last executing test programs:

5m47.461247374s ago: executing program 32 (id=291):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m32.818599394s ago: executing program 33 (id=400):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000380)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000440)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = shmget(0x1, 0x8000, 0x200, &(0x7f0000ff8000/0x8000)=nil)
shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/95)

5m23.754400233s ago: executing program 2 (id=450):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001dc0)={0x2c, r1, 0xc4fc9e906872338b, 0x70bf2c, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

5m23.47836888s ago: executing program 2 (id=451):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="bcb0b6080bc2", 0x6}, {&(0x7f0000000340)="54d9b7a069fb02b4e96e12d872dd182e2becb6f1457b6e0aabe3427159015f4c4a57a21bc3f122b2f904000000cea665", 0x30}, {&(0x7f0000000380)="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", 0x593}], 0x3}}], 0x1, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x89000001, 0x4)
recvfrom$inet(r0, &(0x7f0000000e40)=""/4096, 0x1000, 0x40010120, 0x0, 0x0)

5m23.438861081s ago: executing program 2 (id=452):
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mysys\x00', 0x1ff)
openat$rtc(0xffffffffffffff9c, 0x0, 0x22aac2, 0x0)
mount(0x0, &(0x7f00000004c0)='./mysys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mmap$IORING_OFF_SQ_RING(0x0, 0x101, 0x3000008, 0x11, r0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x8200, 0x0, 0x0, 0x0, 0x0, 0x0)

5m23.330684503s ago: executing program 2 (id=453):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mincore(&(0x7f0000041000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/6)

5m14.984880445s ago: executing program 34 (id=425):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000140)={[{@nodioread_nolock}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_err_ignore}]}, 0x1, 0x54e, &(0x7f0000000880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
chroot(&(0x7f00000000c0)='./file2\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0)

5m8.147339117s ago: executing program 35 (id=453):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mincore(&(0x7f0000041000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/6)

4m41.994354068s ago: executing program 4 (id=657):
unshare(0x62040200)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10162, 0x0)
semget$private(0x0, 0x2, 0x5c2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m28.728050873s ago: executing program 36 (id=702):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000280)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000380)='./file0\x00')
symlinkat(&(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.stat\x00', 0x275a, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x800004, @mcast2={0xff, 0x3}, 0x84}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="826bb6", 0x3, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x801, &(0x7f0000000240)=ANY=[], 0x2, 0x252, &(0x7f0000000540)="$eJzsmb9rFEEUx7+zu7d3hAS0sLE5i4ARkr3dPZU0gloqgpCIWh5mDTGTnNxdkTvwR7Cx8Q/wb7DWIoVY2NmIhZVFDAQstLRRcGR+Zed+rTm4zvcp5t68eTPvvZndN3ALgiD+Ww6+/tx/cXV5dRHALOZRNvpvfm7jOfZfXvolI77f9rA3uB4DIETeD/7hPwTw7ooPPNXLCvFLuOPzZs1V4QMVrbsFD+fM+G0wRDZWIdFiBoa7Rv3AkW3w4Bm71+Rr9zd4FssmkU0qmzog+uL/scuwBu1eemBOfO1ub7PBgWtMCTxraQ0vCevHasYKwdE6PAtG2BTtX4CDfXlCl5wtkOd15/mzXdmPjD6Gp/ZSksBDYg6mDoYVo19GGVEUVU03S5z8Twf5+r4+Nid/J9xKUbaV4o2YtnByqdDGJjHGxj74ztBbIzw+hDPEUBzGH3GsmIUQTyZJMBx3BNMQ7Dt/zFnSdHIXXnV4Vphr5ga9N0dsQm9z8RUwUYKs3cUJnZ7WMHOUl03SH4ZnHU77Ed1zNY8GbUJM0Zetm0NDn2Y4v2E1qLS7H6+boVN965zpfwuOhLDoIcnrJwuAs8aUQYjAuRVqna2HtXa3t7Sx1VjP1rPtNK1fjM/H8YW0pmqzbgvqX0XVpxmn/pX0lTFgJ52H2Gl0Oq1kB+i0ktD209eqdSruypvmdzXPU/XPw8JvIcz1UlJpl0fHo+6/sp7HVG/BHxs8QRAEQRAEQRAEQRAEQRBEAdXP+tf8dT03i6pnPoTpD1ViNEF6U034GwAA//89J0vl")
openat(0xffffffffffffff9c, &(0x7f0000000d40)='./sys_dbg/bus/usb/devices/usb5/authorized_default\x00', 0x10100, 0x53)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

4m26.049004161s ago: executing program 37 (id=657):
unshare(0x62040200)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10162, 0x0)
semget$private(0x0, 0x2, 0x5c2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m11.086350124s ago: executing program 38 (id=949):
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000640)={0x0, <r0=>0x0}, 0x8)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000700)=r0, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000740)=r1, 0x4)

3m10.44990805s ago: executing program 39 (id=955):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000480)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0)

3m4.572736479s ago: executing program 9 (id=974):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x10008, &(0x7f0000000140)=ANY=[], 0xfb, 0x6b6, &(0x7f0000000180)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
semget$private(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
pipe2(0x0, 0x4800)
r1 = openat$random(0xffffffffffffff9c, 0x0, 0x1080, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknod$loop(&(0x7f0000001100)='./file0\x00', 0x6000, 0x0)

3m4.346289264s ago: executing program 9 (id=976):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x1, 0x489, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

3m3.217904962s ago: executing program 40 (id=978):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18090000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="e02785ff9782722f08138ee99701", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m3.202441093s ago: executing program 9 (id=980):
fsmount(0xffffffffffffffff, 0x1, 0x7c)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, 0x0, &(0x7f0000000340)='GPL\x00', 0x4, 0xd0, &(0x7f0000000500)=""/208, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x8, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0x0, &(0x7f0000000780)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000800)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0xffffffffffffffff)
prlimit64(r0, 0xe, &(0x7f0000000c80)={0x2000e046, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000cc0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000d00)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000d80)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000e00), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000e40), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x6)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000ec0), 0x1, 0x0)
write$tcp_congestion(r4, 0x0, 0x0)
r5 = shmget$private(0x0, 0xe000, 0x2, &(0x7f0000ff2000/0xe000)=nil)
shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x7000)
shmctl$IPC_RMID(r5, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
symlink(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3m2.12448698s ago: executing program 9 (id=981):
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000004c0)='./file0\x00', 0x4a1e, &(0x7f0000000500)=ANY=[], 0x2, 0x32e, &(0x7f0000000880)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000c00)={@desc={0x1, 0x0, @desc3}})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, &(0x7f00000007c0))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)={[{@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x101}}, {@oldalloc}, {@minixdf}, {@stripe}, {@grpid}]}, 0x4, 0xbd0, &(0x7f0000002380)="$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")
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x37d4c024, 0x9efa, 0x1, 0x5})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000480)={'veth1_to_bond\x00', {0x2, 0x4e21, @private=0xa010100}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./tracing\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r4, &(0x7f0000000640)='p:__st/event1 ./file0:0x0 arg2', 0x1e)

3m0.987227989s ago: executing program 9 (id=982):
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffa6)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xa300, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001240), 0x100, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001280)=0x3)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000012c0), 0xa300, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000001300)=0x1)
ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000100)=0x1)

2m59.894292507s ago: executing program 9 (id=983):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffefffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
setregid(0xffffffffffffffff, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}})
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005})
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008)
io_setup(0x3, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000002480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0x2}])
ioprio_get$uid(0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)

2m59.817000108s ago: executing program 41 (id=983):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffefffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
setregid(0xffffffffffffffff, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}})
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005})
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008)
io_setup(0x3, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000002480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0x2}])
ioprio_get$uid(0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)

2m43.365309674s ago: executing program 2 (id=979):
socket$unix(0x1, 0x1, 0x0)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8=0x0, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000000600)="$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")
openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x80342, 0xcc)
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000001100)='a', 0x200000c1, 0x9000)

2m42.940129834s ago: executing program 2 (id=1008):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2100c0, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@delalloc}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0x0)
unshare(0xa000200)
r0 = semget$private(0x0, 0x4000, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x6, 0x1000}], 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0)
unshare(0x48040200)

2m32.799341271s ago: executing program 5 (id=1031):
syz_mount_image$squashfs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0x1, 0x210, &(0x7f0000000700)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x0, 0x8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x92012, r0, 0x26000)
syz_open_procfs(0x0, &(0x7f0000000980)='fd/3\x00')
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x2204054, &(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES32=0x0, @ANYRESHEX], 0x1, 0xc72, &(0x7f0000000c00)="$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")
syz_mount_image$vfat(&(0x7f0000001880), &(0x7f00000018c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001940))
symlink(&(0x7f0000001980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000001a00)='.\x02\x00')
getpid()
inotify_init1(0x80800)
sched_setscheduler(0x0, 0x1, &(0x7f0000001ac0)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000001b00)=0x7)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001b40), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000001b80)={{0x80, 0x6}, 'port1\x00', 0x91, 0x90010, 0x4, 0x9, 0x10, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2e, 0x78})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

2m29.638581201s ago: executing program 5 (id=1042):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffefffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
setregid(0xffffffffffffffff, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0)
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005})
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008)
io_setup(0x3, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000002480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0x2}])
ioprio_get$uid(0x3, 0x0)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000380))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)

2m27.997113782s ago: executing program 5 (id=1048):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f00000003c0), 0x1, 0x5bb, &(0x7f0000000400)="$eJzs3U9oG1caAPBvRpYdJ96NF3Zhd8kh7C5kIUS282c3u6fkumwgkEOhl9bIigmWrWDJbWwMte+hNIfSllzSW3vosaWHHkovPfbaS/+cCyExLcQ5tCqyJEdxrFR2Lcu1fj8Y6b2Z0XzvafQ9aYYZFEDfOll7SCP+EhFXk4jjLcsGorHwZH299bXl/OO15XwS1eq1B0kkEfFobTnfXD9pPB+LiJWI+HNEfJaNOJ1ubnKwWSgvLs1MFouF+UZ9rDJ7c6y8uHTmxuzkdGG6MHfu3/+5cPH8hYmzE63NfVxtrWV31tfbX995/fYX/7t35/0PTqzk35xM4lKMNJa19mMv1d+TbFzaMv98N4L1UNLrBrArmUae11LpT3E8Mo2s3061dXAY2pfmAV1UHYqobmopAn0gkfTQp5q/A2rHv81pP39/3L9cPwCpxV1fW86/Fs34A/VzE3Fk49jk6PfJU0cmtePN0f1sKIfSympEjA8MPPv5Txqfv90b34sG0lWfXq7vqGf3f7o5/sQ2489I89zpr9Qc/9Yb4996a/zVevxMm/Hvaocxfnzx23faxl8dir9uGz/Z7H+yTfw0Il7uMP7dFz6+2G5Z9d2IU7F9/Kbk+eeHx67fKBbG64/xIPNsjE9Onfhv+/5HHG0Tv37O9shGQ1r7P9hoU9ph/z/6/MO/rTwn/j//3mb/1+Nv+/4PR8QbHcb/w6P3/t9u2f3V5GHtV8BO938S2bjXYfx/XTr5VaPorCEAAAAAAAAAAOyhdONatiTNbZbTNJer38P7xziaFkvlyunrpYW5qfo1b6ORTetXWtXvFR6NbFKrTzSux23Wz26pn2tel5UZ3qjn8qXiVI/7DgAAAAAAAAAAAAAAAAAAAAfFsS33//+Q2bj/f+vfVQOHVfu//AYOO/kP/evp/E961g5g//n+h75Vlf/Qv+Q/9C/5D/1L/kP/2jb/h/e/HcD+8/0P/Uv+AwAAAAAAAAAAAAAAAAAAAAAAAABAV1y9cqU2VR+vLedr9amBxYWZ0itnpgrlmdzsQj6XL83fzE2XStPFQi5fmv2l7SWl0s3xmFu4NVYplCtj5cWll2ZLC3PN/xQtZLveIwAAAAAAAAAAAAAAAAAAAPjtGdmYkjQXka3X0zSXi/hdRIwmkVy/USyMR8TvI+LLTHaoVp/odaMBAAAAAAAAAAAAAAAAAADgkCkvLs1MFouF+e4VBhqhWhYNtn/VN5WutmdgJytHxMreNqO2xR2/Ktt4A7u7mw5YYTgiurHlTByQDh70Qg8HJQAAAAAAAAAAAAAAAAAA6FNPbvrt9BU/dbdBAAAAAAAAAAAAAAAAAAAA0JfS75KIqE2njv9jZOvSwWQ9s/EcEa/evfbWrclKZX6iNv/h5vzK2435Z3vRfqBTzTxNI6KWxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAT5cWlmclisTC/y8JQB+v0uo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu/FzAAAA///U083r")
r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x44042, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a00)=ANY=[])

2m27.849783656s ago: executing program 42 (id=1008):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2100c0, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@delalloc}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0x0)
unshare(0xa000200)
r0 = semget$private(0x0, 0x4000, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x6, 0x1000}], 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0)
unshare(0x48040200)

2m27.524653914s ago: executing program 5 (id=1053):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x880090, 0x0, 0x4, 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000202c0)='./file0\x00', &(0x7f0000020300), 0x200800e, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x4)

2m26.388464403s ago: executing program 5 (id=1055):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffefffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
setregid(0xffffffffffffffff, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}})
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005})
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008)
io_setup(0x3, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000002480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0x2}])
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)

2m25.110339955s ago: executing program 5 (id=1062):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f00000003c0), 0x1, 0x5bb, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x44042, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a00)=ANY=[])

2m25.010520167s ago: executing program 43 (id=1062):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f00000003c0), 0x1, 0x5bb, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x44042, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a00)=ANY=[])

