last executing test programs:

13m19.835846943s ago: executing program 32 (id=489):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB], 0x38}}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20001, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f00000002c0)=0x1)
close_range(r5, r5, 0x0)
write(r3, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000"], 0x48)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'xfrm0\x00', <r6=>0x0})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4)

13m9.56990822s ago: executing program 33 (id=566):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r1, 0x0, 0x3, 0x1}}, 0x20)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440), 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003800000000006db9dcc317f7a23174c98e2470146a3b019078ac1e0001ac1414aa030090781200183f250000000064000000010000a1c7053104f8dd35b3d892c09dfe1abe1221e4d56bceabe1de02eb51ee32fc3dc471505483e60832892ce0ea97d6f8776426d2ee3ac447adeae7ddf11ee203bd8619783b6b4269cb727f3cdb46e346a437e85cd94c"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x100)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44001}, 0x20044095)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000)
r8 = dup2(r7, r7)
read$FUSE(r8, &(0x7f0000004d80)={0x2020}, 0x2020)

10m25.096999185s ago: executing program 34 (id=1237):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001480)=@newtaction={0x1094, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0x1080, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x4}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xfc8, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0xae, 0x6, "fb26f3825b084c1e1d7c81bf20880819718f8cdc0e8581a1a151968d12ceda42fb9cd5e647b41024a8fdcf62463c157139711fa38897bd8437936adbfc980f6b905c1a2a2445abaea0a0272e96149402af371370b08893efee9aa688e1db296bcbf49e5341111e29c2a731306c18d3bcb257dea99adc32e1c49903953d526f3038b6598ed6f3889326f474e991ee15f42ba1cc13042f8c7631393b5cf3c79829457595ca9538dc480b45"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1094}}, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r7, 0x3)
accept4(r7, 0x0, 0x0, 0x0)
writev(r4, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00')
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, r3, 0x331, 0x2000, 0x40080000, {0x8}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x4e27, 0x1f, 0x3, 0x7fffffff, 0xe7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0x400, 0x2, 0x3, 0x101, 0x10001, 0x10087, 0x3, 0x0, 0x2, 0x289c, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8]})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xfe}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

10m16.414600411s ago: executing program 35 (id=1273):
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[], 0x1, 0x33f, &(0x7f0000003800)="$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")
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unlink(&(0x7f00000000c0)='./file1\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

9m14.995246836s ago: executing program 36 (id=1452):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x200020, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
lsetxattr$security_ima(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x3)

8m15.768097174s ago: executing program 1 (id=1669):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0xd, 0x4, 0x1, 0x0, 0x7, 0x6, 0xa, 0x3, 0x6, 0x3, 0x1c, 0x7, 0x0, 0x401, 0x9, 0xa, 0x4, 0xb, 0x9, '\x00', 0x6, 0x8})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x28, 0x0, 0x0)

8m15.385105256s ago: executing program 1 (id=1673):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}})
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)

8m14.991541619s ago: executing program 1 (id=1675):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x6, 0x0, {{0x6, 0x4, 0x1, 0x3a, 0x18, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x4, 0x66, 0x1, 0xe}]}}}}})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x40, 0x13, 0x3a, "d107fb05361856b976f528876a9df82d32c94753ba6d7241727a2bde91bc95405fb7c93477c3def26e505d53cd5bc406d1bc7835a02892d49786"}, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

8m10.043082497s ago: executing program 37 (id=1682):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000307000/0x3000)=nil, 0x3000, 0xf)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r4, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setgroups(0x0, 0x0)
setregid(0xffffffffffffffff, r6)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
writev(r7, &(0x7f0000000840), 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000380)=""/197, 0xc5)

8m9.674498059s ago: executing program 1 (id=1686):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000b80)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@init_itable}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x313}}, {@nombcache}]}, 0x0, 0x5fd, &(0x7f00000004c0)="$eJzs3c1vFVUbAPBnpp+07/u2kDcqLqSJMZAoLS1giDER9oTgx85VpYUghRJao0USS4IbE+PGhYkrF+J/oSRuXbh14caVISHGsBBD5Jq5nSnT23tLv+69pff3S4aeM8Odc6b04Zl7es7cADrWSPZHGrE/Iq4mEUOlY92RHxxZ+nv3/7xxLtuSqFTe/iOJG58ki+VzJfnXwfzF/wxF8nMasa9rdbtzC9cvTc7MTF/L62Pzl6+OzS1cP3zx8uSF6QvTVyZenThx/NjxE+NHtnR9Sal8+tb7Hw59dubdb79+mIx/9+uZJE7Go7xv2XXVvrZvSy1n37ORqCx5UN6ffV9PbPHcO8VfQ8XPyWNJ7Q52rDT/eeyJiGdjKLpK/5pD8embbe0c0FSVJIocBXScZFPx37/9HQFarLgPKN7b13sfvFra5LsSoBXunVoaAFiK/Z6IKOK/e2lsMPqrYwMD95MV4zxJRGxtZG5J1sZPP565lW3RYBwOaI7Fm8Uod23+T6qxORz91drA/XRF/KelLdv/1ibbH6mpi39oncWbEfFcnv97Y0PxP1KK//c22b74BwAAAAAAgO1z51REvFJv/l+6PP+nt878n8GIOLkN7T/593/p3byQbENzQMm9UxGv153/uzzHd7grr/23Oh+gJzl/cWb6SET8LyIORU9fVh+vOW95hvDhz/d91aj98vy/bMvaL+YC5me6212zEHdqcn5yq9cNRNy7GfF8df7vgXzPyvk/Wf5P6uT/LL6vrrONfS/dPtvo2JPjH2iWyjcRB+vm/8e328naz+cYq94PjBV3Bau98PEX3zdqX/xD+2T5f2Dt+O9Lys/rmdvY+Xsj4uhCd6XR8c3e//cm73QV5898NDk/f208ojc5vXr/xMb6DLtVEQ9FvGTxf+jFtcf/lu//S3G4JyIW19nmM48Gf2t0TP6H9snif2rt/D+8Mv9vvDBxe/iHRu2fXVf+P1bN6YfyPcb/oGz18zjWG6Bt6S4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPOXSiPhPJOnocjlNR0cjBiPi/zGQzszOzb98fvaDK1PZsern/6fFJ/0OLdWT4vP/h0v1iZr60YjYGxFfdu2p1kfPzc5MtfviAQAAAAAAAAAAAAAAAAAAYIcYrK75r/TVrv/P/N7V7t4BTdedfxXv0Hm6N/3KSt+2dgRouc3HP/C0W3/89zS1H0DrNY7/Bw8rVS3tDtBC7v+hc20y/v26AHYB+R861TrH9Pqb3Q+gHeR/AAAAAADYVfYeuPNLEhGLr+2pbpne/JjJ/rC7pe3uANA25vBC5+qebXcPgHbxHh9Ilkt/113s33j2f9KcDgEAAAAAAAAAAAAAqxzcb/0/dKq11/+b2w+72Rrr/+sFv8cFwC7S+KM/5H7Y7bzHB56U7a3/BwAAAAAAAAAAAIAdoP/6pcmZmelrcwtPX+GNndGNjRUWJ3dEN7a18Kg5Z+6JiJ1xga0uFI/gaGM32vz/EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsOzfAAAA//+XNycY")

8m8.521555146s ago: executing program 1 (id=1690):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xb, 0x8012, r0, 0x83000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

8m7.792072498s ago: executing program 1 (id=1694):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
io_setup(0xff, &(0x7f0000000380)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000680)="e711", 0x2}])
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0)
pread64(r4, &(0x7f0000001280)=""/4108, 0x100c, 0xfa64)

8m6.057295988s ago: executing program 38 (id=1694):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
io_setup(0xff, &(0x7f0000000380)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000680)="e711", 0x2}])
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0)
pread64(r4, &(0x7f0000001280)=""/4108, 0x100c, 0xfa64)

7m44.318144825s ago: executing program 3 (id=1683):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005680)={0x14, 0x18, 0xa01, 0x70bd2c, 0x1, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x48000)

7m43.184691661s ago: executing program 3 (id=1753):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xf8}}, 0x0)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)

7m40.428792331s ago: executing program 3 (id=1763):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x2})

7m40.178782865s ago: executing program 3 (id=1764):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)

7m38.008027532s ago: executing program 3 (id=1768):
syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000040))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0xb7f}}, {@data_err_ignore}, {@grpjquota, 0x22}, {@sb={'sb', 0x3d, 0x4}}, {@errors_remount}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x2f62}}, {@debug}, {@dioread_lock}, {@nodioread_nolock}]}, 0xfe, 0x457, &(0x7f00000004c0)="$eJzs3MtvG8UfAPCv17H7/iW/Uh4tLQQKouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCgqHckSVuCOOSPwFXCgXBJyQuMIdIUUoFwono7V3HTexkzhx4hZ/PtImM56xZr67O/Z41usA+tZw+qcQsTsifo2IwXr2zgrD9X+3F65N/r1wbbIQ1eobfxZq9f5auDaZV82ft6ueqVZXaPfG2xETlcr05Sw/OnfxvdHZK1efO39x4tz0uelL46dOHT92qHxy/ERX4tyT9vXAhzMH97/y1s3XJs/cfOfHr9P+7s7Km+PoluH63m3pyW431mN7mtKFgR52hI4UIyI9XKXa+B+MYuxolA3Gy5/0tHPApqpWk+q29sXXq8B/WDpRB/pR/kaffv7Nty2aetwV5k9HYx3jdrbVSwYiyeqUss9Im2E4Is5c/+eLdIvFdYhkk5oDAIhbpyPi2VbzvyQeaKr3v+za0FBE/D8i9kbEfRGxLyLuj6jVfTAiHuqw/aVXSJbPP6uD6wpsjdL53wvZta0753+NKdhQMcvtqcVfKpw9X5k+mu2TI1HalubHVmjju5d++axdWfP8L93S9vO5YNaPPwaWLNBNTcxNbCTmZvMfRxwYaBV/oTHnTefH+yPiwDrbOP/0VwfbldXjL0dEu/hX0IVJefXLiKfqx/96LIk/V2h7fXLs+ZPjJ0a3R2X66Gh+Viz30883Xm/X/urHf3PN36rGzpbnfyP+ocL2iNkrVy/UrtfOdt7Gjd8+bfuZcr3nf7nwZi1dzh77YGJu7vJYRLnw6vLHxxefm+fz+un5f+Rw6/G/Nxb3xMMRkZ7EhyLikYh4NOv7YxHxeEQcXiH+H1584t3O419hVb6L0vinVjv+0Xz8O08UL3z/Tefx59Ljf7yWOpI9spbXv7V2cCP7DgAAAO4VSe078IVkpJFOkpGR+nf498XOpDIzO/fM2Zn3L03Vvys/FKUkX+kabFoPHcvWhvP8+JL8sWzd+PPijlp+ZHKmMtXr4KHP7Woz/lO/F3vdO2DTuV8L+pfxD/3L+If+ZfxD/zL+oX+1Gv8f9aAfwNZb5f1/x1b1A9h65v/Qv4x/6F/GP/SltvfGJxu65V+iR4lvyxv7rYa1JyK5S0K+9xLbWxeVouWzBtb8YxbrTGxrWdTrVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+DcAAP//TFDgSQ==")

7m36.283717252s ago: executing program 3 (id=1772):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xf8}}, 0x0)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)

7m25.280952443s ago: executing program 7 (id=1820):
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)

7m24.200470066s ago: executing program 7 (id=1822):
mkdirat(0xffffffffffffff9c, 0x0, 0x140)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0xac, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000000, 0x11e41e7b, 0x20000000, 0x326, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0xc, 0x6, "a8d9860100e42a3e"}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000380)={r7, 0x0, 0x1ff, 0x0, 0x0, [<r8=>0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4e1c2cfa2e35b3669f1d67177dc15fdca75157ea5bff70153eb4898818968b822baca1d1bb07cd4837c5d82f585ec44075bcb900000000ba1f2afd86324ef6f728cc0eab3f05540000000000000057d6bc5dd8c2bc906606000000c10cc6a238dad6364725d24ab90afd31a367c1ae75f9", 0x71, 0xfffffffffffffffd)
socket(0x10, 0x80002, 0x0)

7m19.617159193s ago: executing program 39 (id=1772):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xf8}}, 0x0)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)

7m19.48398418s ago: executing program 7 (id=1831):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c7f00", [0x4, 0x5]}})
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4080)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x200, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x9]}})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)

7m19.265359354s ago: executing program 7 (id=1833):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0xa08803, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x1, 0x6b8, &(0x7f0000000440)="$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")
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0)
setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x1)

7m18.889215565s ago: executing program 7 (id=1837):
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xaa000, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000002700)=ANY=[], 0x1015, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
connect$unix(0xffffffffffffffff, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000)

7m18.500147028s ago: executing program 7 (id=1840):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@map, 0xffffffffffffffff, 0x7, 0x2}, 0x20)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0)
epoll_create1(0x80000)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)

7m18.020889926s ago: executing program 40 (id=1840):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@map, 0xffffffffffffffff, 0x7, 0x2}, 0x20)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0)
epoll_create1(0x80000)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)

5m30.983285938s ago: executing program 0 (id=2310):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

5m30.714764383s ago: executing program 0 (id=2313):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x8088c9, 0x0)

5m30.42679515s ago: executing program 0 (id=2317):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES8, @ANYBLOB="a2da3fdd75ec7046ac79ffc49ac0fe0fff10ee31ee7eceee3e69adaf427ad78d71273bd34fd4b049741b1c5f309c61c151369571ad058239"], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4008880)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)

5m30.151403396s ago: executing program 0 (id=2319):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$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")
syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
listen(0xffffffffffffffff, 0x803)
sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})

5m28.666075782s ago: executing program 0 (id=2333):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @void}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0)

5m24.41744708s ago: executing program 0 (id=2342):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
inotify_init()
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f00000001c0)='.\x00', 0x4000423)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x9000, 0x78e22799f4a46eab)
io_setup(0x3, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000002840)=[&(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x38, r1, 0x0, 0x0, 0x1000000000008}])

5m24.035292672s ago: executing program 41 (id=2342):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
inotify_init()
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f00000001c0)='.\x00', 0x4000423)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x9000, 0x78e22799f4a46eab)
io_setup(0x3, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000002840)=[&(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x38, r1, 0x0, 0x0, 0x1000000000008}])

1m11.854452715s ago: executing program 4 (id=3230):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125)
preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/226, 0xe5}], 0x100000000000006c, 0x3, 0x0)

1m9.402904077s ago: executing program 4 (id=3233):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="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", @ANYRES16], 0xfe, 0x1518, &(0x7f00000022c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101400, 0x92)
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x44042, 0x0)
io_setup(0x9, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001bc0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x40, r1, &(0x7f0000000580)="a8", 0x1, 0x4, 0x0, 0x2}])

1m6.472205897s ago: executing program 4 (id=3247):
r0 = syz_open_dev$loop(0x0, 0x100000001, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x9, 0xa68a, 0x0, 0x608})

1m6.390273941s ago: executing program 4 (id=3248):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xff, 0x2ce, &(0x7f0000000c40)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./bus\x00', 0x0, 0x63d017, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2)
fallocate(r1, 0x0, 0xbf5, 0x2000402)

1m5.137409954s ago: executing program 4 (id=3250):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
close(0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20040086, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback, 0x200}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x800000017e, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x40000, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x56d92c88, 0x0, 0x0, 0x10000}, 0x0, 0x0)

