last executing test programs:

1m48.2720634s ago: executing program 4 (id=5):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000240)=""/15, 0xf}], 0x1)

1m48.132211105s ago: executing program 4 (id=13):
syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101000, 0x24)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))

1m46.440019961s ago: executing program 4 (id=16):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x129a41, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x185000, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)

1m41.384839356s ago: executing program 4 (id=23):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff)
fcntl$setlease(r2, 0x400, 0x1)
open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0xfffffe34)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x160)

1m41.064863158s ago: executing program 32 (id=23):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff)
fcntl$setlease(r2, 0x400, 0x1)
open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0xfffffe34)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x160)

54.653672362s ago: executing program 2 (id=183):
r0 = socket(0x1, 0x5, 0x0)
close(r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f00000002c0)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0xe000200c})
epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x9, 0x0, 0x0)

54.443185604s ago: executing program 2 (id=184):
preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0x85}], 0x1, 0xa3, 0x7400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x59)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="b805000000b9070000000f01c1460f01bd06000000a70f20c035080000000f22c0b9800000c00f3235000100000f300fc79fea810000c4c2f59cd9c483057d7b001566b82b018ec0470f23e6", 0x4c}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x69, 0x0, 0x0, 0x0, 0x10, 0x7, 0x0, 0x88, 0x9, 0x0, 0x0, 0x0, 0x31, 0x83, 0x0, 0x2, 0x0, '\x00', 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x3}, {0x6, 0x8, 0x9, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0xdd}, {0xfd, 0x5, 0xf5, '\x00', 0x13}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc, '\x00', 0x6}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xd, 0x5, 0x26}, {0xcf, 0xf, 0x8, '\x00', 0x6}, {0xf, 0x1, 0x7, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xc, 0x2, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xe, 0x83, '\x00', 0x5}, {0x10, 0x9, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x6, 0x6, 0x9}]}})

54.048129274s ago: executing program 5 (id=185):
r0 = socket$inet6(0xa, 0x2, 0x0)
readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f00000007c0)=""/171, 0xab}], 0x2)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a", 0x4}], 0x1}}], 0x1, 0x20e8086)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

53.928254913s ago: executing program 2 (id=186):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1}, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_delroute={0x28, 0x19, 0x1, 0x70bd2d, 0x25dfdbf8, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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")

53.144182192s ago: executing program 2 (id=187):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x220408a, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d6b6f69382d752c636f6465706167653d3933322c696f636861727365743d6575632d6a702c747a3d5554432c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c6e66732c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c00416786a537fd"], 0x1, 0x376, &(0x7f00000007c0)="$eJzs3U1oHOUbAPBnO0k2Ke0/e/hD0dPqTZDSRDzoKaFUKOaglaV+XFxs6kd2LWRxIYLZ7EUpngQvgj1560GPPYsHEW8evFpBquLFgodCgyOzO/u96Qe4seLvdyhP3+d59n1ndsjMhuTNq63YujAfF2/evBGLi4WYWzu9FrcKUYojkUTXXkz14cL0cQDgAXcrTeP3tOuuxUtxtBe69wPAv1fn/v/68cFA8Y7laTL8v8vHZrYuAGB27vHz/3NTRy/NbFkAwAxN3P8fHUmPfZt/LkY+/8fS7BcIAPztXnjp5WfXNyLOlcuLEfUPmpVmJZ4e5NcvxptRi804FcuxH9F9UOg+LWT/PnN248ypcubnUlSyjmYlot5qVrpPCutJp78YK7Ecpbw/7fcnWf9Kp78cEXutzvxRLzQr850fNsjm/+FobMZqLMf/J/ojzm6cWS3nL1Cp9/pbEe1Y7B1Etv6TsRzfvRaXohYXIusdrH93pVw+nW6M9DevFjt1AAAAAAAAAAAAAAAAAAAAAAAwCyfLfaU4lu9/k9ZbzffPjReURvbHqXTT+f5A7e7+QGmxmO/OczkZ3x9odH+eZmUujvyjRw4AAAAAAAAAAAAAAAAAAAAPjsbOQlRrtc3txs67W8NBa2jk7W8+/2opeqm5vPWtZNAV+eDI6/QKh145if4Uab89TUZq8iCJ6BXvVa9e6694uKbYP4qJ9iwoTqQK+ZqqtdrxR376dFrXn1mw1xlJYuK0jAaFfP6hVP1/2cBiROwf1HVwsHqXmutpmmbBfD7vcM3uJ+Nd+VYMrftexnhQ2JtIfX3jjYeeaJx4sjPyZT7TY48vn7/+8We/blVr0e6tcGG7sZ/eeYq0FbEThYjJVDJ0/RTy81yYciVMD9qDkfZ2Y6eafP/biw9/9O1YcTL9+kmHR96ZOsV7V/44X/tiPLXQDQoRpcm3aTKYn3LxTw9eud2/eu//rTxxZa16bffHX6bVZGd0vGvoi4SNOgAAAAAAAAAAAAAAAAAA4FAMful3LJGmaevArqeen/nCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAQDf7+/1DQnhi5l+B2KyZTxc3txoGTLx3qoQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8B/2VwAAAP//rnh3Vw==")
mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50)
sendfile(r0, r0, 0x0, 0x800000009)

53.115633397s ago: executing program 5 (id=188):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r0, &(0x7f0000000240)=""/178, 0xb2)
dup(r0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r0], 0x2, 0x5505, &(0x7f0000002480)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x2c000010)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x200048c4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x10)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0)
pipe(&(0x7f0000000100))
syz_open_dev$usbfs(&(0x7f0000000040), 0xa06, 0x391000)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000400)="b8010000000f01c166400f6d4822470f01d1263e67652e66430fc73766baf80cb892e4e889ef66bafc0c66b8002066efc441ff705b00080f01df440fc7587c0f20d835080000000f22d866ba4000ed", 0x4f}], 0x1, 0xa8, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2)

52.335172037s ago: executing program 2 (id=189):
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x20000840)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file1\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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")
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000000000)=""/199, 0xc7)

52.152029484s ago: executing program 5 (id=190):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioperm(0x0, 0xab4d, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
read$msr(r1, &(0x7f0000000200)=""/97, 0x61)
ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000700))
ptrace$getsig(0x4202, 0x0, 0x4f9, &(0x7f0000000440))
socket$inet6_tcp(0xa, 0x1, 0x0)
getrlimit(0x7, &(0x7f00000003c0))
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffff0001, 0x400001)
ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000080)={0x0, 0xfffff2e1, 0x7, 0xfea, 0x6, 0x235})
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESOCT], 0xfe, 0x151d, &(0x7f00000022c0)="$eJzs3AuYT9X6OPD1rrU2Q9K3SS7Dete7+abBMkmSS0IuSZIkSW4JSZMkCYkht6QhCblOmlyGkFymMWnc75fckyZHmiQJyS1Z/0fHOU7/zjmd3/+c/8/v+c37eZ71zHr33u/7XXveeea7955nvt/1HFWvRf3azYhI/Fvgz1+ShBAxQohhQojrhBCBEKJSbKXYS/vzKUj6916E/Wc9nHa1V8CuJu5/7sb9z924/7kb9z934/7nbtz/3I37n7tx/xnLzbbNLnY9j9w7+Pl/bsbv//+L5JSf/NWG8jf2+i+kcP9zN+5/7sb9z924/7kb9z934/7/71frn+zj/udu3H/GcrO/Pgu+4L3/H/A8msd/77jaP3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKHs/4KLYT4y/xqr4sxxhhjjDHGGGP/OT7v1V4BY4wxxhhjjDHG/v8DIYUSWgQij8grYkQ+kV9cIwqIa0VBcZ2IiOtFrLhBFBI3isKiiCgqiok4UVyUEEagsIJEKEqKUiIqbhKlxc0iXpQRZUU54UR5kSBuERXEraKiuE1UEreLyuIOUUVUFdVEdXGnqCHuEjVFLVFb3C3qiLqinqgv7hENxL2iobhPNBL3i8biAdFEPCiaiodEM/GwaC4eES3Eo6KleEy0Eq1FG9FWtPt/yn9J9BUvi36iv0gSA8RA8YoYJAaLIWKoGCZeFcPFa2KEeF0ki5FilHhDjBZvijHiLTFWjBPjxdtigpgoJonJYoqYKlLEO2KaeFekivfEdDFDzBSzRJqYLeaI98VcMU/MFx+IBeJDsVAsEovFEpEuPhIZYqnIFB+LZeITkSWWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmPhXbxQ6xU+wSu8UesVd8JvaJz8V+8YXIFl/+F/PP/F/5vUCAAAkSNGjIA3kgBmIgP+SHAlAACkJBiEAEYiEWCkEhKAyFoSgUhQDioASUAAQEAoKSUBKiEIXSUBriIR7KQllw4CABEqAC3AoVoSJUgkpQGSpDFagKVaE6VIcaUANqQk2oDbWhDtSBelAP7oF74F5oCA2hETSCxtAYmkATaApNoRk0g+bQHFpAC2gJLaEVtII20AbaQTtoD+2hA3SATtAJOkNn6AJdIBESoSt0hW7QDbpDd+gBPaAn9IRe0Bt6w0vwErwML0N/qCMHwEAYCINgEAyBoTAUXoXh8Bq8Bq9DMoyEUfAGvAFvwhg4DWNhHIyH8VBDToRJMBlIToUUSIFpMA1SIRWmwwyYAbMgDWbDHJgDc2EezIMPYAF8CB/CIlgESyAd0iEDlkImZMIyOANZsBxWwEpYBathFayFdbAWNsBG2ACbYTNsha3wKXwKO2AH7IJdsAf2wGfwGXwOn0MyZEM2HIADcBAOwiE4BDmQA4fhMByBI3AUjsIxOAbH4QSchBNwCk7BaTgDZ+EsnIfzcAFeiPum+Z4y65OFvERLLfPIPDJGxsj8Mr8sIAvIgrKgjMiIjJWxspAsJAvLwrKoLCrjZJwsIUtIlChJhrKkLCmjMipLy9IyXsbLsrKsdNLJBJkgK8gKsqKsKCvJ22VleYesIqvKjq66rC5ryE6upqwla8vaso6sK+vJ+rK+bCAbyIayoWwkG8nGsrFsIh+UTeUAGAIPy0udaSFHQks5ClrJ1rKNbCvfhMdlezkGOsiOspN8Uo6DsdBFtneJ8hnZVU6CbvI5ORmelz3kVOgpX5S9ZG/ZR74k+8oOrp/sL6fDADlQzoJBcrAcIofKuVBXXupYPfm6TJYj5Sj5hlwCb8ox8i05Vo6T4+XbcoKcKCfJyXKKnCpT5DtymnxXpsr35HQ5Q86Us2SanC3nyPflXDlPzpcfyAXyQ7lQLpKL5RKZLj+SGXKpzJQfy2XyE5kll8sVcqVcJVfLNXKtXCfXyw1yo9wkN8stcqvcJj+V2+UOuVPukrvlHrlXfib3yc/lfvmFzJZfygPyT/Kg/Eoekl/LHPmNPCy/lUfkd/Ko/F4ekz/I4/KEPCl/lKfkT/K0PCPPynPyvPxZXpC/yIvSS6FASaWUVoHKo/KqGJVP5VfXqALqWlVQXaci6noVq25QhdSNqrAqooqqYipOFVcllFGorCIVqpKqlIqqm1RpdbOKV2VUWVVOOVVeJahbVAV1q6qoblOV1O2qsrpDVVFVVTVVXd2paqi7VE1VS9VWd6s6qq6qp+qre1QDda9qqO5TjdT9qrF6QDVRD6qm6iHVTD2smqtHVAv1qGqpHlOtVGvVRrVV7dTjqr16QnVQHVUn9aTqrJ5SXdTTKlE9o7qqZ1U39Zzqrp5XPdQLqqd6UfVSvVUf9Yu6qLzqp/qrJDVADVSvqEFqsBqihqph6lU1XL2mRqjXVbIaqUapN9Ro9aYao95SY9U4NV69rSaoiWqSmqymqKkqRb2jpql3Vap6T01XM9RMNUulqdlqyOVK8/+F/Hf/Tv6IX199q9qmPlXb1Q61U+1Su9UetVftVfvUPrVf7VfZKlsdUAfUQXVQHVKHVI7KUYfVYXVEHVFH1VF1TB1Tx9UJdU79qE6pn9RpdUadUefUeXVeXbj8PRAatNRKax3oPDqvjtH5dH59jS6gr9UF9XU6oq/XsfoGXUjfqAvrIrqoLqbjdHFdQhuN2mrSoS6pS+movkmX1jfreF1Gl9XltNPldYK+5d/O/6P1tdPtdHvdXnfQHXQn3Ul31p11F91FJ+pE3VV31d10N91dd9c9dA/dU/fUvXQv3Uf30X11X91P99NJOkkP1K/oQXqwHqKH6mH6VT1cD9cj9AidrJP1KD1Kj9aj9Rg9Ro/VY/V4PV5P0BP0JD1JT9FTdIpO0dP0NJ2qU/V0PV3P1DN1mk7Tc/QcPVfP1fP1fL1AL9AL9UK9WC/W6TpdZ+gMnakz9TK9TGfp5Xq5XqlX6tV6tV6r1+r1er3eqDfqzXqzztLb9Da9XW/XO/VOvVvv1nv1Xr1P79P79X6drbP1AX1AH9QH9SF9SOfoHH1YH9ZH9BF9VB/Vx/QxfVwf1yf1SX1Kn9Kn9Wl9Vp/V5/V5fUFf0Bf1xUuXfYEMZKADHeQJ8gQxQUyQP8gfFAgKBAWDgkEkiASxQWxQKLgxKBwUCYoGxYK4oHhQIjABBjagIAxKBqWCaHBTUDq4OYgPygRlg3KBC8oHCcEtQYXg1qBicFtQKbg9qBzcEVQJqgbVgurBnUGN4K6gZlArqB3cHdQJ6v7l71DBvUHD4L6gUXB/0Dh4IGgSPBg0DR4KmgUPB82DR4IWwaNBy+CxoFXQOmgTtA3a/av1g3pB/eCeoME/re/96SJPuH6mv0kyA8xA84oZZAabIWaoGWZeNcPNa2aEed0km5FmlHnDjDZvmjHmLTPWjDPjzdtmgploJpnJZoqZalLMO2aaedekmvfMdDPDzDSzTJqZbeaY981cM8/MNx+YBeZDs9AsMovNEpNuPjIZZqnJNB+bZeYTk2WWmxVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq9lmPjXbzQ6z0+wyu80es9d8ZvaZz81+84XJNl+aA+ZP5qD5yhwyX5sc8405bL41R8x35qj53hwzP5jj5oQ5aX40p8xP5rQ5Y86ac+a8+dlcML+Yi8Zfuri/9PaOGjXmwTwYgzGYH/NjASyABbEgRjCCsRiLhbAQFsbCWBSLYhzGYQksgZcQEpbEkhjFKJbG0hiP8VgWy6JDhwmYgBWwAlbEilgJK2FlrIxVsApWw2p4J96Jd+FdWAtr4d14N9bFulgf62MDbIANsSE2wkbYGBtjE2yCTbEpNsNm2BybYwtsgS2xJbbCVtgG22A7bIftsT12wA7YCTthZ+yMXbALJmIidsWu2A27YXfsjj2wB/bEntgLe2Ef7IN9sS/2O9cPkzAJB+JAHISDcAgOwWE4DIfjcByBIzAZk3EUjsLROBrH4Bgci+NwPL6NE3AiTsLJOAWnYgqm4DSchqmYitNxOs7EmZiGaTgH5+BcnIvzcT4uwAW4EBfiYlyM6ZiOGZiBmZiJy3AZZmEWrsAVuApX4Rpcg+twHW7ADbgJN+EW3ILbcBtux+24E3fibtyNe3Ev7sN9uB/3YzZm4wE8gAfxIB7CQ5iDOXgYD+MRPIJH8Sgew2N4HI/jSTyJp/AUnsbTeBbP4nn8GS/gL3gRPcZYKfLba2wBe60taK+zMTaf/du4qC1m42xxW8IaW9gW+U2M1tp4W8aWteWss+Vtgr3ld3EVW9VWs9XtnbaGvcvW/F3cwN5rG9r7bCN7v61v7/lN3Ng+YJvYR21T+5htZlvb5ratbWEftS3tY7aVbW3b2La2s33KdrFP20T7jO1qn/1dnGGX2nV2vd1gN9p99nN71p6zR+x39rz92faz/e0w+6odbl+zI+zrNrnRyN/GdqQdb9+2E+xEO8lOtlPs1N/FM+0sm2Zn2zn2fTvXzvtdnG4/sgtspl1oF9nFdsmv8aU1ZdqP7TL7ic2yy+0Ku9KusqvtGrv2r2tdaTfbLXar3Ws/s9vtDrvT7rK77Z5f40vnsd9+YbPtl/aw/dYetF/ZQ/aozbHf/BpfOr+j9nt7zP5gj9sT9qT90Z6yP9nT9syv53/p3H+0v9iL1ltBQJIUaQooD+WlGMpH+ekaKkDXUkG6jiJ0PcXSDVSIbqTCVISKUjGKo+JUggwhWSIKqSSVoijdRKXpZoqnMlSWypGj8pRAt1AFupUq0m1UiW6nynQHVaGqVI2q051Ug+6imlSLatPdVIfqUj2qT/dQA7qXGtJ91Ijup8b0ADWhB6kpPUTN6GFqTo9QC3qUWtJj1IpaUxtqS+3ocWpPT1AH6kid6EnqTE9RF3qaEukZ6krPUjd6jrrT89SDXqCe9CL1ot7Uh16ivvQy9aP+lEQDaCC9QoNoMA2hoTSMXqXh9BqNoNcpmUbSKHqDRtObNIbeorE0jsbT2zSBJtIkmkxTaCql0Ds0jd6lVHqPptMMmkmzKI1m0xx6n+bSPJpPH9AC+pAW0iJaTEsonT6iDFpKmfQxLaNPKIuW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jT6l7bSDdtIu2k17aC99Rvvoc9pPX1A2fUkH6E90kL6iQ/Q15dA3dJi+pSP0HR2l7+kY/UDH6QSdpB/pFP1Ep+kMnaVzdJ5+pgv0C10kTyKEUIYq1GEQ5gnzhjFhvjB/eE1YILw2LBheF0bC68PY8IawUHhjWDgsEhYNi4VxYfGwRGhCDG1IYRiWDEuF0fCmsHR4cxgflgnLhuVCF5YPE8JbwgrhrWHF8LawUnh7WDm8I6wSVg0fvb96eGdYI7wrrBnWCmuHd4d1wrphvbB+eE/YILw3bBjeFzYK7w8rhg+ETcIHw6bhQ2Gz8OGwefhI2CJ8NGwZPha2CluHbcK2Ybvw8bB9+ETYIewYdgqfDDuHT4VdwqfDxPCZsGv47B/uTwoHhAPDV8JXQu/vU4ujS6Lp0Y+iGdGl0czox9Fl0U+iWdHl0RXRldFV0dXRNdG10XXR9dEN0Y3RTdHN0S3RrVHv6+cVDpx0ymkXuDwur4tx+Vx+d40r4K51Bd11LuKud7HuBlfI3egKuyKuqCvm4lxxV8IZh846cqEr6Uq5qLvJlXY3u3hXxpV15Zxz5V2Ca+vauXauvXvCdXAdXSf3pHvSPeWeck+7p90zrqt71nVzz7nu7nnXw73gXnAvul6ut+vjXnJ93cuun+vvklySG+gGukFukBvihuS5fA3mRrgRLtklu1FulBvtRrsxbowb68a68W68m+AmuElukpviprgUl+KmuWku1aW66W66m+lmujSX5ua4OW6um+vmu/luQfwCt9AtdIvdYpfu0l2Gy3CZLtMtc8tclstyK9wKt8qtcmvcGrfOrXMb3Aa3yW1yW9wWt81tc9vddrfT7XS73W631+11+9w+t9/td9ku2x1wB9xBd9Adcl+7HPeNO+y+dUfcd+6o+94dcz+44+6EO+l+dKfcT+60O+POunPuvPvZXXC/uIvOu5TIO5FpkXcjqZH3ItMjMyIzI7MiaZHZkTmR9yNzI/Mi8yMfRBZEPowsjCyKLI4siaRHPopkRJZGMiMfR5ZFPolkRZZHVkRWRlZFVke8L7499CV9KR/1N/nS/mYf78v4sr6cd768T/C3+Ar+Vl/R3+Yr+dt9ZX+Hr+Kr+mr+Md/Kt/ZtfFvfzj/u2/snfAff0XfyT/rO/infxT/tE/0zvqt/1nfzz/nu/nnfw7/ge/oXfS/f2/fxL/m+/mXfz/f3SX6AH+hf8YP8YD/ED/XD/Kt+uH/Nj/Cv+2Q/0o/yb/jR/k0/xr/lx/pxfrx/20/wE/0kP9lP8VN9in/HT/Pv+lT/np/uZ/iZfpZP87P9HP++n+vn+fn+A7/Af+gX+kV+sV/i0/1HPsMv9Zn+Y7/Mf+Kz/HK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/ynfrvf4Xf6XX633+P3+s/8Pv+53++/8Nn+S3/A/8kf9F/5Q/5rn+O/8Yf9t/6I/84f9d/7Y/4Hf9yf8Cf9j/6U/8mf9mf8WX/On/c/+wv+F3+R/2eNMcYYY+xfknron+8f8He2ycvjkoFCiGt3FMv52/1aCLGp8J/ng2Vc54gQ4pn+PR/+y6hTJykp6fKxWUoEpRYJISJX8n+9DbkcLxedxFMiUXQUFf7u+gbL3ufpH9TXl4+J3i5E/r/JiRFX4iv1b/0H9R9/cnxG5fBs7G/rX7h8vXlp/dFFQsSXupKTT1yJr9Sv+A/qF2n/j9Z/uX6+r1KE6PA3OQXElfhK/QTxhHhWJP7mSMYYY4wxxhhj7M8Gy2rd/+D+89f787g/30z/ujmv+Gv8h/fnjDHGGGOMMcYYu/qe793n6ccTEzt25wlPeMKTv06u9m8mxhhjjDHG2H/alYv+v2zJc3UXxBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5UL/HR8ndrXPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/k8AAAD//10xQEY=")
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000180)=0x4100)