2m11.823380251s ago: executing program 1 (id=1104):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x1234, @loopback}}, 0x1e)
bind$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x5678, @loopback}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f00000001c0)=0x1)
ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x2)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m11.722366593s ago: executing program 1 (id=1105):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, 0x0, 0x0)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x1234, @loopback}}, 0x1e)
bind$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x5678, @loopback}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f00000001c0)=0x1)
ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m11.506483758s ago: executing program 1 (id=1106):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000000c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000140)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000000000000290000", @ANYRES16=r0], 0x18}, 0x2000c8d0)

2m11.293499134s ago: executing program 1 (id=1107):
pipe(&(0x7f0000000100))
mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r1, 0x0, 0x52)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}})

2m10.924714943s ago: executing program 1 (id=1110):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x1, 0x3, 0x8315})

2m10.714441699s ago: executing program 1 (id=1111):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffefffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
setregid(0xffffffffffffffff, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}})
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005})
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008)
io_setup(0x3, &(0x7f0000000180))
ioprio_get$uid(0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)

2m2.266904342s ago: executing program 4 (id=1050):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x82)
fchdir(r5)
setresuid(0x0, 0xee01, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
execve(&(0x7f00000000c0)='./sys\x00', &(0x7f0000000240)={[&(0x7f0000000200)='cgroup2\x00']}, &(0x7f0000000380)={[&(0x7f0000000280)='\x12\':[&/(:*\x85]$\\{\x00', &(0x7f0000000300)=':(\x00', &(0x7f0000000340)='cgroup.procs\x00']})
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
lstat(&(0x7f0000000a00)='./sys\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, r7, &(0x7f0000000980))
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

2m0.792037599s ago: executing program 4 (id=1127):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x20)
read$alg(0xffffffffffffffff, &(0x7f0000000300)=""/74, 0x4a)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1000, 0x1, 0x9}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = epoll_create1(0x80000)
r2 = socket(0x1, 0x5, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000002c0)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
read$alg(r0, &(0x7f0000000000)=""/106, 0x6a)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000000240)={0x7})
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940))
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syslog(0x3, &(0x7f0000000000)=""/112, 0x70)

1m58.928510926s ago: executing program 4 (id=1137):
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000004c0)='./file0\x00', 0x4a1e, &(0x7f0000000500)=ANY=[], 0x2, 0x32e, &(0x7f0000000880)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000c00)={@desc={0x1, 0x0, @desc3}})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, &(0x7f00000007c0))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)={[{@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x101}}, {@oldalloc}, {@minixdf}, {@stripe}, {@grpid}]}, 0x4, 0xbd0, &(0x7f0000002380)="$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")
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x37d4c024, 0x9efa, 0x1, 0x5})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240))
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./tracing\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r4, &(0x7f0000000640)='p:__st/event1 ./file0:0x0 arg2', 0x1e)

1m57.472865923s ago: executing program 4 (id=1141):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x1c, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f0000001680)="b8000005000000a0", &(0x7f00000016c0)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m55.696895407s ago: executing program 44 (id=1111):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffefffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
setregid(0xffffffffffffffff, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}})
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005})
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008)
io_setup(0x3, &(0x7f0000000180))
ioprio_get$uid(0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)

1m55.574453651s ago: executing program 4 (id=1149):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc0844123, &(0x7f0000000080)=0x1)

1m55.310612328s ago: executing program 45 (id=1149):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc0844123, &(0x7f0000000080)=0x1)

7.494921331s ago: executing program 7 (id=1725):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001b80)="d80000001c0081064e81f782db44b9040a1d080420000000ff0002a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

5.472687182s ago: executing program 7 (id=1731):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffefffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
setregid(0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_setup(0x3, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000002480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x2}])
ioprio_get$uid(0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)

5.312544766s ago: executing program 6 (id=1733):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000200), 0x6)
ioctl$sock_bt_hci(r1, 0x800448d5, 0x0)

5.194302679s ago: executing program 8 (id=1734):
rt_sigprocmask(0x0, &(0x7f0000000180)={[0xfffffffffffffffd]}, 0x0, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = fanotify_init(0x40, 0x2)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94101, 0x1b)
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', r1, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
fanotify_mark(r0, 0x8, 0x1001, r1, &(0x7f00000003c0)='./file0\x00')
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, r2, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000580), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000005c0), 0x10106, 0x2, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x2982, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x20000023896)

5.16677853s ago: executing program 7 (id=1736):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './mnt'}, 0x9)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000300)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000580)=0xfd8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r2, 0x0, 0xa20, 0x8000c65)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2)
sendfile(r3, r3, 0x0, 0x8000000f3aa6ea)

5.130728731s ago: executing program 6 (id=1737):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x82)
fchdir(r5)
setresuid(0x0, 0xee01, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
execve(&(0x7f00000000c0)='./sys\x00', &(0x7f0000000240)={[&(0x7f0000000200)='cgroup2\x00']}, &(0x7f0000000380)={[&(0x7f0000000280)='\x12\':[&/(:*\x85]$\\{\x00', &(0x7f0000000300)=':(\x00', &(0x7f0000000340)='cgroup.procs\x00']})
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
lstat(&(0x7f0000000a00)='./sys\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, r8, &(0x7f0000000980))
bind$unix(r7, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

4.171688765s ago: executing program 8 (id=1738):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4)

4.094364597s ago: executing program 3 (id=1739):
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0xff, 0x523, &(0x7f0000000580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000140)={0x1, 0x7, 0x1, 0x200000000000005, 0x401, 0x0, 0x200000003, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x4})
ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000001000)={[{@sb={'sb', 0x3d, 0x8}}, {}, {@grpquota}, {@noacl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f00000000c0)={0x14, {{0x29, 0x0, 0x3000000, @empty, 0x3}}}, 0x88)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000a00)=0x1000000, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800010a00000000000000000400000008000c"], 0x1c}}, 0x0)

3.96514656s ago: executing program 6 (id=1740):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x0, 0x392, &(0x7f0000001000)="$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")
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000680)=r3, 0x8)
setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f00000006c0)=r1, 0x4)

3.95725704s ago: executing program 8 (id=1742):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000100), 0x13bb711e)

3.803512034s ago: executing program 7 (id=1743):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.707759916s ago: executing program 6 (id=1744):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000340), 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000380)={r0}, 0x8)
write$cgroup_int(r1, &(0x7f00000003c0), 0xfffffdef)
write$cgroup_subtree(r1, 0x0, 0xfdef)

2.860252217s ago: executing program 0 (id=1745):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeeba"], 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

2.808213429s ago: executing program 7 (id=1746):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffefffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
setregid(0xffffffffffffffff, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0)
ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_setup(0x3, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000002480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x2}])
ioprio_get$uid(0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)

2.807062419s ago: executing program 3 (id=1747):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000200), 0x6)
ioctl$sock_bt_hci(r1, 0x800448d5, 0x0)

2.723133501s ago: executing program 8 (id=1748):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/4058, 0xfda}, {&(0x7f0000001c80)=""/146, 0x92}], 0x2}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001e40)={0x0, 0x0, 0x0}, 0x40002020)

2.673798082s ago: executing program 3 (id=1749):
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f00000000c0), 0x0)

2.284364402s ago: executing program 0 (id=1750):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0xc, 0xe, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002440), 0xfffffedf, 0x10, &(0x7f0000002480), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000024c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000002540)="26807800fb206f0100cf61e0b954", 0x0, 0x41ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.146361686s ago: executing program 0 (id=1751):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000a00)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b80)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000bc0)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50)

1.97439586s ago: executing program 0 (id=1752):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x82)
fchdir(r5)
setresuid(0x0, 0xee01, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
execve(&(0x7f00000000c0)='./sys\x00', &(0x7f0000000240)={[&(0x7f0000000200)='cgroup2\x00']}, &(0x7f0000000380)={[&(0x7f0000000280)='\x12\':[&/(:*\x85]$\\{\x00', &(0x7f0000000300)=':(\x00', &(0x7f0000000340)='cgroup.procs\x00']})
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
lstat(&(0x7f0000000a00)='./sys\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, r8, &(0x7f0000000980))
bind$unix(r7, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

1.822495054s ago: executing program 6 (id=1753):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './mnt'}, 0x9)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000300)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000580)=0xfd8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r2, 0x0, 0xa20, 0x8000c65)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2)
sendfile(r3, r3, 0x0, 0x8000000f3aa6ea)

1.558155381s ago: executing program 3 (id=1754):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x72)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc41a, &(0x7f00000000c0)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f00000004c0)="$eJzs289vFFUcAPDvbFt+YyviDxC1ij8af7S0oHLwgtGEi4mJHvBYSyFIoYbWRAiR6gGPhpNH9WjiX+BJLkY9abzq3ZgQw0U0kYyZ3ZllaXeX7W63C+znk0x33uybed83M6998940gL41mv1IIrZFxG8RMRwRA8szjFY+rl09P/PP1fMzSaTpW38l2W7x99XzM0XWJP/cmifGStVNKyycPXdyem5u9kyenlg89f7EwtlzL5w4NX189vjs6amDBw/sn3z5pakX16Se27NYd380v2fX4XcuvTFz5NK7P36TBbct/762HhUjHZc5GqMNT8BTHR/99rI9/2x4wbktZW19MCKGyu1/OAbKqYrheP2TngYHdFWapunGFVurPYClFLiLJdHrCIDeKP7QZ8+/xbKO3Y+eu3Ko8gCU1ftavlS+GYxSnmeo5vl2rY1GxJGlf7/Ilqg7DgEAsLa+y/o/z9fr/5XigZp89+RzQyMRcW9E7IiI+yJiZ0TcH1HO+2BEPLTK8keXpW+Ufz0fhPplc/u1u7UrhyJ5JZ/burn/V/T+YmQgT20v138oOXZibnZffk7GYmhjlp5sUsbl1379rNF3tf2/bMnKL/qCeRx/Di4boDs6vTjdSZ1rXfm4PAZ4YWX9k+pMQBIRuyJidxvH3xQRJ579ek91w4aag+aa17+JwTYCWib9KuKZyvVfimX1j5pQm8xPTmyKudl9E8VdsdJPP198s1H5t77+3ZVd/y117/9q/UeS2vnahdWXcfH3Txs+07R7/29I3i6vF7fTh9OLi2cmIzYkSyu3T93Yt0gX+bP6j+2t3/53RFz/Mt/v4YjIbuJHIuLRiHgsj/3xiHgiIvY2qf8Prz75Xvv1766s/kdXdf1XvzJw8vtvG5Xf2vU/UF4by7e08vuv1QA7OXcAAABwpyiV34FPSuPV9VJpfLzyDv/O2FKam19YfO7Y/Aenj1belR+JoVIx0jVcMx46mY+5FOmpfKy4SO8vjxunaZpuLqfHZ+bnujWnDrRma4P2n/ljoNfRAV1Xnkc7+Hlrmf2HF9xVbppHH+pdHMD6W4P3aIA7lPYP/Uv7h/5Vr/1fiLjWg1CAdebvP/Qv7R/6l/YP/Uv7h77Uyf/1N1vZcbhbR74TVy5HRKM8A20feWNEdBrh01vb3T1KvT6rra8U77RVt5TqZP6vVxFm17HVzBdivQLr8S8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANfJ/AAAA///tr+cS")
prlimit64(0x0, 0xe, &(0x7f0000000940)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000009c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x13, 0x5, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000a40)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000ac0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000b00), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x6)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000b80)={0x6, 0x8, 0x200, 0x3, 0xffffffffffffffff})
r3 = syz_open_procfs(0x0, 0x0)
setpriority(0x1, 0x0, 0x80080000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x0, 0x8e}, 0x28)
pread64(r3, &(0x7f0000000c00)=""/63, 0x3f, 0xd)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)={@ifindex, 0xffffffffffffffff, 0x11}, 0xa)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20)

1.558016421s ago: executing program 8 (id=1755):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0)