1m3.31069543s ago: executing program 4 (id=3258):
r0 = syz_open_dev$loop(0x0, 0x100000001, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x9, 0xa68a, 0x0, 0x608})

1m2.186457695s ago: executing program 42 (id=3258):
r0 = syz_open_dev$loop(0x0, 0x100000001, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x9, 0xa68a, 0x0, 0x608})

23.477680319s ago: executing program 5 (id=3342):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@discard}, {@grpjquota}, {@errors_remount}, {@noload}]}, 0x1, 0x46a, &(0x7f0000000980)="$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")
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
getpgid(0x0)

22.819610337s ago: executing program 5 (id=3344):
socket(0x29, 0x2, 0x4)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f0000000300)={0x8009, 0x100000d, 0x1, 'queue0\x00', 0x16})

21.099757897s ago: executing program 5 (id=3347):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3})
setpriority(0x2, r1, 0x7fffffff)
write$sndseq(r5, &(0x7f0000000140)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES8=r2, @ANYRESDEC=r4], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r6, 0xffffffffffffffff, 0xee01)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = fanotify_init(0xf00, 0x1000)
openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
readv(r7, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsmount(r0, 0x0, 0x0)

19.890783897s ago: executing program 6 (id=3349):
r0 = socket$inet6(0xa, 0x80002, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000066c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006640)=""/126, 0x7e}], 0x5}, 0x9a9}], 0x1, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200), 0x4)
sendmsg$sock(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

17.281062768s ago: executing program 9 (id=3353):
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000400)='./cgroup\x00', 0x0, 0x8000, 0x0)

16.020264131s ago: executing program 9 (id=3354):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0x1, 0x0})
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)

15.466675323s ago: executing program 8 (id=3356):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, 0x0}, 0x131)
r0 = socket$inet6(0xa, 0x6, 0xfffffffe)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x210000, 0x20)
openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write(0xffffffffffffffff, &(0x7f0000000ac0)="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", 0xfc)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1100000000f336, 0x0)
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$eJzs3U9oHOfZAPBnFMmWFfAX8n3kM8ZxxnZKbeoqu1KiVOSQbFYjeRJpV+yuik0pSYhtMJaTEBPS+NDEl6QtLaWnHtNcQy6FHgo9lPbQFgqF5tBLD4VATiWFFkpLCajM7K71x1pJTmQrTX8/Yb2z7z7zzjOzo3l21ruzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEUp+pVKrJwYhYOpsOVp9pNRe2uL8/3s/XNVssNyIp/sXoaBzqdh36v9W77yt+HY8j3VtHYrRoRuPa3ffd89j/Dg/1598ioU/q2A7jkog3iqQuPzcUcTsSuYO+87NbnuWfK8XvuayRt5v5Qm0uS/N2M52emqo8dGa2nc7m81n7XLuTLaT1VlbrNFvpyfqptDo9PZlm4+eaS425mdp81u989MsTlcpU+tT4YlZrtZuNh54ab9fP5PPzeWOujJmovBpFzKPFjvh03kk7WW0hTS9eWr4wuV2qRVB1Xc/+dY/XkQfv+fCVD/526UKxQw4aJOntmBPV6sREdeqR6UcerVSGJyoT6zsqG8SNiBiKKCJuy07LZ92B1YPE7h284VMa6tb/iPnIoxFLcTbSSGOo/L36MxKjMROtaMZCcfsPIxvuv6n+f+Ghv/xuq+WW9futoqiP3qjyh1bvPhxl/T/avXV0QP0vDsob89jZz4FbnePKbyPe62aztv9qvBbX4nI8F8uxHBfi5U+Yzx37Gdph3Gj/kdg6bi6yaEQe7WhGHgtRK3vSXk8a0zEVU1GJZ+JMzEY70piNPOYji3aci3Z0Iiv3qHq0IotadKIZrUjjZNTjVKRRjemYjslII4vxOBfNWIpGzMVM1MpRLsalcrtPbsjrvm8+m7zx+w/fLqZvBFW3WJGkeDJXBP11Xff6/aRXzB+IHdX/A70tuD4iiXR4j2sRu6r/p7LT+F04asPuWCnr//BepwEAAADcRkn56nsSESNxfzk1m89nX9vrtAAAAIBdVL6v+UjRjBRT90dSnP9XNol8/47nBgAAAOyOpPyMXRIRY/FAd6r/canNXgQAAAAA/gOV//9/tGjGIl4vO5z/AwAAwOfMtwZdY/+Dfb1r7LcX9yd39aIXzz6YXKkVU7Urvb5e89UbI3ZmDycHe4OUzdTwtbuTiBiuZ0eS/tUvP97fbT8qRzi8egHCQdf6T1qtkeT64ARi6wTKW/HdONaNOXa+257v39NdythsPp+N15vzj1WT3osjnVdeuPSNiGLp324sHEzi4qXlC+PPv7h8vszlejHK9Su9y8Mnt5DLSm8LxP2br/FI+UGM3nLHusutrF3/oe7sQ1svM1m7zDfjeDfm+Fi3HVu//qPFMqvjj1WjVjs41MnOdl5ZWbP2vSyqn3LN34wT3ZgTJ090m02ymFiXxQs3ZzGxNoudbYstsyj0s3j72Otn//6rZpJNbpfF5KfMAmCvXCyv+rNahQ6UVehfK11F/d9Qd/tXNd/0KPfFn/SOoRuOchdXn2X0519T64Zjd6r7m3GyDPnFye7zieHD6+rKE2VdqWxyRH/p0ku/7h3RH373hz/6+tHf/Hi1um04Rj/RfVYwOIt341Q3stfEvb+8qboVQ1TLLfu9DVX1nWKOdwZW1fb8RDISESv/c+Pu8nGKiInJqcrDlcojEzFSPlXoNYMz3b/zvQSAz5ttv2NnB9/C8/DmZ9XRr3j33nhLwXg8Hy/GcpyP0+WnDSLigc1HHVvzNoTT25y1jq35hpfT25xbrsZObIzdfyKJAbGTa7bY//+gbP5x+x4TALjdjm9Th3dS/0/3zrtj8/PuDbX8VPeLc/tnxzG4lm/mK7d7gwDAf4Gs9VEy1nkrabXyxWeq09PVWudMlraa9afTVj4zl6V5o5O16mdqjbksXWw1O816/wXxmaydtpcWF5sfd9LZZitdbLbzs+U3v6e9r35vZwu1xqtRby/OZ7V2ltabjU6t3kln8nY9XVx6cj5vn8la5cztxayez+b1WidvNtJ2c6lVz8bTtJ1lawLzmazRyWfzYrKRLrbyhVrrekTMLy1k6UzWrrfyxU6zO2B/WXljttlaqA1Y/T/fwU0NAJ8ZV1+7dvm55eULL6+fWEk29mw+8ccdxFyNWNnr1QQA1lhbpQEAAAAAAAAAAAAAgM+mmz+uV/Ru+5G+tRMjcQvBGyb2xyeZ6/M78aX3ug/Lbgy4yTj7tpzrrtWeA+se0329nWXvt88tTzz7+OOXB8U8+fqhM3/KIrYfZ/O/lKt337T3xlsHI/b99Pvdnifu1Jq+H921iOFbmn0l2SJmzw5JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDQvwMAAP//wexOyQ==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
ioctl$FICLONE(r7, 0x40049409, r7)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x1a0402, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

13.403676813s ago: executing program 8 (id=3357):
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf22, 0x0, 0x0, 0x0, 0x7fff}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x700}}, [@generic={0x76, 0x7, 0x1, 0x4, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x25)

13.400015283s ago: executing program 6 (id=3358):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

13.028052375s ago: executing program 8 (id=3359):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000ac0)=""/102392, 0x18ff8)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x10, 0xfffffffc, 0x87})

11.545998371s ago: executing program 8 (id=3360):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r0, 0x8800000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, r2, 0x25, 0x0, @void}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000002000)=ANY=[], 0x0)

10.068391446s ago: executing program 9 (id=3361):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./bus\x00', 0x0, 0x63d017, 0x0)
write$FUSE_ENTRY(r0, &(0x7f00000010c0)={0x90, 0x0, 0x0, {0x4, 0x2, 0xfffffffffffffeff, 0x3ff, 0x6, 0xffffff7e, {0x4, 0x174d, 0x0, 0xfffffffffffffff7, 0x0, 0xffffffffffffffff, 0xbc, 0x4, 0x10001, 0x1000, 0xe3, 0x0, 0x0, 0xfe1, 0x7fff}}}, 0x90)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000300)={@desc={0x1, 0x0, @desc3}})

10.027371189s ago: executing program 2 (id=3362):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000580)=[@request_death], 0x0, 0x0, 0x0})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r6, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0xfffffffe, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0xd46, 0x6, 0x5, 0x5, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x7, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x9876, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0x1, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x7, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xcd, 0xb, 0xc, 0xfffffffb], [0xa3, 0x6, 0x4, 0x9, 0x1003, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xb, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x807, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x200, 0xfffffffd, 0xffffffff, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x80005], [0x6, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0x3, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0xe245, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0xc4, &(0x7f0000000140)=""/196, 0x41100}, 0x94)

10.026701019s ago: executing program 8 (id=3363):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001b000)=""/102384, 0x18ff0)
timer_create(0x0, 0x0, &(0x7f0000000300))
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c63726561746f723da75809472c706172743d3078303030303030303030303030303062372c747970653d883b7f382c63726561746f723dddf2bd6c2c666f7263652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303030362c747970653d1f02ae0e2c756d61736b3d30303030303030303030303030303030303030303030352c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6465636f6d706f73652c63726561746f723db6222e882c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d63703933362c6773b5811c68643d", @ANYRESHEX=0x0, @ANYBLOB=',barrier,\x00'], 0x1, 0x6e2, &(0x7f0000000b00)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x200810, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="7c5e24a364caf88c995704205ab2dba583fac32f38d5fa4b8ccc8ca572e35e91bf8692262a3c7a956223ce01e298416b17a920ba679f6678d348ab01685bf3da9b9ef90c406cb6f1a3b4e672253725b2ecf4687f6eb3762b7f308afc3cae3beab694832f0a84c7c66fece1da3f51a7eeb142133ad0d6755daa222d08dbcf6f7d1d0f00edc6131a676119d8a2343abfea2825aa82d3569193f14a3c93740c64f080eadf6e13d2dc994ef2891a4fe4999f07e2fc7b8173f4bd97b3cf8431323e1ef220e9ab509d4297294ab7b209bb7adfea811e7dce0dc1524e8cc978a3fcf1640cd2", @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000000)=""/45, 0x2d)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

9.402422115s ago: executing program 5 (id=3364):
socket(0x29, 0x2, 0x4)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
connect$inet(r0, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000300)={0x8009, 0x100000d, 0x1, 'queue0\x00', 0x16})

7.682657225s ago: executing program 2 (id=3365):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000002440)=ANY=[], 0xff, 0xc19, &(0x7f0000002140)="$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")
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0xffffff15, 0x787, 0x8001, 0x2, 0x401, 0x1c44, 0x7, 0x40, 0xffffffff, 0x8, 0x9})

7.571301991s ago: executing program 8 (id=3366):
socket$inet6(0xa, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000380)=@attr_other={0x0, 0xffffffff, 0xfff, &(0x7f00000002c0)=0x6a20})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

6.631843236s ago: executing program 5 (id=3367):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, 0x0}, 0x131)
r0 = socket$inet6(0xa, 0x6, 0xfffffffe)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x210000, 0x20)
openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write(0xffffffffffffffff, &(0x7f0000000ac0)="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", 0xfc)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1100000000f336, 0x0)
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
ioctl$FICLONE(r7, 0x40049409, r7)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x1a0402, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

6.359953962s ago: executing program 9 (id=3368):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125)
preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/226, 0xe5}], 0x100000000000006c, 0x3, 0x0)

5.040460568s ago: executing program 9 (id=3369):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYBLOB="01078c0000467c10db8b28281877ff0000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b0016000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
getsockname$packet(r0, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

4.729947736s ago: executing program 2 (id=3370):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x1004000, &(0x7f0000000000)={[{@lastblock}, {@utf8}, {@undelete}, {@bs={'bs', 0x3d, 0xe3}}, {@unhide}, {@adinicb}, {@volume={'volume', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uid}, {@nostrict}, {@session={'session', 0x3d, 0x3161}}, {@partition={'partition', 0x3d, 0x4}}]}, 0x1, 0xc34, &(0x7f0000000540)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a809941a488cc"}, 0x28)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c)

4.638236551s ago: executing program 6 (id=3371):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0x1, 0x0})
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)

3.492046768s ago: executing program 6 (id=3372):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_emit_ethernet(0x33e, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x308, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [{0x18, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcd1876deaf8e9264e6fa3ce2dff9281c9fe68a3000000006f0000044e43e740e077e1d16212fb00"/55}, {0x5, 0xa, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62a"}, {}]}}}}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$KEYCTL_MOVE(0x18, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
execve(0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_tables_matches\x00')
pread64(r4, &(0x7f0000000480)=""/177, 0xb1, 0xa6)
bind$vsock_stream(r0, 0x0, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000280)={[{@nobarrier}, {@gid}, {@creator={'creator', 0x3d, "cf44eee4"}}, {@creator={'creator', 0x3d, "64eb8ba9"}}, {@nodecompose}, {@umask}, {@uid}, {@nodecompose}]}, 0x3, 0x6a4, &(0x7f0000001b40)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141442, 0x38)
connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000440)='batadv_slave_1\x00', 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c000000000011907800000000009078000000000000000000"], 0x0)

3.4436089s ago: executing program 2 (id=3373):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000020000000000001103000000ffffffff00000000000000030000000001000040010000000600000002000000000000080200000000005f"], 0x0, 0x50}, 0x28)

3.165365666s ago: executing program 2 (id=3374):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x121000)
fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x3}, [], {0x4, 0x2}, [], {0x10, 0x1}, {0x20, 0x5}}, 0x24, 0x3)

2.41277771s ago: executing program 6 (id=3375):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
memfd_create(0x0, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
mlock2(&(0x7f0000072000/0x4000)=nil, 0x4000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1c4)
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000080)={0x101, 0xc2f1, 0x6})
r6 = dup(r5)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x2000, 0x101, 0x100}})
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0)

1.479551834s ago: executing program 6 (id=3376):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
dup3(r5, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000580)=[@request_death], 0x0, 0x0, 0x0})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r6, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0xfffffffe, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0xd46, 0x6, 0x5, 0x5, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x7, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x9876, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0x1, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x7, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xcd, 0xb, 0xc, 0xfffffffb], [0xa3, 0x6, 0x4, 0x9, 0x1003, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xb, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x807, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x200, 0xfffffffd, 0xffffffff, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x80005], [0x6, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0x3, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0xe245, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0xc4, &(0x7f0000000140)=""/196, 0x41100}, 0x94)

1.479205254s ago: executing program 2 (id=3377):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d3, 0x0)