51.736226229s ago: executing program 2 (id=192):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x84e, 0xfffffffd, 0x8, 0x4717b238}, 0x1cd28, 0x0, 0x7, 0x4, 0x101, 0xc, 0x5, 0xe, 0x4, 0x4, {0x7, 0x1, 0x9, 0x9, 0x5, 0x10}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x5, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xa, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c9}, 0x440d4)

51.377484695s ago: executing program 33 (id=192):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x84e, 0xfffffffd, 0x8, 0x4717b238}, 0x1cd28, 0x0, 0x7, 0x4, 0x101, 0xc, 0x5, 0xe, 0x4, 0x4, {0x7, 0x1, 0x9, 0x9, 0x5, 0x10}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x5, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xa, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c9}, 0x440d4)

49.431934127s ago: executing program 5 (id=200):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000006040)=ANY=[@ANYBLOB="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"], 0x1, 0x553b, &(0x7f0000006200)="$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")
r0 = socket$inet(0x2, 0x801, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = fsopen(0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001b00)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '9J\t', 0x0, 0x32, 0x1, @remote, @mcast2}}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
lseek(r1, 0x4, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x80000)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0xe000001a})
finit_module(r6, 0x0, 0x3)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
close(r7)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

45.627721655s ago: executing program 5 (id=203):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_open_dev$vcsa(0x0, 0x1, 0x102)
ioctl$int_in(r2, 0x5452, &(0x7f0000001840)=0x5d4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18}}], 0x1, 0x0)
r7 = dup3(r6, r5, 0x0)
connect$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000004afadc81f25fe4be000000e5ff94000800c81199a051e1e8a9a36a750e7c5d6f095d1bdca176ac045e8c523feeeecae8c9abe2703e29f372665cab185bb681e6fe88b20f73a93492d3eb8f8f8fafb9a0ac41ad34"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94)

43.680370566s ago: executing program 5 (id=206):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0)

28.46422712s ago: executing program 34 (id=206):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0)

20.734879255s ago: executing program 1 (id=260):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1}, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x1000)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$eJzs3c9rXNUeAPDvnUnSpM17aR+Px2t4DwMuWpCmSS1W3djWhV0ULNiFiIuGJqmh0x80KdhaaAsuFBRE3Bbpxn/AvXTvTgR151qoIhUFLRm5d+6kk+ROk6admaT384GZOffcO3POd05P77n35swNoLTG0qdKxO6IxVNJxEjLuuForBzLt7v367XT6SOJev2NX5JI8rzm9ov56470KYkYjIhvjkb8q7q63PkrV89O1eoN1yP2L5y7uH/+ytV9c+emzsycmTk/eeDFg4cmXpo8OPlE4tyRvx47/vr/Pn7/nRdmv63tS+JwnOx/bzpWxLEB9aQgcyzGYjEPsTW/LyIOpYmC72WrWVcI2zpfDzammv977I+I/8RIVLOlhpGY+6inlQM6ql6NqAMllej/UFLNcUDz2H59x8EnOzwq6Z67RxoHQKvj72ucG4nB7Nho+72k5ciocW5j5xMoPy3j/rXRW+kjlp2H+GOpdfqeQDnt3LgZEf8tij/J6rYzizSNvxKVlveldZqIiIE8/eoGim4mWs+dPOZ5mEevxCPE39oO6XdxOH9N849usPyxFcvdjh+AcrpzJN+RZ3vjB/u/dOzRHP9EwfhnuGDftRG93v+1H/819/eD2TnyyopxWDpmOVH8kf0rM3788Nin7cpvHf/dv5Zk9WiOBbvh7s2I0RXxf5AN9JKl9k8K2j/d5NTh9ZXx2nc/H2u3bnn8o7e6HX/9dsSewuOfB6PSNPWQ65P7Z+dqMxON58Iyvvr67S/ald/r+NP2394m/pb2r6x8X/qdXFxnGV+euH1uoM264TXjr/w0kDSON5uf8e7UwsKlyYiB5Hi+SUv+gYfXpblN8zPS+Pc+W9z/l/37v7n8c4ZaD2DWcPHNs/fardtI+7dcTF6sr7MO7aTxT6/d/qv6f5r3yTrL+P2ty/9vt64g/og8/qHHCQwAAAAAAABKqJJdg00q40vpSmV8vDFf9t+xvVK7ML/w3OyFy+enI/Zmfw/ZX2le6R5pLCfp8mT+97DN5QMrlp+PiF0R8Vl1KFseP32hNt3r4AEAAAAAAAAAAAAAAAAAAGCT2JHP/2/ep/q3amP+P1ASnbzBHLC56f9QXln/X3WLJ6AM7P+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/wcAAACAp9KuZ+78kETEjZeHskdqIF9X7WnNgE7rL8irX+9BRYCus4+H8lq69G/6P5RO0fh/lT/zHwfsfHWAHkiKMrPBQf3hnf9O4TsBAAAAAAAAAAAAgA7Ys7v9/P91zQ0AtizT/qC8HmP+v58OgC3OT/9DeTnGB9aaxT/YboX5/wAAAAAAAAAAAADQNcPZI6mM53OBh6NSGR+P+EdE7Iz+ZHauNjMREf+MiO+r/dvS5cleVxoAAAAAAAAAAAAAAAAAAACeMvNXrp6dqtVmLrUm/lqV83QnmndB7UJZr8QjviuS7n8tQxHR80bpWKKvJSeJuJG2/Kao2KX52BzVyBI9/o8JAAAAAAAAAAAAAAAAAABKqGXucbHRz7tcIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovgf3/+9cotcxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb098BAAD///yqQiE=")

20.187165977s ago: executing program 1 (id=262):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x4100)

19.98291757s ago: executing program 1 (id=263):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1)
r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7)

18.918786639s ago: executing program 6 (id=264):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@oldalloc}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000000)={0x2, 0x100, 0x0, 0x80000002, 0x10, 0x4a})

18.913700758s ago: executing program 1 (id=266):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x48890)

18.75979557s ago: executing program 1 (id=267):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@resuid={'resuid', 0x3d, 0xee01}}, {@norecovery}, {@noinit_itable}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x459, &(0x7f0000000240)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
execveat$binfmt(r0, 0x0, 0x0, 0x0, 0x1000)
lsetxattr$security_capability(&(0x7f0000000180)='./file2\x00', &(0x7f0000000080), &(0x7f0000000380)=@v2={0x2000000, [{0x8e2, 0x6851}, {0x1, 0xce5226a3}]}, 0x14, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
truncate(&(0x7f0000000140)='./file2\x00', 0xff)
ftruncate(r0, 0x5)