1.283189898s ago: executing program 8 (id=1756):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x5, 0x711, &(0x7f0000001000)="$eJzs3U9sHFf9APDvrNf2bqo6bpum+UmV6l+LCsIi/ywXwqUGIWSkCqogwdlqnMbK5g+2i9wesAtIXDlwRSoHc4ETCCEhIUUqZ7gVbhanCiQuPSWVYND8s2ed3fXGxt4UPp9odt6bN+/Nd747+2Z3I2sD+J+1OBvNe9GOxdnXNrL6zvZcZ2d77lZRbnQiYjIiGhHNWq/k/YiFKJb4v2xD1dDvOD9ZuXL1g492PixqzXJpRPHQ7h9gs8/2hXplq1xiJiLGyvURdI33xuHGm9wrJruZyaJ+aX/0MCrjEZF2+c7ZvZZe0rFape/rHfjkSIr75kOmI05FRKu6oW0VmxsnG91QhpqLqpPcOt5YAAAA4LFw+v5mxEZMjToOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CQpf/8/KZcHVXkmkur3/z9V231ihKEONjiyVlW41ziJYAAAAAAAAADgeL1wP35xNU2nqnqaRONbY2WlXa7firVYbkacj41YivVYj9W4FBHTtYEepGm6vnopXsxrZz5O0zSeKHrGalfPy/t6Tmwsra+vXh4y4PZRzxgAAAAAAAAA/qu8Oj+Zr78fizE16mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAuiRgrVvlypipPR6MZEa2ImMj224r4U1V+jDQftcO944kDAAAARmy8q3b6ftyPjZiq6mmSf+Y/m3/ub8VbcTvWYyXWoxPLcS3/LqD41N/Y2d6c3dmeu5Ut5bDfeHJ33C/9Y+8Yv546MKh8xCi+e+h95HP5Hu24Hiv5lvPxRtyJTlyLRt4zc66KpxZXzbtZTMmrhTSNyWHSda1cZ2f+43J9ItoH7TCdZ2R8NyMXs9iSIo9PDc5E/dkZwv4jXYrG7jc/Z/ofqfoyJp2MKJI+8CjJv9K0KJ3KH8eyk3niawNznl8v4490MkeyPxOXa1ff2cE5j/j0b3757Rud2zdvJFuzJ3YZHcoLvTdP/rV6hqpMFLZiOeZqmXhu6ExcX3vMM5Gb7rGt+5vGRjy7W16Mr8Y3YzZm4vVYjZX4bizFeizHTHwlLy2V13P2OD04UwtdtdcPinOijHVsX0z/f7pYD4rpxbzvVKzE1+NOXIvleCX/dzkuxedjPubjSu0ZfnaImbZRzrT1V/1v+wf/0mfKQjbx/WhvAjzBV3c/WV6fquW1PudO5231LY18wss8/Qj3o8FzY2XvlpU9Ez+ovQZHbzcTrdi9S1TRPVNlYLxnJn6WTytrnds3V28s3d03brLV+3gvR/fpH2Ei+efpw/ftIbtent6dI7qvjqztmYfa/pzna6L8H5eirfuOOxHx8/Zu20Gv1InyPdzDI13O256LiJ+W0WZtmWwOz9rO1fpl77daedvHaZoW77cAeOyd+uypifbf239sv9f+YftG+7XWlye/MPn8RIz/YfyLzYtjLzeeT34V78X34uBP6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIHW3n7n5lKns7y6r5Cm6WafpmMpRDOia8vvf1fbJ/+tsYgYfsBs74VGRL6lGWVhiO5/i4hyy+bhTufdwybhL+VzciIJH1BIht651ff6KQt3nixP50Gapid+OtVvtT1y97Q0sqfgP1yofiLroaakGdGn10imI+AEXVi/dffC2tvvfG7l1tKby28u374yP3/l4pX5V+YuXF/ptEYdHnCM8nt9/j5n1JEAAAAAAAAAAAAAwxruj3OSm0tRbGn2+iuCg7oDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHMHibDTvRRKXLp6/mNV3tuc62VKVs/VYvueDiGhERDITkbwfsRDFEtO14ZJ+x9mKuPrBRzsfFrVmueT7N45+FlvlEjNluDNlw3j3fq1endPNWmWhPmaSj3O3Nt7hJOUy1uMwMEL/DgAA///LpQ3i")
prlimit64(0x0, 0xe, &(0x7f0000000800)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000900)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000980), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000009c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x1, 0x3, 0x8315})

858.568428ms ago: executing program 0 (id=1757):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000001680), &(0x7f00000016c0)='./file1\x00', 0x1000040, &(0x7f0000001700)=ANY=[@ANYRES8=r0, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r0], 0x1, 0x3a2, &(0x7f0000001800)="$eJzs3U1rY+UXAPDTzPRl+v+36UIEFfFhdm5CW7/AFJkBsaDUiYyzEO/YdAy905QkVDKIzkJw6zdwP7h0J4hfoAvdu3PXjctZDBPJW5t0Yiv2JQ7+fhDuSZ5zkufmksvZhHNw59sH21uN0lbWjMKNFIWIKDyJWOpGPVP9Y6Ebz8SwR/Fm8c5vr3/w0d1319bXb26kdGvt9lurKaXFN376/Ivvr//c/N+HPyz+OBv7Sx8f/LH6+/7L+68cPLv9WbWRqo20U2umLN2r1ZrZvbySNquN7VJK7+eVrFFJ1Z1GpT6yvpXXdndbKdvZXJjfrVcajZTttNJ2pZWatdSst1J2P6vupFKplBbmg9OUH29sZGu9eO6EvBuXtSEuQL2+lnV+w7PPrZQfT2RDAMBEnan/Hyyc2v/fLQz1/3Pxl/3/dOj/z8X030sb7v//8ZvwL9fp/2f6v99R+n8AAAAAAAAAAAAAAHgRPGm3i+12uzg4tgd/Eu4/n/D2uGDPXf9jj0nvj4s19Me9uYj8m73yXrl37K2vbUU18qjEchTjaee2MNCLb72zfnM5dS3FwoOvuvXXf4koXxmtX4liLI2vX+nVp8P66BynY364fjU+iZfG16+OrZ+J5e+G6ktRjF8/jVrksdm9vR3Vf7mS0tvvrR+rn+3mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEoDr0Vv7v1eOeJa7PXn95eOEpZG5+P36g/n6y9HMZ6On8+/PHY+/9V49epkzx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhqth9tZnlfqlxUMZv5neT4VM73gpKqpXvqjY0vXYjR59rT3OWNQODUnCkevXOuf5JjkZ+12uxvc//rctzp3uZfyLMF0RJyQ0+5/gWf/rP9HxPArV0ZzZiPiLB/RPuksOsFiJyic63d45VIu0yTuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBZh0O/O0+mJr0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqXRerid5XmlfoHBpM8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRfJnAAAA///+Owi8")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000001c00)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x10a)
sendfile(r2, r2, 0x0, 0x1000000201005)

682.812303ms ago: executing program 6 (id=1758):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffefffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setregid(0xffffffffffffffff, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005})
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1008)
io_setup(0x3, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000002480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r3, 0x0, 0x0, 0x2}])
ioprio_get$uid(0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)

545.477486ms ago: executing program 3 (id=1759):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x0, 0x1}, 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, 0x0, 0x0)
ioctl$sock_bt_hci(r1, 0x800448d5, 0x0)

514.857857ms ago: executing program 7 (id=1760):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setgid(0xee00)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$bt_sco(r0, &(0x7f0000000100), 0x8)
listen(r0, 0x5)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xd)
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x0, 0x0, 0x3c, 0x3c}}}, 0x14)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x15, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
fsopen(&(0x7f0000000340)='cgroup2\x00', 0x0)
ptrace(0x10, r2)

121.127367ms ago: executing program 0 (id=1761):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000850000006100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000500)="d2ff03076003008cb89e08f088a82b9a86dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 3 (id=1762):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000028000000850000000500000095"], &(0x7f0000000680)='GPL\x00'}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

kernel console output (not intermixed with test programs):