744.230847ms ago: executing program 9 (id=3378):
syz_mount_image$erofs(&(0x7f0000000440), &(0x7f0000000180)='./file0\x00', 0x10410, &(0x7f0000000480)=ANY=[], 0x1, 0x1ed, &(0x7f0000000cc0)="$eJzsmb+r01AUx7/3Ji/1PURwcXWw4BN9aZIqdClSwV2oim4WG6WaWmkjtAXB4uLi6CC4+g84OHRycHNz1UEFwcGObsKVe3PTXNJGGqwung/05NtzT3Lur5wLLQiC+G/58vnHp6cXGpfPADiMKira/83KYrgR//H5g9PPmhdfvPrw8u29Iw/n+edVSuaXad60LMTY1R4hzPaqssyWvahq3xVwnDJiHH29AY6rWodguK71HUMP0jRR6N4cRN1bvSj0pPGlCaSpm/ltAIsZQxfAIdU7IZjRPppM73aiKBzmxY5I86w0lRW/mz/VvxZHM509C0Ku17Unj2fsURbnGfPng8PXug6GttYNVOC6bjYlxvg5S1dHCGuT8W9NWFLIJS5/+9GDcrnOKyE3298bzjohR7dB8O42NhOJkOU9cm8vPccW83erd3398+zsn70yOaEKF4CVpvd7UrB1TRuJtPCui3Gy+iRfqJPI6oetvAm1uH+/NppMD3r9zu0w9Z71vHNBTRWixCqvebb8XNY/G5gx7BnP3ymslg7GnTge+mMgHvoO09+DxBoVt/168F3dwVX949g/kTyBpedNwUHH9Ierq1T7VmF3CIIgCIIgCIIgCIIgCIIgSnEcTP0Kqv+oEgUEl1T0rwAAAP//Y7ZUwA==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

0s ago: executing program 5 (id=3379):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(0x0, 0x410800f000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x4000000)
shmget(0x1, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x40000000})
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1)

kernel console output (not intermixed with test programs):