17.408255678s ago: executing program 1 (id=271):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f00000005c0)={[{@journal_async_commit}, {@nojournal_checksum}, {@nomblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}, {@block_validity}, {@resgid}, {@inlinecrypt}]}, 0x0, 0x4fe, &(0x7f0000001400)="$eJzs3c9vI1cdAPDvTOJNNk2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Wx4yh2ShNWavI/IFGJA4ITZw5IHCr1xBHBDW69lANSgRVog8TBaPwjm03sJGQdext/PtJo5s0bz/e9teY97zeJXwAj60ZE7EXEtYh4OyJm2ueT9havt7bsugf37y0f3L+3nESj8dY/kmZ9di6OvCbzVPuekxHx/e9E/Cg5Gbe2s7u+VC6XttrlQr2yWajt7N5eqyytllZLG8XiwvzC3Kt3Xin2ra8vVH7zybfX3vjBB7/70sd/2vvmT7JmTbfrjvajn1pdzx3GyYxHxBuXEWwIxtr9uTbshnAhaUR8JiJebD7/MzHWfDfPp8tjDQB8CjQaM9GYOVoGAK66tJkDS9J8OxcwHWmaz7dyeM/FVFqu1uq37la3N1ZaubLZyKV318qluXaucDZySVaefy87flguxqPlOxHxbET8dOJ6s5xfPn+eAQDor6eOzf//nmjN/wDAFTd51gWLg2kHADA4Z87/AMCVY/4HgNFj/geA0WP+B4DRY/4HgFHzUWf+Hxt2SwCAgfjem29mW+Og/f3XK+/sbK9X37m9Uqqt5yvby/nl6tZmfrVaXS2X8svVyln3K1erm/Mvx/a7hXqpVi/UdnYXK9Xtjfpi83u9F0u5gfQKADjNsy98+JckIvZeu97c4shaDuZquNrSYTcAGBo5fxhdvoUbRpf/4wNnreXZ81eE379AsMZ7F3gR0G83Py//D6NK/h9Gl/w/jC75fxhdjUbSa83/9PASAOBKkeMHBvrzfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgippvb7JFymubzEU9HxGzkkrtr5dJcRDwTEX+eyE1k5fmhthgAeHzp35L2+l83Z16aPl57LfnPRHMfET/++Vs/e3epXt+az87/8/B8/f32+eIw2g8AnKUzT3fm8Y4H9+8td7ZBtueTb7UWF83iHrS3Vs14jGe7P05GLiKm/pW0ym3Z55WxPsTf24+Iz3Xrf9LMjcy2Vz49Hj+L/fRA46ePxE+bda199m/x2RN3nugZ86y1XmFUfJiNP693e/7SuNHcT3Zd/HiyOUI9vs74d3Bi/Os875PNsabb+HfjvDFe/v13e9btR3xhvFv85DB+0iP+S+eM/9EXv/xir7rGLyNuRvf4R2MV6pXNQm1n9/ZaZWm1tFraKBYX5hfmXr3zSrHQzFEXOpnqk/7+2q1nevb/1xFTPeJPntH/r53a68bhAPyr/779w6/0ir8f8Y2vdn//nzslfjYnfv3U+A8tTf225/LdWfyVVv/3/9/3/9Y543/8192Vc14KAAxAbWd3falcLm319SAXfb7hkYPkktrsoF8H1yPiCWjG8YPs8/jj3uf5dsqs6zV/+MUHz8eT2fcLHAx5YAIu3cOHftgtAQAAAAAAAAAAAAAAern0PydKh91DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArrL/BQAA///0iMmG")

13.756394174s ago: executing program 6 (id=275):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000140)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x1)

12.00179142s ago: executing program 6 (id=279):
r0 = openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$binfmt_elf64(r0, 0x0, 0x2b0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2, 0x709f, 0x6361, 0x20000008, 0xc, 0x80000005}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x1}, {0xe}}}, 0x24}}, 0x40004)

11.241680924s ago: executing program 6 (id=283):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@resuid={'resuid', 0x3d, 0xee01}}, {@norecovery}, {@noinit_itable}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x459, &(0x7f0000000240)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
execveat$binfmt(r0, 0x0, 0x0, 0x0, 0x1000)
lsetxattr$security_capability(&(0x7f0000000180)='./file2\x00', &(0x7f0000000080), &(0x7f0000000380)=@v2={0x2000000, [{0x8e2, 0x6851}, {0x1, 0xce5226a3}]}, 0x14, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
truncate(&(0x7f0000000140)='./file2\x00', 0xff)
ftruncate(r0, 0x5)

8.478997778s ago: executing program 6 (id=287):
r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xd01c4813, &(0x7f0000000000)={0x2, 0x100, 0x0, 0x80000002, 0x10, 0x4a})

7.299032147s ago: executing program 7 (id=289):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

7.2002223s ago: executing program 7 (id=290):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff, 0x200400)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000300)={[{@utf8}, {@utf8}, {@fat=@nfs}, {@uni_xlate}, {@utf8no}, {@shortname_win95}, {@fat=@nfs}, {@uni_xlateno}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@fat=@codepage={'codepage', 0x3d, '866'}}]}, 0x3, 0x35e, &(0x7f0000000bc0)="$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")
ioctl$BLKZEROOUT(r0, 0x127f, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)

6.722065184s ago: executing program 3 (id=293):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0)
ftruncate(r0, 0x5)

6.152258962s ago: executing program 7 (id=294):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x20000, 0x6c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3, 0x3}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

5.834332375s ago: executing program 7 (id=295):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1}, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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")

5.278643925s ago: executing program 7 (id=297):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@resuid={'resuid', 0x3d, 0xee01}}, {@norecovery}, {@noinit_itable}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x459, &(0x7f0000000240)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
execveat$binfmt(r0, 0x0, 0x0, 0x0, 0x1000)
lsetxattr$security_capability(&(0x7f0000000180)='./file2\x00', &(0x7f0000000080), &(0x7f0000000380)=@v2={0x2000000, [{0x8e2, 0x6851}, {0x1, 0xce5226a3}]}, 0x14, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
truncate(&(0x7f0000000140)='./file2\x00', 0xff)
ftruncate(r0, 0x5)

4.718973945s ago: executing program 6 (id=299):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)={[{@usrquota}, {@abort}, {@journal_ioprio}], [{@seclabel}]}, 0x21, 0x4d4, &(0x7f0000000f40)="$eJzs3c9vG1kdAPDvTH51s9lNFvYACNiyLCyoqp24u9FqT+UCQlUl1IoThzYkbhTFjqPYKU3oIb3xByBRiRP8CRyQOCD1xJ0b3LiUA1KBCmiQOBjNeJJmU7tJ1TSuMp+PNJp589z5vufRvOd+k/gFUFrnI2InIsYj4mZETBfnk2KLy70te92Tx3cXdx/fXUyi273+jySvz87FgX+TebO45rmIuPa9iB8nz8Ztb22vLjQa9Y2iXO0016vtre2LK82F5fpyfa1Wm5+bn/3k0se1E+vre83fPPruypUf/v53X3n4x51v/zRr1lRRd7AfJ6nX9bH9OJnRiLjyKoINwUjRn/FD5/vccl5DaUR8LiLez5//6RjJ7yYAcJZ1u9PRnT5YBgDOujTPgSVppcgFTEWaViq9HN67MZk2Wu3OhVutzbWlXq5sJsbSWyuN+myRK5yJsSQrz+XHT8u1Q+VLEfFORPx84o28XFlsNZaG+cEHAErszUPz/78nevM/AHDGnXvFrwcAXj/mcwAoH/M/AJSP+R8Aysf8DwDlY/4HgPIx/wNAqfzg6tVs6+4W33+9dHtrc7V1++JSvb1aaW4uVhZbG+uV5VZrOf/OnuZR12u0WutzH8XmnWqn3u5U21vbN5qtzbXOjfx7vW/Ux06lVwDA87zz3oM/JxGx8+kb+RYH1nIwV8PZlg67AcDQjAy7AcDQWO0Lysv/8YGj1msd+CtC90++LcDp+PCL8v9QVvL/UF7y/1Be8v9QXt1uYs1/ACgZOX7Az/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgxU3lW5JWirXApyJNK5WItyJiJsaSWyuN+mxEvB0Rf5oYm8jKc8NuNADwktK/JfGfYhnAD6YO144n/53I9xHxk19e/8WdhU5nYy47/8/98537xfnaqTceADiGvXl6bx7f8+Tx3cW97eirDFwN9IU9+k7vclnc3WLr1YzGaBEr+3Ay+a+kKPckETFyAvF37kXEF/r1P8lzIzNFXw/Hz2K/darx08/ET/O63j57Lz5/Am2BsnmQjT+X+z1/aZzP9/2f/3P5CPXy9sa/3WfGv3R//BsZMP6dP26Mj/7w/fFBdfcivjTaL36yHz8ZEP+DY8b/y5e/+v6guu6vIj6M/vEPxqp2muvV9tb2xZXmwnJ9ub5Wq83Pzc9+cunjWjXPUVf3MtXP+vunF94eFD/r/+SA+Pmdvzo1sP/fOGb/f/2/mz/62nPif+vr/e//u/m+//ufzYnfPGb8hcnfDpyws/hLA/p/1P2/cMz4D/+6vXTMlwIAp6C9tb260GjUNxyU+WDuZ0+aB87sfdIbfsOOOuhO91r6urTnlR6kxW050StfK9JYh6uGMhwBp+jpQz/slgAAAAAAAAAAAAAAAIOcxp8uDbuPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF3/DwAA//9Mo86H")
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @RTA_IIF={0x8, 0x3, r3}, @RTA_DST={0x8, 0x1, @broadcast}]}, 0x34}}, 0x0)

4.704992022s ago: executing program 3 (id=300):
r0 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

4.275917815s ago: executing program 35 (id=299):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)={[{@usrquota}, {@abort}, {@journal_ioprio}], [{@seclabel}]}, 0x21, 0x4d4, &(0x7f0000000f40)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @RTA_IIF={0x8, 0x3, r3}, @RTA_DST={0x8, 0x1, @broadcast}]}, 0x34}}, 0x0)

4.256436232s ago: executing program 3 (id=303):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
fstat(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000f40)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}], [{@fsname={'fsname', 0x3d, 'nombcache'}}, {@appraise_type}, {@euid_gt={'euid>', r1}}, {@hash}]}, 0x3, 0x57b, &(0x7f0000000800)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x102)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r5, 0x88, 0x67, 0x0, &(0x7f0000000180))
openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001ed)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
truncate(0x0, 0x400000000000001)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000840)="88", 0x1}], 0x1, &(0x7f0000002940)=ANY=[@ANYBLOB="1000"], 0x10}}], 0x1, 0x40002)

3.01959049s ago: executing program 0 (id=304):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x20000, 0x6c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3, 0x3}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

2.90648352s ago: executing program 0 (id=305):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140))
sendmsg$AUDIT_SET(r0, 0x0, 0x20040044)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r4, 0x0, 0x0, 0x850)
mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r2, 0x91502000)
pipe(&(0x7f0000000380)={<r5=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1.830416127s ago: executing program 0 (id=306):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1}, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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")

1.411783762s ago: executing program 7 (id=307):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000a80)=ANY=[], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x20, 0x3f, 0x2, {0x2, 0xf}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x38, &(0x7f0000000140)="1cef3ef784f40ae4ca8b2340e05bfbc88c8037c146eb8f8455be1ab1d0f81a9edca389239119c3c270d6c356cd12d964050d432065a9154c")

1.327739627s ago: executing program 0 (id=308):
r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xd01c4813, &(0x7f0000000000)={0x2, 0x100, 0x0, 0x80000002, 0x10, 0x4a})

944.244928ms ago: executing program 0 (id=309):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0xffffff6a)
pipe2(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r0, r3, 0xfffffffffffffc01, 0x0)
write$P9_RLOPEN(r3, &(0x7f00000004c0)={0x18, 0xd, 0x2, {{0x0, 0x2, 0x1}, 0x6}}, 0x18)
vmsplice(r2, &(0x7f0000000540)=[{&(0x7f0000000500)='i', 0x1}], 0x1, 0x0)

789.646631ms ago: executing program 3 (id=310):
socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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")
r1 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0)
sendfile(r0, r1, 0x0, 0x1ee)

788.93591ms ago: executing program 0 (id=311):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x9af, 0x80, 0xfe, 0x2, 0x0, '\x00', 0x0, 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x0, 0xfa, 0xf5, '\x00', 0x12}, {0x0, 0x9, 0xf5, '\x00', 0x10}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x1, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x4}, {0xcf, 0x6, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x31, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}})

317.804736ms ago: executing program 3 (id=312):
r0 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=313):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_open_dev$vcsa(0x0, 0x1, 0x102)
ioctl$int_in(r2, 0x5452, &(0x7f0000001840)=0x5d4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18}}], 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e)

kernel console output (not intermixed with test programs):

