last executing test programs:

21m9.178403086s ago: executing program 32 (id=10):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
write(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), 0x0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0)
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x220, 0x140, 0x19, 0x0, 0x140, 0x0, 0x1f8, 0x1f0, 0x1f0, 0x1f8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0xffffffffa0028000}}, @common=@SET={0x60}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2709fb5a2bab03dc, 0xff0000ff, 'bridge_slave_0\x00', 'pimreg\x00', {}, {0xe8835d89a38d226f}, 0xff, 0x2, 0x1}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

21m4.846916438s ago: executing program 33 (id=18):
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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")
r0 = socket$netlink(0x10, 0x3, 0xa)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d0040d1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000180)=""/74, 0x338000, 0x1000, 0x0, 0x1}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x81, 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000c0, &(0x7f0000000200)={[{@jqfmt_vfsv0}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@nodioread_nolock}, {@inode_readahead_blks}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f00000000c0)=""/50, 0x32)

19m52.747926316s ago: executing program 34 (id=201):
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x6200c0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/61)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x85)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f0000000d40)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xa0000, 0x22)

14m12.812238555s ago: executing program 35 (id=1371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000040), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400df0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400"/133], 0x98}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)

12m56.352728616s ago: executing program 36 (id=1543):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r0=>0x0})
prlimit64(r0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x340, 0x11, 0x148, 0x340, 0x0, 0x3e0, 0x2a8, 0x2a8, 0x3e0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x2, 0x3f, 0x0, 0x0, 0x3, 0x9}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz0\x00', {0x80000001}}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffff00, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x1d, 0x0, 0x44}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8)
setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4)
sendto$inet(r5, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10)
recvfrom$inet(r5, 0x0, 0x0, 0x2042, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
pipe(0x0)
futex(0x0, 0x85, 0x4000000, 0x0, 0x0, 0xb0010199)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
exit(0x1ff)

12m14.854606941s ago: executing program 37 (id=1647):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000140)=0xf, 0x4)
sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)

9m54.308648103s ago: executing program 38 (id=2108):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r2, @ANYBLOB="14000100"], 0x34}}, 0x0)

9m53.544246118s ago: executing program 39 (id=2111):
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@sysvgroups}, {@noquota}, {@block_validity}, {@jqfmt_vfsv1}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbHb7+32bQilvX15eCj1Yqd00iT8qeKhH0WJBPdclmYaSTbdkN6WJBduDvXiRIohYEO969+ChePHoX1HQQpES9OBlZTazybbZJJt0Y2L384Fpn2dmNs8888z34Zl9dpgABtaJ7J9CxPGI+CyJONyxrRj5xhNL+y0+vjmRLUk0m+/9lkSSr2vvn+T/H8wz/4mIHz+JOF1YXW59fmG6Uq2ms3l+pDFzbaQ+v3DmykxlKp1Kr46Nj597ZXzs9dde7VtdX7z4x5fv3n/r3KcnF7/47uGRu0mcj0P5ts56PINbnZkTzWZ+Tkpx/qkdR/tQ2G6S7PQBsCVDeZyXIuJ46XCpHfXA8+/jiGgCAyrZZPzv1V/Ac6I9Dmjf2/fpPvgf49GbSzdAq+tfXPpuJPa17o0OLCZP3Bll97vDfSg/K+P7X+/dzZbo3/cQABu6dTsizhaLq/u/JO//tu5sD/s8XYb+D/4+97Pxz0vdxj+F5fFPdBn/HOwSu1uxcfwXHvahmDVl4783uo5/lyethofy3L9aY75ScvlKNc36tn9HxKko7c3y683nnFt80FxrW+f4L1uy8ttjwfw4Hhb3PvmZyUqj8ix17vTodsR/u45/k+X2T7q0f3Y+PuixjGPpvf+vtW3j+m+v5jcRL3Rt/5UZrWT9+cmR1vUw0r4qVvv9zrGf1yq/e/1/+mEbqtpV1v4H1q//cNI5X1vffBlf7/szXWvbVq//Pcn7rfSefN2NSqMxOxqxJ3ln9fqxlc+28+39s/qfOrl+/9ft+t8fER/2WP87R7/939brv72y+k9uqv03n3jw9kdfrVV+b+3/cit1Kl/TS//X6wE+y7kDAAAAAACA3aYQEYciKZRjX54uFMrlpd93HI0DhWqt3jh9uTZ3dTJaz8oOR6nQnuk+3PF7iNH897Dt/NhT+fGIOBIRnw/tb+XLE7Xq5E5XHgAAAAAAAAAAAAAAAAAAAHaJg8vP/8cTz/9nfhna6aMDtl1x6f3fwADa8JX//XjTE7ArbRj/wHNL/MPgEv8wuMQ/DKTWFJ/4h8El/mFwiX8YXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAA+urihQvZ0lx8fHMiy09en5+brl0/M5nWp8szcxPlidrstfJUrTZVTcsTtZmN/l61Vrs2OhZzN0Yaab0xUp9fuDRTm7vauHRlpjKVXkq9ZxwAAAAAAAAAAAAAAAAAAABWq88vTFeq1XS2D4lStZoWIqKXnSP6VOgAJrJ2u1Xs7TxvTyKJlTXF3XJaJPqa2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABW/BUAAP//2SsyHQ==")
unlink(0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d8fd8149af9faf44ad5b7b6ad1c94490d970e81143918946b559ce53bffdfdc795aac1209898e5826eda1962cf6e3c4c0ade52151923a70cb6eacfc"], 0x1, 0x177, &(0x7f0000000240)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(r1, &(0x7f0000000000)=':', 0x1, 0x5fed0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

9m8.131764661s ago: executing program 40 (id=2229):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2004006, &(0x7f0000001180)=ANY=[@ANYBLOB='rodir,utf8=0,nonumtail=0,uni_xlate=1,utf8=1,shortname=mixed,utf8=0,shortname=mixed,shortname=winnt,iocharset=mn,shortname=winnt,uni_xlate=1,iocharset=default,shortname=lower,shortname=mixed,\x00\x00\x00\x00\x00\x00\x00'], 0x25, 0x352, &(0x7f0000000c80)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f00000001c0)=""/43, 0x2b)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x81)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000)
connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000141, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xe000202b})
epoll_pwait(r3, 0x0, 0x0, 0xfffffff3, 0x0, 0x0)
setreuid(0xee00, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
prlimit64(r2, 0xd, 0x0, &(0x7f0000000400))
pipe2$9p(0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

8m26.981882179s ago: executing program 41 (id=2359):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000040)=ANY=[], 0x11, 0x6ba, &(0x7f00000001c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x1)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x501002, 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)

7m56.1308826s ago: executing program 42 (id=2468):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @ioapic={0x10000, 0x1be, 0x85, 0xfffffbc5, 0x0, [{0x6c, 0x6, 0x9, '\x00', 0x12}, {0x7, 0x8, 0x6f, '\x00', 0x3}, {0x0, 0x41, 0x5, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x4, '\x00', 0x49}, {0xf3, 0xf, 0x2, '\x00', 0x7}, {0x6, 0xf7, 0x1, '\x00', 0x8}, {0xa, 0x47, 0xb, '\x00', 0x45}, {0x7, 0xd, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x38, 0x11, 0x2}, {0x56, 0x4, 0x1, '\x00', 0x3}, {0x3, 0x6, 0x10, '\x00', 0x5}, {0x5, 0x4f, 0x2, '\x00', 0x2}, {0x4, 0x4, 0x1, '\x00', 0x9}, {0x0, 0x2, 0xf2, '\x00', 0x7f}, {0x8, 0x7, 0xd5, '\x00', 0x99}, {0xd, 0x3, 0x2, '\x00', 0xff}, {0xa, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x3f, 0xd}, {0x7, 0x21, 0x23, '\x00', 0x4}, {0x5, 0x0, 0xff, '\x00', 0xf}, {0x93, 0x1, 0x20, '\x00', 0xe6}, {0x3, 0x4, 0xa, '\x00', 0x54}]}})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x9)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f00000000c0)=0x100000001, 0x4)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}})

7m50.326258699s ago: executing program 43 (id=2489):
socket(0x1a, 0x1, 0xffffffa3)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, "dce4f0020100000000001b347d5c00010200"})
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)

6m26.955127655s ago: executing program 44 (id=2757):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES16=r1, @ANYBLOB="010028bd5000fdcbdf251f000000080001003100000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

6m25.186033618s ago: executing program 45 (id=2768):
r0 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x42a, &(0x7f0000000500)="$eJzs3E2IVeUfB/DfOTNX/47j/44RTUWglGgRXvVeq622aNHGhSD0IjTk9QWvTngnShPKAhEiooUkCDEto0UuWhQRRJsIatGiIJKEahGGFdKi3cS955zxomcWjTMenT4fOHOf89w753seDhyeB875BfCftTYitkXEUEQ0IqKe96f5Fq9kW+93x1vn9ve2JGZmdv6RRBIR7da5/cWxkvxzZf5v/4uI27Yl8ejwtbndo8cOTnQ67SP5/qapQ89t6h49tvHAoYl97X3tw62tDzebWx9qPbJwYz0//mo0m9tqH2xYe+rrT9/4rne+o/l3g+NYSMkcndsXI6xCtYF2UnK9ufm8dfrNT6o+BwDgxkvzuf9wf/5fj6HIJm8Xzj99uR4vj1R9fgAAAMD1m5kZyj8BAACApSux9gcAAIAlrngOoN06t7/YbtSzBysfiLi0PSLGsvzi/eLs2+H++8ORv1taW4T8ey8swkH/he7j1eZ/s6va/NXvV5s//UO1+c+srzb/l5+qzV+3ptr805MRn23PCiBce/9L+zUPCssiYnle02DFAuWv+fzK/e/4Nfe/dPb+NxQR1/Mi1qnpiyfL+scfi7h0IuLu4bL8ZDY/yWs6zNfGb0/sLutffSli5t2I9VGeHwP5c9eH2LT3QKe9Oftbnt966cl6Wf+OL7Lxj8yRP5b/bmigTsR8nBnZ/dGqkv5djSz//vvKr/+dA+P/f16bY2we+Wvv6uwo61//epa/Z47xD17/1fPILUz/1v25rP/DrddxUABg3tL+3CZJG7PtNG00svne7TGSdia7Uw/unXz+8J5sDjQWtbSYamXzkVrS29+Sz02K/eZV+618DnGqvqK/33h2srOn6sEDAADAEjca8eNTr308vvKq9f+v9Wz9DwAAANz6euv/e6bfOdtr/1X6dCQAAABwq+ut/y+f/P3LsP4HAACAJcv6HwAAAJa+Yv0/Okf9v1UDtfs25/WHv6rXlhe1/gAAAICbX2/9n37/xIXu0WMHJzqd9hENDQ2N2UbVdygAAGChXZn0V30mAAAAwOJJLyYR0ds21NeN3rHmvfHBb5clf/erAyyLiBfO7nz7xYmpqSNbev1/zvZPncn7m1WNAQAAABhUrNOLdTwAAAAAAAAAAAAAAHDzuxHlxKseIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvnnwAAAP//UuGYiQ==")
fdatasync(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
syz_open_procfs(r2, &(0x7f0000000100)='maps\x00')