idProduct=0331, bcdDevice= 0.00
[  788.742435][   T21] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  788.793944][   T21] usb 10-1: config 0 descriptor??
[  789.037244][T14807] loop5: detected capacity change from 0 to 4096
[  789.112406][T14807] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,block_validity,i_version,data_err=ignore,,errors=continue. Quota mode: writeback.
[  789.217728][T14811] loop4: detected capacity change from 0 to 1024
[  789.387277][ T4329] hfsplus: b-tree write err: -5, ino 4
[  789.416611][   T21] usbhid 10-1:0.0: can't add hid device: -71
[  789.427338][   T21] usbhid: probe of 10-1:0.0 failed with error -71
[  789.456438][   T21] usb 10-1: USB disconnect, device number 22
[  789.674793][   T26] audit: type=1804 audit(1769798551.893:53): pid=14827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2640" name="/newroot/47/file1" dev="fuse" ino=1 res=1 errno=0
[  789.720747][T14829] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2640'.
[  789.865462][ T4248] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  789.898600][ T1110] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  789.979127][T14837] loop9: detected capacity change from 0 to 8
[  790.122084][ T4248] usb 5-1: Using ep0 maxpacket: 32
[  790.131818][T14837] SQUASHFS error: Unable to read inode 0xa7
[  790.175289][ T1110] usb 3-1: Using ep0 maxpacket: 16
[  790.253791][ T4248] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  790.283801][ T4248] usb 5-1: config 0 has no interface number 0
[  790.304970][ T1110] usb 3-1: config index 0 descriptor too short (expected 64967, got 165)
[  790.316159][ T1110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  790.332105][ T1110] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  790.635324][ T4248] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  790.645079][ T1110] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  790.659816][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  790.668487][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  790.685977][ T1110] usb 3-1: Product: syz
[  790.697510][ T4248] usb 5-1: Product: syz
[  790.707678][ T1110] usb 3-1: Manufacturer: syz
[  790.718615][ T4248] usb 5-1: Manufacturer: syz
[  790.735245][ T1110] usb 3-1: SerialNumber: syz
[  790.741185][ T4248] usb 5-1: SerialNumber: syz
[  790.789403][ T4248] usb 5-1: config 0 descriptor??
[  790.840575][ T4248] smsc95xx v2.0.0
[  791.618550][ T1110] usb 3-1: 0:2 : does not exist
[  791.636671][ T1110] usb 3-1: USB disconnect, device number 15
[  791.644897][T14871] loop6: detected capacity change from 0 to 256
[  791.733900][T14871] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  791.892250][ T6277] udevd[6277]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  791.990647][T14888] loop9: detected capacity change from 0 to 1024
[  792.090699][T14888] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  792.109246][T14888] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  792.137391][T14893] loop6: detected capacity change from 0 to 2048
[  792.307086][ T4248] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[  792.318001][ T4248] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  792.345306][ T4248] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  792.367748][ T4248] smsc95xx: probe of 5-1:0.67 failed with error -71
[  792.392340][T14893] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  792.530359][T14899] EXT4-fs error (device loop9): ext4_free_blocks:6234: comm syz.9.2653: Freeing blocks not in datazone - block = 0, count = 16
[  792.624668][T14893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  793.072234][T11015] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set
[  793.080352][ T4248] usb 5-1: USB disconnect, device number 32
[  793.192301][T11015] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  793.207905][T14903] bridge0: port 2(bridge_slave_1) entered disabled state
[  793.214295][T14905] loop5: detected capacity change from 0 to 128
[  793.218645][T14903] bridge0: port 1(bridge_slave_0) entered disabled state
[  793.237079][T11015] EXT4-fs (loop9): This should not happen!! Data will be lost
[  793.237079][T11015] 
[  793.247489][T11015] EXT4-fs (loop9): Total free blocks count 0
[  793.253547][T11015] EXT4-fs (loop9): Free/Dirty block details
[  793.260207][T11015] EXT4-fs (loop9): free_blocks=16
[  793.288093][T11015] EXT4-fs (loop9): dirty_blocks=16
[  793.293295][T11015] EXT4-fs (loop9): Block reservation details
[  793.338650][T14909] loop6: detected capacity change from 0 to 8
[  793.344996][T11015] EXT4-fs (loop9): i_reserved_data_blocks=1
[  793.402631][T14905] EXT4-fs (loop5): Test dummy encryption mode enabled
[  793.466058][T14905] EXT4-fs (loop5): Test dummy encryption mode enabled
[  793.484127][T14914] loop4: detected capacity change from 0 to 16
[  793.491880][T14909] SQUASHFS error: Failed to read block 0x63a: -5
[  793.498317][T14909] SQUASHFS error: Unable to read metadata cache entry [638]
[  793.506579][T14905] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  793.539116][T14909] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  793.547886][T14905] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  793.571945][T14914] erofs: (device loop4): mounted with root inode @ nid 36.
[  793.650404][T14905] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  793.725618][   T26] audit: type=1800 audit(1769798555.682:54): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2657" name="file1" dev="loop5" ino=12 res=0 errno=0
[  793.999932][T14929] attempt to access beyond end of device
[  793.999932][T14929] loop4: rw=0, want=296, limit=16
[  794.012809][T14929] attempt to access beyond end of device
[  794.012809][T14929] loop4: rw=0, want=296, limit=16
[  794.025538][T14929] attempt to access beyond end of device
[  794.025538][T14929] loop4: rw=0, want=296, limit=16
[  794.876856][T14934] loop5: detected capacity change from 0 to 512
[  795.294483][T14939] loop6: detected capacity change from 0 to 2048
[  795.442966][T14934] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2
[  795.462784][T14939] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2)
[  795.494604][T14934] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2661'.
[  795.533184][T14934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2661'.
[  795.598048][T14934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2661'.
[  797.253936][T14959] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2667'.
[  797.377701][T14961] loop2: detected capacity change from 0 to 1024
[  797.411108][T14961] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  798.212206][T14961] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  798.371087][T14972] loop6: detected capacity change from 0 to 1024
[  798.392706][T14961] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,abort,noblock_validity,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,usrquota,nodioread_nolock,nouid32,bsddf,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  798.572621][T14972] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  799.293624][T14988] Illegal XDP return value 4294967262, expect packet loss!
[  799.656731][ T4173] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  799.726946][T15000] loop5: detected capacity change from 0 to 8
[  800.127282][ T4173] usb 5-1: Using ep0 maxpacket: 32
[  800.276360][ T4173] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  800.303123][ T4173] usb 5-1: config 0 has no interface number 0
[  800.768635][ T4173] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  800.788846][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.819100][ T4173] usb 5-1: Product: syz
[  800.829951][ T4173] usb 5-1: Manufacturer: syz
[  800.841764][ T4173] usb 5-1: SerialNumber: syz
[  800.920167][ T4173] usb 5-1: config 0 descriptor??
[  801.119602][ T4173] smsc95xx v2.0.0
[  802.591899][T15030] loop5: detected capacity change from 0 to 512
[  803.618924][T15030] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2
[  803.679396][T15030] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2682'.
[  803.775871][T15030] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2682'.
[  803.857101][T15039] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2683'.
[  803.868492][ T4173] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[  803.880642][T15030] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2682'.
[  803.890366][ T4173] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  803.943153][ T4173] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  803.975483][ T4173] smsc95xx: probe of 5-1:0.67 failed with error -71
[  804.049109][ T4173] usb 5-1: USB disconnect, device number 33
[  805.207720][T15050] loop9: detected capacity change from 0 to 8
[  805.290048][T15050] Page size > filesystem block size (0).  This is currently not supported!
[  805.638036][T15068] loop9: detected capacity change from 0 to 1024
[  805.770954][ T4223] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  805.835990][T15068] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  805.912803][T15068] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  806.027571][ T4223] usb 7-1: Using ep0 maxpacket: 8
[  806.051016][T15068] EXT4-fs error (device loop9): ext4_free_blocks:6234: comm syz.9.2691: Freeing blocks not in datazone - block = 0, count = 16
[  806.064445][T15073] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  806.166839][ T4223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  806.329180][ T4223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  806.562144][ T4223] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  806.793139][ T4223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  806.819245][T15081] loop4: detected capacity change from 0 to 1024
[  806.847602][ T4223] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  806.925891][ T4223] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  807.005924][T15088] loop2: detected capacity change from 0 to 128
[  807.006186][   T26] audit: type=1800 audit(1769798568.105:55): pid=15081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2693" name="file1" dev="loop4" ino=20 res=0 errno=0
[  807.043929][ T4223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.068335][ T4223] usb 7-1: config 0 descriptor??
[  807.164027][  T146] Bluetooth: hci3: urb ffff88801bbe8600 submission failed (90)
[  807.211474][ T1239] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  807.243191][ T1239] EXT4-fs (loop9): This should not happen!! Data will be lost
[  807.243191][ T1239] 
[  807.259984][ T1239] EXT4-fs (loop9): Total free blocks count 0
[  807.266156][ T1239] EXT4-fs (loop9): Free/Dirty block details
[  807.274911][ T1239] EXT4-fs (loop9): free_blocks=16
[  807.283736][ T1239] EXT4-fs (loop9): dirty_blocks=16
[  807.330706][ T1239] EXT4-fs (loop9): Block reservation details
[  807.351014][ T1239] EXT4-fs (loop9): i_reserved_data_blocks=1
[  807.435218][ T6388] usb 7-1: USB disconnect, device number 22
[  807.512314][ T4223] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  809.364323][ T4223] usb 6-1: Using ep0 maxpacket: 16
[  809.481123][T15112] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2698'.
[  809.501886][ T4223] usb 6-1: config index 0 descriptor too short (expected 64967, got 165)
[  809.527959][T15121] loop4: detected capacity change from 0 to 1024
[  809.544251][ T4223] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  809.571463][ T4223] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  809.712117][T15121] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  809.758079][ T4223] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  809.826770][ T4223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.851025][ T4223] usb 6-1: Product: syz
[  809.861502][ T4223] usb 6-1: Manufacturer: syz
[  809.866522][ T4223] usb 6-1: SerialNumber: syz
[  810.797217][ T4223] usb 6-1: 0:2 : does not exist
[  810.812502][ T4223] usb 6-1: unit 5 not found!
[  810.850261][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2707'.
[  810.864514][ T4223] usb 6-1: USB disconnect, device number 31
[  810.919379][T15153] loop9: detected capacity change from 0 to 1024
[  811.045691][T15153] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  811.147817][T15153] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  811.234736][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  811.314845][T15153] EXT4-fs error (device loop9): ext4_free_blocks:6234: comm syz.9.2706: Freeing blocks not in datazone - block = 0, count = 16
[  811.334274][T15166] loop4: detected capacity change from 0 to 8
[  811.380504][T15167] loop6: detected capacity change from 0 to 1024
[  811.441059][ T4394] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm kworker/u4:14: bg 0: block 112: padding at end of block bitmap is not set
[  811.469476][ T4394] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  811.484335][ T4394] EXT4-fs (loop9): This should not happen!! Data will be lost
[  811.484335][ T4394] 
[  811.511522][ T4394] EXT4-fs (loop9): Total free blocks count 0
[  811.517688][ T4394] EXT4-fs (loop9): Free/Dirty block details
[  811.539494][ T4394] EXT4-fs (loop9): free_blocks=16
[  811.556321][ T4394] EXT4-fs (loop9): dirty_blocks=16
[  811.574009][ T4394] EXT4-fs (loop9): Block reservation details
[  811.610456][ T4394] EXT4-fs (loop9): i_reserved_data_blocks=1
[  811.625717][T15167] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  811.676080][T15175] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  811.695045][T15175] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  811.706986][T15167] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  811.739038][T15175] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  811.990231][ T1239] hfsplus: b-tree write err: -5, ino 4
[  811.998876][ T1239] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  812.283276][   T26] audit: type=1804 audit(1769798573.047:56): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2715" name="/newroot/170/file1" dev="fuse" ino=1 res=1 errno=0
[  812.338792][T15189] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2715'.
[  812.644199][ T4223] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  813.151345][ T4223] usb 7-1: Using ep0 maxpacket: 16
[  813.285893][ T4223] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.326396][ T4223] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.352890][ T4223] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  813.372334][ T4173] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  813.396390][ T4223] usb 7-1: config 0 interface 0 has no altsetting 0
[  813.448349][ T4223] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  813.476728][ T4223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.504025][ T4223] usb 7-1: config 0 descriptor??
[  813.649211][ T4173] usb 10-1: Using ep0 maxpacket: 16
[  813.777620][ T4173] usb 10-1: config index 0 descriptor too short (expected 64967, got 165)
[  813.789272][ T4173] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  813.800242][ T4173] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  813.838893][T15224] loop2: detected capacity change from 0 to 1024
[  813.890337][T15224] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  813.921465][T15224] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  814.130340][ T4173] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  814.139998][ T4173] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.155347][ T4173] usb 10-1: Product: syz
[  814.313372][ T4223] usbhid 7-1:0.0: can't add hid device: -71
[  814.347839][ T4223] usbhid: probe of 7-1:0.0 failed with error -71
[  814.507357][ T4223] usb 7-1: USB disconnect, device number 23
[  814.905848][ T4173] usb 10-1: Manufacturer: syz
[  814.911302][ T4173] usb 10-1: SerialNumber: syz
[  814.916567][ T4339] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: comm kworker/u4:9: lblock 0 mapped to illegal pblock 0 (length 6)
[  814.954240][ T4339] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  815.005977][ T4339] EXT4-fs (loop2): This should not happen!! Data will be lost
[  815.005977][ T4339] 
[  815.033822][ T4339] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8)
[  815.053471][ T4339] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  815.067615][ T4339] EXT4-fs (loop2): This should not happen!! Data will be lost
[  815.067615][ T4339] 
[  815.381951][ T4173] usb 10-1: 0:2 : does not exist
[  815.387711][ T4173] usb 10-1: unit 5 not found!
[  816.023151][ T4173] usb 10-1: USB disconnect, device number 23
[  816.127878][T15253] loop2: detected capacity change from 0 to 512
[  816.212474][T15259] loop9: detected capacity change from 0 to 512
[  816.294802][T15253] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[  816.294802][T15253] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  816.294802][T15253] 
[  816.543660][T15253] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,noacl,discard,resuid=0x0000000000000000,errors=remount-ro,data_err=abort,user_xattr,. Quota mode: writeback.
[  816.563427][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  816.582210][T15253] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  816.643147][T15253] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  816.654821][T15253] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  816.664977][T15253] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.2723: Failed to acquire dquot type 0
[  816.688233][T15253] EXT4-fs (loop2): Remounting filesystem read-only
[  816.696856][T15275] loop4: detected capacity change from 0 to 1024
[  816.954329][T15275] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  817.039462][T15275] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  817.308976][   T26] audit: type=1804 audit(1769798577.743:57): pid=15290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2736" name="/newroot/272/file1" dev="fuse" ino=1 res=1 errno=0
[  817.387814][T15297] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2736'.
[  817.604676][ T4391] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  817.946744][    T7] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  818.000362][ T4391] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  818.025058][ T4339] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm kworker/u4:9: lblock 0 mapped to illegal pblock 0 (length 6)
[  818.184414][ T4339] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  818.268832][ T4339] EXT4-fs (loop4): This should not happen!! Data will be lost
[  818.268832][ T4339] 
[  818.329797][ T4339] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8)
[  818.333204][ T4391] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  818.406683][    T7] usb 3-1: Using ep0 maxpacket: 16
[  818.416414][ T4339] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  818.430076][ T4391] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.438144][ T4391] usb 7-1: Product: syz
[  818.471958][ T4339] EXT4-fs (loop4): This should not happen!! Data will be lost
[  818.471958][ T4339] 
[  818.498748][ T4391] usb 7-1: Manufacturer: syz
[  818.515705][ T4391] usb 7-1: SerialNumber: syz
[  818.578553][    T7] usb 3-1: unable to get BOS descriptor or descriptor too short
[  818.673844][    T7] usb 3-1: config 1 has an invalid interface number: 206 but max is 0
[  818.689236][    T7] usb 3-1: config 1 has no interface number 0
[  818.877030][    T7] usb 3-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a
[  818.890955][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.906678][    T7] usb 3-1: Product: syz
[  818.911481][    T7] usb 3-1: Manufacturer: syz
[  818.916226][    T7] usb 3-1: SerialNumber: syz
[  819.199419][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  819.209277][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  819.219079][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  819.228991][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  819.238704][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  819.249262][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  819.259522][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  819.269904][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  819.279972][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  819.298215][T15301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  819.308764][ T4391] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS
[  819.315133][ T4391] cdc_ncm 7-1:1.0: bind() failure
[  819.323529][T15301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  819.337998][ T4391] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  819.347857][T15301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  819.355343][ T4391] cdc_ncm 7-1:1.1: bind() failure
[  819.364799][ T4391] usb 7-1: USB disconnect, device number 24
[  819.400781][ T4223] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  819.563592][    T7] usb 3-1: USB disconnect, device number 16
[  819.668001][ T4223] usb 6-1: Using ep0 maxpacket: 16
[  819.796514][ T4223] usb 6-1: config index 0 descriptor too short (expected 64967, got 165)
[  819.809754][ T4223] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  819.820202][ T4223] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  819.999656][ T4223] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  820.017163][ T4223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.055143][ T4223] usb 6-1: Product: syz
[  820.078975][ T4223] usb 6-1: Manufacturer: syz
[  820.093432][ T4223] usb 6-1: SerialNumber: syz
[  820.556757][ T4223] usb 6-1: 0:2 : does not exist
[  820.562601][ T4223] usb 6-1: unit 5 not found!
[  820.937643][ T4223] usb 6-1: USB disconnect, device number 32
[  821.001600][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  821.231406][T15368] loop9: detected capacity change from 0 to 128
[  821.264300][T15372] loop4: detected capacity change from 0 to 1024
[  821.455922][T15368] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  821.470536][T15372] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  821.521594][T15368] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  821.665071][T15372] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  822.856450][T15387] loop5: detected capacity change from 0 to 256