33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.070339][ T4372] 8021q: adding VLAN 0 to HW filter on device team0
[  101.149020][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.180964][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.224524][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.234474][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.291759][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  101.344059][ T4526] loop2: detected capacity change from 0 to 40427
[  101.394408][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  101.422732][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.461859][ T4526] F2FS-fs (loop2): invalid crc value
[  101.489657][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.499471][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.523949][ T4526] F2FS-fs (loop2): Found nat_bits in checkpoint
[  101.595390][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  101.613203][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  101.663348][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  101.724315][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  101.772781][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  101.792043][ T4526] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  101.845768][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  101.883479][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  101.934067][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  101.952499][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.014765][ T4372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  102.069251][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.103174][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.160501][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.771896][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.824386][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.909408][ T4372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.840986][ T4572] loop2: detected capacity change from 0 to 512
[  104.020168][ T4572] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  104.219012][   T26] audit: type=1800 audit(1773057955.119:5): pid=4572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.72" name="file1" dev="loop2" ino=15 res=0 errno=0
[  104.325947][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.400137][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.496498][ T4589] loop0: detected capacity change from 0 to 1024
[  104.564731][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.610057][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.623480][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.637178][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  104.649370][ T4589] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  104.724876][ T4372] device veth0_vlan entered promiscuous mode
[  104.758232][ T4589] EXT4-fs (loop0): orphan cleanup on readonly fs
[  104.838859][ T4372] device veth1_vlan entered promiscuous mode
[  104.853105][ T4589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.75: bg 0: block 10: padding at end of block bitmap is not set
[  104.936134][ T4589] Quota error (device loop0): write_blk: dquota write failed
[  104.979579][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  104.988518][ T4589] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  105.030254][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  105.051593][ T4589] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  105.091706][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.126695][ T4589] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.75: Failed to acquire dquot type 0
[  105.163010][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.202169][ T4372] device veth0_macvtap entered promiscuous mode
[  105.260154][ T4589] Quota error (device loop0): write_blk: dquota write failed
[  105.305960][ T4372] device veth1_macvtap entered promiscuous mode
[  105.314498][ T4589] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  105.314684][ T4569] loop1: detected capacity change from 0 to 40427
[  105.363822][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.411964][ T4589] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  105.426763][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.469899][ T4589] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.75: Failed to acquire dquot type 0
[  105.503773][ T4569] F2FS-fs (loop1): Unrecognized mount option "memory=low" or missing value
[  105.591520][ T4589] EXT4-fs error (device loop0): ext4_free_blocks:6232: comm syz.0.75: Freeing blocks not in datazone - block = 0, count = 4096
[  105.615052][ T4567] loop3: detected capacity change from 0 to 40427
[  105.626796][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.711027][ T4567] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff
[  105.729432][ T4589] Quota error (device loop0): write_blk: dquota write failed
[  105.763122][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.780781][ T4589] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  105.801982][ T4567] F2FS-fs (loop3): invalid crc value
[  105.831288][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.856539][ T4589] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  105.884786][ T4602] printk: syz.1.77 (4602): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated).
[  105.905697][ T4567] F2FS-fs (loop3): Found nat_bits in checkpoint
[  105.918311][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.951196][ T4589] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.75: Failed to acquire dquot type 0
[  105.976150][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.041342][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.066456][ T4589] EXT4-fs (loop0): 1 orphan inode deleted
[  106.076977][ T4589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  106.108217][ T4372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.142918][ T4567] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  106.183634][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.224803][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.287250][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.353953][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.394876][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.421332][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.461395][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.519204][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.594774][ T4189] attempt to access beyond end of device
[  106.594774][ T4189] loop3: rw=2049, want=45104, limit=40427
[  106.610235][ T4372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.668275][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.679679][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.748039][ T4372] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.836026][ T4372] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.922619][ T4372] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.000710][ T4372] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.076575][ T4620] loop0: detected capacity change from 0 to 512
[  107.233265][ T4620] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  107.257678][ T4623] loop1: detected capacity change from 0 to 128
[  107.356834][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.385178][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.489607][ T4595] loop2: detected capacity change from 0 to 40427
[  107.515827][ T4623] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  107.546659][ T4595] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  107.561697][ T4595] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  107.611448][ T4623] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  107.626185][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  107.649530][ T4595] F2FS-fs (loop2): invalid crc value
[  107.686621][ T4595] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  107.770228][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.840869][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.886417][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  107.939307][ T4632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.033561][ T4595] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  108.058287][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  108.071517][ T4595] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  108.115863][ T4640] loop3: detected capacity change from 0 to 512
[  108.315258][ T4640] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value
[  108.622079][ T4647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.89'.
[  108.673152][ T4650] loop5: detected capacity change from 0 to 512
[  108.696431][ T4652] loop0: detected capacity change from 0 to 512
[  108.769952][ T4647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.89'.
[  108.897035][ T4658] loop3: detected capacity change from 0 to 1024
[  108.908748][ T4652] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  108.927603][ T4650] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,errors=remount-ro,. Quota mode: writeback.
[  108.954049][ T4650] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.042113][ T4658] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  109.052445][ T4658] EXT4-fs (loop3): orphan cleanup on readonly fs
[  109.122880][ T4658] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.90: bg 0: block 10: padding at end of block bitmap is not set
[  109.143384][ T4658] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.90: Failed to acquire dquot type 0
[  109.157593][ T4658] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.90: Failed to acquire dquot type 0
[  109.177419][ T4658] EXT4-fs error (device loop3): ext4_free_blocks:6232: comm syz.3.90: Freeing blocks not in datazone - block = 0, count = 4096
[  109.193770][ T4658] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.90: Failed to acquire dquot type 0
[  109.209388][ T4658] EXT4-fs (loop3): 1 orphan inode deleted
[  109.219244][ T4658] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  109.853712][ T4680] loop5: detected capacity change from 0 to 256
[  110.032038][ T4680] FAT-fs (loop5): Directory bread(block 64) failed
[  110.075816][ T4680] FAT-fs (loop5): Directory bread(block 65) failed
[  110.104024][ T4685] loop0: detected capacity change from 0 to 128
[  110.114880][ T4680] FAT-fs (loop5): Directory bread(block 66) failed
[  110.151649][ T4680] FAT-fs (loop5): Directory bread(block 67) failed
[  110.160866][ T4685] =======================================================
[  110.160866][ T4685] WARNING: The mand mount option has been deprecated and
[  110.160866][ T4685]          and is ignored by this kernel. Remove the mand
[  110.160866][ T4685]          option from the mount to silence this warning.
[  110.160866][ T4685] =======================================================
[  110.186962][ T4680] FAT-fs (loop5): Directory bread(block 68) failed
[  110.311451][ T4680] FAT-fs (loop5): Directory bread(block 69) failed
[  110.351117][ T4680] FAT-fs (loop5): Directory bread(block 70) failed
[  110.395975][ T4680] FAT-fs (loop5): Directory bread(block 71) failed
[  110.431159][ T4680] FAT-fs (loop5): Directory bread(block 72) failed
[  110.440349][ T4694] loop3: detected capacity change from 0 to 512
[  110.469971][ T4680] FAT-fs (loop5): Directory bread(block 73) failed
[  110.472468][ T4685] EXT4-fs (loop0): Test dummy encryption mode enabled
[  110.520399][ T4685] EXT4-fs (loop0): inline encryption not supported
[  110.553952][ T4685] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,errors=continue,inlinecrypt,,errors=continue. Quota mode: none.
[  110.614264][ T4685] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  110.837131][ T4694] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value
[  111.191622][ T4708] xt_time: invalid argument - start or stop time greater than 23:59:59
[  113.120428][ T4730] loop5: detected capacity change from 0 to 1024
[  113.279273][ T4730] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  113.307532][ T4734] loop0: detected capacity change from 0 to 1024
[  113.379428][ T4734] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  113.389593][ T4734] EXT4-fs (loop0): orphan cleanup on readonly fs
[  113.401068][ T4734] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.104: bg 0: block 10: padding at end of block bitmap is not set
[  113.419696][ T4734] __quota_error: 11 callbacks suppressed
[  113.419714][ T4734] Quota error (device loop0): write_blk: dquota write failed
[  113.434195][ T4734] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  113.445289][ T4734] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  113.456440][ T4734] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.104: Failed to acquire dquot type 0
[  113.472033][ T4734] Quota error (device loop0): write_blk: dquota write failed
[  113.480103][ T4734] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  113.492575][ T4734] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  113.505249][ T4734] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.104: Failed to acquire dquot type 0
[  113.517509][ T4734] EXT4-fs error (device loop0): ext4_free_blocks:6232: comm syz.0.104: Freeing blocks not in datazone - block = 0, count = 4096
[  113.533619][ T4734] Quota error (device loop0): write_blk: dquota write failed
[  113.541428][ T4734] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  113.553995][ T4734] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  113.564366][ T4734] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.104: Failed to acquire dquot type 0
[  113.576932][ T4734] EXT4-fs (loop0): 1 orphan inode deleted
[  113.595545][ T4734] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  113.613412][   T26] audit: type=1800 audit(1773057964.519:8): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.106" name="bus" dev="loop5" ino=18 res=0 errno=0
[  113.917797][ T4730] tc_dump_action: action bad kind
[  114.440963][ T4754] loop3: detected capacity change from 0 to 512
[  114.574057][ T4754] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value
[  114.720190][ T4763] loop2: detected capacity change from 0 to 512
[  114.839847][ T4763] EXT4-fs (loop2): Ignoring removed orlov option
[  114.871404][ T4763] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  114.996552][ T4763] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.107: corrupted in-inode xattr
[  115.108777][ T4763] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.107: couldn't read orphan inode 15 (err -117)
[  115.201587][ T4255] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  115.229025][ T4763] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,noquota,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,max_dir_size_kb=0x0000000000000003,noinit_itable,init_itable=0x0000000000000004,,errors=continue. Quota mode: none.
[  115.526149][ T4255] usb 4-1: Using ep0 maxpacket: 32
[  115.681792][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  115.694379][ T4787] loop5: detected capacity change from 0 to 1024
[  115.721502][ T4255] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  115.853918][ T4224] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  116.081903][ T4787] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  116.093365][ T4787] EXT4-fs (loop5): orphan cleanup on readonly fs
[  116.124409][ T4787] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.120: bg 0: block 10: padding at end of block bitmap is not set
[  116.159470][ T4787] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.120: Failed to acquire dquot type 0
[  116.174523][ T4787] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.120: Failed to acquire dquot type 0
[  116.205820][ T4787] EXT4-fs error (device loop5): ext4_free_blocks:6232: comm syz.5.120: Freeing blocks not in datazone - block = 0, count = 4096
[  116.226964][ T4787] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.120: Failed to acquire dquot type 0
[  116.244792][ T4787] EXT4-fs (loop5): 1 orphan inode deleted
[  116.404021][ T4787] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  116.541662][ T4224] usb 3-1: unable to get BOS descriptor or descriptor too short
[  116.591711][ T4224] usb 3-1: not running at top speed; connect to a high speed hub
[  116.614490][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  116.635626][ T4255] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  116.648422][ T4255] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  116.679544][ T4794] loop0: detected capacity change from 0 to 512
[  116.685711][ T4255] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  116.705293][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.728706][ T4255] usb 4-1: config 0 descriptor??
[  116.752051][ T4224] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.789621][ T4794] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  116.816066][ T4224] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  116.864337][ T4794] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.122: corrupted xattr entries
[  116.948229][ T4794] EXT4-fs (loop0): Remounting filesystem read-only
[  117.001367][ T4794] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  117.045272][ T4255] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  117.082315][ T4794] EXT4-fs (loop0): 1 orphan inode deleted
[  117.089649][ T4794] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,norecovery,. Quota mode: none.
[  117.151611][ T4224] usb 3-1: string descriptor 0 read error: -22
[  117.158280][ T4224] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  117.221498][ T4224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.349751][ T4224] usb 3-1: 0:2 : does not exist
[  117.476160][ T4806] loop0: detected capacity change from 0 to 512
[  117.506581][ T4806] EXT4-fs (loop0): Unrecognized mount option "seclabel" or missing value
[  117.561182][ T4809] loop5: detected capacity change from 0 to 256
[  117.602665][ T4809] exfat: Deprecated parameter 'namecase'
[  117.609108][ T4809] exfat: Deprecated parameter 'utf8'
[  117.703666][ T4809] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  118.021520][ T4817] loop5: detected capacity change from 0 to 256
[  118.081910][ T1325] usb 4-1: USB disconnect, device number 2
[  118.164049][ T4817] FAT-fs (loop5): Directory bread(block 64) failed
[  118.218090][ T1325] usblp0: removed
[  118.260661][ T4817] FAT-fs (loop5): Directory bread(block 65) failed
[  118.316048][ T4817] FAT-fs (loop5): Directory bread(block 66) failed
[  118.376908][ T4817] FAT-fs (loop5): Directory bread(block 67) failed
[  118.384371][ T4817] FAT-fs (loop5): Directory bread(block 68) failed
[  118.445707][ T4817] FAT-fs (loop5): Directory bread(block 69) failed
[  118.492109][ T4817] FAT-fs (loop5): Directory bread(block 70) failed
[  118.520717][ T4817] FAT-fs (loop5): Directory bread(block 71) failed
[  118.580515][ T4817] FAT-fs (loop5): Directory bread(block 72) failed
[  118.622517][ T4817] FAT-fs (loop5): Directory bread(block 73) failed
[  118.686281][ T4834] loop0: detected capacity change from 0 to 1024
[  118.761709][ T4834] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  118.772745][ T4834] EXT4-fs (loop0): orphan cleanup on readonly fs
[  118.782036][ T4834] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.132: bg 0: block 10: padding at end of block bitmap is not set
[  118.801386][ T4834] __quota_error: 9 callbacks suppressed
[  118.801407][ T4834] Quota error (device loop0): write_blk: dquota write failed
[  118.821110][ T4834] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  118.832347][ T4834] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  118.844904][ T4834] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.132: Failed to acquire dquot type 0
[  118.888154][ T4834] Quota error (device loop0): write_blk: dquota write failed
[  118.895876][ T4834] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  118.910067][ T4834] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  118.923325][ T4834] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.132: Failed to acquire dquot type 0
[  118.937485][ T4834] EXT4-fs error (device loop0): ext4_free_blocks:6232: comm syz.0.132: Freeing blocks not in datazone - block = 0, count = 4096
[  118.954763][ T4834] Quota error (device loop0): write_blk: dquota write failed
[  118.964527][ T4834] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  118.976078][ T4834] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  118.986440][ T4834] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.132: Failed to acquire dquot type 0
[  118.999245][ T4834] EXT4-fs (loop0): 1 orphan inode deleted
[  119.007017][ T4834] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  119.651537][ T4224] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  119.957737][ T4849] loop5: detected capacity change from 0 to 512
[  119.998648][ T4224] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  120.027943][ T4849] EXT4-fs (loop5): Unrecognized mount option "seclabel" or missing value
[  120.068372][ T4224] usb 3-1: USB disconnect, device number 2
[  120.256820][ T4851] loop2: detected capacity change from 0 to 2048
[  120.359180][ T4851] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  120.432789][ T4853] loop5: detected capacity change from 0 to 1024
[  120.506112][ T4851] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.517832][ T4853] EXT4-fs (loop5): Ignoring removed nobh option
[  120.545063][ T4853] EXT4-fs (loop5): Ignoring removed bh option
[  120.581832][   T26] audit: type=1800 audit(1773057971.489:9): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.137" name="file1" dev="loop2" ino=15 res=0 errno=0