6m22.123344617s ago: executing program 46 (id=2776):
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

6m2.859110301s ago: executing program 47 (id=2808):
r0 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='.\x00', 0x40480, 0x0)
mkdir(&(0x7f00000012c0)='./file0\x00', 0xd)
getdents(r2, &(0x7f0000000280)=""/4096, 0x9005)

5m44.345326801s ago: executing program 48 (id=2853):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x11, 0x6fd, &(0x7f0000000ac0)="$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")
setuid(0xee01)
writev(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
chmod(&(0x7f0000000100)='./file0\x00', 0x24c)

5m33.721010491s ago: executing program 49 (id=2871):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2808082, &(0x7f00000002c0)={[{@uid}, {@gid}, {@gid}, {@uid}, {@nls={'nls', 0x3d, 'cp437'}}, {@part={'part', 0x3d, 0x2}}, {@nodecompose}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$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")
openat$sndseq(0xffffffffffffff9c, 0x0, 0x28002)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000004c0)=""/48, 0x30)

5m31.512564761s ago: executing program 50 (id=2877):
syz_open_dev$loop(0x0, 0x54, 0x480ec0)
pipe2$9p(&(0x7f0000000080), 0x800)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

5m9.536697004s ago: executing program 51 (id=2917):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m2.894164341s ago: executing program 52 (id=2919):
unshare(0x6a040000)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x20004090)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

4m59.982258771s ago: executing program 53 (id=2925):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
personality(0xfe47fef9f5ff7379)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x30, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x6, 0x5, 0x8000000000008, 0x9, 0x2, 0x0, 0x2, 0x5}, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000000000001aa241d3c6895c4100", 0x800000})
write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

4m54.86277116s ago: executing program 54 (id=2932):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1, {0x7, 0x0, 0x4, 0x100}}}, @chandef_params]}, 0x44}}, 0x0)

4m49.800512766s ago: executing program 55 (id=2940):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x74f, &(0x7f0000001040)="$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")
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

4m36.409861337s ago: executing program 4 (id=2942):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x204080)
write$rfkill(r1, &(0x7f0000000000)={0x0, 0xfe, 0x3, 0x1}, 0x8)

4m35.105166573s ago: executing program 4 (id=2943):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd25, 0x25dfdc03, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800c805}, 0x24004084)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0)

4m34.094423712s ago: executing program 4 (id=2944):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000280)={[{@noblock_validity}, {@jqfmt_vfsv1}, {@nobh}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@noacl}, {@nodioread_nolock}, {@jqfmt_vfsv0}, {@auto_da_alloc}, {@mblk_io_submit}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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")
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket(0x1, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000a40)=""/39, 0x27)
getdents64(r0, 0xfffffffffffffffe, 0x29)

4m33.248039122s ago: executing program 4 (id=2945):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000680)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@quiet}, {@numtail}, {@fat=@usefree}, {@uni_xlate}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_winnt}, {@fat=@errors_remount}, {@shortname_lower}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11480, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

4m32.987966727s ago: executing program 4 (id=2946):
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x4, 0x272, &(0x7f0000001f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f00000043c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
chown(&(0x7f0000000000)='./file0\x00', r1, 0x0)

4m32.329708975s ago: executing program 4 (id=2947):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setsig(0x4203, r3, 0xb10, &(0x7f0000000200)={0x3a, 0x2, 0x7})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f00000003c0)={[{@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@grpid}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffffffe}}, {@auto_da_alloc}]}, 0xa, 0x45c, &(0x7f0000000b40)="$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")
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x400, 0x80)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000680)="6507060082762401f9a30250a80def79e5ddb933b83b8f7cc036fb3f1113b199f266daea48fc8f1a0daad170478560f60eb8dc259ded60aee45b04b15db386426858834573bfd6bc76fded092ed890aadb462aa73c6d7d1eafe850ed4682e6a585c44ba58cf1ecc2027204cec811f54fcec5c3eab2ead1803f0a4477e465afc8ce6d2754700cf68000"/147, 0x93)
r8 = accept$alg(r7, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08010000000000001701000002000000ef00000084c1949b701f8c0f794ab555488b0ab92786a3be5172acb423a81bf834bc3bc30f57ff9a927e15f1e9014b12804d7b6f1aa4726da466e20b85bf1bdbf903f9d403d3c9f1f14d00ab99ff5f501ccef853b4c8adab7952607531d40acad7495691aa91daf6873ff9759f6d041aa873f9219b1060f60c7adeef1ac02410953ed309ebfbe790cc3c2cb5de69e40bb8c49cc95a03c1ee777edf8de0c0182bce49fb6b935d5b243115735b45b07e0d686ea7e39ad6c6de04c0f4b239de0ef933cdc578cc5e0d01eefa6689382cfa559ac7cb16781e11987682364c3363aed5f32ef385734b652f5bc8a788d3941d43"], 0x108, 0x408d0}], 0x1, 0x200c8845)
recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x8dff)
getdents(r6, &(0x7f0000000100)=""/254, 0xfe)

4m31.595048708s ago: executing program 56 (id=2947):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setsig(0x4203, r3, 0xb10, &(0x7f0000000200)={0x3a, 0x2, 0x7})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f00000003c0)={[{@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@grpid}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffffffe}}, {@auto_da_alloc}]}, 0xa, 0x45c, &(0x7f0000000b40)="$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")
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x400, 0x80)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000680)="6507060082762401f9a30250a80def79e5ddb933b83b8f7cc036fb3f1113b199f266daea48fc8f1a0daad170478560f60eb8dc259ded60aee45b04b15db386426858834573bfd6bc76fded092ed890aadb462aa73c6d7d1eafe850ed4682e6a585c44ba58cf1ecc2027204cec811f54fcec5c3eab2ead1803f0a4477e465afc8ce6d2754700cf68000"/147, 0x93)
r8 = accept$alg(r7, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x108, 0x408d0}], 0x1, 0x200c8845)
recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x8dff)
getdents(r6, &(0x7f0000000100)=""/254, 0xfe)

4m20.135766747s ago: executing program 3 (id=2965):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffef}, 0x6)

4m19.875869772s ago: executing program 3 (id=2966):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000080)='./control\x00', 0x800040, &(0x7f0000000140)=ANY=[], 0x1, 0x1529, &(0x7f0000002d40)="$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")
unlinkat(0xffffffffffffffff, 0x0, 0x200)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

4m19.240827029s ago: executing program 3 (id=2967):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x4a5, &(0x7f00000011c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x39008a1, 0x0, 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)

4m18.870765171s ago: executing program 3 (id=2969):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)={[{@lazytime}, {@grpid}, {@mb_optimize_scan}, {@orlov}]}, 0x1, 0x4cf, &(0x7f0000000500)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40040, 0x6ab858183a7ef6ba)

4m18.625788905s ago: executing program 3 (id=2970):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4040800)

4m17.618181984s ago: executing program 3 (id=2972):
unshare(0x6a040000)
syz_clone3(&(0x7f0000000440)={0x40000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)

4m2.479746427s ago: executing program 57 (id=2972):
unshare(0x6a040000)
syz_clone3(&(0x7f0000000440)={0x40000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)

3m30.806226056s ago: executing program 7 (id=3096):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r0, 0x1, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)
msgsnd(r0, 0x0, 0x70, 0x800)

3m30.429971998s ago: executing program 7 (id=3098):
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x1000, 0x3})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac)

3m30.148681564s ago: executing program 7 (id=3100):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
r1 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0)
process_vm_writev(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/158, 0x9e}], 0x1, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/187, 0xbb}], 0x1, 0x0)

3m29.691489651s ago: executing program 7 (id=3102):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x144)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
umount2(&(0x7f00000010c0)='./file0/file0\x00', 0x8)

3m29.320042452s ago: executing program 7 (id=3103):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x452, &(0x7f00000005c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0xc5)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)

3m24.514580024s ago: executing program 7 (id=3113):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b408ecff000000000000951800120030abf04f1396365e1009a8"], 0x0, 0x8000000}, 0x94)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m24.156936345s ago: executing program 58 (id=3113):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b408ecff000000000000951800120030abf04f1396365e1009a8"], 0x0, 0x8000000}, 0x94)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m18.880269372s ago: executing program 0 (id=3135):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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")
fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, r0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0)

3m18.101214518s ago: executing program 0 (id=3138):
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x144)
umount2(&(0x7f00000010c0)='./file0/file0\x00', 0x8)

3m17.88372679s ago: executing program 0 (id=3139):
syz_open_procfs(0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCNXCL(r2, 0x540d)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fanotify_init(0x10, 0x101000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0xc8bbf2a48522880d, 0x4, 0x40, 0x0, 0xf})
request_key(&(0x7f0000000440)='ceph\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0xfffffffffffffff8)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r5, 0x7e, 0x800003a, r8, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r9)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x2)

3m13.461065258s ago: executing program 0 (id=3141):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@fat=@nocase}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xfffffffffffffd71}}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_winnt}]}, 0x0, 0x2b5, &(0x7f00000012c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

3m13.122905968s ago: executing program 0 (id=3144):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/39, 0x27}], 0x1, 0x0, 0xfffffffd)

3m11.267774396s ago: executing program 0 (id=3148):
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x144)
umount2(&(0x7f00000010c0)='./file0/file0\x00', 0x8)

3m10.297698533s ago: executing program 59 (id=3148):
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x144)
umount2(&(0x7f00000010c0)='./file0/file0\x00', 0x8)

2m21.263481485s ago: executing program 8 (id=3286):
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000140), 0x1e)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)

2m20.746004115s ago: executing program 8 (id=3289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014)

