20
[ 1032.025461][T17902]  ? __mutex_trylock_common+0x160/0x270
[ 1032.030989][T17902]  __mutex_lock+0x135/0xc80
[ 1032.035475][T17902]  ? rfcomm_security_cfm+0x41/0x550
[ 1032.040654][T17902]  ? trace_contention_end+0x39/0xe0
[ 1032.045830][T17902]  ? __mutex_lock+0x30d/0xc80
[ 1032.050485][T17902]  ? rfcomm_security_cfm+0x41/0x550
[ 1032.055663][T17902]  ? mutex_lock_nested+0x20/0x20
[ 1032.060577][T17902]  ? hci_auth_complete_evt+0x2e1/0xba0
[ 1032.066013][T17902]  ? mgmt_auth_failed+0x2ca/0x4f0
[ 1032.071014][T17902]  ? mutex_lock_nested+0x20/0x20
[ 1032.075933][T17902]  ? rcu_is_watching+0x15/0xb0
[ 1032.080679][T17902]  rfcomm_security_cfm+0x41/0x550
[ 1032.085690][T17902]  ? hci_conn_hash_lookup_handle+0x22e/0x240
[ 1032.091655][T17902]  ? rfcomm_send_msc+0x360/0x360
[ 1032.096572][T17902]  hci_auth_complete_evt+0x366/0xba0
[ 1032.101839][T17902]  ? hci_disconn_complete_evt+0x900/0x900
[ 1032.107546][T17902]  ? skb_pull_data+0xf0/0x1f0
[ 1032.112226][T17902]  ? hci_disconn_complete_evt+0x900/0x900
[ 1032.117926][T17902]  hci_event_packet+0x807/0x1280
[ 1032.122845][T17902]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1032.127849][T17902]  ? lock_chain_count+0x20/0x20
[ 1032.132682][T17902]  ? bis_list+0x290/0x290
[ 1032.136990][T17902]  ? kcov_remote_start+0x513/0x810
[ 1032.142081][T17902]  ? lockdep_hardirqs_on+0x98/0x150
[ 1032.147273][T17902]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1032.152448][T17902]  hci_rx_work+0x43a/0xd60
[ 1032.156850][T17902]  ? process_scheduled_works+0x975/0x1600
[ 1032.162549][T17902]  process_scheduled_works+0xa60/0x1600
[ 1032.168083][T17902]  ? worker_attach_to_pool+0x370/0x370
[ 1032.173540][T17902]  ? assign_work+0x3cc/0x5d0
[ 1032.178126][T17902]  worker_thread+0xa5e/0xfe0
[ 1032.182700][T17902]  ? _raw_spin_unlock+0x40/0x40
[ 1032.187535][T17902]  ? __kthread_parkme+0x71/0x1c0
[ 1032.192451][T17902]  kthread+0x2fa/0x390
[ 1032.196496][T17902]  ? pr_cont_work+0x550/0x550
[ 1032.201156][T17902]  ? kthread_blkcg+0xd0/0xd0
[ 1032.205727][T17902]  ret_from_fork+0x48/0x80
[ 1032.210126][T17902]  ? kthread_blkcg+0xd0/0xd0
[ 1032.214695][T17902]  ret_from_fork_asm+0x11/0x20
[ 1032.219445][T17902]  </TASK>
[ 1032.242804][T19648] loop1: detected capacity change from 0 to 2048
[ 1032.387296][T19648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1033.546909][T19663] loop9: detected capacity change from 0 to 512
[ 1033.559863][T19663] EXT4-fs (loop9): first meta block group too large: 4278190080 (group descriptor block count 1)
[ 1033.592575][T19604] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1035.580403][ T5775] Bluetooth: hci3: command 0x0406 tx timeout
[ 1038.461585][T17902] Bluetooth: hci2: command 0x0406 tx timeout