[  120.631310][ T4853] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  120.736526][ T4853] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,acl,dioread_nolock,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  120.966272][ T4861] loop2: detected capacity change from 0 to 1024
[  121.013947][ T4861] EXT4-fs (loop2): inline encryption not supported
[  121.064183][ T4861] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.141: lblock 2 mapped to illegal pblock 2 (length 1)
[  121.093786][ T4861] EXT4-fs (loop2): Remounting filesystem read-only
[  121.131567][ T4861] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.141: lblock 0 mapped to illegal pblock 48 (length 1)
[  121.251414][ T4861] EXT4-fs (loop2): Remounting filesystem read-only
[  121.259707][ T4861] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.141: Failed to acquire dquot type 0
[  121.324296][ T4861] EXT4-fs (loop2): Remounting filesystem read-only
[  121.351709][ T4861] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  121.408134][ T4861] EXT4-fs (loop2): Remounting filesystem read-only
[  121.442495][ T4861] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.141: mark_inode_dirty error
[  121.482798][ T4861] EXT4-fs (loop2): Remounting filesystem read-only
[  121.508138][ T4861] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[  121.551389][ T4861] EXT4-fs (loop2): 1 orphan inode deleted
[  121.557560][ T4861] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,noblock_validity,grpquota,errors=remount-ro,auto_da_alloc,inlinecrypt,. Quota mode: writeback.
[  121.577474][ T4289] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  121.635641][ T4861] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.141: Invalid inode table block 1 in block_group 0
[  121.652454][ T4289] EXT4-fs (loop2): Remounting filesystem read-only
[  121.677160][ T4289] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:7: Failed to release dquot type 0
[  121.713455][ T4289] EXT4-fs (loop2): Remounting filesystem read-only
[  121.731319][ T4861] EXT4-fs (loop2): Remounting filesystem read-only
[  121.738821][ T4861] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  121.835493][ T4861] EXT4-fs (loop2): Remounting filesystem read-only
[  121.904321][ T4185] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0
[  121.967002][ T4866] loop5: detected capacity change from 0 to 1024
[  121.986552][ T4185] EXT4-fs (loop2): Remounting filesystem read-only
[  121.999453][ T4185] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  122.022718][ T4868] loop3: detected capacity change from 0 to 1024
[  122.045865][ T4866] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  122.055388][ T4866] EXT4-fs (loop5): orphan cleanup on readonly fs
[  122.065414][ T4185] EXT4-fs (loop2): Remounting filesystem read-only
[  122.078488][ T4866] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.144: bg 0: block 10: padding at end of block bitmap is not set
[  122.108828][ T4866] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.144: Failed to acquire dquot type 0
[  122.132531][ T4866] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.144: Failed to acquire dquot type 0
[  122.158959][ T4866] EXT4-fs error (device loop5): ext4_free_blocks:6232: comm syz.5.144: Freeing blocks not in datazone - block = 0, count = 4096
[  122.176241][ T4866] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.144: Failed to acquire dquot type 0
[  122.191625][ T4866] EXT4-fs (loop5): 1 orphan inode deleted
[  122.192191][ T4868] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  122.210692][ T4185] EXT4-fs error (device loop2): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error
[  122.225117][ T4866] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  122.280814][ T4185] EXT4-fs (loop2): Remounting filesystem read-only
[  122.336318][ T4868] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000009,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none.
[  122.465860][ T4874] loop5: detected capacity change from 0 to 2048
[  122.539551][ T4874] EXT4-fs (loop5): Ignoring removed oldalloc option
[  122.590891][ T4868] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.145: missing EA_INODE flag
[  122.612630][ T4874] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c019, mo2=0002]
[  122.621082][ T4874] System zones: 0-7
[  122.693714][ T4874] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,nodioread_nolock,noquota,oldalloc,nombcache,min_batch_time=0x000000000000c619,i_version,,errors=continue. Quota mode: none.
[  122.860445][ T4868] EXT4-fs (loop3): Remounting filesystem read-only
[  122.891805][ T4874] EXT4-fs error (device loop5): ext4_find_extent:929: inode #2: comm syz.5.146: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  122.920496][ T4868] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.145: error while reading EA inode 11 err=-117
[  122.967650][ T4868] EXT4-fs (loop3): Remounting filesystem read-only
[  123.250824][ T4890] loop3: detected capacity change from 0 to 256
[  123.399355][ T4895] loop2: detected capacity change from 0 to 512
[  123.428243][ T4890] FAT-fs (loop3): Directory bread(block 64) failed
[  123.461364][ T4890] FAT-fs (loop3): Directory bread(block 65) failed
[  123.474572][ T4890] FAT-fs (loop3): Directory bread(block 66) failed
[  123.497804][ T4895] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value
[  123.517021][ T4890] FAT-fs (loop3): Directory bread(block 67) failed
[  123.619014][ T4890] FAT-fs (loop3): Directory bread(block 68) failed
[  123.629073][ T4890] FAT-fs (loop3): Directory bread(block 69) failed
[  123.693195][ T4890] FAT-fs (loop3): Directory bread(block 70) failed
[  123.744236][ T4890] FAT-fs (loop3): Directory bread(block 71) failed
[  123.751173][ T4890] FAT-fs (loop3): Directory bread(block 72) failed
[  123.757912][ T4890] FAT-fs (loop3): Directory bread(block 73) failed
[  123.907842][ T4906] input: syz1 as /devices/virtual/input/input5
[  124.196435][ T4914] tipc: Started in network mode
[  124.237458][ T4914] tipc: Node identity f6bd969678b5, cluster identity 4711
[  124.237759][ T4914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.370926][ T4921] loop5: detected capacity change from 0 to 16
[  124.387117][ T4914] device syzkaller0 entered promiscuous mode
[  124.396041][ T4917] binder: 4915:4917 ioctl c0306201 2000000003c0 returned -14
[  124.430621][ T4912] tipc: Resetting bearer <eth:syzkaller0>
[  124.495055][ T4912] tipc: Disabling bearer <eth:syzkaller0>
[  124.516391][ T4921] erofs: (device loop5): mounted with root inode @ nid 36.
[  124.568999][ T4921] attempt to access beyond end of device
[  124.568999][ T4921] loop5: rw=524288, want=32, limit=16
[  124.594956][ T4921] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096]
[  124.647645][ T4926] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2962670259 (5925340518 ns) > initial count (5283556374 ns). Using initial count to start timer.
[  124.680030][ T4925] loop1: detected capacity change from 0 to 1024
[  124.688110][   T26] kauditd_printk_skb: 13 callbacks suppressed
[  124.688126][   T26] audit: type=1800 audit(1773057975.579:11): pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.156" name="file2" dev="loop5" ino=89 res=0 errno=0
[  124.738241][ T4925] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  124.747673][ T4925] EXT4-fs (loop1): orphan cleanup on readonly fs
[  124.757263][ T4925] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.157: bg 0: block 10: padding at end of block bitmap is not set
[  124.781131][ T4925] Quota error (device loop1): write_blk: dquota write failed
[  124.789357][ T4925] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list
[  124.800493][ T4925] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  124.810583][ T4925] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.157: Failed to acquire dquot type 0
[  124.828989][ T4925] Quota error (device loop1): write_blk: dquota write failed
[  124.836719][ T4925] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list
[  124.847263][ T4925] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  124.857338][ T4925] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.157: Failed to acquire dquot type 0
[  124.870834][ T4925] EXT4-fs error (device loop1): ext4_free_blocks:6232: comm syz.1.157: Freeing blocks not in datazone - block = 0, count = 4096
[  124.888827][ T4925] Quota error (device loop1): write_blk: dquota write failed
[  124.897151][ T4925] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list
[  124.907991][ T4925] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  124.917984][ T4925] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.157: Failed to acquire dquot type 0
[  124.929693][ T4925] EXT4-fs (loop1): 1 orphan inode deleted
[  124.985988][ T4929] loop3: detected capacity change from 0 to 512
[  124.992881][ T4925] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  125.038450][ T4929] EXT4-fs (loop3): Test dummy encryption mode enabled
[  125.061476][ T4929] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  125.234038][ T4929] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.158: bad orphan inode 131083
[  125.288432][ T4929] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none.
[  125.602708][ T4929] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  126.239221][ T4933] loop1: detected capacity change from 0 to 512
[  126.397552][ T4933] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  126.512631][   T21] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  126.780660][ T4933] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.159: corrupted inode contents
[  126.877027][ T4933] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #16: comm syz.1.159: mark_inode_dirty error
[  126.921563][   T21] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  127.126618][   T21] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  127.327065][ T4933] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.159: corrupted inode contents
[  127.341816][   T21] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.353328][   T21] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  127.368265][   T21] usb 3-1: config 0 interface 0 has no altsetting 0
[  127.376303][   T21] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  127.637191][ T4933] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.159: mark_inode_dirty error
[  127.654129][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.677963][   T21] usb 3-1: config 0 descriptor??
[  127.701952][ T4933] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.159: corrupted inode contents
[  127.836402][ T4966] loop5: detected capacity change from 0 to 1024
[  127.851671][ T4933] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  127.883399][ T4933] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.159: corrupted inode contents
[  127.972614][ T4966] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  128.006886][ T4933] EXT4-fs error (device loop1): ext4_truncate:4279: inode #16: comm syz.1.159: mark_inode_dirty error
[  128.032050][ T4933] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  128.084805][ T4933] EXT4-fs (loop1): 1 truncate cleaned up
[  128.091142][ T4933] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  128.142184][ T4966] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3885: comm syz.5.169: Allocating blocks 385-513 which overlap fs metadata
[  128.165188][ T4957] loop3: detected capacity change from 0 to 40427
[  128.191761][   T21] hid-alps 0003:044E:120C.0001: unbalanced delimiter at end of report description
[  128.226653][   T21] hid-alps 0003:044E:120C.0001: parse failed
[  128.241400][   T21] hid-alps: probe of 0003:044E:120C.0001 failed with error -22
[  128.252225][ T4933] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.268723][ T4957] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  128.297195][ T4957] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  128.330744][ T4957] F2FS-fs (loop3): invalid crc value
[  128.358577][ T4957] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  128.428640][ T4224] usb 3-1: USB disconnect, device number 3
[  128.447348][ T4965] EXT4-fs (loop5): pa ffff888061aabb60: logic 16, phys. 129, len 24
[  128.456819][ T4965] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 8
[  128.587949][ T4957] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  128.599684][ T4957] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  128.936190][ T4988] loop0: detected capacity change from 0 to 1024
[  128.985938][ T4989] Invalid argument reading file caps for ./file0
[  129.037921][ T4988] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  129.068783][ T4988] EXT4-fs (loop0): orphan cleanup on readonly fs
[  129.108961][ T4995] loop5: detected capacity change from 0 to 1024
[  129.129195][ T4995] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  129.149700][ T4995] EXT4-fs error (device loop5): ext4_get_journal_inode:5185: inode #32: comm syz.5.171: iget: special inode unallocated
[  129.170477][ T4995] EXT4-fs (loop5): no journal found
[  129.176294][ T4995] EXT4-fs (loop5): can't get journal size
[  129.189961][ T4988] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.170: bg 0: block 10: padding at end of block bitmap is not set
[  129.264597][ T4995] EXT4-fs error (device loop5): ext4_protect_reserved_inode:160: inode #32: comm syz.5.171: iget: special inode unallocated
[  129.290384][ T4988] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.170: Failed to acquire dquot type 0
[  129.312730][ T4189] attempt to access beyond end of device
[  129.312730][ T4189] loop3: rw=2049, want=45104, limit=40427
[  129.381697][ T4988] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.170: Failed to acquire dquot type 0
[  129.414242][ T4995] EXT4-fs (loop5): failed to initialize system zone (-117)
[  129.424315][ T4995] EXT4-fs (loop5): mount failed
[  129.450223][ T4999] loop2: detected capacity change from 0 to 1024
[  129.457506][ T4988] EXT4-fs error (device loop0): ext4_free_blocks:6232: comm syz.0.170: Freeing blocks not in datazone - block = 0, count = 4096
[  129.483358][ T4988] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.170: Failed to acquire dquot type 0
[  129.535039][ T4999] EXT4-fs (loop2): Ignoring removed orlov option
[  129.570771][ T4988] EXT4-fs (loop0): 1 orphan inode deleted
[  129.607161][ T4988] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  129.713927][ T4999] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  130.211608][ T5015] loop5: detected capacity change from 0 to 512
[  130.259532][ T5015] EXT4-fs (loop5): Unrecognized mount option "seclabel" or missing value
[  130.429378][ T5017] xt_hashlimit: size too large, truncated to 1048576
[  130.769115][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  130.769133][   T26] audit: type=1326 audit(1773057981.669:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cde38b799 code=0x7ffc0000
[  130.903839][   T26] audit: type=1326 audit(1773057981.719:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cde38b799 code=0x7ffc0000
[  131.042650][   T26] audit: type=1326 audit(1773057981.839:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8cde38b799 code=0x7ffc0000
[  131.188237][   T26] audit: type=1326 audit(1773057981.839:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cde38b799 code=0x7ffc0000
[  131.298016][   T26] audit: type=1326 audit(1773057981.839:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cde38b799 code=0x7ffc0000
[  131.377995][   T26] audit: type=1326 audit(1773057981.839:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f8cde38b799 code=0x7ffc0000
[  131.431409][   T26] audit: type=1326 audit(1773057981.839:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cde38b799 code=0x7ffc0000
[  131.503791][   T26] audit: type=1326 audit(1773057981.839:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cde38b799 code=0x7ffc0000
[  131.571112][   T26] audit: type=1326 audit(1773057981.839:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f8cde38b799 code=0x7ffc0000
[  131.691284][   T26] audit: type=1326 audit(1773057981.989:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cde38b799 code=0x7ffc0000
[  132.032962][ T5046] loop2: detected capacity change from 0 to 128
[  132.092758][ T5046] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none.
[  132.111576][ T5046] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.273915][ T5046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.180: bg 0: block 19: invalid block bitmap
[  132.906603][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.915236][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.973263][ T5060] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  133.311576][ T4184] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  133.733822][ T5076] loop2: detected capacity change from 0 to 1024
[  133.746679][ T4184] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  133.814247][ T4184] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  133.822443][ T5076] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  133.841124][ T5076] EXT4-fs (loop2): orphan cleanup on readonly fs
[  133.853691][ T5076] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.186: bg 0: block 10: padding at end of block bitmap is not set
[  133.872531][ T5076] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.186: Failed to acquire dquot type 0
[  133.887552][ T5076] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.186: Failed to acquire dquot type 0
[  133.902316][ T5076] EXT4-fs error (device loop2): ext4_free_blocks:6232: comm syz.2.186: Freeing blocks not in datazone - block = 0, count = 4096
[  133.919386][ T5076] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.186: Failed to acquire dquot type 0
[  133.931410][ T4184] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.948906][ T5076] EXT4-fs (loop2): 1 orphan inode deleted
[  134.051429][ T4184] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  134.131767][ T4184] usb 1-1: config 0 interface 0 has no altsetting 0
[  134.183787][ T4184] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  134.225639][ T4184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.279946][ T5076] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  134.362149][ T4184] usb 1-1: config 0 descriptor??
[  134.595489][ T5090] loop2: detected capacity change from 0 to 256
[  134.727047][ T5090] FAT-fs (loop2): Directory bread(block 64) failed
[  134.760642][ T5090] FAT-fs (loop2): Directory bread(block 65) failed
[  134.813291][ T5090] FAT-fs (loop2): Directory bread(block 66) failed
[  134.834369][ T5090] FAT-fs (loop2): Directory bread(block 67) failed
[  134.852184][ T5090] FAT-fs (loop2): Directory bread(block 68) failed
[  134.860266][ T5090] FAT-fs (loop2): Directory bread(block 69) failed
[  134.889535][ T5090] FAT-fs (loop2): Directory bread(block 70) failed
[  134.902238][ T4184] hid-alps 0003:044E:120C.0002: unbalanced delimiter at end of report description
[  134.928269][ T5090] FAT-fs (loop2): Directory bread(block 71) failed
[  134.947482][ T5090] FAT-fs (loop2): Directory bread(block 72) failed
[  134.955923][ T4184] hid-alps 0003:044E:120C.0002: parse failed
[  134.969309][ T5090] FAT-fs (loop2): Directory bread(block 73) failed
[  134.977998][ T4184] hid-alps: probe of 0003:044E:120C.0002 failed with error -22
[  135.172475][ T4184] usb 1-1: USB disconnect, device number 2
[  135.239826][ T4185] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  135.258981][ T4185] FAT-fs (loop2): Filesystem has been set read-only
[  135.785731][ T4329] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.059592][ T4329] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.165203][ T4329] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.282900][ T4329] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.476983][ T5125] loop1: detected capacity change from 0 to 512
[  136.713195][ T5104] loop5: detected capacity change from 0 to 256
[  136.751660][ T5125] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value
[  137.278779][ T5104] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000e8a2, chksum : 0xd7c774f0, utbl_chksum : 0xe619d30d)
[  137.586920][ T5141] loop3: detected capacity change from 0 to 1024
[  137.650888][ T5141] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  137.661950][ T5141] EXT4-fs (loop3): orphan cleanup on readonly fs
[  137.679412][ T5141] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.198: bg 0: block 10: padding at end of block bitmap is not set
[  137.700358][ T5141] __quota_error: 10 callbacks suppressed
[  137.700386][ T5141] Quota error (device loop3): write_blk: dquota write failed
[  137.715078][ T5141] Quota error (device loop3): find_free_dqentry: Can't remove block (3) from entry free list
[  137.726235][ T5141] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  137.737901][ T5141] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.198: Failed to acquire dquot type 0
[  137.752267][ T5141] Quota error (device loop3): write_blk: dquota write failed
[  137.761952][ T5141] Quota error (device loop3): find_free_dqentry: Can't remove block (3) from entry free list
[  137.773486][ T5141] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  137.784031][ T5141] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.198: Failed to acquire dquot type 0
[  137.797979][ T5141] EXT4-fs error (device loop3): ext4_free_blocks:6232: comm syz.3.198: Freeing blocks not in datazone - block = 0, count = 4096
[  137.819393][ T5141] Quota error (device loop3): write_blk: dquota write failed
[  137.828412][ T5141] Quota error (device loop3): find_free_dqentry: Can't remove block (3) from entry free list