[  823.453674][T15387] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  823.542779][T15387] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  824.021269][T15408] loop6: detected capacity change from 0 to 512
[  824.115301][T15408] EXT4-fs (loop6): Test dummy encryption mode enabled
[  824.122334][T15408] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  824.207480][T15387] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  824.228972][T15408] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  824.242474][T15408] EXT4-fs (loop6): orphan cleanup on readonly fs
[  824.297390][T15408] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.2756: corrupted xattr entries
[  824.315143][T15408] EXT4-fs (loop6): 1 orphan inode deleted
[  824.321193][T15408] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none.
[  824.871491][   T26] audit: type=1804 audit(1769798584.814:58): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2755" name="/newroot/274/file1" dev="fuse" ino=1 res=1 errno=0
[  824.926611][T15417] __nla_validate_parse: 63 callbacks suppressed
[  824.926626][T15417] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2755'.
[  825.329367][T15427] loop4: detected capacity change from 0 to 512
[  825.370226][T15428] loop6: detected capacity change from 0 to 512
[  825.488233][T15427] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  825.524199][T15427] EXT4-fs (loop4): Ignoring removed bh option
[  825.536667][T15428] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #16: comm syz.6.2757: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2052(4), depth 0(0)
[  825.589074][T15427] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,nodiscard,bh,,errors=continue. Quota mode: writeback.
[  825.605583][T15427] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  825.702375][T15428] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2757: couldn't read orphan inode 16 (err -117)
[  825.791186][T15446] loop9: detected capacity change from 0 to 1024
[  825.804011][T15428] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  825.854157][T15428] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  826.065289][T15446] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  826.371725][T15428] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Out of memory
[  826.675884][T15446] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  827.088594][T15428] EXT4-fs error (device loop6): ext4_quota_write:6646: inode #4: comm syz.6.2757: mark_inode_dirty error
[  827.281341][T15428] Quota error (device loop6): write_blk: dquota write failed
[  827.387152][T15466] EXT4-fs error (device loop9): ext4_free_blocks:6234: comm syz.9.2763: Freeing blocks not in datazone - block = 0, count = 16
[  827.453716][T15428] Quota error (device loop6): qtree_write_dquot: Error -12 occurred while creating quota
[  827.792967][T15428] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.2757: Failed to acquire dquot type 1
[  828.060998][T11327] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Out of memory
[  828.111619][T11327] EXT4-fs error (device loop6): ext4_quota_off:6540: inode #4: comm syz-executor: mark_inode_dirty error
[  828.272649][T15474] loop2: detected capacity change from 0 to 256
[  828.341637][T15474] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  828.397480][T15474] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  828.527642][T15474] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  829.795313][T15491] loop6: detected capacity change from 0 to 128
[  829.875772][T15491] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  831.678209][ T4229] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  832.176798][ T4229] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  832.206441][ T4229] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  832.216617][T15518] loop6: detected capacity change from 0 to 2048
[  832.314884][ T4229] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  832.375939][T15518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  832.432434][ T4229] usb 5-1: config 0 interface 0 has no altsetting 0
[  832.439346][ T4229] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  832.519059][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.572366][ T4229] usb 5-1: config 0 descriptor??
[  833.300406][ T4229] logitech 0003:046D:CA04.0021: hidraw0: USB HID v0.04 Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0
[  833.428832][ T4229] logitech 0003:046D:CA04.0021: no inputs found
[  833.682069][ T4229] usb 5-1: USB disconnect, device number 34
[  833.863545][T15554] loop6: detected capacity change from 0 to 256
[  833.938151][T15554] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  833.987489][T15548] fido_id[15548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  834.016127][T15554] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  834.094079][T15554] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  834.301456][T15564] loop4: detected capacity change from 0 to 512
[  835.260358][T15564] EXT4-fs (loop4): Mount option "data_err=abort" incompatible with ext2
[  835.420390][T15573] loop5: detected capacity change from 0 to 2048
[  835.508189][T15573] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  836.978027][T15573] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  837.018764][T15573] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  837.251509][T15573] UDF-fs: Scanning with blocksize 512 failed
[  837.321058][T15573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  837.739555][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  837.745943][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  838.279125][T15610] loop5: detected capacity change from 0 to 512
[  838.311119][T15610] EXT4-fs (loop5): Test dummy encryption mode enabled
[  838.344832][T15610] EXT4-fs (loop5): Test dummy encryption mode enabled
[  838.386325][T15610] EXT4-fs error (device loop5): __ext4_iget:4912: inode #11: block 1: comm syz.5.2798: invalid block
[  838.421339][T15610] EXT4-fs (loop5): Remounting filesystem read-only
[  838.439548][T15610] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2798: couldn't read orphan inode 11 (err -117)
[  838.521986][T15610] EXT4-fs (loop5): Remounting filesystem read-only
[  838.555187][T15610] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,test_dummy_encryption,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,grpid,errors=remount-ro,abort,test_dummy_encryption,. Quota mode: none.
[  838.894383][T15610] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.2798: Directory hole found for htree leaf block 0
[  838.918082][T15610] EXT4-fs (loop5): Remounting filesystem read-only
[  838.965490][T15622] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.2798: Directory hole found for htree leaf block 0
[  839.112153][T15622] EXT4-fs (loop5): Remounting filesystem read-only
[  840.148055][T15629] loop4: detected capacity change from 0 to 512
[  840.278707][T15629] EXT4-fs (loop4): Mount option "data_err=abort" incompatible with ext2
[  840.299282][T15632] loop9: detected capacity change from 0 to 2048
[  840.320611][T15637] loop5: detected capacity change from 0 to 1024
[  840.330499][T15635] loop2: detected capacity change from 0 to 1024
[  840.364229][T15629] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2804'.
[  840.394031][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2804'.
[  840.412071][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2804'.
[  840.449229][T15635] EXT4-fs (loop2): inline encryption not supported
[  840.465884][T15632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  840.478723][T15635] EXT4-fs (loop2): Ignoring removed nobh option
[  840.500048][T15635] EXT4-fs (loop2): Ignoring removed bh option
[  840.515331][T15637] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  840.524623][T15635] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  840.546738][T15637] hfsplus: xattr searching failed
[  840.576712][T15637] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  840.629112][T15637] hfsplus: xattr search failed
[  840.707634][T15635] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  840.782829][T15649] loop9: detected capacity change from 0 to 16
[  840.867052][T15649] erofs: (device loop9): mounted with root inode @ nid 36.
[  840.986475][ T1239] hfsplus: b-tree write err: -5, ino 4
[  841.548577][T15665] loop2: detected capacity change from 0 to 1024
[  841.753004][   T26] audit: type=1804 audit(1769798600.604:59): pid=15665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2810" name="/newroot/203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop2" ino=2 res=1 errno=0
[  841.950723][   T26] audit: type=1800 audit(1769798600.697:60): pid=15665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2810" name="file0" dev="loop2" ino=2 res=0 errno=0
[  842.311846][T15682] loop4: detected capacity change from 0 to 512
[  842.433159][T15682] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #16: comm syz.4.2813: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2052(4), depth 0(0)
[  842.545957][T15682] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2813: couldn't read orphan inode 16 (err -117)
[  842.558690][T15682] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  842.570003][T15682] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  842.589863][T15698] loop9: detected capacity change from 0 to 512
[  842.648722][T15698] EXT4-fs (loop9): Mount option "data_err=abort" incompatible with ext2
[  842.774596][T15698] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2817'.
[  842.845664][T15698] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2817'.
[  842.910928][T15698] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2817'.
[  842.961820][T15706] loop2: detected capacity change from 0 to 512
[  843.014755][T15706] EXT4-fs (loop2): Ignoring removed nobh option
[  843.058127][T15706] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  843.113518][T15706] EXT4-fs (loop2): 1 truncate cleaned up
[  843.253220][T15706] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,nobh,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000003ffc,usrquota,max_batch_time=0x0000000000000004,inode_readahead_blks=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  843.317156][T15711] loop9: detected capacity change from 0 to 256
[  843.324090][T15711] exfat: Bad value for 'dmask'
[  845.503487][T15724] loop9: detected capacity change from 0 to 128
[  845.769446][T15724] EXT4-fs (loop9): Ignoring removed nobh option
[  845.824112][T15729] loop6: detected capacity change from 0 to 512
[  845.836761][T15724] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none.
[  845.871179][T15724] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  845.941920][T15729] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  845.991084][T15729] EXT4-fs (loop6): invalid journal inode
[  845.997138][T15729] EXT4-fs (loop6): can't get journal size
[  846.057013][T15729] EXT4-fs (loop6): 1 truncate cleaned up
[  846.128115][T15729] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none.
[  846.158697][T15729] EXT4-fs warning (device loop6): ext4_group_add:1696: No reserved GDT blocks, can't resize
[  846.396239][T15748] loop2: detected capacity change from 0 to 256
[  846.736534][ T1110] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  847.040801][T15775] loop4: detected capacity change from 0 to 1024
[  847.121453][ T1110] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  847.134041][T15775] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  847.147492][ T1110] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  847.187188][T15775] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  847.218066][   T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  847.324830][ T1110] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  847.342494][ T1110] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  847.369688][ T1110] usb 10-1: SerialNumber: syz
[  847.444731][ T1110] usb 10-1: bad CDC descriptors
[  847.574054][T15785] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.2836: Freeing blocks not in datazone - block = 0, count = 16
[  848.181174][ T4296] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:6: bg 0: block 112: padding at end of block bitmap is not set
[  848.239962][ T4296] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  848.295639][ T4296] EXT4-fs (loop4): This should not happen!! Data will be lost
[  848.295639][ T4296] 
[  848.378671][ T4296] EXT4-fs (loop4): Total free blocks count 0
[  848.401357][ T4296] EXT4-fs (loop4): Free/Dirty block details
[  848.408660][ T4296] EXT4-fs (loop4): free_blocks=16
[  848.413760][ T4296] EXT4-fs (loop4): dirty_blocks=16
[  848.430950][ T4296] EXT4-fs (loop4): Block reservation details
[  848.753441][T15801] loop6: detected capacity change from 0 to 512
[  848.844570][T15801] EXT4-fs (loop6): Test dummy encryption mode enabled
[  848.851765][T15801] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  848.878094][ T4296] EXT4-fs (loop4): i_reserved_data_blocks=1
[  848.916964][T15801] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  848.926460][T15801] EXT4-fs (loop6): orphan cleanup on readonly fs
[  848.945504][   T23] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  848.958087][   T23] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  848.975366][T15801] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.2838: corrupted xattr entries
[  848.991096][T15801] EXT4-fs (loop6): 1 orphan inode deleted
[  848.997056][T15801] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none.
[  849.030167][   T23] usb 3-1: config 0 interface 0 has no altsetting 0
[  849.297338][T15808] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  850.030960][ T4248] usb 10-1: USB disconnect, device number 24
[  850.173900][   T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  850.225805][   T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  850.371379][ T1110] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  850.410837][   T23] usb 3-1: Product: syz
[  850.415214][   T23] usb 3-1: Manufacturer: syz
[  850.424470][   T23] usb 3-1: config 0 descriptor??
[  850.446337][   T23] usb 3-1: can't set config #0, error -71
[  850.455927][T15829] loop9: detected capacity change from 0 to 512
[  850.471690][   T23] usb 3-1: USB disconnect, device number 17
[  850.681529][T15829] EXT4-fs (loop9): Ignoring removed bh option
[  850.951352][T15829] EXT4-fs (loop9): Test dummy encryption mode enabled
[  851.043636][T15829] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  851.284370][T15829] EXT4-fs error (device loop9): __ext4_iget:4912: inode #15: block 1803188595: comm syz.9.2847: invalid block
[  851.288388][T15829] EXT4-fs (loop9): Remounting filesystem read-only
[  851.289644][T15829] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2847: couldn't read orphan inode 15 (err -117)
[  851.295640][T15829] EXT4-fs (loop9): Remounting filesystem read-only
[  851.295750][T15829] EXT4-fs (loop9): mounted filesystem without journal. Opts: norecovery,errors=remount-ro,debug_want_extra_isize=0x0000000000000066,bh,nodiscard,noquota,test_dummy_encryption=v1,. Quota mode: none.
[  851.697049][ T1110] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  851.697101][ T1110] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  851.782878][ T1110] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  851.782914][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  851.782937][ T1110] usb 5-1: SerialNumber: syz
[  851.827748][ T1110] usb 5-1: bad CDC descriptors
[  852.401684][ T7376] usb 5-1: USB disconnect, device number 35
[  852.502239][T15855] loop6: detected capacity change from 0 to 512
[  852.794184][T15855] EXT4-fs (loop6): Ignoring removed bh option
[  853.099388][T15862] loop9: detected capacity change from 0 to 512
[  853.176574][T15855] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  853.426958][T15855] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  853.627185][T15862] EXT4-fs (loop9): Test dummy encryption mode enabled
[  853.634073][T15862] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  853.730695][T15862] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  853.740505][T15862] EXT4-fs (loop9): orphan cleanup on readonly fs
[  853.752988][T15862] EXT4-fs error (device loop9): xattr_find_entry:297: inode #15: comm syz.9.2853: corrupted xattr entries
[  853.786967][T15862] EXT4-fs (loop9): 1 orphan inode deleted
[  853.793257][T15862] EXT4-fs (loop9): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none.
[  853.853560][T15855] EXT4-fs error (device loop6): ext4_get_group_desc:277: comm syz.6.2854: block_group >= groups_count - block_group = 59976627, groups_count = 1
[  853.900551][T15855] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4445: inode #1919252079: comm syz.6.2854: unable to read itable block
[  854.198690][T15695] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 2001721198 in block_group 0
[  855.344440][T15889] loop9: detected capacity change from 0 to 512
[  855.431923][T15889] EXT4-fs (loop9): Mount option "data_err=abort" incompatible with ext2
[  855.455756][T15897] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2863'.
[  855.586879][T15897] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.597110][T15897] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.647692][T15889] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2862'.
[  855.684488][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2862'.
[  855.693502][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2862'.
[  856.712458][T15909] loop6: detected capacity change from 0 to 8192
[  856.843406][T15923] loop5: detected capacity change from 0 to 512
[  857.509668][T15923] EXT4-fs (loop5): Test dummy encryption mode enabled
[  857.516786][T15923] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  857.604762][T15909] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  857.649351][T15923] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  857.658600][T15923] EXT4-fs (loop5): orphan cleanup on readonly fs
[  857.669035][T15923] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.2869: corrupted xattr entries
[  857.681918][T15923] EXT4-fs (loop5): 1 orphan inode deleted
[  857.687895][T15923] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none.
[  858.196128][T15943] loop4: detected capacity change from 0 to 512
[  858.250461][T15943] EXT4-fs (loop4): Mount option "data_err=abort" incompatible with ext2
[  858.292169][T15943] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2875'.
[  858.301511][ T6388] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  858.316066][T15943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2875'.
[  858.329980][T15943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2875'.
[  858.390307][   T23] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[  859.053263][   T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  859.106723][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.311173][   T23] usb 3-1: config 0 descriptor??
[  859.552833][T15961] loop5: detected capacity change from 0 to 512
[  859.559233][   T23] asix: probe of 3-1:0.0 failed with error -22
[  859.615029][T15961] EXT4-fs (loop5): Test dummy encryption mode enabled
[  859.636525][T15961] EXT4-fs (loop5): Test dummy encryption mode enabled
[  859.694357][ T6388] usb 10-1: unable to get BOS descriptor or descriptor too short
[  859.719898][T15961] EXT4-fs error (device loop5): __ext4_iget:4912: inode #11: block 1: comm syz.5.2878: invalid block
[  859.747643][T15961] EXT4-fs (loop5): Remounting filesystem read-only
[  859.757529][T15961] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2878: couldn't read orphan inode 11 (err -117)
[  859.785290][T15961] EXT4-fs (loop5): Remounting filesystem read-only
[  859.792571][T15961] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,test_dummy_encryption,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,grpid,errors=remount-ro,abort,test_dummy_encryption,. Quota mode: none.
[  859.824003][ T6388] usb 10-1: config 8 has an invalid interface number: 43 but max is 0
[  859.841744][ T6388] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  859.852812][ T6388] usb 10-1: config 8 has no interface number 0
[  859.897031][ T6388] usb 10-1: config 8 interface 43 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  859.920347][ T6388] usb 10-1: config 8 interface 43 has no altsetting 0
[  860.102941][ T6388] usb 10-1: New USB device found, idVendor=0582, idProduct=935b, bcdDevice=be.6c
[  860.113778][ T6388] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.122533][ T6388] usb 10-1: Product: syz
[  860.130917][ T6388] usb 10-1: Manufacturer: syz
[  860.139866][ T6388] usb 10-1: SerialNumber: syz
[  860.201439][T15988] loop5: detected capacity change from 0 to 512
[  860.233052][T15988] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  860.268325][T15988] EXT4-fs (loop5): inline encryption not supported
[  860.303350][T15988] EXT4-fs (loop5): Test dummy encryption mode enabled
[  860.310271][T15988] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  860.338317][T15988] EXT4-fs (loop5): 1 truncate cleaned up
[  860.344040][T15988] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,discard,max_dir_size_kb=0x0000000000000002,. Quota mode: none.
[  860.395547][T15988] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  860.629599][ T6388] usb 10-1: USB disconnect, device number 25
[  860.674099][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:8.43/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  861.107866][ T6388] usb 3-1: USB disconnect, device number 18
[  861.444381][T16025] loop9: detected capacity change from 0 to 512
[  862.188596][T16025] EXT4-fs (loop9): Test dummy encryption mode enabled
[  862.195603][T16025] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  862.228242][T16025] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  862.239306][T16025] EXT4-fs (loop9): orphan cleanup on readonly fs