F(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  341.993384][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  341.994803][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  341.995277][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  342.002930][ T8595] device veth0_vlan entered promiscuous mode
[  342.014327][ T8629] device veth1_vlan entered promiscuous mode
[  342.021398][ T8595] device veth1_vlan entered promiscuous mode
[  342.460596][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  342.468813][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  342.492583][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  342.512630][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  342.548686][ T8958] ip_tables: iptables: counters copy to user failed while replacing table
[  342.598304][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'.
[  342.659220][ T8967] loop0: detected capacity change from 0 to 512
[  342.718173][ T8595] device veth0_macvtap entered promiscuous mode
[  342.766791][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  342.797112][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  342.806274][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  342.815935][ T8967] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  342.834793][ T8967] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1116: invalid indirect mapped block 256 (level 1)
[  342.853908][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  342.854747][ T8967] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1116: invalid indirect mapped block 2683928664 (level 1)
[  342.895222][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  342.903733][ T8967] EXT4-fs (loop0): 1 truncate cleaned up
[  342.913254][ T8967] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  342.945983][ T8595] device veth1_macvtap entered promiscuous mode
[  342.968137][ T8629] device veth0_macvtap entered promiscuous mode
[  343.009844][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.029740][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.050259][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.085610][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.111314][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.134800][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.183748][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.299162][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.310238][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.321352][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.333610][ T8982] EXT4-fs error (device loop0): ext4_find_dest_de:2117: inode #2: block 13: comm syz.0.1116: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  343.379699][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.395917][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  343.413419][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  343.422294][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  343.431658][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  343.442984][ T8629] device veth1_macvtap entered promiscuous mode
[  343.456701][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.468263][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.481868][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.492744][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.503700][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.567110][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.585436][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.596550][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.607002][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.630682][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.642773][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.654354][ T8595] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.690684][ T8595] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.699431][ T8595] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.740478][ T8595] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.826627][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  343.842299][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  343.867170][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  343.912768][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.932703][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.944779][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.562195][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.716417][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.727116][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.737062][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.749497][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.759780][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.777447][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.787501][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.805169][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.819133][ T8629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.882211][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  344.894932][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  344.936816][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.969512][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.986703][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.997301][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.014552][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.028198][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.042284][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.053424][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.063388][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.076045][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.087005][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.097662][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.108741][ T8629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  346.228847][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  346.244313][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  346.323129][ T8629] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.345049][ T8629] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.380248][ T8629] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.405518][ T8629] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.084892][ T9023] rxe_eth0 speed is unknown, defaulting to 1000
[  347.320289][ T4540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.328570][ T5436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.344576][ T5436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.354832][ T4540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.417243][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  347.431370][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  347.448447][ T9054] loop0: detected capacity change from 0 to 1024
[  347.505309][ T9054] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  347.516101][ T9054] EXT4-fs (loop0): inline encryption not supported
[  347.531386][ T5436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.539232][ T5436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.541402][ T9057] No such timeout policy "syz0"
[  347.555282][ T9054] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  347.563188][ T9054] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  347.611703][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  347.641017][ T9054] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,auto_da_alloc,nomblk_io_submit,nogrpid,dioread_nolock,,errors=continue. Quota mode: none.
[  347.668060][ T9054] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.695217][ T9054] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1124: bg 0: block 112: padding at end of block bitmap is not set
[  347.715397][ T5436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.374544][ T9054] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  348.461288][ T5436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.998305][ T9054] EXT4-fs (loop0): This should not happen!! Data will be lost
[  348.998305][ T9054] 
[  348.998801][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  349.009095][ T9054] EXT4-fs (loop0): Total free blocks count 0
[  349.022247][ T9054] EXT4-fs (loop0): Free/Dirty block details
[  349.051216][ T9054] EXT4-fs (loop0): free_blocks=0
[  349.079719][ T9054] EXT4-fs (loop0): dirty_blocks=80
[  349.124178][ T9054] EXT4-fs (loop0): Block reservation details
[  349.130214][ T9054] EXT4-fs (loop0): i_reserved_data_blocks=5
[  350.243079][ T9110] loop3: detected capacity change from 0 to 8
[  350.989908][ T9116] loop4: detected capacity change from 0 to 128
[  352.363550][ T8595] FAT-fs (loop4): error, invalid access to FAT (entry 0xffff0000)
[  352.382769][ T8595] FAT-fs (loop4): Filesystem has been set read-only
[  352.390104][ T8595] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  352.480925][ T8595] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  353.412899][ T9147] rxe_eth0 speed is unknown, defaulting to 1000
[  354.148745][ T9151] loop0: detected capacity change from 0 to 1024
[  354.213359][ T9151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  354.328040][ T9160] xt_bpf: check failed: parse error
[  354.573651][ T9168] loop0: detected capacity change from 0 to 8
[  354.696082][   T26] kauditd_printk_skb: 113 callbacks suppressed
[  354.696161][   T26] audit: type=1800 audit(1792697831.536:439): pid=9168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1152" name="file1" dev="loop0" ino=5 res=0 errno=0
[  354.854746][ T9171] rxe_eth0 speed is unknown, defaulting to 1000
[  355.233880][ T9183] rxe_eth0 speed is unknown, defaulting to 1000
[  356.963928][ T7338] Bluetooth: hci0: command 0x0409 tx timeout
[  356.976074][ T9204] loop7: detected capacity change from 0 to 16
[  357.043456][ T9171] chnl_net:caif_netlink_parms(): no params data found
[  357.070872][ T9204] erofs: (device loop7): mounted with root inode @ nid 36.
[  357.093128][ T9201] rxe_eth0 speed is unknown, defaulting to 1000
[  357.160546][ T7338] Bluetooth: hci5: command 0x0409 tx timeout
[  357.462921][ T9215] loop0: detected capacity change from 0 to 1024
[  357.489979][ T9171] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.506443][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.570904][ T9215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  357.590836][ T9171] device bridge_slave_0 entered promiscuous mode
[  357.666012][ T9171] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.677111][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.705821][ T9171] device bridge_slave_1 entered promiscuous mode
[  357.849848][ T9226] loop0: detected capacity change from 0 to 256
[  358.004636][ T9226] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  358.010699][ T9171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.049581][ T9226] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  358.139905][ T9226] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d)
[  358.164065][ T9183] chnl_net:caif_netlink_parms(): no params data found
[  358.185544][ T9171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.338246][ T9171] team0: Port device team_slave_0 added
[  358.387395][ T9171] team0: Port device team_slave_1 added
[  358.991712][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.034700][ T7982] Bluetooth: hci0: command 0x041b tx timeout
[  359.039571][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.069942][ T9183] device bridge_slave_0 entered promiscuous mode
[  359.072114][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.124034][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.125093][ T9183] device bridge_slave_1 entered promiscuous mode
[  359.132031][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.163481][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.163514][ T9171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.198485][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.199026][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.199040][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.199062][ T9171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.251854][ T8428] Bluetooth: hci5: command 0x041b tx timeout
[  359.282720][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.351841][ T9171] device hsr_slave_0 entered promiscuous mode
[  359.485879][ T9171] device hsr_slave_1 entered promiscuous mode
[  359.504670][ T9183] team0: Port device team_slave_0 added
[  359.568148][ T9183] team0: Port device team_slave_1 added
[  359.661751][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.668732][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.780476][ T9183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.851048][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.858032][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.920485][ T9183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.012667][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.062845][ T9183] device hsr_slave_0 entered promiscuous mode
[  360.081975][ T9183] device hsr_slave_1 entered promiscuous mode
[  360.090772][ T9183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  360.098361][ T9183] Cannot create hsr debugfs directory
[  360.126824][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.212292][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.320673][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.339411][ T9275] loop3: detected capacity change from 0 to 512
[  360.442481][ T9275] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  360.458151][ T9275] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1166: invalid indirect mapped block 256 (level 1)
[  360.501976][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.522095][ T9275] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1166: invalid indirect mapped block 2683928664 (level 1)
[  360.537142][ T9275] EXT4-fs (loop3): 1 truncate cleaned up
[  360.545017][ T9275] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  360.622367][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.712217][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.935096][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.977060][ T9292] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.1166: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  361.090720][ T8428] Bluetooth: hci0: command 0x040f tx timeout
[  361.305689][    T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.359148][ T8427] Bluetooth: hci5: command 0x040f tx timeout
[  361.467292][    T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.543720][ T9303] loop3: detected capacity change from 0 to 512
[  361.547852][ T9302] loop0: detected capacity change from 0 to 1024
[  361.589944][ T9303] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  361.618403][    T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.661949][ T9302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  362.531306][    T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.814894][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.596170][ T8427] Bluetooth: hci0: command 0x0419 tx timeout
[  363.610608][ T8428] Bluetooth: hci5: command 0x0419 tx timeout
[  363.756506][ T9330] loop3: detected capacity change from 0 to 512
[  363.767785][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.856617][ T9330] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  363.880068][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.891548][ T9330] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1177: invalid indirect mapped block 256 (level 1)
[  363.956547][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.979826][ T9330] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1177: invalid indirect mapped block 2683928664 (level 1)
[  364.005179][ T9330] EXT4-fs (loop3): 1 truncate cleaned up
[  364.016837][ T9330] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  364.335473][ T9347] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.1177: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  364.388556][ T9183] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  364.849372][ T9279] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  364.985738][ T9183] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  365.035170][ T9183] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  365.093470][ T9183] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  365.162033][ T9171] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  365.168989][ T9374] loop3: detected capacity change from 0 to 1024
[  365.182020][ T9171] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  365.243160][ T9171] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  365.252150][ T9374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  365.308254][ T9171] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  365.609404][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.637718][ T9387] loop7: detected capacity change from 0 to 512
[  365.709326][ T9183] 8021q: adding VLAN 0 to HW filter on device team0
[  365.838416][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  365.858905][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  365.988901][ T9171] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.079376][ T9171] 8021q: adding VLAN 0 to HW filter on device team0
[  366.120368][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  366.129241][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  366.164967][  T518] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.172109][  T518] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.189824][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  366.198742][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  366.218190][  T518] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.225336][  T518] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.235004][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  366.247194][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  366.256256][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  366.371004][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  366.390605][   T26] audit: type=1326 audit(1792697843.226:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.7.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9fee6559 code=0x7ffc0000
[  366.511169][   T26] audit: type=1326 audit(1792697843.226:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.7.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9fee6559 code=0x7ffc0000
[  366.582447][ T9171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  366.640465][ T9171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  366.685356][   T26] audit: type=1326 audit(1792697843.226:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.7.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9fee6559 code=0x7ffc0000
[  366.802754][   T26] audit: type=1326 audit(1792697843.266:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.7.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab9fee6559 code=0x7ffc0000
[  366.932654][   T26] audit: type=1326 audit(1792697843.266:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.7.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9fee6559 code=0x7ffc0000
[  367.040372][   T26] audit: type=1326 audit(1792697843.266:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.7.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9fee6559 code=0x7ffc0000
[  367.137715][ T9171] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.157052][   T26] audit: type=1326 audit(1792697843.266:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.7.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9fee6559 code=0x7ffc0000
[  367.203560][   T26] audit: type=1326 audit(1792697843.266:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.7.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fab9fee6559 code=0x7ffc0000
[  367.229949][   T26] audit: type=1326 audit(1792697843.266:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.7.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9fee6559 code=0x7ffc0000
[  367.279031][   T26] audit: type=1326 audit(1792697843.286:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.7.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9fee6559 code=0x7ffc0000
[  367.281283][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  367.385804][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  367.419334][ T9426] loop7: detected capacity change from 0 to 1024
[  367.437040][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  367.457048][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  367.490761][ T9426] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  367.504073][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  367.550759][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  367.585312][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  367.599478][ T9426] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,nojournal_checksum,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,minixdf,bsdgroups,max_batch_time=0x0000000000000013,delalloc,noinit_itable,,errors=continue. Quota mode: none.