[  137.839476][ T5141] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  137.850572][ T5141] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.198: Failed to acquire dquot type 0
[  137.865816][ T5141] EXT4-fs (loop3): 1 orphan inode deleted
[  137.873371][ T5141] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  138.080165][ T5130] chnl_net:caif_netlink_parms(): no params data found
[  138.258565][ T5148] loop3: detected capacity change from 0 to 512
[  138.316146][ T5148] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  138.634084][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.681725][ T5130] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.716161][ T5130] device bridge_slave_0 entered promiscuous mode
[  138.800885][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.831651][ T5130] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.856530][ T5130] device bridge_slave_1 entered promiscuous mode
[  138.884206][ T1325] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  139.052065][   T13] Bluetooth: hci3: command 0x0409 tx timeout
[  139.154368][ T4329] device hsr_slave_0 left promiscuous mode
[  139.191194][ T4329] device hsr_slave_1 left promiscuous mode
[  139.210690][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.239557][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.262894][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.273035][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.306757][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.324132][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.371437][ T1325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  139.394019][ T1325] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  139.436245][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.485121][ T1325] usb 4-1: config 0 descriptor??
[  139.504125][ T4329] device bridge_slave_1 left promiscuous mode
[  139.521055][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.576923][ T4329] device bridge_slave_0 left promiscuous mode
[  139.585149][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.632027][ T4329] device veth1_macvtap left promiscuous mode
[  139.647608][ T4329] device veth0_macvtap left promiscuous mode
[  139.664842][ T4329] device veth1_vlan left promiscuous mode
[  139.681149][ T4329] device veth0_vlan left promiscuous mode
[  139.964747][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd
[  139.994461][ T1325] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  140.035514][ T1325] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  140.106868][ T5150] loop5: detected capacity change from 0 to 40427
[  140.121411][ T4184] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  140.221442][    T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  140.237663][ T5150] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  140.255307][ T5150] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  140.277582][ T5156] loop3: detected capacity change from 0 to 1024
[  140.318905][ T5156] EXT4-fs (loop3): Ignoring removed bh option
[  140.352896][ T5150] F2FS-fs (loop5): invalid crc value
[  140.369402][ T5156] EXT4-fs (loop3): Ignoring removed oldalloc option
[  140.401901][ T5156] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  140.422783][ T5150] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  140.469761][ T5156] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,errors=remount-ro,user_xattr,nouid32,dioread_nolock,. Quota mode: none.
[  140.651663][ T4184] usb 1-1: unable to get BOS descriptor or descriptor too short
[  140.661930][    T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  140.694919][    T7] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  140.745472][ T4184] usb 1-1: not running at top speed; connect to a high speed hub
[  140.770668][    T7] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.371606][ T1325] usb 4-1: reset high-speed USB device number 3 using dummy_hcd
[  141.530766][    T7] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  141.545836][    T7] usb 2-1: config 0 interface 0 has no altsetting 0
[  141.555847][    T7] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  141.568151][ T4184] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.580468][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.615276][ T4230] Bluetooth: hci3: command 0x041b tx timeout
[  141.628202][    T7] usb 2-1: config 0 descriptor??
[  141.679728][ T4329] team0 (unregistering): Port device team_slave_1 removed
[  141.725949][ T4329] team0 (unregistering): Port device team_slave_0 removed
[  141.770866][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.781069][ T4184] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  141.794810][ T4184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.805408][ T4184] usb 1-1: Product: syz
[  141.815219][ T4184] usb 1-1: Manufacturer: syz
[  141.820275][ T4184] usb 1-1: SerialNumber: syz
[  141.850614][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.139685][ T4329] bond0 (unregistering): Released all slaves
[  142.189214][    T7] hid-alps 0003:044E:120C.0004: unbalanced delimiter at end of report description
[  142.203989][    T7] hid-alps 0003:044E:120C.0004: parse failed
[  142.210171][    T7] hid-alps: probe of 0003:044E:120C.0004 failed with error -22
[  142.265678][ T5130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.281873][ T4184] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  142.303542][ T5130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.354641][ T4184] usb 1-1: USB disconnect, device number 3
[  142.415559][ T5130] team0: Port device team_slave_0 added
[  142.440387][   T21] usb 2-1: USB disconnect, device number 2
[  142.479980][ T5130] team0: Port device team_slave_1 added
[  142.714040][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  142.833618][ T5130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.901114][ T5130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.705279][ T4224] usb 4-1: USB disconnect, device number 3
[  143.741815][ T5130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.890222][   T13] Bluetooth: hci3: command 0x040f tx timeout
[  144.002344][ T5130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.020465][ T5130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.098627][ T5212] loop0: detected capacity change from 0 to 256
[  144.188917][ T5130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.239611][ T5212] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  144.363346][   T26] audit: type=1800 audit(1773057995.259:23): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.208" name="file1" dev="loop0" ino=1048642 res=0 errno=0
[  144.447235][ T5130] device hsr_slave_0 entered promiscuous mode
[  144.530124][ T5130] device hsr_slave_1 entered promiscuous mode
[  144.568468][ T5220] loop3: detected capacity change from 0 to 1024
[  144.667693][ T5220] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  144.678381][ T5220] EXT4-fs (loop3): orphan cleanup on readonly fs
[  144.715177][ T5220] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.209: bg 0: block 10: padding at end of block bitmap is not set
[  144.733512][ T5220] Quota error (device loop3): write_blk: dquota write failed
[  144.741374][ T5220] Quota error (device loop3): find_free_dqentry: Can't remove block (3) from entry free list
[  144.752762][ T5220] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  144.765295][ T5220] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.209: Failed to acquire dquot type 0
[  144.792343][ T5220] Quota error (device loop3): write_blk: dquota write failed
[  144.800085][ T5220] Quota error (device loop3): find_free_dqentry: Can't remove block (3) from entry free list
[  144.811152][ T5220] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  144.821939][ T5220] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.209: Failed to acquire dquot type 0
[  144.834721][ T5220] EXT4-fs error (device loop3): ext4_free_blocks:6232: comm syz.3.209: Freeing blocks not in datazone - block = 0, count = 4096
[  144.861953][ T5220] Quota error (device loop3): write_blk: dquota write failed
[  144.872340][ T5220] Quota error (device loop3): find_free_dqentry: Can't remove block (3) from entry free list
[  144.883945][ T5220] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  144.894799][ T5220] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.209: Failed to acquire dquot type 0
[  144.907438][ T5220] EXT4-fs (loop3): 1 orphan inode deleted
[  145.052157][ T5220] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  145.172710][ T5232] loop1: detected capacity change from 0 to 512
[  145.336349][ T5232] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value
[  146.434682][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[  146.717408][ T5130] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  146.731308][   T13] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  146.761310][ T4184] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  146.795844][ T5130] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  146.799969][ T5224] loop0: detected capacity change from 0 to 256
[  146.856120][ T5130] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  146.909820][ T5130] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  146.967767][ T5224] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000e8a2, chksum : 0xd7c774f0, utbl_chksum : 0xe619d30d)
[  147.191664][ T4184] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.237371][ T4184] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.250845][   T13] usb 4-1: unable to get BOS descriptor or descriptor too short
[  147.311750][   T13] usb 4-1: not running at top speed; connect to a high speed hub
[  147.320890][ T4184] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  147.320915][ T5130] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.365739][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  147.386054][ T4184] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  147.388249][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.411517][   T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.444147][ T4184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.467285][ T5130] 8021q: adding VLAN 0 to HW filter on device team0
[  147.490408][ T4184] usb 2-1: config 0 descriptor??
[  147.520023][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  147.550740][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.588481][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.595699][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.661599][   T13] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  147.663631][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  147.681298][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.690104][   T13] usb 4-1: Product: syz
[  147.742845][   T13] usb 4-1: Manufacturer: syz
[  147.761366][   T13] usb 4-1: SerialNumber: syz
[  147.772319][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  147.789461][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.814809][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.822299][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.860750][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.972818][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  148.035006][ T4184] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd
[  148.083589][ T4184] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  148.188702][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  149.115818][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  149.131637][   T13] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  149.140593][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  149.162098][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  149.172797][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  149.204576][ T4184] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  149.245157][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.254814][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  149.292226][ T5245] loop1: detected capacity change from 0 to 1024
[  149.302737][   T13] usb 4-1: USB disconnect, device number 4
[  149.318319][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  149.339103][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.365110][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  149.446745][ T5245] EXT4-fs (loop1): Ignoring removed bh option
[  149.509791][ T5245] EXT4-fs (loop1): Ignoring removed oldalloc option
[  149.561539][ T5245] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  149.652315][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.730437][ T4503] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  149.752369][ T5245] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,errors=remount-ro,user_xattr,nouid32,dioread_nolock,. Quota mode: none.
[  149.894057][ T5277] loop3: detected capacity change from 0 to 4096
[  149.925631][ T5130] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.070296][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  150.135158][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  150.182695][ T5277] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  150.245070][ T4503] hid-generic 0000:0000:0000.0006: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  151.352604][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  151.375851][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  151.537693][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  151.582376][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  151.625067][ T5130] device veth0_vlan entered promiscuous mode
[  151.642716][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  151.664060][   T13] usb 2-1: USB disconnect, device number 3
[  151.666889][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  151.770470][ T5130] device veth1_vlan entered promiscuous mode
[  151.950373][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  151.968287][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  152.024841][ T5130] device veth0_macvtap entered promiscuous mode
[  152.078245][ T5130] device veth1_macvtap entered promiscuous mode
[  152.156118][ T5311] loop1: detected capacity change from 0 to 1024
[  152.180038][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.207850][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.267692][ T5311] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  152.277907][ T5311] EXT4-fs (loop1): orphan cleanup on readonly fs
[  152.299439][ T5311] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.223: bg 0: block 10: padding at end of block bitmap is not set
[  152.315336][ T5311] Quota error (device loop1): write_blk: dquota write failed
[  152.323338][ T5311] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list
[  152.334493][ T5311] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  152.345682][ T5311] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.223: Failed to acquire dquot type 0
[  152.360195][ T5311] Quota error (device loop1): write_blk: dquota write failed
[  152.371389][ T5311] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list
[  152.384156][ T5311] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  152.394390][ T5311] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.223: Failed to acquire dquot type 0
[  152.406489][ T5311] EXT4-fs error (device loop1): ext4_free_blocks:6232: comm syz.1.223: Freeing blocks not in datazone - block = 0, count = 4096
[  152.420754][ T5314] loop3: detected capacity change from 0 to 512
[  152.423532][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.438550][ T5311] Quota error (device loop1): write_blk: dquota write failed
[  152.446507][ T5311] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list
[  152.457138][ T5311] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  152.467264][ T5311] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.223: Failed to acquire dquot type 0
[  152.479961][ T5311] EXT4-fs (loop1): 1 orphan inode deleted
[  152.508509][ T5311] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  152.508918][ T5314] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value
[  152.602372][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.831689][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.985343][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.186533][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.268108][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.343578][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.427182][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.521298][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.621437][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.678023][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.749578][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.797878][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  153.830366][ T5332] loop1: detected capacity change from 0 to 512
[  153.834266][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  153.882242][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  153.916505][ T5332] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  153.916533][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  153.966763][ T5332] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  153.981384][ T5332] System zones: 0-2, 18-18, 34-34
[  153.988850][ T5332] EXT4-fs (loop1): orphan cleanup on readonly fs
[  154.050336][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  154.133126][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  154.201004][ T5130] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.210089][ T5332] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.225: bg 0: block 248: padding at end of block bitmap is not set
[  154.233910][ T5130] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.264322][ T5130] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.274290][ T5332] Quota error (device loop1): write_blk: dquota write failed
[  154.291300][ T5130] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.301942][ T5332] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.225: Failed to acquire dquot type 1
[  154.391482][ T5332] EXT4-fs (loop1): 1 truncate cleaned up
[  154.421497][ T5332] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000001000000,lazytime,,errors=continue. Quota mode: writeback.
[  154.643958][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.691641][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.814199][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  155.032103][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.129430][ T5327] loop3: detected capacity change from 0 to 256
[  155.148040][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.158399][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  156.292105][ T5327] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000e8a2, chksum : 0xd7c774f0, utbl_chksum : 0xe619d30d)
[  156.318847][ T5352] loop6: detected capacity change from 0 to 512
[  156.441517][ T4229] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  156.545628][ T5352] EXT4-fs (loop6): 1 truncate cleaned up
[  156.602270][ T5352] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,inode_readahead_blks=0x0000000000000001,nouid32,,errors=continue. Quota mode: none.
[  156.861693][ T4229] usb 2-1: unable to get BOS descriptor or descriptor too short
[  156.921552][ T4229] usb 2-1: not running at top speed; connect to a high speed hub
[  157.031759][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.231822][ T4229] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  157.281445][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.350312][ T4229] usb 2-1: Product: syz
[  157.391288][ T4229] usb 2-1: Manufacturer: syz
[  157.398900][ T4229] usb 2-1: SerialNumber: syz
[  157.832442][ T4229] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  157.903983][ T4229] usb 2-1: USB disconnect, device number 4
[  158.048451][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  158.188876][ T5383] loop0: detected capacity change from 0 to 1024
[  158.435064][ T5383] EXT4-fs (loop0): Ignoring removed orlov option
[  158.794887][ T5383] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  159.243003][ T5398] loop3: detected capacity change from 0 to 1024
[  159.422298][ T5398] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  159.441556][ T5398] EXT4-fs (loop3): orphan cleanup on readonly fs
[  159.457985][ T5398] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.235: bg 0: block 10: padding at end of block bitmap is not set
[  159.479221][ T5398] __quota_error: 1 callbacks suppressed
[  159.479241][ T5398] Quota error (device loop3): write_blk: dquota write failed
[  159.500473][ T5398] Quota error (device loop3): find_free_dqentry: Can't remove block (3) from entry free list
[  159.515722][ T5398] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  159.532616][ T5398] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.235: Failed to acquire dquot type 0
[  159.547289][ T5398] Quota error (device loop3): write_blk: dquota write failed
[  159.556742][ T5398] Quota error (device loop3): find_free_dqentry: Can't remove block (3) from entry free list
[  159.571359][ T5398] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  159.587311][ T5398] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.235: Failed to acquire dquot type 0
[  159.603935][ T5398] EXT4-fs error (device loop3): ext4_free_blocks:6232: comm syz.3.235: Freeing blocks not in datazone - block = 0, count = 4096
[  159.624047][ T5398] Quota error (device loop3): write_blk: dquota write failed