2m20.419327964s ago: executing program 8 (id=3291):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40881)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x10002, 0x0, 0x0, 'queue0\x00'})
poll(&(0x7f0000000140)=[{r3, 0x8}], 0x1, 0x5)
close_range(r2, r3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, 0x0, 0x0)

2m19.307104839s ago: executing program 8 (id=3293):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@utf8no}, {@fat=@nocase}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@quiet}, {@fat=@fmask={'fmask', 0x3d, 0x1}}, {@shortname_mixed}, {@shortname_mixed}, {@utf8}, {@shortname_winnt}]}, 0x0, 0x2b5, &(0x7f00000012c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)
fsmount(0xffffffffffffffff, 0x0, 0x0)

2m18.619381649s ago: executing program 8 (id=3295):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xab)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf5)

2m18.129096488s ago: executing program 8 (id=3297):
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x1000, 0x3})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac)

2m17.553426612s ago: executing program 60 (id=3297):
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x1000, 0x3})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac)

8.314008985s ago: executing program 1 (id=3713):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x400000000000094, 0x42, 0x0)

7.861700391s ago: executing program 5 (id=3715):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x20, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)

7.557773649s ago: executing program 2 (id=3718):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, 0x0, 0x0, 0x4}, 0x20)
ptrace$setsig(0x4203, 0x0, 0x81, &(0x7f00000000c0)={0x8, 0x401, 0x3})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffb, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x90000, 0x105, 0x1}, 0x18)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.321675573s ago: executing program 1 (id=3720):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x10f802)
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040))

7.077882767s ago: executing program 1 (id=3722):
syz_open_procfs(0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCNXCL(r2, 0x540d)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fanotify_init(0x10, 0x101000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0xc8bbf2a48522880d, 0x4, 0x40, 0x0, 0xf})
request_key(&(0x7f0000000440)='ceph\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0xfffffffffffffff8)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r5, 0x7e, 0x800003a, r8, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x2)

7.013760391s ago: executing program 2 (id=3723):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)

6.050021917s ago: executing program 2 (id=3726):
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x20000002})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000001})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20002001})

5.109762442s ago: executing program 9 (id=3728):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100"], 0x3c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c000000000010505000000000000000002000000240002801400018008000100ac1e010108000200ffffffff0c00028005000100210000000800074000000000240001800c00028005000100210000001400018008000100ac1e000108000200ac1e00015c0006800400038014000500fc020000000000000000000000000000240003"], 0xc0}, 0x1, 0x0, 0x0, 0x240c8011}, 0x40)

5.002111658s ago: executing program 6 (id=3729):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x2)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x30)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r3, 0x5)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x240000d4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
close_range(r3, 0xffffffffffffffff, 0x0)

4.909421893s ago: executing program 1 (id=3730):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c)
sendto$inet6(r3, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x400000000000094, 0x42, 0x0)

4.672802547s ago: executing program 5 (id=3731):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='barrier,nls=ascii,uid=', @ANYRESHEX=0x0, @ANYBLOB=',force,umask=00000000000000000002\x00\x000,part=0x0000000000000002,session=0xfffffffffffffff9,nodecompose,\x00'], 0x1, 0x6e0, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
getdents64(r0, 0x0, 0x22)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file2\x00', 0x2204806, &(0x7f0000000c40)=ANY=[], 0xfa, 0x69f, &(0x7f0000000f00)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0)

3.77554042s ago: executing program 1 (id=3732):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x81, 0x30, 0x5a, 0x40, 0x586, 0x401a, 0x9280, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x78, 0x1, 0x1, 0xbd, 0x35, 0xfc, 0x0, [], [{{0x9, 0x5, 0x7, 0xd, 0x8, 0x1, 0x7, 0x3}}]}}]}}]}}, 0x0)

3.562124082s ago: executing program 9 (id=3733):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd082678cb77fd66", 0xf}, {&(0x7f0000000180)="1fd9c3218167f1c0f63c93db76ceda1557978e7263b341bc2127fe3d0378cc666d", 0x21}], 0x2}, 0x20040850)

3.561633452s ago: executing program 2 (id=3734):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0xfffffffa)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
close(0x3)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0x39000, 0x3)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$unix(0x1, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x2020)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000480)={0x2, 0x0, [{0x8, 0x3, 0x1, 0x0, @adapter={0x6, 0x10, 0x80, 0xe, 0x2}}, {0x2, 0x4, 0x0, 0x0, @sint={0x6, 0x5}}]})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x9)

3.401053012s ago: executing program 6 (id=3735):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120d, &(0x7f0000003680)="$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")
syz_read_part_table(0x5e4, &(0x7f0000000000)="$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")
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)

3.166431346s ago: executing program 9 (id=3736):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)

3.093949149s ago: executing program 5 (id=3737):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/39, 0x27}], 0x1, 0x0, 0xfffffffd)
fsopen(&(0x7f0000000000)='overlay\x00', 0x0)

3.031619503s ago: executing program 6 (id=3738):
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
pipe2(0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf, 0x8)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x0, 0xffffffff, 0x9, 0xc04, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00')
read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x96)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583"], 0x0)

2.392374141s ago: executing program 9 (id=3739):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x424, &(0x7f0000000240)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, 'max_batch_time'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x65, 0x36, 0x61, 0x39, 0x65, 0x32, 0x64], 0x2d, [0x32, 0x65, 0x63, 0x66], 0x2d, [0x33, 0x64, 0x66, 0x63], 0x2d, [0x65, 0x39, 0x36, 0x36], 0x2d, [0x64, 0x36, 0x35, 0x38, 0x5f, 0xcf143c6c626b7287, 0x38, 0x63]}}}, {@obj_role={'obj_role', 0x3d, 'nombcache'}}, {@obj_role={'obj_role', 0x3d, 'nombcache'}}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
recvmmsg(r1, 0x0, 0x0, 0x180, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = semget(0x0, 0x5, 0x6b4)
semop(r5, &(0x7f00000002c0)=[{0x4, 0xfffc, 0x1000}, {0x0, 0x7fff, 0x1000}, {0x1, 0x0, 0x1800}], 0x3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = epoll_create1(0x0)
epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0)

2.208521941s ago: executing program 2 (id=3740):
syz_open_procfs(0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCNXCL(r2, 0x540d)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fanotify_init(0x10, 0x101000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0xc8bbf2a48522880d, 0x4, 0x40, 0x0, 0xf})
request_key(&(0x7f0000000440)='ceph\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0xfffffffffffffff8)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r5, 0x7e, 0x800003a, r8, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x2)

802.588483ms ago: executing program 5 (id=3741):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x20, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)

802.164473ms ago: executing program 6 (id=3742):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000800)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000740)={@flat=@weak_handle={0x77682a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x36}}, &(0x7f00000007c0)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

753.900596ms ago: executing program 9 (id=3743):
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f00000017c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)={'#! ', '', [], 0xa, "9f290667dc34d4b2d515e2f1f8380d00dc0f5ecfe8cae4432e7cef78685b36c0681f0ea26017662e93c0fbfb72434f3dad314220848dacc5c7de14399f78d31dbb09000000f7c0ba5446f6df1d2399118c74"}, 0x56)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
pipe2$9p(&(0x7f00000000c0), 0x0)

592.560316ms ago: executing program 5 (id=3744):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
socket$inet6(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000002480)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0xb}}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x2c}}, 0x40050)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000140)=""/32, 0x20)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getdents64(r0, &(0x7f00000003c0)=""/126, 0x7e)

591.767206ms ago: executing program 6 (id=3745):
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000140), 0x12)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

413.220746ms ago: executing program 2 (id=3746):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x2)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x30)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r3, 0x5)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x240000d4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
close_range(r3, 0xffffffffffffffff, 0x0)

202.939538ms ago: executing program 5 (id=3747):
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb}, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r5, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac08]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}]]}, 0x38}}, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$key(0xf, 0x3, 0x2)
r7 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00')
r8 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x1)
ftruncate(r8, 0x800799c)
r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r9, 0x8004550f, &(0x7f0000000000))
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c)
sendfile(r10, r8, 0x0, 0xf000)
pread64(r7, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)

150.036801ms ago: executing program 1 (id=3748):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)

48.188277ms ago: executing program 6 (id=3749):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)

0s ago: executing program 9 (id=3750):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0xfffffffa)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
close(0x3)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0x39000, 0x3)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$unix(0x1, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x2020)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000480)={0x2, 0x0, [{0x8, 0x3, 0x1, 0x0, @adapter={0x6, 0x10, 0x80, 0xe, 0x2}}, {0x2, 0x4, 0x0, 0x0, @sint={0x6, 0x5}}]})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x9)

kernel console output (not intermixed with test programs):