[  367.605513][  T518] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.635253][  T518] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.643658][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  367.653266][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  367.664090][  T518] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.671215][  T518] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.679392][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  367.689369][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  367.703663][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  367.712883][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  367.731332][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  367.744876][ T9426] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  367.751320][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  367.786380][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  367.800172][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  367.809906][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  367.819956][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  367.838247][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  367.848469][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  367.869198][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  367.878969][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  367.987644][ T9183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  368.010126][ T9183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  368.038520][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  368.053873][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  368.072428][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  368.094698][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  368.113724][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  368.115053][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  368.144301][ T9440] rxe_eth0 speed is unknown, defaulting to 1000
[  368.956138][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  368.966587][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  368.998320][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  369.009068][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  369.019407][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  369.028449][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  369.047674][ T9171] device veth0_vlan entered promiscuous mode
[  369.068650][ T9183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.179902][ T9495] loop0: detected capacity change from 0 to 1024
[  369.192287][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  369.206257][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  369.245815][ T9171] device veth1_vlan entered promiscuous mode
[  369.262815][ T9495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  369.459127][ T9504] device syzkaller0 entered promiscuous mode
[  369.621627][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  369.641290][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  369.649618][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  369.660290][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  369.684950][ T9171] device veth0_macvtap entered promiscuous mode
[  369.762409][ T7982] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  369.893293][ T9171] device veth1_macvtap entered promiscuous mode
[  370.121635][ T7982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  370.150842][ T7982] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  370.341677][ T7982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  370.366692][ T7982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.390870][ T7982] usb 4-1: Product: syz
[  370.405229][ T7982] usb 4-1: Manufacturer: syz
[  370.419909][ T7982] usb 4-1: SerialNumber: syz
[  370.768101][ T7982] cdc_ncm 4-1:1.0: bind() failure
[  370.788091][ T7982] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  370.810583][ T7982] cdc_ncm 4-1:1.1: bind() failure
[  370.842566][ T7982] usb 4-1: USB disconnect, device number 3
[  371.235061][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  371.246274][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  371.255228][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  371.285981][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  371.347257][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.373351][ T9554] loop3: detected capacity change from 0 to 1024
[  371.397566][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.481301][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.532541][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.577778][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.620586][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.661773][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.700211][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.716317][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.727257][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.737231][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.747965][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.758389][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.769042][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.781383][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.801390][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  371.824976][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  371.895475][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  371.940561][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.984908][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.023628][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.074265][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.113684][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.139922][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.179332][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.200024][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.219501][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.246606][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.272787][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.292445][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.303345][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.315025][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.327166][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  372.345155][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  372.364728][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  372.382339][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  372.401809][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  372.409752][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  372.433696][ T9183] device veth0_vlan entered promiscuous mode
[  372.445791][ T9171] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.460879][ T9171] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.479635][ T9171] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.498727][ T9171] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.611879][ T9183] device veth1_vlan entered promiscuous mode
[  372.737832][ T9585] loop0: detected capacity change from 0 to 512
[  372.788511][ T9585] EXT4-fs (loop0): inline encryption not supported
[  372.803509][  T518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.811760][ T9585] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  372.823563][  T518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.885803][ T9183] device veth0_macvtap entered promiscuous mode
[  372.921884][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  372.931133][ T9585] EXT4-fs (loop0): 1 truncate cleaned up
[  372.931144][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  372.931884][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  372.936886][ T9585] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  373.003242][ T9183] device veth1_macvtap entered promiscuous mode
[  373.010255][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  373.045414][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  373.091737][  T518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.096639][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.122537][  T518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.160423][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.180476][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.211527][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.241053][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.270444][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.299922][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.331952][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.350430][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.370434][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.390534][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.413827][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.434213][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.462182][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.486729][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.508127][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.531323][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.541119][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  373.578952][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  373.605564][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  373.674849][ T9603] loop3: detected capacity change from 0 to 1024
[  373.742633][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.760957][ T9603] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  373.793125][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.830456][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.851449][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.879273][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.910181][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.949298][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.960088][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.999110][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.028523][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.039654][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.051150][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.061293][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.072041][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.082171][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.095094][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.106655][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.152809][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  374.169921][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  374.180097][ T9183] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.189283][ T9183] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.203857][ T9183] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.240032][ T9183] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.280645][ T9615] netlink: 'syz.3.1210': attribute type 3 has an invalid length.
[  374.301242][ T9615] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1210'.
[  374.541965][ T5450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.549812][ T5450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.593617][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  374.667935][ T4541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.695438][ T9635] loop3: detected capacity change from 0 to 8
[  374.702187][ T4541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.770075][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  374.818301][   T26] kauditd_printk_skb: 261 callbacks suppressed
[  374.818315][   T26] audit: type=1800 audit(1792697851.656:711): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1216" name="file1" dev="loop3" ino=5 res=0 errno=0
[  375.048682][ T9647] loop6: detected capacity change from 0 to 1024
[  375.222143][ T9656] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9183] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9656]
[  375.313533][ T9656] loop8: detected capacity change from 0 to 2048
[  375.426404][ T9647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  375.552904][ T9656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  375.574472][ T9656] UDF-fs: error (device loop8): udf_read_inode: (ino 1408) failed !bh
[  375.582945][ T9656] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=96, partition=0
[  376.001849][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1222'.
[  376.163657][ T9671] loop8: detected capacity change from 0 to 128
[  376.283751][ T9671] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  376.318529][ T9671] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  376.335559][ T9681] loop6: detected capacity change from 0 to 2048
[  376.394342][ T9681] UDF-fs: bad mount option "fscontext=uncon" or missing value
[  377.630992][ T9702] loop3: detected capacity change from 0 to 1024
[  377.703917][ T9702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  378.095996][ T9722] loop7: detected capacity change from 0 to 512
[  378.109035][ T9724] loop3: detected capacity change from 0 to 512
[  378.142082][ T9724] EXT4-fs (loop3): Test dummy encryption mode enabled
[  378.148967][ T9722] EXT4-fs (loop7): invalid inodes per group: 0
[  378.148967][ T9722] 
[  379.801283][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  379.807610][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  379.908801][ T9724] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.1240: inode has both inline data and extents flags
[  380.225579][ T9724] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1240: couldn't read orphan inode 15 (err -117)
[  380.253689][ T9724] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  380.293359][ T9724] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  380.519293][ T9724] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  380.591205][ T9752] loop8: detected capacity change from 0 to 1024
[  380.751476][ T9752] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000007,noquota,delalloc,noblock_validity,nodioread_nolock,errors=remount-ro,. Quota mode: none.
[  380.880626][ T9752] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  381.294151][ T9777] EXT4-fs error (device loop8): ext4_free_blocks:6231: comm syz.8.1245: Freeing blocks not in datazone - block = 0, count = 16
[  381.419855][ T9776] loop6: detected capacity change from 0 to 512
[  381.474863][ T9777] EXT4-fs (loop8): Remounting filesystem read-only
[  381.481922][ T9777] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1245: bg 0: block 112: padding at end of block bitmap is not set
[  381.501296][ T9777] EXT4-fs (loop8): Remounting filesystem read-only
[  381.508327][ T9777] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  381.518603][ T9777] EXT4-fs (loop8): Remounting filesystem read-only
[  381.637214][ T9776] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  381.703617][ T9776] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  381.901582][   T26] audit: type=1326 audit(1792697858.746:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.6.1252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  381.926220][ T9798] netlink: 'syz.3.1253': attribute type 8 has an invalid length.
[  381.991021][   T26] audit: type=1326 audit(1792697858.746:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.6.1252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  382.025158][ T9799] loop8: detected capacity change from 0 to 2048
[  382.141718][   T26] audit: type=1326 audit(1792697858.746:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.6.1252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  382.143422][ T9799] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  382.176639][ T9803] loop3: detected capacity change from 0 to 128
[  382.223608][ T9799] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  382.240599][   T26] audit: type=1326 audit(1792697858.766:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.6.1252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  382.300545][ T9799] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  382.313048][   T26] audit: type=1326 audit(1792697858.766:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.6.1252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  382.752409][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.761298][ T9810] FAT-fs (loop3): Filesystem has been set read-only
[  382.770150][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.778760][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.787374][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.796105][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.804733][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.813314][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.821928][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.832612][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.841998][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.850592][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.859125][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.867714][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.876301][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.884886][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.893434][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.902013][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.910617][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.919833][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.928426][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.936999][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.945559][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.954152][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.962745][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.971320][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.979878][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.988473][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  382.997751][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.006366][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.014940][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.023528][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.032104][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.040685][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.049212][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.057775][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.070523][ T9799] UDF-fs: Scanning with blocksize 512 failed
[  383.089770][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.099060][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.107865][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.116361][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.124818][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.133428][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.141905][ T9810] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  383.225209][ T9799] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  383.311641][   T26] audit: type=1326 audit(1792697858.766:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.6.1252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  383.335795][    C1] vkms_vblank_simulate: vblank timer overrun
[  383.505709][ T9819] loop3: detected capacity change from 0 to 512
[  383.524865][   T26] audit: type=1326 audit(1792697858.766:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.6.1252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  383.572059][ T9821] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  383.712793][ T9819] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  383.754596][   T26] audit: type=1326 audit(1792697858.766:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.6.1252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  383.772400][ T9819] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1256: invalid indirect mapped block 256 (level 1)
[  383.782112][   T26] audit: type=1326 audit(1792697858.766:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.6.1252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  383.816705][   T26] audit: type=1326 audit(1792697858.766:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.6.1252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  383.824551][ T9826] device syzkaller0 entered promiscuous mode
[  383.848866][ T9819] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1256: invalid indirect mapped block 2683928664 (level 1)
[  383.929995][ T9819] EXT4-fs (loop3): 1 truncate cleaned up
[  383.961788][ T9819] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  384.277235][ T9819] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.1256: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  384.612373][ T9848] netlink: 'syz.6.1264': attribute type 8 has an invalid length.