[  159.633001][ T5398] Quota error (device loop3): find_free_dqentry: Can't remove block (3) from entry free list
[  159.645764][ T5398] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  159.660186][ T5398] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.235: Failed to acquire dquot type 0
[  159.677441][ T5398] EXT4-fs (loop3): 1 orphan inode deleted
[  159.687650][ T5398] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  160.024119][ T5411] loop1: detected capacity change from 0 to 128
[  160.131312][ T4229] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  160.363416][ T5411] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,barrier,nogrpid,,errors=continue. Quota mode: writeback.
[  160.481463][ T5411] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.571559][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.625236][ T5411] EXT4-fs error (device loop1): swap_inode_boot_loader:128: inode #5: comm syz.1.241: iget: checksum invalid
[  160.633912][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.745504][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  160.871329][ T4229] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  160.921283][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.968984][ T5428] loop3: detected capacity change from 0 to 128
[  160.996773][ T4229] usb 1-1: config 0 descriptor??
[  161.120760][ T5428] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  161.332653][   T26] audit: type=1800 audit(1773058012.239:24): pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.244" name="file1" dev="loop3" ino=1048649 res=0 errno=0
[  161.486506][ T5418] chnl_net:caif_netlink_parms(): no params data found
[  161.575561][ T4229] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd
[  161.622300][ T4229] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  161.699861][ T4229] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  162.035524][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.081351][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.120523][ T5418] device bridge_slave_0 entered promiscuous mode
[  162.136182][ T5408] loop0: detected capacity change from 0 to 1024
[  162.274156][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.327904][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.358281][ T5418] device bridge_slave_1 entered promiscuous mode
[  162.470062][    T7] Bluetooth: hci5: command 0x0409 tx timeout
[  162.547655][ T5408] EXT4-fs (loop0): Ignoring removed bh option
[  162.611466][ T5408] EXT4-fs (loop0): Ignoring removed oldalloc option
[  162.649655][ T5408] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  162.715889][ T5418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.772319][ T5418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.823296][ T5408] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,errors=remount-ro,user_xattr,nouid32,dioread_nolock,. Quota mode: none.
[  163.024182][ T5418] team0: Port device team_slave_0 added
[  163.120789][ T5418] team0: Port device team_slave_1 added
[  163.292971][ T5469] loop6: detected capacity change from 0 to 1024
[  163.388049][ T4229] usb 1-1: reset high-speed USB device number 4 using dummy_hcd
[  164.170771][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.179069][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.206488][ T5418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.246780][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.302286][ T5469] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  164.312550][ T5469] EXT4-fs (loop6): orphan cleanup on readonly fs
[  164.324577][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.356190][ T5469] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.249: bg 0: block 10: padding at end of block bitmap is not set
[  164.375274][ T5469] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.249: Failed to acquire dquot type 0
[  164.389369][ T5469] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.249: Failed to acquire dquot type 0
[  164.402486][ T5469] EXT4-fs error (device loop6): ext4_free_blocks:6232: comm syz.6.249: Freeing blocks not in datazone - block = 0, count = 4096
[  164.418590][ T5469] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.249: Failed to acquire dquot type 0
[  164.432502][ T5469] EXT4-fs (loop6): 1 orphan inode deleted
[  164.453626][ T5469] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  164.570028][ T5418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.592027][    T7] Bluetooth: hci5: command 0x041b tx timeout
[  164.640391][ T5476] device syzkaller0 entered promiscuous mode
[  165.107307][ T5483] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  165.135594][ T5418] device hsr_slave_0 entered promiscuous mode
[  165.151665][ T5483] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  165.209015][ T5418] device hsr_slave_1 entered promiscuous mode
[  165.220170][ T5418] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.266475][ T5418] Cannot create hsr debugfs directory
[  165.447827][ T5495] loop1: detected capacity change from 0 to 512
[  165.682829][   T23] usb 1-1: USB disconnect, device number 4
[  166.128683][ T5495] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  166.616991][ T5495] EXT4-fs (loop1): 1 truncate cleaned up
[  166.640442][ T5495] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  166.662393][ T4184] Bluetooth: hci5: command 0x040f tx timeout
[  167.076444][ T5517] loop1: detected capacity change from 0 to 1024
[  167.171624][ T5517] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  167.181043][ T5517] EXT4-fs (loop1): orphan cleanup on readonly fs
[  167.191829][ T5517] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.260: bg 0: block 10: padding at end of block bitmap is not set
[  167.200849][ T5418] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  167.213788][ T5517] __quota_error: 9 callbacks suppressed
[  167.213808][ T5517] Quota error (device loop1): write_blk: dquota write failed
[  167.227233][ T5517] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list
[  167.238096][ T5517] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  167.249106][ T5517] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.260: Failed to acquire dquot type 0
[  167.264120][ T5517] Quota error (device loop1): write_blk: dquota write failed
[  167.271998][ T5517] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list
[  167.282690][ T5517] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  167.293357][ T5517] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.260: Failed to acquire dquot type 0
[  167.305412][ T5517] EXT4-fs error (device loop1): ext4_free_blocks:6232: comm syz.1.260: Freeing blocks not in datazone - block = 0, count = 4096
[  167.319954][ T5517] Quota error (device loop1): write_blk: dquota write failed
[  167.327620][ T5517] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list
[  167.339578][ T5517] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  167.350703][ T5517] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.260: Failed to acquire dquot type 0
[  167.362586][ T5517] EXT4-fs (loop1): 1 orphan inode deleted
[  167.369660][ T5517] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  167.418479][ T5418] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  167.475243][ T5418] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  167.535703][ T5418] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  167.627808][ T4329] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.772128][ T4329] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.894663][ T4329] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.018550][ T4329] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.071989][ T5418] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.104094][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  168.139877][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  168.150857][ T5418] 8021q: adding VLAN 0 to HW filter on device team0
[  168.185454][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  168.222343][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  168.231091][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.238247][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.303099][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  168.313155][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  168.333338][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  168.350637][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.358233][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.392403][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  168.429009][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  168.458078][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  168.480488][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  168.517686][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  168.540096][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  168.596615][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  168.647306][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  168.664613][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  168.674249][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  168.726893][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  168.735693][ T4255] Bluetooth: hci5: command 0x0419 tx timeout
[  168.769087][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  168.947169][ T5549] loop1: detected capacity change from 0 to 512
[  169.052862][ T5549] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  169.060078][ T5549] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  169.071479][   T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  169.155974][ T5549] EXT4-fs (loop1): 1 truncate cleaned up
[  169.171364][ T5549] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x000000000000ee01,norecovery,noinit_itable,barrier,mblk_io_submit,nogrpid,. Quota mode: none.
[  169.461563][   T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.481407][   T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.509609][   T23] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  169.574976][   T23] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  169.585689][ T5568] loop3: detected capacity change from 0 to 512
[  169.595220][ T5418] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.616613][   T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.628484][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  169.641530][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  169.690967][   T23] usb 7-1: config 0 descriptor??
[  169.691969][ T5568] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  169.818965][ T5537] loop0: detected capacity change from 0 to 256
[  169.828718][ T5568] EXT4-fs (loop3): 1 truncate cleaned up
[  169.837252][ T5568] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  169.933564][ T5537] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000e8a2, chksum : 0xd7c774f0, utbl_chksum : 0xe619d30d)
[  170.156338][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /54/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  170.193960][   T23] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd
[  170.239164][   T23] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  170.265017][ T4183] EXT4-fs (loop1): Remounting filesystem read-only
[  170.283621][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  170.314209][   T23] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  170.367460][ T4183] EXT4-fs (loop1): Remounting filesystem read-only
[  170.386450][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /54/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  170.446538][ T4183] EXT4-fs (loop1): Remounting filesystem read-only
[  170.463916][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  170.530405][ T5544] loop6: detected capacity change from 0 to 1024
[  170.580625][ T4183] EXT4-fs (loop1): Remounting filesystem read-only
[  170.660965][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /54/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  170.701646][ T5544] EXT4-fs (loop6): Ignoring removed bh option
[  170.708392][ T5544] EXT4-fs (loop6): Ignoring removed oldalloc option
[  170.791852][ T5544] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  170.849275][ T4183] EXT4-fs (loop1): Remounting filesystem read-only
[  170.894377][ T5544] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,errors=remount-ro,user_xattr,nouid32,dioread_nolock,. Quota mode: none.
[  170.921980][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  170.974531][ T4183] EXT4-fs (loop1): Remounting filesystem read-only
[  171.081837][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /54/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  171.088691][ T5590] loop0: detected capacity change from 0 to 1024
[  171.191180][ T4183] EXT4-fs (loop1): Remounting filesystem read-only
[  171.205744][ T4329] device hsr_slave_0 left promiscuous mode
[  171.231809][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  171.272200][ T4329] device hsr_slave_1 left promiscuous mode
[  171.372383][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.411359][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.455478][ T4183] EXT4-fs (loop1): Remounting filesystem read-only
[  171.475092][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /54/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  171.507270][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.531570][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.550402][ T4183] EXT4-fs (loop1): Remounting filesystem read-only
[  172.427742][ T4329] device bridge_slave_1 left promiscuous mode
[  172.435042][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.445953][ T4329] device bridge_slave_0 left promiscuous mode
[  172.452944][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.468210][ T4329] device veth1_macvtap left promiscuous mode
[  172.477287][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  172.502441][ T4329] device veth0_macvtap left promiscuous mode
[  172.509155][ T4329] device veth1_vlan left promiscuous mode
[  172.518242][ T4183] EXT4-fs (loop1): Remounting filesystem read-only
[  172.521568][    T7] usb 7-1: reset high-speed USB device number 2 using dummy_hcd
[  172.533428][ T4329] device veth0_vlan left promiscuous mode
[  172.575225][ T5590] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  172.692643][ T5590] EXT4-fs (loop0): orphan cleanup on readonly fs
[  172.818401][ T5590] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.272: bg 0: block 10: padding at end of block bitmap is not set
[  172.905716][ T5590] Quota error (device loop0): write_blk: dquota write failed
[  172.937984][ T5590] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  172.970280][ T5590] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  173.037024][ T5590] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.272: Failed to acquire dquot type 0
[  173.121667][ T5590] Quota error (device loop0): write_blk: dquota write failed
[  173.136741][ T5582] loop3: detected capacity change from 0 to 40427
[  173.146258][ T5590] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  173.162063][ T5590] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  173.174836][ T5590] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.272: Failed to acquire dquot type 0
[  173.189504][ T5590] EXT4-fs error (device loop0): ext4_free_blocks:6232: comm syz.0.272: Freeing blocks not in datazone - block = 0, count = 4096
[  173.236394][ T5582] F2FS-fs (loop3): Invalid segment/section count (24 != 24 * 3)
[  173.273675][ T5582] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  173.329670][ T5582] F2FS-fs (loop3): Unrecognized mount option "context=unc" or missing value
[  173.414262][ T5590] Quota error (device loop0): write_blk: dquota write failed
[  173.487200][ T5590] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  173.501058][ T5590] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  173.555408][ T5590] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.272: Failed to acquire dquot type 0
[  173.810481][ T5590] EXT4-fs (loop0): 1 orphan inode deleted
[  173.819112][ T5590] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  174.960178][ T4329] team0 (unregistering): Port device team_slave_1 removed
[  175.050073][ T4329] team0 (unregistering): Port device team_slave_0 removed
[  175.108522][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.122592][ T1107] usb 7-1: USB disconnect, device number 2
[  175.200542][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.440740][ T4329] bond0 (unregistering): Released all slaves
[  175.646277][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  175.697796][ T5625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  175.859210][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  175.879561][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  175.938344][ T5418] device veth0_vlan entered promiscuous mode
[  175.976590][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  176.002172][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  176.043447][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  176.083422][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  176.159905][ T5418] device veth1_vlan entered promiscuous mode
[  176.242159][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  176.262637][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  176.287911][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  176.312677][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  176.370759][ T5418] device veth0_macvtap entered promiscuous mode
[  176.405100][ T5418] device veth1_macvtap entered promiscuous mode
[  176.438516][ T5641] loop0: detected capacity change from 0 to 512
[  176.467260][ T5643] loop6: detected capacity change from 0 to 512
[  176.503283][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.551517][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.604291][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.641245][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.671726][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.723639][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.766615][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.795632][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  176.824919][ T5643] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  176.841400][ T5643] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  176.847122][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  176.859361][ T5641] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  176.933335][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  176.941957][ T5643] EXT4-fs (loop6): 1 truncate cleaned up
[  177.027919][ T5643] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x000000000000ee01,norecovery,noinit_itable,barrier,mblk_io_submit,nogrpid,. Quota mode: none.
[  177.063386][ T5641] EXT4-fs (loop0): 1 truncate cleaned up
[  177.132304][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  177.146414][ T5641] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  177.196868][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.219268][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.260281][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.301261][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.372166][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.405142][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.443341][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.455509][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  177.495223][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  177.574160][ T5418] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.604706][ T5418] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.641354][ T5418] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.660680][ T5418] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.818154][ T5660] loop0: detected capacity change from 0 to 256
[  177.908849][ T5660] exfat: Deprecated parameter 'utf8'
[  177.985786][ T5660] exfat: Deprecated parameter 'namecase'
[  178.074564][ T5660] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d)
[  178.099215][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.124784][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.177073][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  178.323804][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.391261][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.421824][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  178.516069][ T5649] chnl_net:caif_netlink_parms(): no params data found
[  178.622361][ T5668] loop0: detected capacity change from 0 to 1024
[  178.673999][ T5668] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  178.683830][ T5668] EXT4-fs (loop0): orphan cleanup on readonly fs
[  178.711694][ T5668] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.285: bg 0: block 10: padding at end of block bitmap is not set
[  178.729152][ T5668] Quota error (device loop0): write_blk: dquota write failed
[  178.737847][ T5668] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  178.752313][ T5668] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  178.763676][ T5668] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.285: Failed to acquire dquot type 0
[  178.779466][ T5668] Quota error (device loop0): write_blk: dquota write failed
[  178.787577][ T5668] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  178.799071][ T5668] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  178.809987][ T5668] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.285: Failed to acquire dquot type 0