oduct=0, SerialNumber=0
[ 1171.304158][T16668] usb 6-1: config 0 descriptor??
[ 1171.315645][T17577] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1171.407819][ T5376] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.592871][T17614] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1171.646714][T17614] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.659746][T17614] device bridge_slave_0 entered promiscuous mode
[ 1171.746926][   T48] Bluetooth: hci0: command 0x041b tx timeout
[ 1171.810509][ T5376] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.859391][T16668] wacom 0003:056A:00B0.0017: Unknown device_type for 'HID 056a:00b0'. Assuming pen.
[ 1171.873180][T16668] wacom 0003:056A:00B0.0017: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.5-1/input0
[ 1171.885986][T16668] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B0.0017/input/input34
[ 1171.911172][T17614] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1171.918602][T17614] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1172.261814][T17614] device bridge_slave_1 entered promiscuous mode
[ 1172.368245][T16667] usb 6-1: USB disconnect, device number 8
[ 1172.835658][T17689] fido_id[17689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1172.922513][ T5376] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.005854][T17614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1173.058776][T17614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1173.094848][T17460] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1173.207324][T12207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1173.261475][T12207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1173.277331][T17460] 8021q: adding VLAN 0 to HW filter on device team0
[ 1173.308889][T17614] team0: Port device team_slave_0 added
[ 1173.339038][T17614] team0: Port device team_slave_1 added
[ 1173.483520][T17614] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1173.532548][T17614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1173.558858][T17614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1173.572234][T17614] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1173.579940][T17614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1173.619507][T17614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1173.649482][T17704] binder: BINDER_SET_CONTEXT_MGR already set
[ 1173.674367][T17704] binder: 17702:17704 ioctl 4018620d 200000004a80 returned -16
[ 1173.679165][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1173.703975][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1173.731746][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1173.738980][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1173.799697][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1173.811208][   T48] Bluetooth: hci0: command 0x040f tx timeout
[ 1173.863039][T12251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1173.872716][T12251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1173.882094][T12251] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1173.889226][T12251] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1173.931838][T17614] device hsr_slave_0 entered promiscuous mode
[ 1173.959133][T17614] device hsr_slave_1 entered promiscuous mode
[ 1174.002170][T17614] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1174.019927][T17614] Cannot create hsr debugfs directory
[ 1174.040191][T12207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1174.119158][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1174.129775][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1174.337315][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1174.386544][T17714] loop8: detected capacity change from 0 to 1024
[ 1174.401902][T17716] loop5: detected capacity change from 0 to 2048
[ 1174.409855][T17716] EXT4-fs: Ignoring removed i_version option
[ 1174.418535][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1174.488517][T17716] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1174.500304][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1174.530057][T17716] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1174.554679][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1174.585849][T17714] hfsplus: invalid length 32517 has been corrected to 255
[ 1174.624094][   T26] audit: type=1800 audit(2000000939.430:172): pid=17714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3175" name="file1" dev="loop8" ino=20 res=0 errno=0
[ 1174.720914][T17460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1174.782759][T17460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1174.852711][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1174.862568][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1174.914897][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1174.942146][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1174.962855][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1175.098599][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1175.456580][T17739] loop6: detected capacity change from 0 to 512
[ 1175.493396][T17739] EXT4-fs: Ignoring removed orlov option
[ 1175.527579][T17739] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1175.557584][T17739] EXT4-fs: Ignoring removed orlov option
[ 1175.610110][T17739] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[ 1175.897915][T17739] loop6: detected capacity change from 0 to 2048
[ 1175.901979][   T48] Bluetooth: hci0: command 0x0419 tx timeout
[ 1176.089629][T17739] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1176.160997][T17739] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1176.233269][T17757] loop8: detected capacity change from 0 to 1024
[ 1176.355919][ T4478] hfsplus: bad catalog folder entry
[ 1176.572421][T16605] EXT4-fs (loop6): unmounting filesystem.
[ 1176.988986][T12251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1177.006033][T17771] loop8: detected capacity change from 0 to 512
[ 1177.029068][T12251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1177.032695][T17768] loop5: detected capacity change from 0 to 256
[ 1177.118566][T17768] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1177.229033][   T26] audit: type=1800 audit(2000000942.030:173): pid=17768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3185" name="file1" dev="loop5" ino=1048932 res=0 errno=0
[ 1178.688464][T17460] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1178.907808][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1178.928559][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1179.159846][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1179.179408][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1179.208568][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1179.240414][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1179.272473][T17460] device veth0_vlan entered promiscuous mode
[ 1179.437907][T17460] device veth1_vlan entered promiscuous mode
[ 1180.350231][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1180.373272][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1180.401972][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1180.434439][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1180.464072][T17460] device veth0_macvtap entered promiscuous mode
[ 1180.586420][T17817] loop6: detected capacity change from 0 to 1024
[ 1180.635623][T17817] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1180.668902][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1180.724752][T17460] device veth1_macvtap entered promiscuous mode
[ 1180.741445][T16667] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1180.762183][T16605] EXT4-fs (loop6): unmounting filesystem.
[ 1180.768580][T17614] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1180.835497][T17824] loop5: detected capacity change from 0 to 128
[ 1180.893367][T17824] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1180.902609][T17614] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1180.912257][T17824] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1180.930783][T16667] usb 9-1: Using ep0 maxpacket: 32
[ 1180.937836][T16667] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1180.954135][T16667] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1180.964996][T16667] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1180.974244][T16667] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1180.984292][T16667] usb 9-1: config 0 descriptor??
[ 1181.072912][T17824] syz.5.3196 (pid 17824) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[ 1181.380026][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1181.479888][T16667] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0
[ 1181.979974][T16667] usb 9-1: USB disconnect, device number 10
[ 1182.190309][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1182.201170][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.211355][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1182.222209][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.233110][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1182.243883][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.253786][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1182.264501][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.278869][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1182.313639][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.347059][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1182.378106][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.423765][T17460] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1182.442283][T17614] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1182.454472][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.460926][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1182.487958][T17614] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1182.617098][T17834] fido_id[17834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1182.895364][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1182.932785][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1183.772874][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1183.839028][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1183.910625][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1183.940744][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1183.960717][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1183.980736][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1183.990630][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1184.023432][T17853] loop6: detected capacity change from 0 to 1024
[ 1184.040883][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1184.070804][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1184.082450][T17853] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1184.100740][T17853] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869)
[ 1184.113234][T17853] EXT4-fs error (device loop6): ext4_get_journal_inode:5756: inode #5: comm syz.6.3200: inode has both inline data and extents flags
[ 1184.130733][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1184.170887][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1184.184671][T17853] EXT4-fs (loop6): no journal found
[ 1184.212917][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1184.226397][T17460] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1184.312294][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1184.325354][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1184.339452][T17863] loop5: detected capacity change from 0 to 1024
[ 1184.655546][T17868] loop8: detected capacity change from 0 to 2048
[ 1184.724863][T17868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1184.868447][T17460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1184.991567][T17460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.000375][T17460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.071841][T17460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.499797][T17888] loop5: detected capacity change from 0 to 512
[ 1185.610618][T17888] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1185.621306][T17888] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1185.905290][T17903] loop6: detected capacity change from 0 to 128
[ 1185.925349][T17888] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz.5.3210: Invalid inode table block 1991734912 in block_group 0
[ 1185.983517][T17888] EXT4-fs (loop5): Remounting filesystem read-only
[ 1186.020436][   T26] audit: type=1804 audit(2000000950.820:174): pid=17903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3214" name="/newroot/37/file0/bus" dev="loop6" ino=1048933 res=1 errno=0
[ 1186.042975][T17888] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem
[ 1186.067273][T17614] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1186.117794][T17888] EXT4-fs (loop5): Remounting filesystem read-only
[ 1186.129351][T17888] EXT4-fs error (device loop5): ext4_ext_truncate:4454: inode #18: comm syz.5.3210: mark_inode_dirty error
[ 1186.178398][T12687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1186.196724][T17888] EXT4-fs (loop5): Remounting filesystem read-only
[ 1186.204484][T17888] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz.5.3210: Invalid inode table block 1991734912 in block_group 0
[ 1186.229507][T17888] EXT4-fs (loop5): Remounting filesystem read-only
[ 1186.237777][T17888] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem
[ 1186.248510][T17888] EXT4-fs (loop5): Remounting filesystem read-only
[ 1186.266316][T17888] EXT4-fs error (device loop5): ext4_truncate:4318: inode #18: comm syz.5.3210: mark_inode_dirty error
[ 1186.279865][T12687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1186.305840][ T5376] device hsr_slave_0 left promiscuous mode
[ 1186.330167][T17888] EXT4-fs (loop5): Remounting filesystem read-only
[ 1186.337472][T17888] EXT4-fs error (device loop5) in ext4_setattr:5676: Corrupt filesystem
[ 1186.353013][ T5376] device hsr_slave_1 left promiscuous mode
[ 1186.369415][ T5376] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1186.390919][T17888] EXT4-fs (loop5): Remounting filesystem read-only
[ 1186.409810][ T5376] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1186.462805][ T5376] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1186.470339][ T5376] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1186.497434][ T5376] device bridge_slave_1 left promiscuous mode
[ 1186.509915][ T5376] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1186.518943][ T5860] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm kworker/u4:21: Invalid inode table block 1991734912 in block_group 0
[ 1186.549004][ T5376] device bridge_slave_0 left promiscuous mode
[ 1186.570444][ T5860] EXT4-fs (loop5): Remounting filesystem read-only
[ 1186.577608][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1186.599465][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1186.655878][ T5376] device hsr_slave_0 left promiscuous mode
[ 1186.674985][ T5376] device hsr_slave_1 left promiscuous mode