[  862.281673][T16025] EXT4-fs error (device loop9): xattr_find_entry:297: inode #15: comm syz.9.2885: corrupted xattr entries
[  862.295115][T16025] EXT4-fs (loop9): 1 orphan inode deleted
[  862.301148][T16025] EXT4-fs (loop9): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none.
[  863.022150][ T4229] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  863.125034][T16063] loop4: detected capacity change from 0 to 1024
[  863.249699][T16063] hfsplus: request for non-existent node 33554434 in B*Tree
[  863.261522][T16063] hfsplus: request for non-existent node 33554434 in B*Tree
[  863.296656][T16063] hfsplus: request for non-existent node 33554434 in B*Tree
[  863.323334][T16063] hfsplus: request for non-existent node 33554434 in B*Tree
[  863.472781][ T1239] hfsplus: request for non-existent node 33554434 in B*Tree
[  863.496098][ T1239] hfsplus: request for non-existent node 33554434 in B*Tree
[  863.944177][ T4229] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  863.954691][ T4229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.965231][ T4229] usb 7-1: config 0 descriptor??
[  864.113507][T16087] loop9: detected capacity change from 0 to 4096
[  864.136090][T16087] EXT4-fs (loop9): Test dummy encryption mode enabled
[  864.161467][T16087] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  864.169975][T16087] System zones: 0-5
[  864.185969][T16087] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback.
[  864.356431][T16087] EXT4-fs (loop9): shut down requested (0)
[  864.699823][T16107] loop5: detected capacity change from 0 to 512
[  864.769503][T16107] EXT4-fs (loop5): Test dummy encryption mode enabled
[  864.776831][T16107] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  864.882690][T16107] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  864.898051][T16107] EXT4-fs (loop5): orphan cleanup on readonly fs
[  864.912085][T16107] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.2901: corrupted xattr entries
[  864.930323][T16107] EXT4-fs (loop5): 1 orphan inode deleted
[  864.936363][T16107] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none.
[  865.443233][T16112] loop9: detected capacity change from 0 to 2048
[  865.581097][T16112] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  865.733016][T16112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  865.799122][ T4229] usb 7-1: Cannot set autoneg
[  865.804099][ T4229] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71
[  865.816034][ T4229] usb 7-1: USB disconnect, device number 25
[  865.890085][T16127] loop4: detected capacity change from 0 to 128
[  866.006885][T16127] EXT4-fs (loop4): Test dummy encryption mode enabled
[  866.028261][T16127] EXT4-fs (loop4): Test dummy encryption mode enabled
[  866.078560][T16127] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  866.140219][ T7376] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  866.156176][T16127] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  866.219354][T16127] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  866.860909][   T26] audit: type=1800 audit(1769798624.092:61): pid=16154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2909" name="file1" dev="loop4" ino=12 res=0 errno=0
[  866.961795][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2909'.
[  867.023272][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2909'.
[  867.059545][ T7376] usb 10-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  867.070282][ T7376] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  867.166497][ T7376] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  867.186690][ T7376] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  867.224994][ T7376] usb 10-1: SerialNumber: syz
[  867.940232][T16171] loop2: detected capacity change from 0 to 512
[  868.059168][T16171] EXT4-fs (loop2): Test dummy encryption mode enabled
[  868.066369][T16171] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  868.363578][T16171] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  868.372858][T16171] EXT4-fs (loop2): orphan cleanup on readonly fs
[  868.380326][T16171] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.2916: corrupted xattr entries
[  868.392858][T16171] EXT4-fs (loop2): 1 orphan inode deleted
[  868.398725][T16171] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none.
[  868.433635][ T7376] usb 10-1: 0:2 : does not exist
[  868.453400][ T7376] usb 10-1: USB disconnect, device number 26
[  868.717498][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  868.957087][T16185] loop2: detected capacity change from 0 to 2048
[  869.047826][T16185] Alternate GPT is invalid, using primary GPT.
[  869.054118][T16185]  loop2: p1 p2 p3
[  869.766810][ T3560] Alternate GPT is invalid, using primary GPT.
[  869.933459][ T3560]  loop2: p1 p2 p3
[  870.471744][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  870.529248][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  870.591101][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  870.728514][T16222] loop6: detected capacity change from 0 to 128
[  870.816564][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  870.835848][T16222] EXT4-fs (loop6): Test dummy encryption mode enabled
[  870.852845][ T6277] udevd[6277]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  870.872680][ T4796] udevd[4796]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  870.925163][T16227] loop5: detected capacity change from 0 to 512
[  870.928695][T16222] EXT4-fs (loop6): Test dummy encryption mode enabled
[  871.001927][T16227] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  871.012719][T16222] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  871.080844][T16222] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  871.146772][T16222] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  871.159195][T16227] EXT4-fs (loop5): 1 truncate cleaned up
[  871.196391][T16227] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  871.346257][   T26] audit: type=1800 audit(1769798628.292:62): pid=16238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2928" name="file1" dev="loop6" ino=12 res=0 errno=0
[  871.528415][T16244] loop2: detected capacity change from 0 to 512
[  871.640442][T16244] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  871.775996][T16244] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000004,discard,,errors=continue. Quota mode: writeback.
[  871.903164][T16244] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  872.187769][T16262] loop4: detected capacity change from 0 to 256
[  872.298806][T16262] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value
[  872.338619][T16222] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2928'.
[  872.442155][T16222] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2928'.
[  872.659336][T16276] loop2: detected capacity change from 0 to 512
[  872.671322][ T4173] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  872.779135][T16276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  872.839703][T16276] EXT4-fs (loop2): 1 orphan inode deleted
[  872.854055][T16276] EXT4-fs (loop2): 1 truncate cleaned up
[  872.859932][T16276] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback.
[  872.981482][ T4173] usb 5-1: Using ep0 maxpacket: 16
[  873.163520][ T4173] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  873.180668][ T4173] usb 5-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config
[  873.223562][ T4173] usb 5-1: config 0 has no interface number 0
[  873.234411][ T4173] usb 5-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  873.430609][ T4173] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  873.453237][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  873.478215][ T4173] usb 5-1: Manufacturer: syz
[  873.494197][ T4173] usb 5-1: SerialNumber: syz
[  873.506300][ T4173] usb 5-1: config 0 descriptor??
[  873.797446][ T4173] usb 5-1: USB disconnect, device number 36
[  874.056169][T10428] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  874.394440][T16325] loop6: detected capacity change from 0 to 128
[  874.445947][T10428] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  874.454147][T10428] usb 3-1: config 0 has no interface number 0
[  874.480622][T10428] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  874.504439][T16325] EXT4-fs (loop6): Test dummy encryption mode enabled
[  874.516688][T10428] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  874.527062][T16325] EXT4-fs (loop6): Test dummy encryption mode enabled
[  874.535067][T10428] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  874.544528][T16332] loop4: detected capacity change from 0 to 2048
[  874.551420][T16325] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  874.559031][T10428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.581320][T16332] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  874.596256][T10428] usb 3-1: config 0 descriptor??
[  874.606881][T16325] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  874.733209][T16325] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  875.087976][T16298] udc-core: couldn't find an available UDC or it's busy
[  875.098802][T16298] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  875.199051][T10428] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0022/input/input65
[  875.256482][T16354] loop5: detected capacity change from 0 to 1024
[  875.324845][T10428] holtek_kbd 0003:04D9:A055.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1
[  875.393482][   T26] audit: type=1800 audit(1769798632.072:63): pid=16357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2948" name="file1" dev="loop6" ino=12 res=0 errno=0
[  875.432951][T16354] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2
[  875.521930][T16325] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2948'.
[  875.557552][T16325] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2948'.
[  877.832823][   T23] usb 3-1: USB disconnect, device number 19
[  877.939198][T16388] loop2: detected capacity change from 0 to 16
[  878.023851][T16388] erofs: (device loop2): mounted with root inode @ nid 36.
[  878.858095][ T7376] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  879.149171][ T7376] usb 7-1: Using ep0 maxpacket: 16
[  879.288410][ T7376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  879.312459][ T7376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  879.341545][ T7376] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  879.362701][ T7376] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  879.371862][ T7376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.425913][ T7376] usb 7-1: config 0 descriptor??
[  879.641960][T16410] loop2: detected capacity change from 0 to 1024
[  880.076074][ T7376] microsoft 0003:045E:07DA.0023: item 0 2 0 8 parsing failed
[  880.389066][ T7376] microsoft 0003:045E:07DA.0023: parse failed
[  880.428537][ T7376] microsoft: probe of 0003:045E:07DA.0023 failed with error -22
[  880.525161][ T7376] usb 7-1: USB disconnect, device number 26
[  880.960783][T16432] loop2: detected capacity change from 0 to 512
[  881.028199][T16431] loop5: detected capacity change from 0 to 256
[  881.067104][T16432] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  881.082285][T16432] EXT4-fs (loop2): 1 truncate cleaned up
[  881.082315][T16432] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  881.176436][T16440] loop6: detected capacity change from 0 to 16
[  881.416554][T16445] loop9: detected capacity change from 0 to 16
[  881.601700][T16445] erofs: (device loop9): mounted with root inode @ nid 36.
[  881.686896][T16440] erofs: (device loop6): mounted with root inode @ nid 36.
[  882.727354][T16459] attempt to access beyond end of device
[  882.727354][T16459] loop6: rw=0, want=296, limit=16
[  882.739002][T16459] attempt to access beyond end of device
[  882.739002][T16459] loop6: rw=0, want=296, limit=16
[  882.772193][T16459] attempt to access beyond end of device
[  882.772193][T16459] loop6: rw=0, want=296, limit=16
[  883.450414][T16478] pit: kvm: requested 122361 ns i8254 timer period limited to 200000 ns
[  883.506483][T16478] pit: kvm: requested 20952 ns i8254 timer period limited to 200000 ns
[  883.576915][T16487] loop5: detected capacity change from 0 to 128
[  883.591563][T16487] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  883.619685][T16478] pit: kvm: requested 139123 ns i8254 timer period limited to 200000 ns
[  883.681210][T16487] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  884.086790][T16496] loop5: detected capacity change from 0 to 256
[  884.261376][T16496] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  884.309628][T16496] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  884.375746][T16496] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  887.364734][T16525] loop9: detected capacity change from 0 to 2048
[  887.410860][T16529] loop5: detected capacity change from 0 to 8
[  887.473254][T16525] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  887.534898][T16529] SQUASHFS error: lzo decompression failed, data probably corrupt
[  887.536671][T16525] UDF-fs: Scanning with blocksize 512 failed
[  887.561564][T16529] SQUASHFS error: Failed to read block 0x91: -5
[  887.567938][T16529] SQUASHFS error: Unable to read metadata cache entry [8f]
[  887.590079][T16529] SQUASHFS error: Unable to read inode 0x11f
[  887.608820][T16525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  887.648209][T16532] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2994'.
[  888.915334][T16564] loop2: detected capacity change from 0 to 16
[  889.098938][T16572] loop4: detected capacity change from 0 to 512
[  889.446701][T16564] erofs: (device loop2): mounted with root inode @ nid 36.
[  889.478580][T16572] EXT4-fs (loop4): Ignoring removed oldalloc option
[  890.245071][T16583] usb usb8: usbfs: process 16583 (syz.9.3003) did not claim interface 0 before use
[  890.901827][T16559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  891.103008][T16572] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,inode_readahead_blks=0x0000000000000000,lazytime,oldalloc,. Quota mode: writeback.
[  891.217345][T16572] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  891.544479][T16596] attempt to access beyond end of device
[  891.544479][T16596] loop2: rw=0, want=296, limit=16
[  891.559658][T16596] attempt to access beyond end of device
[  891.559658][T16596] loop2: rw=0, want=296, limit=16
[  891.581296][T16596] attempt to access beyond end of device
[  891.581296][T16596] loop2: rw=0, want=296, limit=16
[  892.121047][T16597] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3006: bg 0: block 217: padding at end of block bitmap is not set
[  892.369654][T16572] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3006: bg 0: block 217: padding at end of block bitmap is not set
[  892.484961][T16597] EXT4-fs (loop4): Remounting filesystem read-only
[  892.534579][T16597] syz.4.3006 (16597) used greatest stack depth: 19376 bytes left
[  892.604322][T16572] EXT4-fs (loop4): Remounting filesystem read-only
[  892.682969][T16572] EXT4-fs error (device loop4): ext4_xattr_block_set:2194: inode #15: comm syz.4.3006: bad block 33
[  892.733094][T16572] EXT4-fs (loop4): Remounting filesystem read-only
[  893.663184][T16627] netlink: 'syz.5.3014': attribute type 12 has an invalid length.
[  896.515218][T16648] loop5: detected capacity change from 0 to 512
[  896.697579][T16648] EXT4-fs (loop5): 1 orphan inode deleted
[  896.780122][T16648] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  896.845163][   T26] audit: type=1326 audit(1769798652.148:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.2.3022" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bbd667eb9 code=0x0
[  896.878393][T16648] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  897.335590][   T26] audit: type=1804 audit(1769798652.606:65): pid=16665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3020" name="/newroot/126/file1/bus" dev="loop5" ino=16 res=1 errno=0
[  897.683677][T16676] loop4: detected capacity change from 0 to 256
[  897.768960][T16681] loop5: detected capacity change from 0 to 136
[  897.917263][T16676] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  898.090906][T16689] netlink: 'syz.6.3028': attribute type 4 has an invalid length.
[  898.098859][T16689] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3028'.
[  899.364796][T16692] loop5: detected capacity change from 0 to 16
[  900.303841][T16696] fuse: Bad value for 'fd'
[  900.694872][T16692] erofs: (device loop5): mounted with root inode @ nid 36.
[  900.902566][T16695] loop6: detected capacity change from 0 to 16
[  901.012466][T16695] erofs: (device loop6): mounted with root inode @ nid 36.
[  901.382914][T16706] attempt to access beyond end of device
[  901.382914][T16706] loop6: rw=0, want=296, limit=16
[  901.395190][T16706] attempt to access beyond end of device
[  901.395190][T16706] loop6: rw=0, want=296, limit=16
[  901.406733][T16706] attempt to access beyond end of device
[  901.406733][T16706] loop6: rw=0, want=296, limit=16
[  902.408950][T16728] netlink: 'syz.4.3037': attribute type 3 has an invalid length.
[  902.416761][T16728] netlink: 'syz.4.3037': attribute type 3 has an invalid length.
[  903.142834][T16747] loop4: detected capacity change from 0 to 764
[  903.454469][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  903.463910][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  904.102906][   T26] audit: type=1804 audit(1769798658.930:66): pid=16756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3043" name="/newroot/131/file1" dev="fuse" ino=1 res=1 errno=0
[  904.568057][ T4248] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  904.831868][T16780] loop5: detected capacity change from 0 to 1024
[  904.867225][ T4248] usb 5-1: Using ep0 maxpacket: 32
[  904.884948][T16780] EXT4-fs (loop5): Ignoring removed orlov option
[  904.962093][T16780] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  904.995825][ T4248] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  905.009771][ T4248] usb 5-1: config 0 has no interface number 0
[  905.348396][ T4248] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  905.365684][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.652617][ T4248] usb 5-1: Product: syz
[  906.103411][ T4248] usb 5-1: Manufacturer: syz
[  906.146781][ T4248] usb 5-1: SerialNumber: syz
[  906.199425][ T4248] usb 5-1: config 0 descriptor??
[  906.296042][ T4248] smsc95xx v2.0.0
[  906.412913][T16813] loop9: detected capacity change from 0 to 764
[  906.450354][T16817] loop5: detected capacity change from 0 to 128
[  906.681053][T16817] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 54)
[  906.719364][T16817] FAT-fs (loop5): Filesystem has been set read-only
[  907.339456][T16817] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 54)
[  907.486377][ T4248] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  907.507453][ T4248] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  907.528939][ T4248] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  907.571815][ T4248] smsc95xx: probe of 5-1:0.67 failed with error -71
[  907.626067][ T4248] usb 5-1: USB disconnect, device number 37
[  907.886831][   T26] audit: type=1804 audit(1769798662.476:67): pid=16830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3057" name="/newroot/336/file1" dev="fuse" ino=1 res=1 errno=0
[  908.163462][T16839] loop4: detected capacity change from 0 to 1764
[  908.275704][T16839] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  908.637385][   T26] audit: type=1326 audit(1769798663.178:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16850 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb1dc4eb9 code=0x7ffc0000
[  908.810460][   T26] audit: type=1326 audit(1769798663.215:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16850 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb1dc4eb9 code=0x7ffc0000
[  908.813717][T16856] loop9: detected capacity change from 0 to 2048
[  908.874732][T16851] loop6: detected capacity change from 0 to 2048
[  908.941840][   T26] audit: type=1326 audit(1769798663.215:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16850 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb1dc4eb9 code=0x7ffc0000
[  908.979902][T16851] EXT4-fs (loop6): Ignoring removed bh option
[  909.058822][T16851] EXT4-fs (loop6): mounted filesystem without journal. Opts: dax=never,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  909.074972][   T26] audit: type=1326 audit(1769798663.253:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16850 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1bb1dc4eb9 code=0x7ffc0000
[  909.098229][   T26] audit: type=1326 audit(1769798663.253:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16850 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb1dc4eb9 code=0x7ffc0000
[  909.120954][   T26] audit: type=1326 audit(1769798663.253:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16850 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb1dc4eb9 code=0x7ffc0000
[  909.143694][   T26] audit: type=1326 audit(1769798663.253:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16850 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb1dc4eb9 code=0x7ffc0000
[  909.166598][   T26] audit: type=1326 audit(1769798663.253:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16850 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb1dc4eb9 code=0x7ffc0000
[  910.601088][T16880] loop9: detected capacity change from 0 to 764
[  911.562733][T16899] loop5: detected capacity change from 0 to 128
[  911.814776][T16899] EXT4-fs (loop5): Test dummy encryption mode enabled
[  911.874682][T16899] EXT4-fs (loop5): Test dummy encryption mode enabled
[  911.881768][T16899] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  911.910110][T16899] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  911.971751][T16899] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  912.285149][T16851] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  912.326242][T16851] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  912.346551][T16851] EXT4-fs (loop6): This should not happen!! Data will be lost