[  384.928489][ T9851] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9171] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9851]
[  385.201811][    T9] device hsr_slave_0 left promiscuous mode
[  385.301038][    T9] device hsr_slave_1 left promiscuous mode
[  385.460841][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.560801][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.590964][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.639924][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.666259][    T9] device bridge_slave_1 left promiscuous mode
[  385.692679][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.726673][    T9] device bridge_slave_0 left promiscuous mode
[  385.746442][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.899904][    T9] device hsr_slave_0 left promiscuous mode
[  386.915133][    T9] device hsr_slave_1 left promiscuous mode
[  386.934430][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.155237][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.297077][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.321993][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.353970][    T9] device bridge_slave_1 left promiscuous mode
[  387.360185][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.395959][    T9] device bridge_slave_0 left promiscuous mode
[  387.415080][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.460940][    T9] device hsr_slave_0 left promiscuous mode
[  387.489170][    T9] device hsr_slave_1 left promiscuous mode
[  387.510101][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.528031][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.539450][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.558411][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.584803][    T9] device bridge_slave_1 left promiscuous mode
[  387.609454][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.629548][ T9888] loop3: detected capacity change from 0 to 2048
[  387.638540][    T9] device bridge_slave_0 left promiscuous mode
[  387.647616][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.659618][    T9] device hsr_slave_0 left promiscuous mode
[  387.665961][    T9] device hsr_slave_1 left promiscuous mode
[  387.672893][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.680343][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.688372][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.696375][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.704451][    T9] device bridge_slave_1 left promiscuous mode
[  387.710934][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.719395][    T9] device bridge_slave_0 left promiscuous mode
[  387.726241][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.772778][ T9888] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  387.785170][    T9] device veth1_macvtap left promiscuous mode
[  387.800559][    T9] device veth0_macvtap left promiscuous mode
[  387.807969][    T9] device veth1_vlan left promiscuous mode
[  387.819372][    T9] device veth0_vlan left promiscuous mode
[  387.843021][    T9] device veth1_macvtap left promiscuous mode
[  387.849080][    T9] device veth0_macvtap left promiscuous mode
[  387.860162][    T9] device veth1_vlan left promiscuous mode
[  387.866091][    T9] device veth0_vlan left promiscuous mode
[  387.873673][    T9] device veth1_macvtap left promiscuous mode
[  387.880004][    T9] device veth0_macvtap left promiscuous mode
[  387.886226][    T9] device veth1_vlan left promiscuous mode
[  387.896995][    T9] device veth0_vlan left promiscuous mode
[  387.925424][    T9] device veth1_macvtap left promiscuous mode
[  387.931720][    T9] device veth0_macvtap left promiscuous mode
[  387.937777][    T9] device veth1_vlan left promiscuous mode
[  387.944087][    T9] device veth0_vlan left promiscuous mode
[  388.309486][    T9] team0 (unregistering): Port device team_slave_1 removed
[  388.328331][    T9] team0 (unregistering): Port device team_slave_0 removed
[  388.340979][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.354000][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.418383][    T9] bond0 (unregistering): Released all slaves
[  388.504892][    T9] team0 (unregistering): Port device team_slave_1 removed
[  388.525392][    T9] team0 (unregistering): Port device team_slave_0 removed
[  388.536634][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.553075][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.613669][    T9] bond0 (unregistering): Released all slaves
[  388.705503][    T9] team0 (unregistering): Port device team_slave_1 removed
[  388.719776][    T9] team0 (unregistering): Port device team_slave_0 removed
[  388.733462][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.749067][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.813968][    T9] bond0 (unregistering): Released all slaves
[  388.893643][    T9] team0 (unregistering): Port device team_slave_1 removed
[  388.908722][    T9] team0 (unregistering): Port device team_slave_0 removed
[  388.924154][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.938600][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.998859][    T9] bond0 (unregistering): Released all slaves
[  389.307730][ T9903] netlink: 'syz.0.1276': attribute type 8 has an invalid length.
[  389.813254][ T9910] rxe_eth0 speed is unknown, defaulting to 1000
[  389.885771][ T9915] rxe_eth0 speed is unknown, defaulting to 1000
[  390.624732][ T9926] loop0: detected capacity change from 0 to 512
[  390.742941][ T9926] EXT4-fs (loop0): inline encryption not supported
[  390.749626][ T9926] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  390.831576][ T9926] EXT4-fs (loop0): 1 truncate cleaned up
[  390.850489][ T9926] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  390.932571][ T9940] device syzkaller0 entered promiscuous mode
[  390.966422][   T26] kauditd_printk_skb: 112 callbacks suppressed
[  390.966436][   T26] audit: type=1326 audit(1792697867.806:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.6.1273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  391.044850][ T9942] loop8: detected capacity change from 0 to 4096
[  391.073946][ T9951] ip_tables: iptables: counters copy to user failed while replacing table
[  391.106424][ T9942] EXT4-fs (loop8): Test dummy encryption mode enabled
[  391.150894][ T9942] EXT4-fs (loop8): Test dummy encryption mode enabled
[  391.180133][   T26] audit: type=1326 audit(1792697867.846:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.6.1273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  391.286392][   T26] audit: type=1326 audit(1792697867.876:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.6.1273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  391.313796][   T26] audit: type=1326 audit(1792697867.876:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.6.1273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  391.375162][   T26] audit: type=1326 audit(1792697867.876:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.6.1273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  391.489565][   T26] audit: type=1326 audit(1792697867.926:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.6.1273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  391.560009][   T26] audit: type=1326 audit(1792697867.926:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.6.1273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2bff5982c2 code=0x7ffc0000
[  391.606081][ T9965] netlink: 'syz.3.1292': attribute type 8 has an invalid length.
[  391.673656][   T26] audit: type=1326 audit(1792697867.936:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.6.1273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  391.796810][   T26] audit: type=1326 audit(1792697867.936:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.6.1273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff598559 code=0x7ffc0000
[  391.913679][   T26] audit: type=1326 audit(1792697867.936:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.6.1273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2bff598357 code=0x7ffc0000
[  391.950778][ T9942] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  393.514676][ T9976] rxe_eth0 speed is unknown, defaulting to 1000
[  393.774769][ T9986] loop0: detected capacity change from 0 to 512
[  393.874993][ T9986] EXT4-fs (loop0): inline encryption not supported
[  393.889107][ T9992] device syzkaller0 entered promiscuous mode
[  393.891900][ T9986] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  393.982589][ T9986] EXT4-fs (loop0): 1 truncate cleaned up
[  394.015289][ T9986] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  394.263835][T10019] loop7: detected capacity change from 0 to 512
[  394.273121][T10021] loop3: detected capacity change from 0 to 128
[  394.326466][T10021] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  394.383545][T10025] device bridge0 entered promiscuous mode
[  394.414168][T10021] binfmt_misc: register: failed to install interpreter file ./file0
[  394.739671][T10039] device syzkaller0 entered promiscuous mode
[  394.897945][T10045] rxe_eth0 speed is unknown, defaulting to 1000
[  395.816180][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1315'.
[  395.949295][T10069] netlink: 'syz.3.1320': attribute type 4 has an invalid length.
[  396.193530][T10077] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1319'.
[  397.104226][T10093] loop0: detected capacity change from 0 to 2048
[  397.258449][T10093] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  397.284293][T10093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  397.485380][T10103] rxe_eth0 speed is unknown, defaulting to 1000
[  398.415137][T10118] loop7: detected capacity change from 0 to 1024
[  398.578375][T10118] hfsplus: keylen 65060 too large
[  398.596451][T10118] hfsplus: xattr searching failed
[  399.515953][T10142] loop3: detected capacity change from 0 to 1024
[  400.233880][T10162] rxe_eth0 speed is unknown, defaulting to 1000
[  401.213001][T10185] loop8: detected capacity change from 0 to 128
[  401.259935][T10185] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  401.337100][T10194] loop3: detected capacity change from 0 to 128
[  401.337310][T10185] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  401.406716][T10194] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  401.445544][ T5450] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  401.767089][T10213] rxe_eth0 speed is unknown, defaulting to 1000
[  402.536711][T10219] loop7: detected capacity change from 0 to 512
[  402.663810][T10219] EXT4-fs (loop7): invalid inodes per group: 0
[  402.663810][T10219] 
[  402.696822][ T7959] Bluetooth: hci3: command 0x0406 tx timeout
[  402.930876][T10234] loop8: detected capacity change from 0 to 2048
[  403.158035][T10234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  403.697517][ T7959] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  404.110873][ T7959] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  404.224711][ T7959] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  404.570087][T10261] rxe_eth0 speed is unknown, defaulting to 1000
[  405.241090][ T7959] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  405.250214][ T7959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.263384][ T7959] usb 7-1: Product: syz
[  405.267600][ T7959] usb 7-1: Manufacturer: syz
[  405.272352][ T7959] usb 7-1: SerialNumber: syz
[  405.652383][ T7959] cdc_ncm 7-1:1.0: bind() failure
[  405.830905][ T7959] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  405.997376][ T7959] cdc_ncm 7-1:1.1: bind() failure
[  406.186067][ T7959] usb 7-1: USB disconnect, device number 4
[  406.229329][T10291] loop0: detected capacity change from 0 to 512
[  406.344799][T10291] EXT4-fs (loop0): Test dummy encryption mode enabled
[  406.383753][T10291] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x000000000000. Quota mode: none.
[  406.423233][T10291] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.1384: Directory hole found for htree leaf block 0
[  406.473190][T10291] EXT4-fs (loop0): Remounting filesystem read-only
[  406.529126][T10315] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1391'.
[  406.635064][T10312] rxe_eth0 speed is unknown, defaulting to 1000
[  406.724659][T10323] loop7: detected capacity change from 0 to 256
[  406.788941][T10323] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  406.835357][T10323] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  406.871857][T10323] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d)
[  406.908669][T10328] udc-core: couldn't find an available UDC or it's busy
[  406.933725][T10328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  407.357461][T10348] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7023] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10348]
[  407.527081][T10366] loop0: detected capacity change from 0 to 16
[  407.705454][T10369] loop3: detected capacity change from 0 to 512
[  408.220649][ T7959] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  408.621317][ T7959] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.677721][T10369] EXT4-fs (loop3): 1 orphan inode deleted
[  408.683581][T10369] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,noauto_da_alloc,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,barrier,journal_dev=0x000000000000844d,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback.
[  408.709974][ T7959] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.720124][ T7959] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00
[  408.728990][T10366] erofs: (device loop0): mounted with root inode @ nid 36.
[  408.736863][ T7959] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.755440][ T7959] usb 9-1: config 0 descriptor??
[  409.069625][T10397] loop0: detected capacity change from 0 to 128
[  409.157952][T10397] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  409.192163][T10397] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  409.249257][ T7959] wacom 0003:056A:0331.0005: hidraw0: USB HID v1.10 Device [HID 056a:0331] on usb-dummy_hcd.8-1/input0
[  409.446003][ T6071] usb 9-1: USB disconnect, device number 2
[  409.554255][T10409] fido_id[10409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  409.704955][T10427] udc-core: couldn't find an available UDC or it's busy
[  409.712961][T10427] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  409.819382][T10434] loop7: detected capacity change from 0 to 128
[  410.278706][T10446] loop6: detected capacity change from 0 to 256
[  410.495269][T10446] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  410.565966][T10446] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  410.772826][T10446] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  411.061677][T10466] netlink: 160 bytes leftover after parsing attributes in process `syz.7.1434'.
[  411.070939][T10466] netlink: 160 bytes leftover after parsing attributes in process `syz.7.1434'.
[  411.080995][T10466] netlink: 160 bytes leftover after parsing attributes in process `syz.7.1434'.
[  411.811153][   T26] kauditd_printk_skb: 118 callbacks suppressed
[  411.811170][   T26] audit: type=1800 audit(1792697888.646:962): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1432" name="file1" dev="sda1" ino=2077 res=0 errno=0
[  411.900975][   T26] audit: type=1800 audit(1792697888.686:963): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1432" name="file1" dev="sda1" ino=2077 res=0 errno=0
[  412.123563][T10490] loop0: detected capacity change from 0 to 512
[  412.282115][T10494] rxe_eth0 speed is unknown, defaulting to 1000
[  413.011522][T10498] loop6: detected capacity change from 0 to 8
[  413.019025][T10490] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  413.028251][T10490] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1439: invalid indirect mapped block 256 (level 1)
[  413.044233][T10490] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1439: invalid indirect mapped block 2683928664 (level 1)
[  413.059717][T10490] EXT4-fs (loop0): 1 truncate cleaned up
[  413.066775][T10490] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  413.206811][   T26] audit: type=1800 audit(1792697890.046:964): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1442" name="file1" dev="loop6" ino=5 res=0 errno=0
[  413.259612][T10505] loop3: detected capacity change from 0 to 512
[  413.379595][T10513] EXT4-fs error (device loop0): ext4_find_dest_de:2117: inode #2: block 13: comm syz.0.1439: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  413.428884][T10505] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  413.488218][T10505] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1445: invalid indirect mapped block 256 (level 1)
[  413.520404][T10505] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1445: invalid indirect mapped block 2683928664 (level 1)
[  413.631636][T10505] EXT4-fs (loop3): 1 truncate cleaned up
[  413.637333][T10505] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  414.141098][T10499] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  414.308556][T10499] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  415.445228][T10542] rxe_eth0 speed is unknown, defaulting to 1000
[  415.540455][ T1111] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  415.858564][T10558] loop6: detected capacity change from 0 to 8
[  415.931573][T10558] SQUASHFS error: zstd decompression error: 2
[  415.946406][T10558] SQUASHFS error: zstd decompression failed, data probably corrupt
[  415.961080][ T1111] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  415.990829][ T1111] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  416.020960][T10558] SQUASHFS error: Failed to read block 0x4ea: -5
[  416.037756][T10558] SQUASHFS error: Unable to read metadata cache entry [4e8]
[  416.073008][T10558] SQUASHFS error: Unable to read inode 0x11f
[  416.106748][T10567] loop7: detected capacity change from 0 to 512
[  416.262183][T10567] EXT4-fs error (device loop7): ext4_orphan_get:1410: inode #15: comm syz.7.1465: iget: bad i_size value: 38620345925642
[  416.270929][ T1111] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  416.285351][ T1111] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.306006][ T1111] usb 9-1: Product: syz
[  416.314974][ T1111] usb 9-1: Manufacturer: syz
[  416.328193][ T1111] usb 9-1: SerialNumber: syz
[  416.344643][T10567] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.1465: couldn't read orphan inode 15 (err -117)
[  416.437801][T10567] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  416.548262][T10577] loop6: detected capacity change from 0 to 8
[  416.618496][   T26] audit: type=1800 audit(1792697893.456:965): pid=10557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1461" name="file1" dev="sda1" ino=2077 res=0 errno=0
[  416.690551][ T1111] cdc_ncm 9-1:1.0: bind() failure
[  416.936179][T10582] rxe_eth0 speed is unknown, defaulting to 1000
[  417.475487][ T1111] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[  417.493726][ T1111] cdc_ncm 9-1:1.1: bind() failure
[  417.520592][ T1111] usb 9-1: USB disconnect, device number 3
[  417.530009][   T26] audit: type=1800 audit(1792697893.456:966): pid=10560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1461" name="file1" dev="sda1" ino=2077 res=0 errno=0
[  417.681930][   T26] audit: type=1800 audit(1792697893.516:967): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1468" name="file1" dev="loop6" ino=5 res=0 errno=0
[  417.773217][T10590] loop8: detected capacity change from 0 to 512
[  417.860766][T10590] EXT4-fs (loop8): 1 truncate cleaned up
[  417.906263][T10590] EXT4-fs (loop8): mounted filesystem without journal. Opts: noauto_da_alloc,auto_da_alloc,,errors=continue. Quota mode: none.
[  417.979384][T10601] loop7: detected capacity change from 0 to 512
[  418.048755][T10601] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  418.049883][T10601] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1476: invalid indirect mapped block 256 (level 1)
[  418.052941][T10601] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1476: invalid indirect mapped block 2683928664 (level 1)
[  418.053546][T10601] EXT4-fs (loop7): 1 truncate cleaned up
[  418.053567][T10601] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  418.470042][T10617] loop8: detected capacity change from 0 to 512
[  418.553162][T10622] EXT4-fs error (device loop7): ext4_find_dest_de:2117: inode #2: block 13: comm syz.7.1476: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  418.614608][T10617] EXT4-fs (loop8): invalid inodes per group: 0
[  418.614608][T10617] 
[  419.039135][T10629] loop8: detected capacity change from 0 to 1024
[  419.784103][T10629] EXT4-fs (loop8): VFS: Can't find ext4 filesystem
[  420.063636][T10649] netlink: 766 bytes leftover after parsing attributes in process `syz.8.1487'.
[  420.099938][T10650] loop0: detected capacity change from 0 to 256
[  420.131020][ T1111] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  420.161099][T10650] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  420.210134][T10650] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  420.243443][T10650] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d)