[ 1186.701771][ T5376] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1186.720940][ T5376] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1186.773620][ T5376] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1186.786054][T17911] loop8: detected capacity change from 0 to 4096
[ 1186.792824][ T5376] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1186.809135][ T5376] device bridge_slave_1 left promiscuous mode
[ 1186.839729][ T5376] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1186.879996][ T5376] device bridge_slave_0 left promiscuous mode
[ 1186.889953][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1186.910815][T17911] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1186.982249][T17918] binder: 17917:17918 ioctl c0306201 0 returned -14
[ 1186.989556][T17918] binder: 17917:17918 ioctl c0306201 0 returned -14
[ 1187.204294][T16321] EXT4-fs (loop8): unmounting filesystem.
[ 1187.272273][T17921] loop6: detected capacity change from 0 to 512
[ 1187.318208][T17921] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1187.328323][T17921] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1187.351189][T17921] EXT4-fs (loop6): 1 truncate cleaned up
[ 1187.356924][T17921] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1187.551189][ T5376] device veth1_macvtap left promiscuous mode
[ 1187.559598][T16605] EXT4-fs (loop6): unmounting filesystem.
[ 1187.567565][ T5376] device veth0_macvtap left promiscuous mode
[ 1187.617246][ T5376] device veth1_vlan left promiscuous mode
[ 1187.633821][ T5376] device veth0_vlan left promiscuous mode
[ 1187.837141][ T5376] device veth1_macvtap left promiscuous mode
[ 1187.865699][ T5376] device veth0_macvtap left promiscuous mode
[ 1187.940945][ T5376] device veth1_vlan left promiscuous mode
[ 1187.946870][ T5376] device veth0_vlan left promiscuous mode
[ 1189.529362][T17949] loop5: detected capacity change from 0 to 1024
[ 1189.598807][T17949] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002]
[ 1189.607141][T17949] System zones: 0-1, 3-36
[ 1189.617744][T17949] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.3227: bad orphan inode 134217728
[ 1189.632608][T17949] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1189.748826][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1191.984290][ T5376] team0 (unregistering): Port device team_slave_1 removed
[ 1192.046584][ T5376] team0 (unregistering): Port device team_slave_0 removed
[ 1192.112545][ T5376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1192.175193][ T5376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1192.743816][ T5376] bond0 (unregistering): Released all slaves
[ 1193.739957][ T5376] team0 (unregistering): Port device team_slave_1 removed
[ 1193.813553][ T5376] team0 (unregistering): Port device team_slave_0 removed
[ 1193.882335][ T5376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1193.957293][ T5376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1194.494097][ T5376] bond0 (unregistering): Released all slaves
[ 1194.615435][T17614] 8021q: adding VLAN 0 to HW filter on device team0
[ 1194.933943][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1194.952965][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1194.981403][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1194.988615][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1194.999482][T17971] loop5: detected capacity change from 0 to 512
[ 1195.014538][T17973] loop6: detected capacity change from 0 to 512
[ 1195.072572][T17971] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1195.087289][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1195.121660][T17965] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1195.144973][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1195.175223][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1195.182490][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1195.233282][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1195.287513][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1195.382778][ T4425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1195.433014][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1195.470206][ T4425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1195.778865][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1196.117130][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1196.177251][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1196.211979][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1196.270055][T11031] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1196.286139][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1196.341643][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1196.383608][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1196.413327][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1196.462048][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1196.472208][T11031] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1196.484266][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1196.518351][T11031] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1196.646080][T11031] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1196.751648][T11031] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1196.811834][T11031] usb 9-1: config 0 descriptor??
[ 1197.071260][ T5860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1197.081739][T17614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1197.121608][ T5860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1197.150204][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1197.254336][T11031] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0
[ 1197.281863][T11031] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0
[ 1197.289202][T11031] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0
[ 1197.334171][T11031] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0
[ 1197.359368][T11031] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0
[ 1197.383161][T11031] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0
[ 1198.236513][T11031] usb 9-1: USB disconnect, device number 11
[ 1198.655664][T18024] loop5: detected capacity change from 0 to 512
[ 1198.684831][T18013] fido_id[18013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1198.686939][T18024] EXT4-fs: Ignoring removed orlov option
[ 1198.741215][T18024] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1198.775098][T18024] EXT4-fs: Ignoring removed orlov option
[ 1198.813537][T18024] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[ 1199.398033][T18039] loop8: detected capacity change from 0 to 512
[ 1200.622322][T18039] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1202.284249][T18053] loop2: detected capacity change from 0 to 512
[ 1202.352961][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1202.386338][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1202.432726][T18053] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1202.439589][T18053] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1202.455338][T18055] loop6: detected capacity change from 0 to 256
[ 1202.476569][T17614] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1202.535925][T18055] exfat: Unknown parameter 'ÿÿ0x0000000000000000'
[ 1202.543845][T18053] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3246: bad orphan inode 131083
[ 1202.601488][T18053] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1203.250317][T18074] loop6: detected capacity change from 0 to 512
[ 1203.295947][T18074] EXT4-fs: Mount option(s) incompatible with ext2
[ 1203.429109][T18053] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 1203.592435][T17460] EXT4-fs (loop2): unmounting filesystem.
[ 1203.669223][T18086] loop6: detected capacity change from 0 to 512
[ 1203.748284][T18086] FAT-fs (loop6): Directory bread(block 199916) failed
[ 1203.786066][T18086] FAT-fs (loop6): Directory bread(block 199917) failed
[ 1203.842064][T18086] FAT-fs (loop6): Directory bread(block 199918) failed
[ 1203.849221][T18086] FAT-fs (loop6): Directory bread(block 199919) failed
[ 1203.891216][T18086] FAT-fs (loop6): Directory bread(block 199920) failed
[ 1203.930753][T18086] FAT-fs (loop6): Directory bread(block 199921) failed
[ 1203.937725][T18086] FAT-fs (loop6): Directory bread(block 199922) failed
[ 1204.015153][T18086] FAT-fs (loop6): Directory bread(block 199923) failed
[ 1204.085047][T18086] FAT-fs (loop6): Directory bread(block 199916) failed
[ 1204.111013][T18086] FAT-fs (loop6): Directory bread(block 199917) failed
[ 1204.132450][T18094] loop2: detected capacity change from 0 to 1024
[ 1204.167404][T18094] EXT4-fs: Ignoring removed bh option
[ 1204.204241][T18094] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1204.307936][T18094] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1204.496086][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1204.521824][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1204.592040][T17460] EXT4-fs (loop2): unmounting filesystem.
[ 1204.665439][T17614] device veth0_vlan entered promiscuous mode
[ 1204.701638][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1204.720094][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1204.755426][T17614] device veth1_vlan entered promiscuous mode
[ 1204.777026][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1204.822457][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1204.866436][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1204.944484][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1204.963996][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1204.985001][T18112] loop6: detected capacity change from 0 to 1024
[ 1204.997879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1205.070233][T18112] EXT4-fs: Ignoring removed orlov option
[ 1205.158804][T17614] device veth0_macvtap entered promiscuous mode
[ 1205.229583][T18112] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1206.105945][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1206.179128][T17614] device veth1_macvtap entered promiscuous mode
[ 1206.293826][T17614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1206.325962][T17614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1206.370871][T17614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1206.406565][T17614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1206.455387][T17614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1206.500835][T17614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1206.531758][T17614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1206.554051][T17614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1206.604142][T11031] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1206.740903][T17614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1206.753850][T17614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1206.769350][T16605] EXT4-fs (loop6): unmounting filesystem.
[ 1206.781865][T17614] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1206.798878][T17614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1206.826785][T17614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1206.910938][T17614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1207.208412][T17614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1207.511624][T17614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1207.755435][T17614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1207.929853][T17614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1207.962987][T17614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1207.973591][T17614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1207.984247][T17614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1208.101576][T17614] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1208.109062][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1208.126642][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1208.186715][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1208.245657][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1208.299004][T18142] loop2: detected capacity change from 0 to 256
[ 1208.410303][T18142] FAT-fs (loop2): Directory bread(block 64) failed
[ 1208.441427][T18142] FAT-fs (loop2): Directory bread(block 65) failed
[ 1208.448154][T18142] FAT-fs (loop2): Directory bread(block 66) failed
[ 1208.461897][T18138] loop6: detected capacity change from 0 to 8192
[ 1208.529579][T18142] FAT-fs (loop2): Directory bread(block 67) failed
[ 1208.770894][ T4277] Bluetooth: hci0: command 0x0405 tx timeout
[ 1208.982971][T11031] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1208.984005][T18142] FAT-fs (loop2): Directory bread(block 68) failed
[ 1208.992475][T11031] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1209.015865][T11031] usb 9-1: Product: syz
[ 1209.020132][T11031] usb 9-1: Manufacturer: syz
[ 1209.025203][T11031] usb 9-1: SerialNumber: syz
[ 1209.080821][T18142] FAT-fs (loop2): Directory bread(block 69) failed
[ 1209.087607][T18142] FAT-fs (loop2): Directory bread(block 70) failed
[ 1209.115355][T17614] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1209.166822][T17614] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1209.209249][T17614] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1209.225425][T18146] loop5: detected capacity change from 0 to 1024
[ 1209.240865][T18142] FAT-fs (loop2): Directory bread(block 71) failed
[ 1209.261060][T18142] FAT-fs (loop2): Directory bread(block 72) failed
[ 1209.275599][T17614] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1209.298542][T18142] FAT-fs (loop2): Directory bread(block 73) failed
[ 1209.714568][ T4595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1209.750837][ T4595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1209.771808][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1209.883257][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1209.893918][ T4595] hfsplus: b-tree write err: -5, ino 8
[ 1209.905985][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1209.957561][T18154] loop2: detected capacity change from 0 to 512
[ 1209.982159][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1210.011686][T18154] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1210.060884][T11031] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 1210.075251][T18159] loop5: detected capacity change from 0 to 512
[ 1210.131411][ T4277] Bluetooth: hci4: command 0x0406 tx timeout
[ 1210.206864][T18159] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1210.273135][T11031] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 1210.480032][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1210.806958][T18164] loop9: detected capacity change from 0 to 8192
[ 1211.486666][T15386] usb 9-1: USB disconnect, device number 12
[ 1211.501241][T15386] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP)
[ 1213.149471][T18195] loop5: detected capacity change from 0 to 512
[ 1213.227730][T18195] EXT4-fs: Ignoring removed orlov option
[ 1213.284455][T18195] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1213.335229][T18195] EXT4-fs: Ignoring removed orlov option