[  178.823618][ T5668] EXT4-fs error (device loop0): ext4_free_blocks:6232: comm syz.0.285: Freeing blocks not in datazone - block = 0, count = 4096
[  178.838494][ T5668] Quota error (device loop0): write_blk: dquota write failed
[  178.847429][ T5668] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  178.859225][ T5668] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  178.869982][ T5668] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.285: Failed to acquire dquot type 0
[  178.882400][ T5668] EXT4-fs (loop0): 1 orphan inode deleted
[  178.889393][ T5668] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  179.051677][   T23] Bluetooth: hci0: command 0x0409 tx timeout
[  179.112748][ T5130] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  179.126263][ T5677] loop7: detected capacity change from 0 to 512
[  179.149949][ T5677] EXT4-fs (loop7): Unrecognized mount option "seclabel" or missing value
[  179.175630][ T5130] EXT4-fs (loop6): Remounting filesystem read-only
[  179.253562][ T5130] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  179.308738][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.432083][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.458533][ T5130] EXT4-fs (loop6): Remounting filesystem read-only
[  179.529071][ T5649] device bridge_slave_0 entered promiscuous mode
[  179.533782][ T5130] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  179.805243][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.025678][ T5130] EXT4-fs (loop6): Remounting filesystem read-only
[  180.033614][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.286108][ T5649] device bridge_slave_1 entered promiscuous mode
[  180.334636][ T5130] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  180.384504][ T5130] EXT4-fs (loop6): Remounting filesystem read-only
[  180.403097][ T5130] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  180.508810][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.542528][ T5695] loop7: detected capacity change from 0 to 256
[  180.550586][ T5130] EXT4-fs (loop6): Remounting filesystem read-only
[  180.581724][ T5130] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  180.605377][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.661898][ T5130] EXT4-fs (loop6): Remounting filesystem read-only
[  180.677906][ T5695] FAT-fs (loop7): Directory bread(block 64) failed
[  180.705071][ T5695] FAT-fs (loop7): Directory bread(block 65) failed
[  180.708400][ T5130] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  180.741124][ T5695] FAT-fs (loop7): Directory bread(block 66) failed
[  180.754925][ T5649] team0: Port device team_slave_0 added
[  180.776741][ T5649] team0: Port device team_slave_1 added
[  180.782622][ T5695] FAT-fs (loop7): Directory bread(block 67) failed
[  180.799622][ T5695] FAT-fs (loop7): Directory bread(block 68) failed
[  180.858659][ T5130] EXT4-fs (loop6): Remounting filesystem read-only
[  180.871428][ T5695] FAT-fs (loop7): Directory bread(block 69) failed
[  180.878392][ T5695] FAT-fs (loop7): Directory bread(block 70) failed
[  180.882532][ T5130] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  180.920173][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.938230][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.971670][ T5695] FAT-fs (loop7): Directory bread(block 71) failed
[  180.979306][ T5695] FAT-fs (loop7): Directory bread(block 72) failed
[  180.997277][ T5700] loop3: detected capacity change from 0 to 512
[  181.024682][ T5130] EXT4-fs (loop6): Remounting filesystem read-only
[  181.035436][ T5695] FAT-fs (loop7): Directory bread(block 73) failed
[  181.042743][ T5702] loop0: detected capacity change from 0 to 1024
[  181.050102][ T5130] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  181.075123][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.093885][ T5700] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  181.123445][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.130902][ T5700] EXT4-fs (loop3): inline encryption not supported
[  181.138749][   T21] Bluetooth: hci0: command 0x041b tx timeout
[  181.152601][ T5130] EXT4-fs (loop6): Remounting filesystem read-only
[  181.164329][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.192505][ T5702] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  181.195155][ T5700] EXT4-fs (loop3): Test dummy encryption mode enabled
[  181.205756][ T5130] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  181.212973][ T5700] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  181.239438][ T5700] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  181.276006][ T5700] EXT4-fs (loop3): 1 truncate cleaned up
[  181.321958][ T5702] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.333595][ T5700] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none.
[  181.356701][ T5130] EXT4-fs (loop6): Remounting filesystem read-only
[  181.368874][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.487997][ T5702] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.292: lblock 0 mapped to illegal pblock 0 (length 1)
[  181.550041][ T5649] device hsr_slave_0 entered promiscuous mode
[  181.615430][ T5649] device hsr_slave_1 entered promiscuous mode
[  181.644156][ T5712] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.292: lblock 0 mapped to illegal pblock 0 (length 1)
[  181.670343][ T5649] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.700493][ T5649] Cannot create hsr debugfs directory
[  181.783144][ T5712] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  181.833022][ T5712] EXT4-fs (loop0): This should not happen!! Data will be lost
[  181.833022][ T5712] 
[  181.933365][ T5718] loop7: detected capacity change from 0 to 1024
[  181.949277][    T9] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 4: comm kworker/u4:0: lblock 4 mapped to illegal pblock 4 (length 1)
[  182.051439][ T5700] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  182.088493][    T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117
[  182.101800][ T5718] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  182.110904][ T5718] EXT4-fs (loop7): orphan cleanup on readonly fs
[  182.131111][ T5718] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.295: bg 0: block 10: padding at end of block bitmap is not set
[  182.151516][ T5718] Quota error (device loop7): write_blk: dquota write failed
[  182.159635][ T5718] EXT4-fs error (device loop7): ext4_acquire_dquot:6234: comm syz.7.295: Failed to acquire dquot type 0
[  182.182696][ T5718] EXT4-fs error (device loop7): ext4_acquire_dquot:6234: comm syz.7.295: Failed to acquire dquot type 0
[  182.195046][ T5718] EXT4-fs error (device loop7): ext4_free_blocks:6232: comm syz.7.295: Freeing blocks not in datazone - block = 0, count = 4096
[  182.210789][ T5718] EXT4-fs error (device loop7): ext4_acquire_dquot:6234: comm syz.7.295: Failed to acquire dquot type 0
[  182.222631][ T5718] EXT4-fs (loop7): 1 orphan inode deleted
[  182.229389][ T5718] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  182.317051][    T9] EXT4-fs (loop0): This should not happen!! Data will be lost
[  182.317051][    T9] 
[  182.521017][ T5726] loop7: detected capacity change from 0 to 512
[  182.619495][ T5649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.634870][ T5726] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  182.662103][ T5726] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  182.802143][ T5726] EXT4-fs (loop7): 1 truncate cleaned up
[  182.807959][ T5726] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x000000000000ee01,norecovery,noinit_itable,barrier,mblk_io_submit,nogrpid,. Quota mode: none.
[  182.986502][ T5649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.211675][ T4224] Bluetooth: hci0: command 0x040f tx timeout
[  183.245493][ T5649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.447644][ T5745] loop3: detected capacity change from 0 to 1024
[  183.511719][ T5649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.564281][ T5745] EXT4-fs (loop3): Ignoring removed orlov option
[  183.622074][ T5745] EXT4-fs (loop3): Unrecognized mount option "fsname=nombcache" or missing value
[  184.822869][ T5649] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  184.976593][ T5762] hub 8-0:1.0: USB hub found
[  184.987748][ T5762] hub 8-0:1.0: 1 port detected
[  185.280253][ T5649] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  185.291671][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[  185.747722][ T5649] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  185.829413][ T5649] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  185.907079][ T5765] Zero length message leads to an empty skb
[  185.926982][ T5765] loop0: detected capacity change from 0 to 1024
[  185.981732][ T5765] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  185.992175][ T5765] EXT4-fs (loop0): orphan cleanup on readonly fs
[  186.002313][ T5765] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.306: bg 0: block 10: padding at end of block bitmap is not set
[  186.018943][ T5765] __quota_error: 8 callbacks suppressed
[  186.018967][ T5765] Quota error (device loop0): write_blk: dquota write failed
[  186.033257][ T5765] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  186.043818][ T5765] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  186.055093][ T5765] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.306: Failed to acquire dquot type 0
[  186.070474][ T5765] Quota error (device loop0): write_blk: dquota write failed
[  186.078314][ T5765] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  186.088922][ T5765] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  186.099321][ T5765] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.306: Failed to acquire dquot type 0
[  186.113502][ T5765] EXT4-fs error (device loop0): ext4_free_blocks:6232: comm syz.0.306: Freeing blocks not in datazone - block = 0, count = 4096
[  186.128162][ T5765] Quota error (device loop0): write_blk: dquota write failed
[  186.136222][ T5765] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list
[  186.147158][ T5765] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  186.157304][ T5765] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.306: Failed to acquire dquot type 0
[  186.170886][ T5765] EXT4-fs (loop0): 1 orphan inode deleted
[  186.181449][ T5765] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  186.189221][ T5418] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /5/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=1024 fake=0
[  186.237711][ T4329] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.299541][ T5418] EXT4-fs (loop7): Remounting filesystem read-only
[  186.312759][ T5418] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=3925999616, rec_len=1, size=1024 fake=0
[  186.367666][ T5418] EXT4-fs (loop7): Remounting filesystem read-only
[  186.375706][ T5418] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /5/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=1024 fake=0
[  186.385815][ T4329] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.400470][ T5418] EXT4-fs (loop7): Remounting filesystem read-only
[  186.459006][ T5418] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=3925999616, rec_len=1, size=1024 fake=0
[  186.522316][ T5418] EXT4-fs (loop7): Remounting filesystem read-only
[  186.562406][ T5418] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /5/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=1024 fake=0
[  186.594554][ T4329] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.634450][ T5418] EXT4-fs (loop7): Remounting filesystem read-only
[  186.649003][ T5418] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=3925999616, rec_len=1, size=1024 fake=0
[  186.762371][ T5418] EXT4-fs (loop7): Remounting filesystem read-only
[  186.779986][ T4329] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.811748][ T4184] Bluetooth: hci2: command 0x0409 tx timeout
[  186.822500][ T5418] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /5/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=1024 fake=0
[  186.873264][ T5774] loop3: detected capacity change from 0 to 16
[  186.920030][ T5777] loop0: detected capacity change from 0 to 512
[  186.928471][ T5418] EXT4-fs (loop7): Remounting filesystem read-only
[  186.938413][ T5774] erofs: (device loop3): mounted with root inode @ nid 36.
[  186.952239][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.974771][ T5418] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=3925999616, rec_len=1, size=1024 fake=0
[  187.004004][   T26] audit: type=1800 audit(1773058037.909:25): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.310" name="file1" dev="loop3" ino=86 res=0 errno=0
[  187.052898][ T5777] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  187.104866][ T5418] EXT4-fs (loop7): Remounting filesystem read-only
[  187.118481][ T5777] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  187.129303][ T5418] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /5/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=1024 fake=0
[  187.132386][ T5777] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  187.166213][ T5418] EXT4-fs (loop7): Remounting filesystem read-only
[  187.181627][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  187.206055][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  187.223480][ T5418] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=3925999616, rec_len=1, size=1024 fake=0
[  187.233650][ T5777] EXT4-fs (loop0): orphan cleanup on readonly fs
[  187.262159][ T5777] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  187.281369][ T5777] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  187.300483][ T5777] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.311: bg 0: block 40: padding at end of block bitmap is not set
[  187.308066][ T5418] EXT4-fs (loop7): Remounting filesystem read-only
[  187.334261][ T5649] 8021q: adding VLAN 0 to HW filter on device team0
[  187.378484][ T5777] EXT4-fs (loop0): Remounting filesystem read-only
[  187.405953][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  187.416850][ T5777] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem
[  187.429112][ T5777] EXT4-fs (loop0): Remounting filesystem read-only
[  187.459247][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  187.469341][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.476740][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.497783][ T5777] EXT4-fs (loop0): 1 truncate cleaned up
[  187.506551][ T5777] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,nomblk_io_submit,. Quota mode: writeback.
[  187.607368][ T5777] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2854365564 (2854365564 ns) > initial count (2080243155 ns). Using initial count to start timer.
[  187.638780][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  187.688649][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  187.704165][ T5793] ------------[ cut here ]------------
[  187.792043][ T5793] WARNING: CPU: 1 PID: 5793 at arch/x86/kvm/x86.c:10372 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  187.803898][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  187.823488][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.830777][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.879529][ T5793] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  188.250855][ T5793] CPU: 1 PID: 5793 Comm: syz.0.311 Not tainted syzkaller #0
[  188.328290][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.593426][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  188.711940][ T5793] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  188.718794][ T5793] Code: e8 b1 f1 ae 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 96 f1 ae 00 e9 c8 ed ff ff e8 5c e6 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c
[  188.734149][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  188.833361][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  188.869446][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  188.881402][ T5793] RSP: 0018:ffffc9000339fc30 EFLAGS: 00010287
[  188.887562][ T5793] RAX: ffffffff810f3ab4 RBX: ffff88805a670000 RCX: 0000000000080000
[  188.897476][ T4503] Bluetooth: hci2: command 0x041b tx timeout
[  188.909895][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  188.923841][ T5793] RDX: ffffc9000f90b000 RSI: 0000000000000402 RDI: 0000000000000403
[  188.939982][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  188.952911][ T5793] RBP: 0000000000000000 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d
[  188.961141][ T5793] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff888026122001
[  189.027922][ T5793] R13: 1ffff1100b4ce01e R14: ffff88805a6700f0 R15: ffff888026122000
[  189.060607][ T5793] FS:  00007f1baada66c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  189.074907][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.104268][ T5793] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  189.111053][ T5793] CR2: 00005648505a5f70 CR3: 000000005f7c7000 CR4: 00000000003526f0
[  189.181328][ T5793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  189.189755][ T5793] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  189.231263][ T5793] Call Trace:
[  189.234799][ T5793]  <TASK>
[  189.237783][ T5793]  ? __lock_acquire+0x7d10/0x7d10
[  189.293202][ T5793]  kvm_vcpu_ioctl+0x8f7/0xc10
[  189.298153][ T5793]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  189.345496][ T5793]  ? bpf_lsm_file_ioctl+0x5/0x10
[  189.361686][ T5793]  ? security_file_ioctl+0x7c/0xa0
[  189.367450][ T5793]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  189.391979][ T5793]  __se_sys_ioctl+0xfa/0x170
[  189.399288][ T5793]  do_syscall_64+0x4c/0xa0
[  189.412152][ T5793]  ? clear_bhb_loop+0x30/0x80
[  189.416930][ T5793]  ? clear_bhb_loop+0x30/0x80
[  189.428355][ T5793]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  189.434634][ T5793] RIP: 0033:0x7f1bacb6d799
[  189.439131][ T5793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.468920][ T5793] RSP: 002b:00007f1baada6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  189.478812][ T5793] RAX: ffffffffffffffda RBX: 00007f1bacde7090 RCX: 00007f1bacb6d799
[  189.487333][ T5793] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  189.495601][ T5793] RBP: 00007f1bacc03bd9 R08: 0000000000000000 R09: 0000000000000000
[  189.512444][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.520944][ T5793] R13: 00007f1bacde7128 R14: 00007f1bacde7090 R15: 00007ffd41b6ec78
[  189.530139][ T5793]  </TASK>
[  189.533625][ T5793] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  189.541061][ T5793] CPU: 1 PID: 5793 Comm: syz.0.311 Not tainted syzkaller #0
[  189.549044][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  189.559164][ T5793] Call Trace:
[  189.562912][ T5793]  <TASK>
[  189.565974][ T5793]  dump_stack_lvl+0x188/0x250
[  189.570890][ T5793]  ? show_regs_print_info+0x20/0x20
[  189.576294][ T5793]  ? load_image+0x400/0x400
[  189.580873][ T5793]  panic+0x2e5/0x810
[  189.584852][ T5793]  ? bpf_jit_dump+0xd0/0xd0
[  189.591002][ T5793]  ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  189.596958][ T5793]  __warn+0x248/0x2b0
[  189.601616][ T5793]  ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  189.608825][ T5793]  report_bug+0x1b7/0x2e0
[  189.613782][ T5793]  handle_bug+0x3a/0x70
[  189.618227][ T5793]  exc_invalid_op+0x16/0x40
[  189.622893][ T5793]  asm_exc_invalid_op+0x16/0x20
[  189.628940][ T5793] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  189.636071][ T5793] Code: e8 b1 f1 ae 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 96 f1 ae 00 e9 c8 ed ff ff e8 5c e6 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c
[  189.656633][ T5793] RSP: 0018:ffffc9000339fc30 EFLAGS: 00010287
[  189.662954][ T5793] RAX: ffffffff810f3ab4 RBX: ffff88805a670000 RCX: 0000000000080000
[  189.671121][ T5793] RDX: ffffc9000f90b000 RSI: 0000000000000402 RDI: 0000000000000403
[  189.679268][ T5793] RBP: 0000000000000000 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d
[  189.687660][ T5793] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff888026122001
[  189.695661][ T5793] R13: 1ffff1100b4ce01e R14: ffff88805a6700f0 R15: ffff888026122000
[  189.703661][ T5793]  ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  189.709502][ T5793]  ? __lock_acquire+0x7d10/0x7d10
[  189.714903][ T5793]  kvm_vcpu_ioctl+0x8f7/0xc10
[  189.719651][ T5793]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  189.725705][ T5793]  ? bpf_lsm_file_ioctl+0x5/0x10
[  189.730890][ T5793]  ? security_file_ioctl+0x7c/0xa0
[  189.736188][ T5793]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  189.742080][ T5793]  __se_sys_ioctl+0xfa/0x170
[  189.746938][ T5793]  do_syscall_64+0x4c/0xa0
[  189.751545][ T5793]  ? clear_bhb_loop+0x30/0x80
[  189.756743][ T5793]  ? clear_bhb_loop+0x30/0x80
[  189.761919][ T5793]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  189.768260][ T5793] RIP: 0033:0x7f1bacb6d799
[  189.773201][ T5793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.793630][ T5793] RSP: 002b:00007f1baada6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  189.802187][ T5793] RAX: ffffffffffffffda RBX: 00007f1bacde7090 RCX: 00007f1bacb6d799
[  189.811418][ T5793] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  189.819586][ T5793] RBP: 00007f1bacc03bd9 R08: 0000000000000000 R09: 0000000000000000
[  189.827705][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.835886][ T5793] R13: 00007f1bacde7128 R14: 00007f1bacde7090 R15: 00007ffd41b6ec78
[  189.843943][ T5793]  </TASK>
[  189.847295][ T5793] Kernel Offset: disabled
[  189.851899][ T5793] Rebooting in 86400 seconds..