[  420.315236][T10654] rxe_eth0 speed is unknown, defaulting to 1000
[  420.377807][T10650] exFAT-fs (loop0): hint_cluster is invalid (17)
[  420.432387][T10650] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff)
[  420.440585][T10572] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  420.488739][T10650] exFAT-fs (loop0): Filesystem has been set read-only
[  420.540676][ T1111] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  420.590550][ T1111] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  420.801821][ T1111] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  420.823675][ T1111] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.853930][ T1111] usb 7-1: Product: syz
[  420.868574][ T1111] usb 7-1: Manufacturer: syz
[  420.878741][ T1111] usb 7-1: SerialNumber: syz
[  421.954944][T10691] loop6: detected capacity change from 0 to 512
[  422.013878][T10691] EXT4-fs (loop6): invalid inodes per group: 0
[  422.013878][T10691] 
[  422.319443][T10702] loop8: detected capacity change from 0 to 16
[  422.375377][T10702] erofs: (device loop8): mounted with root inode @ nid 36.
[  422.444753][T10702] erofs: (device loop8): erofs_read_inode: bogus i_mode (0) @ nid 0
[  422.496783][T10707] erofs: (device loop8): erofs_read_inode: bogus i_mode (0) @ nid 0
[  422.551973][T10702] erofs: (device loop8): erofs_read_inode: bogus i_mode (0) @ nid 0
[  422.572833][T10702] erofs: (device loop8): erofs_read_inode: bogus i_mode (0) @ nid 0
[  422.622162][T10707] erofs: (device loop8): z_erofs_readahead: readahead error at page 1 @ nid 89
[  422.651389][T10707] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 89
[  422.999327][T10681] rxe_eth0 speed is unknown, defaulting to 1000
[  423.090651][   T26] audit: type=1800 audit(1792697899.926:968): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1495" name="file1" dev="sda1" ino=2077 res=0 errno=0
[  423.210028][ T1111] cdc_ncm 7-1:1.0: bind() failure
[  423.269664][ T1111] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  423.322384][   T26] audit: type=1800 audit(1792697900.076:969): pid=10701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1495" name="file1" dev="sda1" ino=2077 res=0 errno=0
[  423.339342][ T1111] cdc_ncm 7-1:1.1: bind() failure
[  423.456858][T10722] loop6: detected capacity change from 0 to 1024
[  423.549712][T10722] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[  423.872978][ T1111] usb 7-1: USB disconnect, device number 5
[  424.161645][T10733] loop3: detected capacity change from 0 to 8
[  424.258147][   T26] audit: type=1800 audit(1792697901.096:970): pid=10733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1506" name="file1" dev="loop3" ino=5 res=0 errno=0
[  424.395221][T10743] rxe_eth0 speed is unknown, defaulting to 1000
[  424.501924][T10748] device-mapper: ioctl: Unable to rename non-existent device,  to uuid CRP-syzi2
[  425.117111][T10764] rxe_eth0 speed is unknown, defaulting to 1000
[  425.693633][T10761] loop6: detected capacity change from 0 to 2048
[  425.996567][T10761] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  426.048440][   T26] audit: type=1326 audit(1792697902.886:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.8.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e2aae559 code=0x7ffc0000
[  426.075017][T10761] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.141226][   T26] audit: type=1326 audit(1792697902.896:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.8.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e2aae559 code=0x7ffc0000
[  426.266245][   T26] audit: type=1326 audit(1792697902.896:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.8.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e2aae559 code=0x7ffc0000
[  426.330659][T10787] loop7: detected capacity change from 0 to 1764
[  426.413565][   T26] audit: type=1326 audit(1792697902.916:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.8.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e2aae559 code=0x7ffc0000
[  426.490328][   T26] audit: type=1326 audit(1792697902.916:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.8.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe5e2aae559 code=0x7ffc0000
[  426.647992][   T26] audit: type=1326 audit(1792697902.916:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.8.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e2aae559 code=0x7ffc0000
[  426.747483][   T26] audit: type=1326 audit(1792697902.916:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.8.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e2aae559 code=0x7ffc0000
[  426.917934][T10801] loop3: detected capacity change from 0 to 512
[  427.083294][T10805] input: syz0 as /devices/virtual/input/input9
[  427.138891][T10812] loop6: detected capacity change from 0 to 512
[  427.253528][T10812] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1524: missing EA_INODE flag
[  427.284168][T10812] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1524: error while reading EA inode 2 err=-117
[  427.310110][T10827] loop7: detected capacity change from 0 to 128
[  427.449726][T10812] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.1524: inode #3584: comm syz.6.1524: iget: illegal inode #
[  427.698288][T10827] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  427.921888][T10812] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1524: error while reading EA inode 3584 err=-117
[  428.004798][T10812] EXT4-fs (loop6): 1 orphan inode deleted
[  428.011058][T10812] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  428.012569][T10827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  428.038265][T10829] rxe_eth0 speed is unknown, defaulting to 1000
[  428.160967][T10834] tipc: Started in network mode
[  428.165961][T10834] tipc: Node identity 9ea3a0deb67d, cluster identity 4711
[  428.179068][T10834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.248452][T10834] device syzkaller0 entered promiscuous mode
[  428.256077][T10832] loop8: detected capacity change from 0 to 1024
[  428.302849][T10834] tipc: Resetting bearer <eth:syzkaller0>
[  428.324782][T10838] loop6: detected capacity change from 0 to 2048
[  428.339281][T10833] tipc: Resetting bearer <eth:syzkaller0>
[  428.351648][T10833] tipc: Disabling bearer <eth:syzkaller0>
[  428.415458][T10832] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  428.425377][T10838]  loop6: p2 < > p4
[  428.460635][T10838] loop6: p4 size 262144 extends beyond EOD, truncated
[  428.470867][T10832] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  428.568301][T10832] EXT4-fs (loop8): barriers disabled
[  428.576550][   T26] kauditd_printk_skb: 121 callbacks suppressed
[  428.576563][   T26] audit: type=1326 audit(1792697905.416:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.3.1537" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3c045559 code=0x7ffc0000
[  428.580459][T10832] JBD2: no valid journal superblock found
[  428.588708][   T26] audit: type=1326 audit(1792697905.426:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.3.1537" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3c045559 code=0x7ffc0000
[  428.706961][T10832] EXT4-fs (loop8): error loading journal
[  428.728500][   T26] audit: type=1326 audit(1792697905.426:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.3.1537" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3c045559 code=0x7ffc0000
[  428.813724][   T26] audit: type=1326 audit(1792697905.426:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.3.1537" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3c045559 code=0x7ffc0000
[  428.929909][T10832] loop8: detected capacity change from 0 to 512
[  428.938661][T10859] loop7: detected capacity change from 0 to 512
[  428.970474][   T26] audit: type=1326 audit(1792697905.426:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.3.1537" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6a3c045559 code=0x7ffc0000
[  429.102153][   T26] audit: type=1326 audit(1792697905.426:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.3.1537" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3c045559 code=0x7ffc0000
[  429.191081][   T26] audit: type=1326 audit(1792697905.426:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.3.1537" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3c045559 code=0x7ffc0000
[  429.248648][   T26] audit: type=1326 audit(1792697905.486:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.3.1537" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3c045559 code=0x7ffc0000
[  429.283704][   T26] audit: type=1326 audit(1792697905.486:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.3.1537" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3c045559 code=0x7ffc0000
[  429.317970][   T26] audit: type=1326 audit(1792697905.496:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.3.1537" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6a3c045559 code=0x7ffc0000
[  429.480813][T10870] loop7: detected capacity change from 0 to 512
[  429.606985][T10870] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  429.642249][T10870] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1539: invalid indirect mapped block 256 (level 1)
[  429.789213][T10870] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1539: invalid indirect mapped block 2683928664 (level 1)
[  429.824708][T10870] EXT4-fs (loop7): 1 truncate cleaned up
[  429.839167][T10870] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  430.322406][T10887] loop0: detected capacity change from 0 to 2048
[  430.521073][T10887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  430.531371][T10887] UDF-fs: error (device loop0): udf_read_inode: (ino 1408) failed !bh
[  430.539605][T10887] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=96, partition=0
[  430.577385][T10894] loop6: detected capacity change from 0 to 128
[  432.932253][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  432.940827][T10901] FAT-fs (loop6): Filesystem has been set read-only
[  432.947574][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  432.956136][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  432.964724][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  432.973219][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  432.981737][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  432.990190][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  432.998745][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.007351][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.016412][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.024940][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.033404][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.041909][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.050345][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.058874][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.067474][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.076005][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.079583][T10907] tipc: Started in network mode
[  433.084766][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.098205][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.106744][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.115908][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.124424][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.132912][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.141405][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.149844][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.158341][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.167273][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.174526][T10907] tipc: Node identity 3ae107e1eb5, cluster identity 4711
[  433.175916][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.191288][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.199730][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.208259][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.217403][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.225954][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.230554][T10907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  433.234429][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.249486][T10901] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  433.252498][T10914] loop0: detected capacity change from 0 to 512
[  433.721074][T10907] tipc: Disabling bearer <eth:syzkaller0>
[  433.779176][T10914] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  433.798065][T10914] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1549: invalid indirect mapped block 256 (level 1)
[  433.816822][T10914] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1549: invalid indirect mapped block 2683928664 (level 1)
[  433.835286][T10914] EXT4-fs (loop0): 1 truncate cleaned up
[  433.841166][T10914] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  433.983326][T10934] loop7: detected capacity change from 0 to 512
[  434.044221][T10934] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  435.091314][T10821] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  435.296970][T10953] EXT4-fs error (device loop0): ext4_find_dest_de:2117: inode #2: block 13: comm syz.0.1549: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  435.464221][T10958] loop8: detected capacity change from 0 to 512
[  435.550217][T10958] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #2: comm syz.8.1558: missing EA_INODE flag
[  435.625242][T10958] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1558: error while reading EA inode 2 err=-117
[  435.625406][T10958] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.1558: inode #3584: comm syz.8.1558: iget: illegal inode #
[  435.747976][T10958] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1558: error while reading EA inode 3584 err=-117
[  435.768218][T10958] EXT4-fs (loop8): 1 orphan inode deleted
[  435.775744][T10958] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  436.365626][T10970] rxe_eth0 speed is unknown, defaulting to 1000
[  436.830631][T10981] tipc: Started in network mode
[  436.835553][T10981] tipc: Node identity 36c90e7714f9, cluster identity 4711
[  436.893512][T10981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.923678][T10986] device syzkaller0 entered promiscuous mode
[  436.961006][T10981] tipc: Resetting bearer <eth:syzkaller0>
[  436.984884][T10989] loop3: detected capacity change from 0 to 512
[  436.991486][T10976] tipc: Resetting bearer <eth:syzkaller0>
[  437.013153][T10976] tipc: Disabling bearer <eth:syzkaller0>
[  437.021828][T10989] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  437.912169][T10997] binfmt_misc: register: failed to install interpreter file ./file0
[  438.439548][T11011] loop0: detected capacity change from 0 to 1024
[  438.477523][T11011] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  438.499452][T11011] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  438.499479][T11011] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,quota,delalloc,,errors=continue. Quota mode: writeback.
[  438.527814][T11011] EXT4-fs warning (device loop0): empty_inline_dir:1879: bad inline directory (dir #12) - no `..'
[  438.716231][T11018] loop0: detected capacity change from 0 to 512
[  438.814465][T11018] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  438.883214][T11025] rxe_eth0 speed is unknown, defaulting to 1000
[  439.119123][T11036] loop7: detected capacity change from 0 to 512
[  439.389021][T11053] loop3: detected capacity change from 0 to 512
[  439.488466][T11053] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  439.535237][T11053] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1581: invalid indirect mapped block 256 (level 1)
[  439.550209][T11058] loop6: detected capacity change from 0 to 1024
[  439.555961][T11053] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1581: invalid indirect mapped block 2683928664 (level 1)
[  439.580128][T11053] EXT4-fs (loop3): 1 truncate cleaned up
[  439.590281][T11053] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  439.714635][T11058] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  439.792496][T11058] EXT4-fs (loop6): Errors on filesystem, clearing orphan list.
[  439.800109][T11058] EXT4-fs (loop6): mounted filesystem without journal. Opts: noquota,quota,delalloc,,errors=continue. Quota mode: writeback.
[  439.982940][T11058] EXT4-fs warning (device loop6): empty_inline_dir:1879: bad inline directory (dir #12) - no `..'
[  440.071840][T11074] loop7: detected capacity change from 0 to 128
[  440.205155][T11078] loop6: detected capacity change from 0 to 512
[  440.350602][T11013] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  440.431775][T11078] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  441.094962][T11098] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.1581: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  441.631059][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  441.637494][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  441.826208][T11105] loop7: detected capacity change from 0 to 512
[  441.826468][T11106] binfmt_misc: register: failed to install interpreter file ./file0
[  442.125514][T11115] loop7: detected capacity change from 0 to 2048
[  442.152938][T11117] rxe_eth0 speed is unknown, defaulting to 1000
[  442.289714][T11115] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  442.376115][T11115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  442.394951][T11121] loop6: detected capacity change from 0 to 1024
[  442.452393][T11128] loop0: detected capacity change from 0 to 128
[  442.470044][T11121] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  442.640321][T11121] EXT4-fs (loop6): Errors on filesystem, clearing orphan list.
[  442.667165][T11121] EXT4-fs (loop6): mounted filesystem without journal. Opts: noquota,quota,delalloc,,errors=continue. Quota mode: writeback.
[  443.943755][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  443.952221][T11137] FAT-fs (loop0): Filesystem has been set read-only
[  443.958902][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  443.967385][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  443.975835][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  443.984281][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  443.992736][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.001197][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.009690][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.018230][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.026778][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.035236][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.043685][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.052137][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.060612][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.069030][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.077499][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.085957][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.094415][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.102947][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.116934][T11121] EXT4-fs warning (device loop6): empty_inline_dir:1879: bad inline directory (dir #12) - no `..'
[  444.156218][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.164857][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.173713][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.182214][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.190704][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.199175][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.207699][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.216153][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.224753][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.233205][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.241655][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.250066][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.258524][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.266958][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.275841][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.284304][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.293375][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.301820][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.310229][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.318701][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.327130][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.335576][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.344024][T11137] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  444.353173][   T26] kauditd_printk_skb: 121 callbacks suppressed
[  444.353186][   T26] audit: type=1800 audit(1792697921.196:1230): pid=11137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1600" name="file1" dev="loop0" ino=1048898 res=0 errno=0
[  444.630010][T11148] loop8: detected capacity change from 0 to 512
[  445.493703][T11148] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  445.510539][T11160] binfmt_misc: register: failed to install interpreter file ./file0