[ 1213.441847][T18195] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[ 1213.452197][T18201] loop9: detected capacity change from 0 to 1024
[ 1213.585485][T18203] loop8: detected capacity change from 0 to 512
[ 1213.625434][T18195] loop5: detected capacity change from 0 to 2048
[ 1213.650155][T18203] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1213.753289][T18203] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1213.759740][T18203] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13
[ 1213.801978][T18195] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1213.810583][T18195] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1213.931686][T18203] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.3279: attempt to clear invalid blocks 2 len 1
[ 1214.031422][T18203] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 1214.141635][T18203] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3279: invalid indirect mapped block 1819239214 (level 0)
[ 1214.185087][T18203] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3279: invalid indirect mapped block 1819239214 (level 1)
[ 1214.221501][T18203] EXT4-fs (loop8): 1 truncate cleaned up
[ 1214.260856][T18203] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1214.358646][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1214.542962][T16321] EXT4-fs (loop8): unmounting filesystem.
[ 1214.657497][T18228] loop2: detected capacity change from 0 to 512
[ 1214.676507][T18228] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1214.918894][T18236] loop5: detected capacity change from 0 to 256
[ 1214.978789][T18236] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1215.045543][T18236] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[ 1215.134565][T18236] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1216.916049][T18261] loop8: detected capacity change from 0 to 128
[ 1217.670788][ T4276] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1217.794787][ T4542] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.860857][ T4276] usb 6-1: Using ep0 maxpacket: 8
[ 1217.867854][ T4276] usb 6-1: config 0 has an invalid interface number: 52 but max is 0
[ 1217.901698][ T4276] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1217.944608][ T4276] usb 6-1: config 0 has no interface number 0
[ 1217.980757][ T4276] usb 6-1: config 0 interface 52 has no altsetting 0
[ 1218.002056][ T4276] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1218.050846][ T4276] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 1218.079806][ T4542] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1218.089759][ T4276] usb 6-1: Manufacturer: syz
[ 1218.101763][ T4276] usb 6-1: config 0 descriptor??
[ 1218.142309][ T4276] hub 6-1:0.52: bad descriptor, ignoring hub
[ 1218.148392][ T4276] hub: probe of 6-1:0.52 failed with error -5
[ 1218.365895][ T4542] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1218.594201][ T4542] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1218.644090][ T4276] usb 6-1: USB disconnect, device number 9
[ 1220.007057][   T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1220.018666][   T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1220.027750][T12030] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1220.037404][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1220.047136][T12030] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1220.054637][T12030] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1220.257704][T18300] loop2: detected capacity change from 0 to 256
[ 1220.379706][T18300] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1220.851852][ T4277] Bluetooth: hci0: command 0x0405 tx timeout
[ 1221.163713][   T26] audit: type=1800 audit(2000000985.920:175): pid=18300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3303" name="file1" dev="loop2" ino=1048948 res=0 errno=0
[ 1221.385510][   T26] audit: type=1800 audit(2000000986.190:176): pid=18310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3303" name="file1" dev="loop2" ino=1048948 res=0 errno=0
[ 1221.819978][T18310] syz.2.3303: attempt to access beyond end of device
[ 1221.819978][T18310] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[ 1221.890261][T18319] loop5: detected capacity change from 0 to 1024
[ 1221.969938][T18319] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1222.140545][ T4277] Bluetooth: hci1: command 0x0409 tx timeout
[ 1222.166566][T18325] loop2: detected capacity change from 0 to 512
[ 1222.182295][T18325] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1222.463835][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1222.578885][T18295] chnl_net:caif_netlink_parms(): no params data found
[ 1222.596489][T18330] loop9: detected capacity change from 0 to 512
[ 1222.702650][T18330] EXT4-fs: Ignoring removed oldalloc option
[ 1222.729427][T18330] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.3309: inode #15947535: comm syz.9.3309: iget: illegal inode #
[ 1222.756138][T18330] EXT4-fs (loop9): Remounting filesystem read-only
[ 1222.768150][T18330] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.3309: error while reading EA inode 15947535 err=-117
[ 1222.788924][T18330] EXT4-fs (loop9): Remounting filesystem read-only
[ 1222.795798][T18330] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.3309: inode #261888: comm syz.9.3309: iget: illegal inode #
[ 1222.815899][T18330] EXT4-fs (loop9): Remounting filesystem read-only
[ 1222.822801][T18330] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.3309: error while reading EA inode 261888 err=-117
[ 1222.841310][T18330] EXT4-fs (loop9): Remounting filesystem read-only
[ 1222.848045][T18330] EXT4-fs (loop9): 1 orphan inode deleted
[ 1222.930851][T18330] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1223.312812][T17614] EXT4-fs (loop9): unmounting filesystem.
[ 1223.376885][T18295] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1223.394302][T18295] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1223.419000][T18295] device bridge_slave_0 entered promiscuous mode
[ 1224.530876][ T4277] Bluetooth: hci1: command 0x041b tx timeout
[ 1224.728564][T18295] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1224.751081][T18357] loop9: detected capacity change from 0 to 128
[ 1224.756662][T18295] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1224.759787][T18357] EXT4-fs: Ignoring removed nobh option
[ 1224.829022][T18357] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1224.843717][T18295] device bridge_slave_1 entered promiscuous mode
[ 1224.868531][T18357] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1226.046750][T18295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1226.069017][T17614] EXT4-fs (loop9): unmounting filesystem.
[ 1226.121453][T18295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1226.384460][ T4542] device hsr_slave_0 left promiscuous mode
[ 1226.423229][ T4542] device hsr_slave_1 left promiscuous mode
[ 1226.431547][ T4542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1226.439051][ T4542] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1226.508419][ T4542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1226.528617][ T4542] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1226.541953][ T4542] device bridge_slave_1 left promiscuous mode
[ 1226.568702][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1226.610485][ T4542] device bridge_slave_0 left promiscuous mode
[ 1226.617368][ T4277] Bluetooth: hci1: command 0x040f tx timeout
[ 1226.636021][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1226.691284][T16668] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[ 1226.825543][ T4542] device veth1_macvtap left promiscuous mode
[ 1226.842220][ T4542] device veth0_macvtap left promiscuous mode
[ 1226.868752][ T4542] device veth1_vlan left promiscuous mode
[ 1226.882973][T16668] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1226.887838][ T4542] device veth0_vlan left promiscuous mode
[ 1226.922907][T16668] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1226.953324][T16668] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1226.972037][T16668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.000812][T16668] usb 6-1: Product: syz
[ 1227.005059][T16668] usb 6-1: Manufacturer: syz
[ 1227.009698][T16668] usb 6-1: SerialNumber: syz
[ 1228.297621][T16668] usb 6-1: cannot find UAC_HEADER
[ 1228.316524][T16668] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[ 1228.344605][T16668] usb 6-1: USB disconnect, device number 10
[ 1228.351689][T17964] udevd[17964]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1228.690936][ T4277] Bluetooth: hci1: command 0x0419 tx timeout
[ 1230.143942][ T4542] team0 (unregistering): Port device team_slave_1 removed
[ 1230.264263][ T4542] team0 (unregistering): Port device team_slave_0 removed
[ 1230.349426][ T4542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1230.472713][ T4542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1231.859460][ T4542] bond0 (unregistering): Released all slaves
[ 1231.991452][T18295] team0: Port device team_slave_0 added
[ 1232.005487][T18392] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1232.016047][T18392] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1232.025848][T18392] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1232.192961][T18295] team0: Port device team_slave_1 added
[ 1232.325593][T18433] loop2: detected capacity change from 0 to 1024
[ 1232.341752][T18295] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1232.359054][T18295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1232.408043][T18437] loop9: detected capacity change from 0 to 512
[ 1232.449462][T18433] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1232.500950][T18295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1232.543479][T18433] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e015c01c, mo2=0042]
[ 1232.578801][T18433] System zones: 0-1, 3-36
[ 1232.589533][T18295] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1232.622443][T18437] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1232.640994][T18433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1232.673914][T18295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1232.701195][T18437] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1232.806233][T17614] EXT4-fs (loop9): unmounting filesystem.
[ 1232.889872][T18295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1232.970982][T18295] device hsr_slave_0 entered promiscuous mode
[ 1233.006922][T18295] device hsr_slave_1 entered promiscuous mode
[ 1233.792320][T18295] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1233.822088][T18295] Cannot create hsr debugfs directory
[ 1233.939406][T15384] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 1233.966242][T18459] loop9: detected capacity change from 0 to 512
[ 1233.993234][T17460] EXT4-fs (loop2): unmounting filesystem.
[ 1234.006489][T18459] EXT4-fs: Ignoring removed orlov option
[ 1234.035627][T18459] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1234.086293][T18459] EXT4-fs: Ignoring removed orlov option
[ 1234.142525][T18459] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal
[ 1234.164348][T15384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1234.184476][T15384] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[ 1234.222287][T15384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1234.291586][T15384] usb 6-1: config 0 descriptor??
[ 1234.524040][T18458] loop9: detected capacity change from 0 to 2048
[ 1234.575336][T18448] loop5: detected capacity change from 0 to 1024
[ 1234.599667][T18448] EXT4-fs: Mount option(s) incompatible with ext2
[ 1234.899380][T18458] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1235.005254][T18476] device bridge1 entered promiscuous mode
[ 1235.368587][T15384] cherry 0003:046A:0023.001A: hidraw0: USB HID v10.00 Device [HID 046a:0023] on usb-dummy_hcd.5-1/input0
[ 1235.984190][T17614] EXT4-fs (loop9): unmounting filesystem.
[ 1238.704525][T15384] usb 6-1: USB disconnect, device number 11
[ 1238.969324][T18479] fido_id[18479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1239.004010][T18493] loop2: detected capacity change from 0 to 2048
[ 1239.012320][T18498] loop5: detected capacity change from 0 to 512
[ 1239.339229][T18498] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1239.745295][T18493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1239.782225][T18498] EXT4-fs (loop5): 1 truncate cleaned up
[ 1239.788141][T18498] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1240.026440][T18295] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1240.068260][   T26] audit: type=1800 audit(2000001004.870:177): pid=18493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3339" name="file1" dev="loop2" ino=1415 res=0 errno=0
[ 1240.092193][T18295] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1240.142429][T18295] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1240.150893][T15386] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1240.233876][T18295] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1240.237475][T18497] loop9: detected capacity change from 0 to 8192
[ 1240.341328][T15386] usb 6-1: Using ep0 maxpacket: 32
[ 1240.349145][T15386] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[ 1240.400352][T15386] usb 6-1: config 0 has no interface number 0
[ 1240.432179][T15386] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1240.499720][T15386] usb 6-1: config 0 interface 85 has no altsetting 0
[ 1240.761961][T15386] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1240.781796][T15386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1240.789957][T15386] usb 6-1: Product: syz
[ 1240.810544][T15386] usb 6-1: Manufacturer: syz
[ 1240.851155][   T48] Bluetooth: hci5: command 0x0406 tx timeout
[ 1241.174685][T18295] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1241.637135][T18295] 8021q: adding VLAN 0 to HW filter on device team0
[ 1241.641842][T15386] usb 6-1: SerialNumber: syz
[ 1241.689702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1241.698456][T15386] usb 6-1: config 0 descriptor??
[ 1241.712016][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1241.763223][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1241.808209][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1241.871391][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1241.878617][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1241.948364][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1241.982978][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1241.993351][T15386] appletouch 6-1:0.85: Failed to read mode from device.
[ 1242.009548][T15386] appletouch: probe of 6-1:0.85 failed with error -5
[ 1242.044463][T15386] usb 6-1: USB disconnect, device number 12