[  912.346551][T16851] 
[  912.356443][   T26] kauditd_printk_skb: 75 callbacks suppressed
[  912.356460][   T26] audit: type=1800 audit(1769798666.648:151): pid=16911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3072" name="file1" dev="loop5" ino=12 res=0 errno=0
[  912.414939][T16851] EXT4-fs (loop6): Total free blocks count 0
[  912.435186][T16851] EXT4-fs (loop6): Free/Dirty block details
[  912.441440][T16851] EXT4-fs (loop6): free_blocks=2415919104
[  912.455063][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3072'.
[  912.483522][T16851] EXT4-fs (loop6): dirty_blocks=4032
[  912.505966][T16851] EXT4-fs (loop6): Block reservation details
[  912.513018][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3072'.
[  912.534397][T16851] EXT4-fs (loop6): i_reserved_data_blocks=252
[  912.706646][ T4296] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1978 with error 28
[  912.762034][ T4296] EXT4-fs (loop6): This should not happen!! Data will be lost
[  912.762034][ T4296] 
[  913.532745][   T26] audit: type=1804 audit(1769798667.752:152): pid=16939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3075" name="/newroot/218/file1" dev="fuse" ino=1 res=1 errno=0
[  913.910435][    T7] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[  913.968809][T16952] loop4: detected capacity change from 0 to 512
[  914.013802][T16955] loop2: detected capacity change from 0 to 764
[  914.067467][T16952] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  914.082380][T16952] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  914.129111][   T26] audit: type=1800 audit(1769798668.314:153): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3082" name="file2" dev="loop4" ino=16 res=0 errno=0
[  914.994235][T16974] loop9: detected capacity change from 0 to 128
[  915.193247][    T7] usb 6-1: unable to get BOS descriptor or descriptor too short
[  915.236972][    T7] usb 6-1: not running at top speed; connect to a high speed hub
[  915.361646][T16974] EXT4-fs (loop9): Test dummy encryption mode enabled
[  915.380944][T16974] EXT4-fs (loop9): Test dummy encryption mode enabled
[  915.417631][    T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  915.427908][    T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  915.438252][T16974] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option
[  915.457399][T16983] loop2: detected capacity change from 0 to 1024
[  915.475843][    T7] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  915.519975][T16974] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  915.597651][T16974] ext4 filesystem being mounted at /345/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  915.674270][    T7] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  915.683503][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.861112][    T7] usb 6-1: Product: syz
[  915.865950][    T7] usb 6-1: Manufacturer: syz
[  915.871409][    T7] usb 6-1: SerialNumber: syz
[  916.044671][T16997] loop2: detected capacity change from 0 to 256
[  916.090138][T16997] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  916.156588][T16997] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  916.227814][T16997] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  916.262146][    T7] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  916.348133][    T7] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  916.370870][    T7] usb 6-1: USB disconnect, device number 33
[  916.418087][   T26] audit: type=1800 audit(1769798670.456:154): pid=17009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3087" name="file1" dev="loop9" ino=12 res=0 errno=0
[  916.465712][T16974] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3087'.
[  916.518478][T16974] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3087'.
[  916.618010][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  916.791491][   T26] audit: type=1804 audit(1769798670.802:155): pid=17012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3095" name="/newroot/253/file1" dev="fuse" ino=1 res=1 errno=0
[  919.222095][T17055] loop2: detected capacity change from 0 to 128
[  919.373881][T17055] EXT4-fs (loop2): Test dummy encryption mode enabled
[  919.380795][T17055] EXT4-fs (loop2): Test dummy encryption mode enabled
[  919.404655][T17055] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  919.415208][T17035] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  919.490897][T17055] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  919.510703][T17055] ext4 filesystem being mounted at /256/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  919.810939][T17035] usb 10-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config
[  919.841706][T17035] usb 10-1: New USB device found, idVendor=06cd, idProduct=0105, bcdDevice=e2.57
[  919.862290][T17035] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.875745][   T26] audit: type=1804 audit(1769798673.693:156): pid=17069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3110" name="/newroot/148/file1" dev="fuse" ino=1 res=1 errno=0
[  919.962896][T17035] keyspan 10-1:24.0: Keyspan - (without firmware) converter detected
[  920.022397][T17035] usb 10-1: Direct firmware load for keyspan/usa18x.fw failed with error -2
[  920.042614][T17035] usb 10-1: Falling back to sysfs fallback for: keyspan/usa18x.fw
[  920.105729][   T26] audit: type=1800 audit(1769798673.908:157): pid=17077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3107" name="file1" dev="loop2" ino=12 res=0 errno=0
[  920.122095][T17077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3107'.
[  920.145553][T17077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3107'.
[  920.186904][T17082] loop6: detected capacity change from 0 to 512
[  920.259020][T17082] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  920.299029][T17082] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  920.328524][T17082] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  920.366032][T17082] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  920.383706][T17082] EXT4-fs (loop6): orphan cleanup on readonly fs
[  920.406942][T17082] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3106: bg 0: block 34: padding at end of block bitmap is not set
[  920.491677][T17082] Quota error (device loop6): write_blk: dquota write failed
[  920.499799][T17082] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  920.510042][T17082] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.3106: Failed to acquire dquot type 1
[  920.541057][T17082] EXT4-fs (loop6): 1 truncate cleaned up
[  920.563483][T17082] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,bsddf,nodioread_nolock,errors=continue,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,nodelalloc,,errors=continue. Quota mode: writeback.
[  921.129211][T17119] loop2: detected capacity change from 0 to 1024
[  921.245876][T17119] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  922.038761][T17107] kvm [17106]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0
[  922.120036][T17107] kvm [17106]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0
[  922.250999][T17107] kvm [17106]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x20
[  922.268896][T17119] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback.
[  922.306656][   T26] audit: type=1804 audit(1769798675.967:158): pid=17128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3122" name="/newroot/256/file1" dev="fuse" ino=1 res=1 errno=0
[  922.412115][T17138] loop5: detected capacity change from 0 to 128
[  922.470806][T17138] EXT4-fs (loop5): Test dummy encryption mode enabled
[  922.499390][T17138] EXT4-fs (loop5): Test dummy encryption mode enabled
[  922.522667][T17138] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  922.581612][T17138] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  922.633125][T17138] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  922.753272][T17146] loop2: detected capacity change from 0 to 128
[  922.782236][T17146] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  922.803638][T17146] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  922.841104][T17146] FAT-fs (loop2): Filesystem has been set read-only
[  922.862190][T17146] attempt to access beyond end of device
[  922.862190][T17146] loop2: rw=524288, want=2073, limit=128
[  922.975494][T17146] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  923.017807][T17146] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  923.050232][T17146] attempt to access beyond end of device
[  923.050232][T17146] loop2: rw=0, want=2073, limit=128
[  923.085476][T17152] loop4: detected capacity change from 0 to 1024
[  923.098182][   T26] audit: type=1800 audit(1769798676.706:159): pid=17146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3124" name="file2" dev="loop2" ino=1048734 res=0 errno=0
[  923.203484][T17152] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  924.343547][T17152] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  924.779176][T17170] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.3125: Freeing blocks not in datazone - block = 0, count = 16
[  925.156826][   T26] audit: type=1800 audit(1769798678.637:160): pid=17175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3123" name="file1" dev="loop5" ino=12 res=0 errno=0
[  925.265258][T17138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3123'.
[  925.287427][T17138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3123'.
[  925.300570][ T4329] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:8: bg 0: block 112: padding at end of block bitmap is not set
[  925.358293][ T4329] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  925.424412][ T4329] EXT4-fs (loop4): This should not happen!! Data will be lost
[  925.424412][ T4329] 
[  925.448534][ T4329] EXT4-fs (loop4): Total free blocks count 0
[  925.482945][ T4329] EXT4-fs (loop4): Free/Dirty block details
[  925.508090][ T4329] EXT4-fs (loop4): free_blocks=16
[  925.530551][ T4329] EXT4-fs (loop4): dirty_blocks=16
[  925.553157][ T4329] EXT4-fs (loop4): Block reservation details
[  925.597746][ T4329] EXT4-fs (loop4): i_reserved_data_blocks=1
[  926.992598][T17197] loop4: detected capacity change from 0 to 512
[  928.737526][T17197] EXT4-fs (loop4): 1 truncate cleaned up
[  928.743259][T17197] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,noload,. Quota mode: writeback.
[  928.788208][T17211] loop9: detected capacity change from 0 to 512
[  928.894955][T17197] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.3134: deleted inode referenced: 15
[  928.922480][T17211] EXT4-fs (loop9): can't mount with journal_checksum, fs mounted w/o journal
[  928.967773][T17197] EXT4-fs (loop4): Remounting filesystem read-only
[  930.347238][T17238] loop6: detected capacity change from 0 to 2048
[  930.411049][T17232] loop4: detected capacity change from 0 to 8192
[  930.488831][T17232] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  930.527397][T17232] UDF-fs: Scanning with blocksize 512 failed
[  930.572694][T17232] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  930.652734][T17232] UDF-fs: Scanning with blocksize 1024 failed
[  930.681928][T17246] loop9: detected capacity change from 0 to 128
[  930.721332][T17232] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  930.744893][T17232] UDF-fs: Scanning with blocksize 2048 failed
[  930.777034][T17232] UDF-fs: error (device loop4): udf_read_inode: (ino 784) failed !bh
[  930.795884][T17232] UDF-fs: Scanning with blocksize 4096 failed
[  930.849293][T17246] EXT4-fs (loop9): Test dummy encryption mode enabled
[  930.886256][T17246] EXT4-fs (loop9): Test dummy encryption mode enabled
[  930.924153][T17246] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option
[  930.974611][T17246] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  931.003926][T17246] ext4 filesystem being mounted at /356/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  931.339818][   T26] audit: type=1804 audit(1769798684.410:161): pid=17261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3135" name="/newroot/264/file1" dev="fuse" ino=1 res=1 errno=0
[  931.418386][T17268] loop4: detected capacity change from 0 to 1024
[  931.574656][   T26] audit: type=1804 audit(1769798684.635:162): pid=17272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3146" name="/newroot/262/file1/file1" dev="loop4" ino=20 res=1 errno=0
[  931.828811][T17279] loop6: detected capacity change from 0 to 764
[  931.857662][   T26] audit: type=1800 audit(1769798684.897:163): pid=17282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3142" name="file1" dev="loop9" ino=12 res=0 errno=0
[  931.879748][T17246] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3142'.
[  931.894201][T17246] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3142'.
[  932.204193][T17293] blktrace: Concurrent blktraces are not allowed on loop7
[  932.963626][T17299] loop5: detected capacity change from 0 to 512
[  933.155280][T17311] loop4: detected capacity change from 0 to 128
[  933.699379][T17311] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  933.906123][T17299] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  933.993404][T17311] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  934.094088][T17299] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  934.106806][T17299] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3154'.
[  934.227108][T17330] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  934.563816][   T26] audit: type=1804 audit(1769798687.431:164): pid=17336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3163" name="/newroot/266/file1" dev="fuse" ino=1 res=1 errno=0
[  935.416249][T17363] loop4: detected capacity change from 0 to 764
[  936.148048][T17379] loop9: detected capacity change from 0 to 512
[  936.172427][T17378] tmpfs: Unknown parameter 'quota'
[  936.301028][T17379] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  936.338359][T17379] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  936.743966][T17393] loop6: detected capacity change from 0 to 4096
[  937.020612][T17393] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  937.180366][   T26] audit: type=1800 audit(1769798689.871:165): pid=17393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3173" name="file1" dev="loop6" ino=15 res=0 errno=0
[  937.577560][T17435] loop6: detected capacity change from 0 to 128
[  937.724136][T17435] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  937.763634][T17435] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  937.855708][   T26] audit: type=1804 audit(1769798690.507:166): pid=17443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3179" name="/newroot/270/file1" dev="fuse" ino=1 res=1 errno=0
[  937.885179][T17445] fuse: Bad value for 'fd'
[  938.797588][T17469] loop4: detected capacity change from 0 to 256
[  938.847333][T17469] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  938.890065][T17469] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  939.053110][T17469] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  939.159466][T17479] loop5: detected capacity change from 0 to 256
[  940.193817][T17484] loop2: detected capacity change from 0 to 764
[  941.336190][T17503] loop9: detected capacity change from 0 to 256
[  941.400882][T17507] loop2: detected capacity change from 0 to 512
[  941.466039][T17507] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  941.586256][T17503] loop9: detected capacity change from 0 to 4096
[  941.631475][T17507] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  941.654929][T17503] EXT4-fs (loop9): Test dummy encryption mode enabled
[  941.759081][   T26] audit: type=1326 audit(1769798694.161:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17510 comm="syz.5.3193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90fb816eb9 code=0x0
[  941.782466][T17507] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3192: bg 0: block 248: padding at end of block bitmap is not set
[  941.807706][T17507] Quota error (device loop2): write_blk: dquota write failed
[  941.823105][T17503] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0002]
[  941.871014][T17503] System zones: 0-5
[  941.884504][T17507] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  941.903747][T17503] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,auto_da_alloc,nombcache,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000000,commit=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback.
[  941.917960][T17507] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.3192: Failed to acquire dquot type 1
[  942.021065][T17528] loop5: detected capacity change from 0 to 128
[  942.029736][T17507] EXT4-fs (loop2): 1 truncate cleaned up
[  942.035487][T17507] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  942.155300][T17528] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  942.191760][T17528] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  943.506536][T17535] loop9: detected capacity change from 0 to 2048
[  943.553773][ T1239] Quota error (device loop2): remove_tree: Getting block too big (0 >= 6)
[  943.568400][ T1239] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 1
[  943.637860][T17535] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  943.826565][T17544] loop2: detected capacity change from 0 to 512
[  944.036348][T17544] EXT4-fs (loop2): invalid journal inode
[  944.042138][T17544] EXT4-fs (loop2): can't get journal size
[  944.117627][T17544] EXT4-fs (loop2): 1 truncate cleaned up
[  944.130931][T17554] loop9: detected capacity change from 0 to 2048
[  944.163024][T17544] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000004,norecovery,sysvgroups,grpquota,,errors=continue. Quota mode: writeback.
[  944.278381][T17554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  945.384995][T17577] printk: syz.6.3202 (17577): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated).
[  947.080698][T17600] loop4: detected capacity change from 0 to 2048
[  947.129505][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3208'.
[  947.146978][T17605] netlink: 'syz.9.3208': attribute type 1 has an invalid length.
[  947.193069][T17600] UDF-fs: bad mount option "volume=000000000000000003" or missing value
[  948.029680][T17626] loop9: detected capacity change from 0 to 512
[  948.422786][T17633] xt_hashlimit: max too large, truncated to 1048576
[  951.975332][T17645] loop4: detected capacity change from 0 to 764
[  952.256764][T17650] loop4: detected capacity change from 0 to 128
[  952.312789][T17650] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  952.371701][T17650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  952.392642][T17654] loop2: detected capacity change from 0 to 16
[  952.480810][T17656] loop6: detected capacity change from 0 to 764
[  952.617853][T17654] erofs: (device loop2): mounted with root inode @ nid 36.
[  952.633532][T17656] Symlink component flag not implemented
[  952.639705][T17656] Symlink component flag not implemented
[  952.930437][T17656] Symlink component flag not implemented (128)
[  953.583246][T17656] Symlink component flag not implemented (122)
[  953.680848][T17654] fuse: Bad value for 'fd'
[  954.536598][T17696] loop4: detected capacity change from 0 to 512
[  954.604626][T17696] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  954.705568][T17696] EXT4-fs (loop4): orphan cleanup on readonly fs
[  954.712204][T17696] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  954.753140][T17696] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.3226: attempt to clear invalid blocks 2 len 1
[  954.788340][T17696] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  954.805765][T17696] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3226: invalid indirect mapped block 1819239214 (level 0)
[  954.825820][T17696] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3226: invalid indirect mapped block 1819239214 (level 1)
[  954.851456][T17696] EXT4-fs (loop4): 1 truncate cleaned up
[  954.857355][T17696] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback.
[  957.720110][T17708] loop5: detected capacity change from 0 to 764
[  957.894078][T17714] loop9: detected capacity change from 0 to 1024
[  958.121169][T17714] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  958.323417][T17714] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  958.978846][T17736] EXT4-fs error (device loop9): ext4_free_blocks:6234: comm syz.9.3234: Freeing blocks not in datazone - block = 0, count = 16
[  959.132601][T17741] loop2: detected capacity change from 0 to 512
[  959.225349][ T4380] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm kworker/u4:11: bg 0: block 112: padding at end of block bitmap is not set
[  959.291688][ T4380] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  959.321570][ T4380] EXT4-fs (loop9): This should not happen!! Data will be lost
[  959.321570][ T4380] 
[  959.338955][T17741] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2
[  959.365962][ T4380] EXT4-fs (loop9): Total free blocks count 0
[  959.393789][ T4380] EXT4-fs (loop9): Free/Dirty block details
[  959.419356][ T4380] EXT4-fs (loop9): free_blocks=16
[  959.424470][ T4380] EXT4-fs (loop9): dirty_blocks=16
[  959.465555][ T4380] EXT4-fs (loop9): Block reservation details
[  959.487489][T17750] loop4: detected capacity change from 0 to 256
[  959.494326][ T4380] EXT4-fs (loop9): i_reserved_data_blocks=1
[  959.778785][T17750] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  960.362673][   T26] audit: type=1800 audit(1769798711.568:168): pid=17750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3233" name="file0" dev="loop4" ino=1048738 res=0 errno=0
[  960.710415][T17775] loop4: detected capacity change from 0 to 128
[  960.764743][T17775] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  960.877241][T17780] loop9: detected capacity change from 0 to 764
[  960.888138][T17775] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  961.214366][T11289] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  961.359193][T11289] FAT-fs (loop4): Filesystem has been set read-only