[  445.668884][T11167] loop7: detected capacity change from 0 to 512
[  445.732387][T11167] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  445.784600][T11167] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1609: invalid indirect mapped block 256 (level 1)
[  445.819697][T11176] loop0: detected capacity change from 0 to 512
[  445.850338][T11167] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1609: invalid indirect mapped block 2683928664 (level 1)
[  445.904078][T11184] rxe_eth0 speed is unknown, defaulting to 1000
[  445.907035][T11167] EXT4-fs (loop7): 1 truncate cleaned up
[  445.925726][T11167] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  446.022879][T11186] loop8: detected capacity change from 0 to 1024
[  446.075785][T11186] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  446.114386][T11186] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[  446.177034][T11186] EXT4-fs (loop8): mounted filesystem without journal. Opts: noquota,quota,delalloc,,errors=continue. Quota mode: writeback.
[  446.250288][T11186] EXT4-fs warning (device loop8): empty_inline_dir:1879: bad inline directory (dir #12) - no `..'
[  446.850475][T11209] EXT4-fs error (device loop7): ext4_find_dest_de:2117: inode #2: block 13: comm syz.7.1609: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  447.176420][T11215] loop6: detected capacity change from 0 to 2048
[  447.348013][T11215] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  447.579078][T11215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  447.928716][T11228] netlink: 160 bytes leftover after parsing attributes in process `syz.8.1626'.
[  448.360502][ T7982] Bluetooth: hci4: command 0x0406 tx timeout
[  448.487830][T11240] rxe_eth0 speed is unknown, defaulting to 1000
[  448.680575][T11134] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  449.268490][T11251] loop6: detected capacity change from 0 to 512
[  449.923372][T11280] loop0: detected capacity change from 0 to 512
[  450.002846][T11280] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  450.003530][T11280] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1642: invalid indirect mapped block 256 (level 1)
[  450.003896][T11280] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1642: invalid indirect mapped block 2683928664 (level 1)
[  450.004440][T11280] EXT4-fs (loop0): 1 truncate cleaned up
[  450.004461][T11280] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  450.158769][T11295] rxe_eth0 speed is unknown, defaulting to 1000
[  450.339540][T11304] loop7: detected capacity change from 0 to 512
[  450.438483][T11304] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  450.498844][T11304] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  450.753382][T11315] EXT4-fs error (device loop0): ext4_find_dest_de:2117: inode #2: block 13: comm syz.0.1642: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  450.935641][T11322] netlink: 'syz.7.1650': attribute type 13 has an invalid length.
[  451.080574][T11328] netlink: 'syz.8.1653': attribute type 21 has an invalid length.
[  451.113906][T11328] netlink: 'syz.8.1653': attribute type 3 has an invalid length.
[  451.151584][T11328] netlink: 144 bytes leftover after parsing attributes in process `syz.8.1653'.
[  451.964386][T11357] loop7: detected capacity change from 0 to 512
[  452.330395][T11367] rxe_eth0 speed is unknown, defaulting to 1000
[  452.476820][T11357] EXT4-fs (loop7): invalid inodes per group: 0
[  452.476820][T11357] 
[  452.558166][T11370] loop3: detected capacity change from 0 to 2048
[  452.616316][T11370] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  452.668768][T11370] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  452.968009][T11378] loop7: detected capacity change from 0 to 1024
[  453.554827][T11378] EXT4-fs (loop7): VFS: Can't find ext4 filesystem
[  454.357547][T11413] loop8: detected capacity change from 0 to 512
[  454.376478][   T26] audit: type=1800 audit(1792697931.216:1231): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1667" name="file1" dev="sda1" ino=2077 res=0 errno=0
[  454.448129][T11413] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  454.472113][   T26] audit: type=1800 audit(1792697931.236:1232): pid=11386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1667" name="file1" dev="sda1" ino=2077 res=0 errno=0
[  454.543470][T11413] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1674: invalid indirect mapped block 256 (level 1)
[  454.647785][T11413] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1674: invalid indirect mapped block 2683928664 (level 1)
[  454.726120][T11413] EXT4-fs (loop8): 1 truncate cleaned up
[  454.755761][T11413] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  454.758464][T11423] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  454.788357][T11423] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  454.825160][T11422] loop7: detected capacity change from 0 to 2048
[  454.887531][T11422] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  455.000990][T11422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  455.426746][T11432] loop0: detected capacity change from 0 to 512
[  455.538592][T11432] EXT4-fs (loop0): invalid inodes per group: 0
[  455.538592][T11432] 
[  455.578242][T11433] loop3: detected capacity change from 0 to 2048
[  455.722505][T11433] UDF-fs: bad mount option "0177777777777777777777718446744073709551615" or missing value
[  456.001813][T11441] rxe_eth0 speed is unknown, defaulting to 1000
[  456.367670][T11440] loop0: detected capacity change from 0 to 1024
[  456.850861][T11440] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  458.077276][T11484] loop0: detected capacity change from 0 to 512
[  458.239468][T11484] EXT4-fs (loop0): invalid inodes per group: 0
[  458.239468][T11484] 
[  458.434954][T11493] netlink: 'syz.7.1697': attribute type 29 has an invalid length.
[  458.551105][T11506] loop3: detected capacity change from 0 to 1024
[  458.602075][T11493] netlink: 'syz.7.1697': attribute type 29 has an invalid length.
[  458.640098][T11507] loop8: detected capacity change from 0 to 2048
[  458.727154][T11502] netlink: 'syz.7.1697': attribute type 29 has an invalid length.
[  458.771969][T11506] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  458.811040][T11507] UDF-fs: bad mount option "0177777777777777777777718446744073709551615" or missing value
[  458.827987][T11503] loop0: detected capacity change from 0 to 1024
[  458.868652][T11503] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  458.945804][T11513] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1698'.
[  458.955204][T11506] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  459.039789][T11515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  459.065629][T11506] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,quota,delalloc,,errors=continue. Quota mode: writeback.
[  459.143890][T11518] tipc: Resetting bearer <eth:syzkaller0>
[  459.204088][T11514] tipc: Disabling bearer <eth:syzkaller0>
[  459.222619][T11506] EXT4-fs warning (device loop3): empty_inline_dir:1879: bad inline directory (dir #12) - no `..'
[  459.666591][T11537] rxe_eth0 speed is unknown, defaulting to 1000
[  459.980994][T11545] netlink: 'syz.3.1707': attribute type 4 has an invalid length.
[  460.044517][T11545] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1707'.
[  460.394013][T11561] loop3: detected capacity change from 0 to 512
[  460.480628][T11561] EXT4-fs (loop3): invalid inodes per group: 0
[  460.480628][T11561] 
[  460.848657][T11566] loop3: detected capacity change from 0 to 1024
[  460.936296][T11566] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  461.330810][T11568] netlink: 64859 bytes leftover after parsing attributes in process `syz.8.1712'.
[  461.480199][T11573] tipc: Started in network mode
[  461.488475][T11573] tipc: Node identity 5ea14b88f964, cluster identity 4711
[  461.531161][T11573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  461.573752][T11579] tipc: Resetting bearer <eth:syzkaller0>
[  461.590749][T11571] tipc: Disabling bearer <eth:syzkaller0>
[  461.606807][T11581] netlink: 'syz.7.1715': attribute type 30 has an invalid length.
[  461.619331][T11581] netlink: 'syz.7.1715': attribute type 25 has an invalid length.
[  461.843816][T11592] rxe_eth0 speed is unknown, defaulting to 1000
[  462.104313][T11604] loop7: detected capacity change from 0 to 512
[  462.197062][T11606] loop3: detected capacity change from 0 to 512
[  462.308882][T11606] EXT4-fs (loop3): invalid inodes per group: 0
[  462.308882][T11606] 
[  462.659616][T11614] loop3: detected capacity change from 0 to 1024
[  463.317435][T11614] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  463.337886][T11616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.379257][T11616] tipc: Resetting bearer <eth:syzkaller0>
[  463.397410][T11615] tipc: Disabling bearer <eth:syzkaller0>
[  463.453888][T11623] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1725'.
[  463.973127][T11627] rxe_eth0 speed is unknown, defaulting to 1000
[  464.429520][T11638] rxe_eth0 speed is unknown, defaulting to 1000
[  464.463000][T11642] netlink: 'syz.8.1732': attribute type 29 has an invalid length.
[  464.553065][T11642] netlink: 'syz.8.1732': attribute type 29 has an invalid length.
[  464.588500][T11643] netlink: 'syz.8.1732': attribute type 29 has an invalid length.
[  465.800976][T11667] loop3: detected capacity change from 0 to 512
[  465.858181][   T26] audit: type=1800 audit(1792697942.686:1233): pid=11652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1736" name="file1" dev="sda1" ino=2077 res=0 errno=0
[  465.935518][T11667] EXT4-fs (loop3): invalid inodes per group: 0
[  465.935518][T11667] 
[  465.943873][T11672] loop6: detected capacity change from 0 to 512
[  466.012347][T11673] loop0: detected capacity change from 0 to 512
[  466.018392][   T26] audit: type=1800 audit(1792697942.686:1234): pid=11658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1736" name="file1" dev="sda1" ino=2077 res=0 errno=0
[  466.425615][T11686] loop3: detected capacity change from 0 to 1024
[  466.556693][T11686] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  467.198993][T11696] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1745'.
[  467.266963][T11696] netlink: zone id is out of range
[  467.276202][T11696] netlink: zone id is out of range
[  467.293211][T11696] netlink: zone id is out of range
[  467.314837][T11696] netlink: zone id is out of range
[  467.338888][T11696] netlink: zone id is out of range
[  467.341337][T11701] rxe_eth0 speed is unknown, defaulting to 1000
[  467.359772][T11696] netlink: zone id is out of range
[  467.388326][T11696] netlink: zone id is out of range
[  467.401694][T11696] netlink: zone id is out of range
[  467.425339][T11696] netlink: zone id is out of range
[  467.455004][T11696] netlink: zone id is out of range
[  468.198108][T11733] netlink: 'syz.8.1755': attribute type 10 has an invalid length.
[  468.221218][T11732] loop3: detected capacity change from 0 to 512
[  468.238062][T11733] device geneve0 entered promiscuous mode
[  468.332818][T11732] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  468.349319][T11733] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  468.412991][T11732] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1754: invalid indirect mapped block 256 (level 1)
[  468.534767][T11732] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1754: invalid indirect mapped block 2683928664 (level 1)
[  468.583001][T11732] EXT4-fs (loop3): 1 truncate cleaned up
[  468.599407][T11732] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  468.624800][T11744] loop8: detected capacity change from 0 to 1024
[  469.309384][T11756] loop0: detected capacity change from 0 to 512
[  469.410549][T11760] rxe_eth0 speed is unknown, defaulting to 1000
[  469.606653][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200'
[  469.618667][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:8 Not tainted syzkaller #0
[  469.626247][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  469.636309][ T4202] Workqueue: hci4 hci_rx_work
[  469.641170][ T4202] Call Trace:
[  469.644481][ T4202]  <TASK>
[  469.647449][ T4202]  dump_stack_lvl+0x188/0x250
[  469.652221][ T4202]  ? show_regs_print_info+0x20/0x20
[  469.657424][ T4202]  ? load_image+0x410/0x410
[  469.661943][ T4202]  sysfs_create_dir_ns+0x26a/0x290
[  469.667188][ T4202]  ? sysfs_warn_dup+0xa0/0xa0
[  469.671895][ T4202]  ? ret_from_fork+0x1f/0x30
[  469.676533][ T4202]  ? do_raw_spin_unlock+0x11d/0x230
[  469.681852][ T4202]  kobject_add_internal+0x5ba/0xcd0
[  469.687124][ T4202]  kobject_add+0x160/0x230
[  469.691563][ T4202]  ? kobject_init+0x1c0/0x1c0
[  469.696308][ T4202]  ? __raw_spin_lock_init+0x41/0x100
[  469.701627][ T4202]  ? get_device_parent+0x121/0x3e0
[  469.706839][ T4202]  device_add+0x470/0x1050
[  469.711279][ T4202]  hci_conn_add_sysfs+0xd1/0x1e0
[  469.716411][ T4202]  hci_sync_conn_complete_evt+0x647/0x9d0
[  469.722150][ T4202]  ? __rwlock_init+0x140/0x140
[  469.726935][ T4202]  hci_event_packet+0x8cf/0x1310
[  469.731893][ T4202]  ? _raw_spin_unlock+0x40/0x40
[  469.736839][ T4202]  ? rcu_lock_release+0x20/0x20
[  469.741714][ T4202]  ? hci_send_to_monitor+0x9c/0x4a0
[  469.746944][ T4202]  hci_rx_work+0x255/0xa10
[  469.751393][ T4202]  process_one_work+0x867/0xff0
[  469.756371][ T4202]  ? worker_detach_from_pool+0x240/0x240
[  469.762020][ T4202]  ? lockdep_hardirqs_off+0x70/0x100
[  469.767435][ T4202]  ? _raw_spin_lock_irq+0xb7/0xf0
[  469.772478][ T4202]  ? _raw_spin_lock_irqsave+0x100/0x100
[  469.778041][ T4202]  ? wq_worker_running+0x97/0x170
[  469.783089][ T4202]  worker_thread+0xad7/0x12a0
[  469.787803][ T4202]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  469.793727][ T4202]  kthread+0x42e/0x520
[  469.797825][ T4202]  ? rcu_lock_release+0x20/0x20
[  469.802693][ T4202]  ? kthread_blkcg+0xd0/0xd0
[  469.807301][ T4202]  ret_from_fork+0x1f/0x30
[  469.811750][ T4202]  </TASK>
[  469.821887][ T4202] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory.
[  469.835400][ T4202] Bluetooth: hci4: failed to register connection device
[  469.842655][ T4202] 
[  469.844991][ T4202] ======================================================
[  469.852008][ T4202] WARNING: possible circular locking dependency detected
[  469.859120][ T4202] syzkaller #0 Not tainted
[  469.863538][ T4202] ------------------------------------------------------
[  469.870571][ T4202] kworker/u5:8/4202 is trying to acquire lock:
[  469.876724][ T4202] ffff888076a7a120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x70a/0xd00
[  469.887550][ T4202] 
[  469.887550][ T4202] but task is already holding lock:
[  469.894913][ T4202] ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x45e/0x9d0
[  469.905172][ T4202] 
[  469.905172][ T4202] which lock already depends on the new lock.
[  469.905172][ T4202] 
[  469.915559][ T4202] 
[  469.915559][ T4202] the existing dependency chain (in reverse order) is:
[  469.924554][ T4202] 
[  469.924554][ T4202] -> #2 (hci_cb_list_lock){+.+.}-{3:3}:
[  469.932275][ T4202]        __mutex_lock_common+0x1e5/0x2400
[  469.937984][ T4202]        mutex_lock_nested+0x17/0x20
[  469.943251][ T4202]        hci_remote_features_evt+0x5d9/0xa10
[  469.949213][ T4202]        hci_event_packet+0x600/0x1310
[  469.954651][ T4202]        hci_rx_work+0x255/0xa10
[  469.959574][ T4202]        process_one_work+0x867/0xff0
[  469.964934][ T4202]        worker_thread+0xad7/0x12a0
[  469.970113][ T4202]        kthread+0x42e/0x520
[  469.974684][ T4202]        ret_from_fork+0x1f/0x30
[  469.979606][ T4202] 
[  469.979606][ T4202] -> #1 (&hdev->lock){+.+.}-{3:3}:
[  469.986881][ T4202]        __mutex_lock_common+0x1e5/0x2400
[  469.992582][ T4202]        mutex_lock_nested+0x17/0x20
[  469.997847][ T4202]        sco_sock_connect+0x189/0x940
[  470.003204][ T4202]        __sys_connect+0x3cb/0x450
[  470.008371][ T4202]        __x64_sys_connect+0x76/0x80
[  470.013639][ T4202]        do_syscall_64+0x4c/0xa0
[  470.018578][ T4202]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  470.024996][ T4202] 
[  470.024996][ T4202] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
[  470.034104][ T4202]        __lock_acquire+0x38f7/0x7d40
[  470.039467][ T4202]        lock_acquire+0x19f/0x400
[  470.044472][ T4202]        lock_sock_nested+0x44/0x100
[  470.049783][ T4202]        sco_connect_cfm+0x70a/0xd00
[  470.055047][ T4202]        hci_sync_conn_complete_evt+0x4be/0x9d0
[  470.061270][ T4202]        hci_event_packet+0x8cf/0x1310
[  470.066713][ T4202]        hci_rx_work+0x255/0xa10
[  470.071638][ T4202]        process_one_work+0x867/0xff0
[  470.076994][ T4202]        worker_thread+0xad7/0x12a0
[  470.082181][ T4202]        kthread+0x42e/0x520
[  470.086753][ T4202]        ret_from_fork+0x1f/0x30
[  470.091673][ T4202] 
[  470.091673][ T4202] other info that might help us debug this:
[  470.091673][ T4202] 
[  470.101879][ T4202] Chain exists of:
[  470.101879][ T4202]   sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
[  470.101879][ T4202] 
[  470.116104][ T4202]  Possible unsafe locking scenario:
[  470.116104][ T4202] 
[  470.123535][ T4202]        CPU0                    CPU1
[  470.128884][ T4202]        ----                    ----
[  470.134228][ T4202]   lock(hci_cb_list_lock);
[  470.138716][ T4202]                                lock(&hdev->lock);
[  470.145284][ T4202]                                lock(hci_cb_list_lock);
[  470.152286][ T4202]   lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
[  470.158160][ T4202] 
[  470.158160][ T4202]  *** DEADLOCK ***
[  470.158160][ T4202] 
[  470.166285][ T4202] 4 locks held by kworker/u5:8/4202:
[  470.171556][ T4202]  #0: ffff8880768d7938 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  470.181810][ T4202]  #1: ffffc9000349fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  470.193095][ T4202]  #2: ffff888062120478 (&hdev->lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0xb8/0x9d0
[  470.203254][ T4202]  #3: ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x45e/0x9d0
[  470.213934][ T4202] 
[  470.213934][ T4202] stack backtrace:
[  470.219803][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:8 Not tainted syzkaller #0
[  470.227327][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  470.237367][ T4202] Workqueue: hci4 hci_rx_work
[  470.242037][ T4202] Call Trace:
[  470.245304][ T4202]  <TASK>
[  470.248221][ T4202]  dump_stack_lvl+0x188/0x250
[  470.252884][ T4202]  ? load_image+0x410/0x410
[  470.257370][ T4202]  ? show_regs_print_info+0x20/0x20
[  470.262558][ T4202]  ? print_circular_bug+0x12b/0x1a0
[  470.267745][ T4202]  check_noncircular+0x2f8/0x400
[  470.272668][ T4202]  ? print_deadlock_bug+0x5d0/0x5d0
[  470.277850][ T4202]  ? lockdep_lock+0xf1/0x1f0
[  470.282424][ T4202]  ? mark_lock+0x94/0x320
[  470.286735][ T4202]  ? _find_first_zero_bit+0xd1/0xf0
[  470.291954][ T4202]  __lock_acquire+0x38f7/0x7d40
[  470.296798][ T4202]  ? verify_lock_unused+0x140/0x140
[  470.301981][ T4202]  ? verify_lock_unused+0x140/0x140
[  470.307167][ T4202]  ? hci_rx_work+0x255/0xa10
[  470.311741][ T4202]  ? process_one_work+0x867/0xff0
[  470.316750][ T4202]  ? worker_thread+0xad7/0x12a0
[  470.321581][ T4202]  ? kthread+0x42e/0x520
[  470.325807][ T4202]  ? ret_from_fork+0x1f/0x30
[  470.330385][ T4202]  lock_acquire+0x19f/0x400
[  470.334877][ T4202]  ? sco_connect_cfm+0x70a/0xd00
[  470.339799][ T4202]  ? sco_connect_cfm+0x6fa/0xd00
[  470.344715][ T4202]  ? read_lock_is_recursive+0x10/0x10
[  470.350073][ T4202]  ? __lock_acquire+0x7d40/0x7d40
[  470.355081][ T4202]  ? do_raw_spin_lock+0x128/0x2f0
[  470.360092][ T4202]  ? __rwlock_init+0x140/0x140
[  470.364849][ T4202]  lock_sock_nested+0x44/0x100
[  470.369600][ T4202]  ? sco_connect_cfm+0x70a/0xd00
[  470.374524][ T4202]  sco_connect_cfm+0x70a/0xd00
[  470.379290][ T4202]  ? sco_skb_put_cmsg+0xa0/0xa0
[  470.384145][ T4202]  ? sco_skb_put_cmsg+0xa0/0xa0
[  470.388994][ T4202]  hci_sync_conn_complete_evt+0x4be/0x9d0
[  470.394706][ T4202]  ? __rwlock_init+0x140/0x140
[  470.399467][ T4202]  hci_event_packet+0x8cf/0x1310
[  470.404395][ T4202]  ? _raw_spin_unlock+0x40/0x40
[  470.409232][ T4202]  ? rcu_lock_release+0x20/0x20
[  470.414068][ T4202]  ? hci_send_to_monitor+0x9c/0x4a0
[  470.419255][ T4202]  hci_rx_work+0x255/0xa10
[  470.423665][ T4202]  process_one_work+0x867/0xff0
[  470.428510][ T4202]  ? worker_detach_from_pool+0x240/0x240
[  470.434128][ T4202]  ? lockdep_hardirqs_off+0x70/0x100
[  470.439403][ T4202]  ? _raw_spin_lock_irq+0xb7/0xf0
[  470.444413][ T4202]  ? _raw_spin_lock_irqsave+0x100/0x100
[  470.449950][ T4202]  ? wq_worker_running+0x97/0x170
[  470.454961][ T4202]  worker_thread+0xad7/0x12a0
[  470.459634][ T4202]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  470.465517][ T4202]  kthread+0x42e/0x520
[  470.469576][ T4202]  ? rcu_lock_release+0x20/0x20
[  470.474411][ T4202]  ? kthread_blkcg+0xd0/0xd0
[  470.478988][ T4202]  ret_from_fork+0x1f/0x30
[  470.483400][ T4202]  </TASK>
[  471.640773][ T1108] Bluetooth: hci4: command 0x0409 tx timeout
[  473.730542][ T8416] Bluetooth: hci4: command 0x0406 tx timeout
[  479.080447][ T8404] Bluetooth: hci5: command 0x0406 tx timeout