[ 1242.054834][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1242.055127][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1242.107748][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1242.114997][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1242.243187][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1242.314360][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1242.348331][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1242.410383][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1242.502756][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1242.522791][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1242.548239][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1242.588122][T18295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1242.632275][T18295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1242.856582][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1242.876441][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1242.924359][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1242.979604][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1243.008768][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3350'.
[ 1243.056258][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1243.233651][T18564] loop9: detected capacity change from 0 to 1024
[ 1243.278352][T18567] sch_tbf: burst 21990 is lower than device lo mtu (65550) !
[ 1243.904561][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1243.912901][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.489199][T18595] loop2: detected capacity change from 0 to 764
[ 1244.577241][T17964] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1244.648382][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1244.678842][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1244.717308][T18295] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1244.847325][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1244.896789][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1245.034525][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1245.053836][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1245.092284][T18295] device veth0_vlan entered promiscuous mode
[ 1245.107973][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1245.132104][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1245.138181][T18612] loop5: detected capacity change from 0 to 1024
[ 1245.178535][T18295] device veth1_vlan entered promiscuous mode
[ 1245.247843][T18612] EXT4-fs: Ignoring removed orlov option
[ 1245.280538][T18612] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[ 1245.306056][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1245.325131][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1245.363764][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1245.398488][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1245.433871][T18295] device veth0_macvtap entered promiscuous mode
[ 1245.493757][T18295] device veth1_macvtap entered promiscuous mode
[ 1245.620876][T18295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1245.674423][T18295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1245.760897][T18295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1245.806835][T18295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1245.835894][T18295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1245.867279][T18295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1245.937803][T18295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1246.014251][T18295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1246.024933][T18295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1246.035542][T18295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1246.048566][T18295] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1246.065856][T18295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1246.076434][T18295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1246.104186][T18295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1246.344596][T18295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1246.481599][T18295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1246.697121][T18295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1246.708653][T18295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1246.732627][T18295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1246.750836][T18295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1246.768165][T18295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1246.789233][T18295] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1246.897021][T18635] loop6: detected capacity change from 0 to 512
[ 1246.917305][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1246.947695][T18637] loop9: detected capacity change from 0 to 128
[ 1246.981590][T18637] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[ 1246.993924][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1247.080575][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1247.090200][T18635] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3368: inode has both inline data and extents flags
[ 1247.120174][T18637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1247.130390][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1247.158469][T18635] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3368: couldn't read orphan inode 15 (err -117)
[ 1247.187820][T18635] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1247.194411][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1247.229477][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1247.250103][T18295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1247.310043][T18295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1247.338171][  T128] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1247.341210][T18295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1247.356705][T18635] EXT4-fs error (device loop6): ext4_check_dx_root:2266: inode #2: comm syz.6.3368: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[ 1247.375379][T18295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1247.543561][  T128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1247.617146][  T128] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[ 1247.628210][  T128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1247.642601][T16605] EXT4-fs (loop6): unmounting filesystem.
[ 1247.659560][  T128] usb 6-1: config 0 descriptor??
[ 1247.805015][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1247.826025][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1247.859628][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1247.924387][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1247.938380][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1247.958149][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1248.088523][  T128] logitech 0003:046D:CA03.001B: unknown main item tag 0x0
[ 1248.105890][  T128] logitech 0003:046D:CA03.001B: unknown main item tag 0x0
[ 1248.124570][  T128] logitech 0003:046D:CA03.001B: unknown main item tag 0x0
[ 1248.160975][  T128] logitech 0003:046D:CA03.001B: unknown main item tag 0x0
[ 1248.178493][  T128] logitech 0003:046D:CA03.001B: unknown main item tag 0x0
[ 1248.190765][  T128] logitech 0003:046D:CA03.001B: unknown main item tag 0x0
[ 1248.198038][  T128] logitech 0003:046D:CA03.001B: unknown main item tag 0x0
[ 1248.230375][  T128] logitech 0003:046D:CA03.001B: hidraw0: USB HID v0.09 Device [HID 046d:ca03] on usb-dummy_hcd.5-1/input0
[ 1248.250494][  T128] logitech 0003:046D:CA03.001B: no inputs found
[ 1248.341859][ T4276] usb 6-1: USB disconnect, device number 13
[ 1249.163526][T18664] fido_id[18664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1249.340738][  T128] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1249.550798][  T128] usb 2-1: Using ep0 maxpacket: 16
[ 1249.558278][  T128] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1250.462132][  T128] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[ 1250.474681][  T128] usb 2-1: New USB device strings: Mfr=19, Product=0, SerialNumber=0
[ 1250.482985][  T128] usb 2-1: Manufacturer: syz
[ 1250.491557][  T128] usb 2-1: config 0 descriptor??
[ 1250.499783][  T128] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1251.703167][T18703] loop6: detected capacity change from 0 to 256
[ 1251.796493][T18703] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1251.801928][T16668] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1251.853741][T18709] loop2: detected capacity change from 0 to 16
[ 1251.894915][T18709] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1251.962233][T18709] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[ 1252.029778][   T26] audit: type=1800 audit(2000001016.830:178): pid=18703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3382" name="file1" dev="loop6" ino=1048953 res=0 errno=0
[ 1252.057061][T16668] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1252.097835][T18712] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[ 1252.198257][T16668] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1252.415278][T18709] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[ 1252.453669][T16668] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1252.618044][T18709] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36
[ 1252.634328][   T26] audit: type=1800 audit(2000001017.440:179): pid=18716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3382" name="file1" dev="loop6" ino=1048953 res=0 errno=0
[ 1252.681768][T16668] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1252.742731][T16668] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.816321][T16668] usb 6-1: config 0 descriptor??
[ 1253.042738][ T4317] usb 2-1: USB disconnect, device number 14
[ 1253.352824][T16668] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x6
[ 1253.361185][T16668] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0
[ 1253.368651][T16668] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0
[ 1253.378040][T16668] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0
[ 1253.385859][T16668] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0
[ 1253.395034][T16668] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0
[ 1254.534756][T16668] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving
[ 1254.755900][T16668] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1254.904701][T16668] usb 6-1: USB disconnect, device number 14
[ 1254.957158][T18737] loop6: detected capacity change from 0 to 1024
[ 1255.021681][T18737] EXT4-fs: Ignoring removed bh option
[ 1255.029269][T18721] loop2: detected capacity change from 0 to 8192
[ 1255.107075][T18737] EXT4-fs: Ignoring removed nobh option
[ 1255.117189][T18737] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1255.184812][T18746] loop5: detected capacity change from 0 to 164
[ 1255.500277][T18737] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1255.840619][T18759] loop9: detected capacity change from 0 to 512
[ 1255.999024][T18737] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3852: comm syz.6.3390: Allocating blocks 497-513 which overlap fs metadata
[ 1256.016527][T18747] fido_id[18747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1256.046693][T18759] EXT4-fs (loop9): external journal device major/minor numbers have changed
[ 1256.163707][T18759] I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1256.352900][T18759] EXT4-fs (loop9): couldn't read superblock of external journal
[ 1256.786440][T18737] EXT4-fs (loop6): pa ffff88807002d0e0: logic 256, phys. 385, len 8
[ 1256.794642][T18737] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1
[ 1257.083936][T18773] loop5: detected capacity change from 0 to 256
[ 1257.117554][T18759] loop9: detected capacity change from 0 to 1024
[ 1257.138130][T16605] EXT4-fs (loop6): unmounting filesystem.
[ 1257.144722][  T128] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1257.175218][T18773] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1257.295558][   T26] audit: type=1800 audit(2000001022.100:180): pid=18773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3399" name="file1" dev="loop5" ino=1048954 res=0 errno=0
[ 1257.350761][  T128] usb 2-1: Using ep0 maxpacket: 16
[ 1257.361953][  T128] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1257.363024][  T128] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[ 1257.363054][  T128] usb 2-1: New USB device strings: Mfr=19, Product=0, SerialNumber=0
[ 1257.363076][  T128] usb 2-1: Manufacturer: syz
[ 1257.397231][  T128] usb 2-1: config 0 descriptor??
[ 1257.400514][  T128] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1257.454359][   T26] audit: type=1800 audit(2000001022.240:181): pid=18773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3399" name="file1" dev="loop5" ino=1048954 res=0 errno=0
[ 1258.043525][T17614] hfsplus: node 4:3 still has 1 user(s)!
[ 1258.075796][T18787] loop6: detected capacity change from 0 to 512
[ 1258.183508][T18787] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1258.197039][T18773] syz.5.3399: attempt to access beyond end of device
[ 1258.197039][T18773] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[ 1258.208607][T18787] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1258.383406][T18787] EXT4-fs: Cannot change quota options when quota turned on
[ 1258.609293][T16605] EXT4-fs (loop6): unmounting filesystem.
[ 1259.269151][T16667] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[ 1259.418189][T16667] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1260.127650][T18817] loop6: detected capacity change from 0 to 512
[ 1260.365626][T18817] EXT4-fs: Ignoring removed orlov option
[ 1260.489694][T18817] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1260.590985][T18817] EXT4-fs: Ignoring removed orlov option
[ 1260.707888][T18817] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[ 1260.847908][T18817] loop6: detected capacity change from 0 to 2048
[ 1260.921246][T11031] usb 2-1: USB disconnect, device number 15
[ 1261.081711][T18817] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1261.148705][T18817] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1261.188889][T18833] loop1: detected capacity change from 0 to 256
[ 1261.300485][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1261.380880][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1261.411254][T18828] loop5: detected capacity change from 0 to 8192
[ 1261.503235][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1261.584743][T18828]  loop5: p1 < > p2 p3 < p5 >
[ 1261.605845][T18828] loop5: p2 size 83165184 extends beyond EOD, truncated
[ 1261.627909][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1261.694731][T18828] loop5: p5 size 83165184 extends beyond EOD, truncated
[ 1261.712782][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1261.790450][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1261.840810][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1261.891323][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1261.899944][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1261.960867][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1261.982600][T16605] EXT4-fs (loop6): unmounting filesystem.