[  961.588590][T11289] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  961.977701][T17790] loop5: detected capacity change from 0 to 1024
[  962.111105][T17795] loop9: detected capacity change from 0 to 512
[  962.174008][T17795] EXT4-fs (loop9): Mount option "data_err=abort" incompatible with ext2
[  962.183883][T17790] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  962.206029][T17790] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  962.948641][T17804] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.3252: Freeing blocks not in datazone - block = 0, count = 16
[  963.493919][ T4380] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:11: bg 0: block 112: padding at end of block bitmap is not set
[  963.542363][ T4380] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  963.596190][ T4380] EXT4-fs (loop5): This should not happen!! Data will be lost
[  963.596190][ T4380] 
[  963.955871][ T4380] EXT4-fs (loop5): Total free blocks count 0
[  963.962111][ T4380] EXT4-fs (loop5): Free/Dirty block details
[  963.969573][ T4380] EXT4-fs (loop5): free_blocks=16
[  964.318855][ T4380] EXT4-fs (loop5): dirty_blocks=16
[  964.453650][ T4380] EXT4-fs (loop5): Block reservation details
[  964.465220][ T4380] EXT4-fs (loop5): i_reserved_data_blocks=1
[  965.418268][T17833] loop2: detected capacity change from 0 to 1024
[  965.763026][   T26] audit: type=1800 audit(1769798716.603:169): pid=17833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3260" name="file1" dev="loop2" ino=20 res=0 errno=0
[  965.876716][ T4380] hfsplus: b-tree write err: -5, ino 4
[  965.960317][T17839] loop6: detected capacity change from 0 to 764
[  966.052068][T17844] loop5: detected capacity change from 0 to 512
[  966.138244][T17844] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2
[  967.145148][T17859] loop5: detected capacity change from 0 to 1024
[  967.217253][T17864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3270'.
[  967.246565][   T26] audit: type=1800 audit(1769798718.006:170): pid=17859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3269" name="bus" dev="loop5" ino=26 res=0 errno=0
[  967.435764][T17859] attempt to access beyond end of device
[  967.435764][T17859] loop5: rw=34817, want=1036, limit=1024
[  967.520625][ T1239] hfsplus: b-tree write err: -5, ino 4
[  967.537412][ T1239] attempt to access beyond end of device
[  967.537412][ T1239] loop5: rw=1, want=1034, limit=1024
[  967.574602][T17845] chnl_net:caif_netlink_parms(): no params data found
[  967.580859][ T1239] Buffer I/O error on dev loop5, logical block 516, lost async page write
[  967.597731][ T1239] attempt to access beyond end of device
[  967.597731][ T1239] loop5: rw=1, want=1036, limit=1024
[  967.614143][ T1239] Buffer I/O error on dev loop5, logical block 517, lost async page write
[  967.750927][T17845] bridge0: port 1(bridge_slave_0) entered blocking state
[  967.759067][T17845] bridge0: port 1(bridge_slave_0) entered disabled state
[  967.767807][T17845] device bridge_slave_0 entered promiscuous mode
[  967.768997][ T1110] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  967.781890][T17845] bridge0: port 2(bridge_slave_1) entered blocking state
[  967.782057][T17845] bridge0: port 2(bridge_slave_1) entered disabled state
[  967.801259][T17845] device bridge_slave_1 entered promiscuous mode
[  967.828059][T17845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  967.840872][T17845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  967.894375][T17845] team0: Port device team_slave_0 added
[  967.939572][T17845] team0: Port device team_slave_1 added
[  968.002741][T17845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  968.029416][T17845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  968.116442][ T1110] usb 3-1: Using ep0 maxpacket: 32
[  968.121831][T17845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  968.165672][T17845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  968.173039][T17845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  968.250095][ T1110] usb 3-1: config 0 has an invalid interface number: 5 but max is 0
[  968.264513][ T1110] usb 3-1: config 0 has no interface number 0
[  968.283948][ T1110] usb 3-1: config 0 interface 5 has no altsetting 0
[  968.320783][T17845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  968.461467][T17845] device hsr_slave_0 entered promiscuous mode
[  968.480127][ T1110] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a47, bcdDevice=6d.22
[  968.537678][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.666390][ T1110] usb 3-1: Product: syz
[  968.696165][ T1110] usb 3-1: Manufacturer: syz
[  968.731758][ T1110] usb 3-1: SerialNumber: syz
[  968.748963][T17845] device hsr_slave_1 entered promiscuous mode
[  968.967031][ T1110] usb 3-1: config 0 descriptor??
[  969.099293][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  969.108533][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  969.231077][ T4257] Bluetooth: hci3: command 0x0409 tx timeout
[  969.237493][T17845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  969.246248][T17845] Cannot create hsr debugfs directory
[  969.327462][T17911] loop5: detected capacity change from 0 to 764
[  970.264351][ T1110] usb 3-1: USB disconnect, device number 20
[  970.334207][T17926] loop9: detected capacity change from 0 to 128
[  970.460336][T17926] FAT-fs (loop9): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  970.882247][T17941] loop5: detected capacity change from 0 to 1024
[  971.430679][ T7376] Bluetooth: hci3: command 0x041b tx timeout
[  971.684317][T17956] loop6: detected capacity change from 0 to 764
[  974.142096][ T1107] Bluetooth: hci3: command 0x040f tx timeout
[  974.931399][ T4241] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  975.282787][T17845] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  975.372439][T17845] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  975.423977][T17845] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  975.473594][T17845] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  975.477609][ T4241] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  975.513890][ T4241] usb 6-1: config 0 has no interface number 0
[  975.542557][ T4241] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  975.583786][ T4241] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  975.645785][ T4241] usb 6-1: config 0 interface 255 has no altsetting 0
[  975.672024][ T4241] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  975.697664][T17995] loop6: detected capacity change from 0 to 128
[  975.704230][ T4241] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.735451][ T4241] usb 6-1: config 0 descriptor??
[  975.787840][ T4241] ums-realtek 6-1:0.255: USB Mass Storage device detected
[  975.798026][T17995] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  975.842851][T17995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  975.976984][T17845] 8021q: adding VLAN 0 to HW filter on device bond0
[  976.039861][ T1110] usb 6-1: USB disconnect, device number 34
[  976.118691][T17845] 8021q: adding VLAN 0 to HW filter on device team0
[  976.135183][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  976.158914][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  976.396396][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  976.700851][ T7376] Bluetooth: hci3: command 0x0419 tx timeout
[  976.713242][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  976.782506][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state
[  976.789697][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  976.819847][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  976.839797][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  976.856402][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state
[  976.863571][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state
[  976.884811][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  976.952148][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  976.961161][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  977.028259][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  977.062227][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  977.239628][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  977.288599][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  978.139424][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  978.184076][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  978.212232][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  978.228202][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  978.250100][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  978.284334][T17845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  981.229067][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  981.245767][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  981.321366][T17845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  983.891560][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  983.922907][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  984.142758][T17845] device veth0_vlan entered promiscuous mode
[  984.611264][T17845] device veth1_vlan entered promiscuous mode
[  985.064392][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  985.078171][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  985.089575][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  985.136479][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  985.149709][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  985.203185][T17845] device veth0_macvtap entered promiscuous mode
[  985.540832][T17035] usb 10-1: ezusb_ihex_firmware_download - request "keyspan/usa18x.fw" failed
[  985.672641][T17035] usb 10-1: failed to load firmware "keyspan/usa18x.fw"
[  986.176079][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  986.217645][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  986.233352][T17845] device veth1_macvtap entered promiscuous mode
[  986.381209][T17035] keyspan: probe of 10-1:24.0 failed with error -2
[  986.397466][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  987.383860][T17035] usb 10-1: USB disconnect, device number 27
[  987.475428][T18068] loop9: detected capacity change from 0 to 512
[  987.505165][T17845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  987.543183][T17845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.568263][T17845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  987.611424][T17845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.642631][T17845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  987.695952][T17845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.728005][T17845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  987.765552][T17845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.797989][T17845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  987.843014][T17845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.885177][T17845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  987.983752][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  988.021343][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  988.065105][T18071] loop5: detected capacity change from 0 to 1024
[  988.106308][T17845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  988.119443][T18068] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.3315: bg 0: block 5: invalid block bitmap
[  988.155685][T17845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.165596][T17845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  988.177527][T17845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.187406][T17845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  988.199709][T18068] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  988.220306][T18068] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3315: invalid indirect mapped block 3 (level 2)
[  988.241237][T17845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.251218][T17845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  988.273998][T18068] EXT4-fs (loop9): 1 orphan inode deleted
[  988.280088][T18068] EXT4-fs (loop9): 1 truncate cleaned up
[  988.294609][T17845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.312865][T18068] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  988.324517][T17845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  988.356475][T17845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.392391][T17845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  988.434487][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  988.443516][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  988.480801][T17845] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  988.504138][T18071] EXT4-fs (loop5): Ignoring removed orlov option
[  988.524584][T17845] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  988.525909][T18071] EXT4-fs (loop5): Test dummy encryption mode enabled
[  988.571019][T17845] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  988.728319][T17845] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  988.780763][T18071] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  988.808370][T18074] loop2: detected capacity change from 0 to 764
[  991.646465][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  991.761647][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  991.781413][T18098] loop2: detected capacity change from 0 to 512
[  995.540138][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  995.694889][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  995.704149][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  995.765307][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  998.011853][T18134] loop8: detected capacity change from 0 to 1024
[  998.414571][T18134] attempt to access beyond end of device
[  998.414571][T18134] loop8: rw=0, want=917506, limit=1024
[  998.426249][T18134] Buffer I/O error on dev loop8, logical block 458752, async page read
[  998.434955][T18134] attempt to access beyond end of device
[  998.434955][T18134] loop8: rw=0, want=917506, limit=1024
[  998.446215][T18134] Buffer I/O error on dev loop8, logical block 458752, async page read
[ 1002.026941][T18161] loop5: detected capacity change from 0 to 2048
[ 1002.198579][T18161] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1003.335377][ T1107] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1003.398976][T18183] loop6: detected capacity change from 0 to 512
[ 1003.543996][T18183] EXT4-fs (loop6): Ignoring removed bh option
[ 1003.675767][T18183] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[ 1003.697516][T18193] loop5: detected capacity change from 0 to 512
[ 1003.732256][ T1107] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1003.754272][ T1107] usb 10-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[ 1003.763488][ T1107] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1003.796262][T18183] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1003.797133][ T1107] usb 10-1: config 0 descriptor??
[ 1003.902412][T18193] EXT4-fs (loop5): 1 truncate cleaned up
[ 1003.930537][T18193] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,noload,. Quota mode: writeback.
[ 1004.490242][ T1107] usb 10-1: USB disconnect, device number 28
[ 1011.369854][T18249] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1011.696908][T18254] loop8: detected capacity change from 0 to 764
[ 1014.104244][T18274] loop5: detected capacity change from 0 to 128
[ 1017.074357][T18291] loop9: detected capacity change from 0 to 512
[ 1018.826958][T18301] loop8: detected capacity change from 0 to 1024
[ 1019.496454][ T4241] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[ 1020.421642][ T4241] hid-generic 0000:0000:0000.0024: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1020.437099][T18291] EXT4-fs: error -4 creating inode table initialization thread
[ 1020.452310][T18291] EXT4-fs (loop9): mount failed
[ 1020.494367][T18307] loop2: detected capacity change from 0 to 2048
[ 1020.505930][ T1239] hfsplus: b-tree write err: -5, ino 4
[ 1021.921720][T18307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1022.294464][T18318] fido_id[18318]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1022.579255][T18328] loop2: detected capacity change from 0 to 2048
[ 1023.972258][T18339] loop6: detected capacity change from 0 to 1024
[ 1024.671711][ T4329] hfsplus: b-tree write err: -5, ino 4
[ 1025.955916][T18359] loop5: detected capacity change from 0 to 764
[ 1026.915306][T18372] loop9: detected capacity change from 0 to 16
[ 1026.990935][T18372] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1027.107254][T18372] erofs: (device loop9): z_erofs_readpage: failed to read, err [-95]
[ 1027.118868][T18372] BUG: sleeping function called from invalid context at fs/dcache.c:877
[ 1027.129155][T18372] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 18372, name: syz.9.3378
[ 1027.139820][T18372] 1 lock held by syz.9.3378/18372:
[ 1027.146093][T18372]  #0: ffff88805e549140 (&type->i_mutex_dir_key#13/1){+.+.}-{3:3}, at: filename_create+0x208/0x470
[ 1027.157596][T18372] Preemption disabled at:
[ 1027.157613][T18372] [<ffffffff83990d27>] z_erofs_reload_indexes+0x347/0x590
[ 1027.170749][T18372] CPU: 1 PID: 18372 Comm: syz.9.3378 Not tainted syzkaller #0
[ 1027.178387][T18372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1027.188808][T18372] Call Trace:
[ 1027.192252][T18372]  <TASK>
[ 1027.195302][T18372]  dump_stack_lvl+0x188/0x250
[ 1027.200549][T18372]  ? show_regs_print_info+0x20/0x20
[ 1027.205895][T18372]  ? load_image+0x400/0x400
[ 1027.211278][T18372]  ? add_to_page_cache_lru+0x2a8/0x4a0
[ 1027.216998][T18372]  ___might_sleep+0x493/0x610
[ 1027.222591][T18372]  ? z_erofs_reload_indexes+0x347/0x590
[ 1027.229014][T18372]  ? __might_sleep+0xf0/0xf0
[ 1027.235025][T18372]  ? __rwlock_init+0x140/0x140
[ 1027.240177][T18372]  ? erofs_lookup+0x1af/0x330
[ 1027.245106][T18372]  dput+0x26/0x1a0
[ 1027.248969][T18372]  lookup_one_qstr_excl+0x1d6/0x240
[ 1027.254391][T18372]  filename_create+0x23a/0x470
[ 1027.259908][T18372]  ? kern_path_create+0x190/0x190
[ 1027.265116][T18372]  ? __virt_addr_valid+0x3c6/0x470
[ 1027.270274][T18372]  do_mkdirat+0xa5/0x5b0
[ 1027.274754][T18372]  ? vfs_mkdir+0x570/0x570
[ 1027.279739][T18372]  ? getname_flags+0x1fe/0x500
[ 1027.284835][T18372]  __x64_sys_mkdirat+0x85/0x90
[ 1027.289935][T18372]  do_syscall_64+0x4c/0xa0
[ 1027.295126][T18372]  ? clear_bhb_loop+0x30/0x80
[ 1027.300790][T18372]  ? clear_bhb_loop+0x30/0x80
[ 1027.305531][T18372]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1027.311745][T18372] RIP: 0033:0x7f63f77faeb9
[ 1027.316329][T18372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1027.336680][T18372] RSP: 002b:00007f63f5a56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1027.345254][T18372] RAX: ffffffffffffffda RBX: 00007f63f7a75fa0 RCX: 00007f63f77faeb9
[ 1027.353271][T18372] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 1027.362391][T18372] RBP: 00007f63f7868c1f R08: 0000000000000000 R09: 0000000000000000
[ 1027.370493][T18372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1027.379200][T18372] R13: 00007f63f7a76038 R14: 00007f63f7a75fa0 R15: 00007fff5868eda8
[ 1027.387526][T18372]  </TASK>
[ 1027.391652][T18372] BUG: scheduling while atomic: syz.9.3378/18372/0x00000002
[ 1027.399095][T18372] no locks held by syz.9.3378/18372.
[ 1027.404678][T18372] Modules linked in:
[ 1027.408849][T18372] Preemption disabled at:
[ 1027.408861][T18372] [<ffffffff83990d27>] z_erofs_reload_indexes+0x347/0x590
[ 1027.421132][T18372] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ...
[ 1027.430194][T18372] CPU: 1 PID: 18372 Comm: syz.9.3378 Tainted: G        W         syzkaller #0
[ 1027.439579][T18372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1027.450841][T18372] Call Trace:
[ 1027.455047][T18372]  <TASK>
[ 1027.458140][T18372]  dump_stack_lvl+0x188/0x250
[ 1027.463324][T18372]  ? show_regs_print_info+0x20/0x20
[ 1027.468788][T18372]  ? load_image+0x400/0x400
[ 1027.473544][T18372]  panic+0x2e5/0x810
[ 1027.477814][T18372]  ? bpf_jit_dump+0xd0/0xd0
[ 1027.482509][T18372]  ? z_erofs_reload_indexes+0x347/0x590
[ 1027.488550][T18372]  ? z_erofs_reload_indexes+0x347/0x590
[ 1027.494139][T18372]  check_panic_on_warn+0x80/0xa0
[ 1027.499235][T18372]  ? z_erofs_reload_indexes+0x347/0x590
[ 1027.504847][T18372]  __schedule_bug+0x193/0x1f0
[ 1027.509687][T18372]  ? raw_spin_rq_unlock_irq+0x90/0x90
[ 1027.515547][T18372]  __schedule+0x1324/0x43c0
[ 1027.520107][T18372]  ? kasan_quarantine_put+0x39/0x220
[ 1027.525468][T18372]  ? kasan_quarantine_put+0xd4/0x220
[ 1027.530826][T18372]  ? slab_free_freelist_hook+0xea/0x170
[ 1027.536613][T18372]  ? rcu_is_watching+0x11/0xa0
[ 1027.541429][T18372]  ? release_firmware_map_entry+0x190/0x190
[ 1027.547465][T18372]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1027.553596][T18372]  ? lock_chain_count+0x20/0x20
[ 1027.558505][T18372]  ? do_mkdirat+0x51e/0x5b0
[ 1027.563063][T18372]  schedule+0x11b/0x1e0
[ 1027.567260][T18372]  exit_to_user_mode_loop+0x47/0x130
[ 1027.572733][T18372]  exit_to_user_mode_prepare+0xee/0x180
[ 1027.578513][T18372]  syscall_exit_to_user_mode+0x16/0x40
[ 1027.584216][T18372]  do_syscall_64+0x58/0xa0
[ 1027.588685][T18372]  ? clear_bhb_loop+0x30/0x80
[ 1027.593501][T18372]  ? clear_bhb_loop+0x30/0x80
[ 1027.598334][T18372]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1027.604413][T18372] RIP: 0033:0x7f63f77faeb9
[ 1027.608899][T18372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1027.629538][T18372] RSP: 002b:00007f63f5a56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1027.638587][T18372] RAX: ffffffffffffffa1 RBX: 00007f63f7a75fa0 RCX: 00007f63f77faeb9
[ 1027.647226][T18372] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 1027.655935][T18372] RBP: 00007f63f7868c1f R08: 0000000000000000 R09: 0000000000000000
[ 1027.663948][T18372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1027.672390][T18372] R13: 00007f63f7a76038 R14: 00007f63f7a75fa0 R15: 00007fff5868eda8
[ 1027.680860][T18372]  </TASK>
[ 1027.685093][T18372] Kernel Offset: disabled
[ 1027.691762][T18372] Rebooting in 86400 seconds..