[ 1261.999473][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.057124][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.105339][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.167894][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.201092][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.209718][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.321416][T18850] loop2: detected capacity change from 0 to 256
[ 1262.329603][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.348065][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.391976][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.416647][T18850] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1262.490876][   T26] audit: type=1800 audit(2000001027.280:182): pid=18850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3417" name="file1" dev="loop2" ino=1048956 res=0 errno=0
[ 1262.520802][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.619656][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.629081][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.637828][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.646516][T18833] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1262.655983][   T26] audit: type=1800 audit(2000001027.460:183): pid=18833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3412" name="file1" dev="loop1" ino=1048955 res=0 errno=0
[ 1262.726805][   T26] audit: type=1800 audit(2000001027.500:184): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3417" name="file1" dev="loop2" ino=1048956 res=0 errno=0
[ 1263.323359][T17977] udevd[17977]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[ 1263.336928][T17965] udevd[17965]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[ 1263.350500][T17966] udevd[17966]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[ 1263.392971][T18859] syz.2.3417: attempt to access beyond end of device
[ 1263.392971][T18859] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[ 1263.417795][T17964] udevd[17964]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[ 1263.749081][T18871] loop1: detected capacity change from 0 to 164
[ 1263.760146][T18870] loop2: detected capacity change from 0 to 512
[ 1264.632040][T18870] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1264.638903][T18870] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1264.765310][T18870] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3423: bad orphan inode 131083
[ 1264.940939][T18870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1265.050886][T16667] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1265.250770][T16667] usb 10-1: Using ep0 maxpacket: 16
[ 1265.258246][T16667] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1265.331086][T16667] usb 10-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[ 1265.375041][T16667] usb 10-1: New USB device strings: Mfr=19, Product=0, SerialNumber=0
[ 1265.412139][T16667] usb 10-1: Manufacturer: syz
[ 1265.451442][T16667] usb 10-1: config 0 descriptor??
[ 1265.672364][T16667] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1265.714187][T17460] EXT4-fs (loop2): unmounting filesystem.
[ 1266.574720][T18910] 9pnet_fd: Insufficient options for proto=fd
[ 1266.781773][T18917] binder: BC_ACQUIRE_RESULT not supported
[ 1266.802267][T18917] binder: 18916:18917 ioctl c0306201 200000000240 returned -22
[ 1269.112822][T15384] usb 10-1: USB disconnect, device number 6
[ 1269.169781][T18935] loop5: detected capacity change from 0 to 512
[ 1269.237284][T18935] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1269.331261][T18935] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.3437: inode has both inline data and extents flags
[ 1269.407653][T18935] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3437: couldn't read orphan inode 15 (err -117)
[ 1269.470448][T18935] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1269.706741][T18947] loop2: detected capacity change from 0 to 8192
[ 1269.814599][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1271.820767][T15384] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1272.020869][T15384] usb 7-1: Using ep0 maxpacket: 8
[ 1272.041221][T15384] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[ 1272.059958][T15384] usb 7-1: config 179 has no interface number 0
[ 1272.124326][T15384] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1272.146473][T15384] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1272.168563][T15384] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1272.181854][T18977] loop2: detected capacity change from 0 to 8
[ 1272.201216][T15384] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1272.222235][T18977] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1272.231781][ T4386] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1272.267499][T18977] SQUASHFS error: Failed to read block 0x91: -5
[ 1272.287543][T18977] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 1272.333827][T18977] SQUASHFS error: Unable to read inode 0x11f
[ 1272.424625][ T4386] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1272.438157][T15384] usb 7-1: config 179 interface 65 has no altsetting 0
[ 1272.445854][T15384] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1272.455388][T15384] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1272.482642][ T4386] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1272.586745][ T4386] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1272.685225][ T4386] usb 10-1: Product: syz
[ 1272.842797][ T4386] usb 10-1: Manufacturer: syz
[ 1272.937274][ T4386] usb 10-1: SerialNumber: syz
[ 1273.200898][ T9357] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1273.562202][ T9357] usb 3-1: Using ep0 maxpacket: 32
[ 1273.572127][ T9357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10
[ 1273.600755][ T9357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50557, setting to 1024
[ 1273.612511][ T9357] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1273.622158][ T9357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1273.729724][ T9357] usb 3-1: config 0 descriptor??
[ 1274.038133][T18977] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1274.294502][ T4386] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 1274.313540][ T9357] hub 3-1:0.0: USB hub found
[ 1274.338657][ T4386] cdc_ncm 10-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[ 1274.387997][ T4386] cdc_ncm 10-1:1.0: setting rx_max = 2048
[ 1274.443396][ T4317] usb 7-1: USB disconnect, device number 18
[ 1274.503531][ T4386] cdc_ncm 10-1:1.0: setting tx_max = 88
[ 1274.535497][ T9357] hub 3-1:0.0: 1 port detected
[ 1274.552180][ T4386] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 1274.610203][ T4386] usb 10-1: USB disconnect, device number 7
[ 1274.639784][ T4386] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP)
[ 1275.058719][T16668] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1275.270929][T16668] usb 2-1: Using ep0 maxpacket: 16
[ 1275.299272][T16668] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1275.534868][ T9357] usb 3-1: reset high-speed USB device number 14 using dummy_hcd
[ 1275.545956][T16668] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[ 1275.556575][T16668] usb 2-1: New USB device strings: Mfr=19, Product=0, SerialNumber=0
[ 1275.566111][T16668] usb 2-1: Manufacturer: syz
[ 1275.574960][T16668] usb 2-1: config 0 descriptor??
[ 1275.584373][T16668] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1276.377064][T19025] loop6: detected capacity change from 0 to 512
[ 1276.431737][T19025] EXT4-fs: Ignoring removed bh option
[ 1276.476918][ T4387] usb 3-1: USB disconnect, device number 14
[ 1276.615159][T19025] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1276.690890][   T48] Bluetooth: hci2: command 0x0406 tx timeout
[ 1276.723684][T19025] EXT4-fs (loop6): 1 truncate cleaned up
[ 1276.750910][T19025] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1277.101064][T16605] EXT4-fs (loop6): unmounting filesystem.
[ 1278.212664][T15384] usb 2-1: USB disconnect, device number 16
[ 1279.380893][T11031] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1279.632190][T11031] usb 6-1: Using ep0 maxpacket: 32
[ 1279.646258][T11031] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[ 1279.879248][T11031] usb 6-1: config 0 has no interface number 0
[ 1280.072833][T11031] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1280.132597][T11031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1280.168083][T11031] usb 6-1: Product: syz
[ 1280.176462][T11031] usb 6-1: Manufacturer: syz
[ 1280.204453][T11031] usb 6-1: SerialNumber: syz
[ 1280.249922][T11031] usb 6-1: config 0 descriptor??
[ 1280.271985][T11031] smsc95xx v2.0.0
[ 1280.484797][T19072] loop1: detected capacity change from 0 to 512
[ 1280.522706][T19072] EXT4-fs: Ignoring removed orlov option
[ 1280.557124][T19072] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1280.581135][T19072] EXT4-fs: Ignoring removed orlov option
[ 1280.612871][T19072] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[ 1280.646900][T19074] loop2: detected capacity change from 0 to 2048
[ 1280.678553][T11031] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1280.717060][T11031] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1280.782627][T19072] loop1: detected capacity change from 0 to 2048
[ 1280.824984][T19074]  loop2: p3 < > p4 < >
[ 1280.829630][T19074] loop2: partition table partially beyond EOD, truncated
[ 1280.855032][T19074] loop2: p3 start 4284289 is beyond EOD, truncated
[ 1280.896437][ T3637]  loop2: p3 < > p4 < >
[ 1280.922037][ T3637] loop2: partition table partially beyond EOD, truncated
[ 1280.943908][T19072] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1280.970008][T19072] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1281.008493][ T3637] loop2: p3 start 4284289 is beyond EOD, truncated
[ 1281.070856][T16668] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1281.111828][T17460] __loop_clr_fd: partition scan of loop2 failed (rc=-16)
[ 1281.129301][T17977] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1281.190914][T17977] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1281.200206][T17977] buffer_io_error: 29 callbacks suppressed
[ 1281.200220][T17977] Buffer I/O error on dev loop2p4, logical block 0, async page read
[ 1281.260737][T16668] usb 10-1: Using ep0 maxpacket: 16
[ 1281.268054][T16668] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1281.290247][T17977] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1281.329972][T16668] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1281.333760][T17977] Buffer I/O error on dev loop2p4, logical block 0, async page read
[ 1281.372518][T16668] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1281.425482][T16668] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1281.442341][T17977] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1281.472512][T16668] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1281.482853][T17977] Buffer I/O error on dev loop2p4, logical block 0, async page read
[ 1281.515828][T17977] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1281.528744][T18295] EXT4-fs (loop1): unmounting filesystem.
[ 1281.535620][T16668] usb 10-1: config 0 descriptor??
[ 1281.572933][T11031] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1281.608465][T17977] Buffer I/O error on dev loop2p4, logical block 0, async page read
[ 1281.619124][T11031] smsc95xx: probe of 6-1:0.67 failed with error -71
[ 1281.644901][T17977] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1281.955205][T19103] loop2: detected capacity change from 0 to 512
[ 1282.065478][T16668] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max
[ 1282.340569][T16668] microsoft 0003:045E:07DA.001E: No inputs registered, leaving
[ 1282.425784][T11031] usb 6-1: USB disconnect, device number 15
[ 1282.450825][T17977] Buffer I/O error on dev loop2p4, logical block 0, async page read
[ 1282.502403][T16668] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[ 1282.514262][T16668] microsoft 0003:045E:07DA.001E: no inputs found
[ 1282.520977][T16668] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway
[ 1282.539736][T19103] Quota error (device loop2): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[ 1282.574898][T16668] usb 10-1: USB disconnect, device number 8
[ 1282.656402][T19103] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1282.725212][T19103] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.3475: Failed to acquire dquot type 1
[ 1282.960790][ T4386] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1283.240826][ T4386] usb 7-1: Using ep0 maxpacket: 16
[ 1283.293225][ T4386] usb 7-1: config 1 has an invalid interface number: 105 but max is 0
[ 1283.578456][T19103] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.3475: corrupted inode contents
[ 1283.580342][ T4386] usb 7-1: config 1 has no interface number 0
[ 1283.622094][T19103] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #16: comm syz.2.3475: mark_inode_dirty error
[ 1283.650209][T17977] udevd[17977]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[ 1283.691452][T19103] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.3475: corrupted inode contents
[ 1283.706364][ T4386] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1283.761373][ T4386] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1283.772799][T19103] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.3475: mark_inode_dirty error
[ 1283.810853][ T4386] usb 7-1: config 1 interface 105 has no altsetting 0
[ 1283.831296][T19103] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.3475: corrupted inode contents
[ 1283.894696][T19103] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[ 1283.915037][T19103] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.3475: corrupted inode contents
[ 1283.937791][T19103] EXT4-fs error (device loop2): ext4_truncate:4318: inode #16: comm syz.2.3475: mark_inode_dirty error
[ 1283.952961][T19103] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[ 1283.975888][T19127] loop5: detected capacity change from 0 to 512
[ 1284.010776][T19103] EXT4-fs (loop2): 1 truncate cleaned up
[ 1284.058654][ T4386] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1284.076657][ T4386] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1284.088038][ T4386] usb 7-1: Product: syz
[ 1284.095532][ T4386] usb 7-1: Manufacturer: syz
[ 1284.100205][ T4386] usb 7-1: SerialNumber: syz
[ 1284.115000][T19103] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1284.124729][T19111] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1284.134771][T19127] EXT4-fs: Ignoring removed bh option
[ 1284.170963][T19111] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1284.206991][T19103] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1284.217943][T19127] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[ 1284.228540][T19119] fido_id[19119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1284.266947][T19127] EXT4-fs (loop5): 1 truncate cleaned up
[ 1284.310732][T19127] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1284.517048][T19103] Quota error (device loop2): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[ 1284.562454][T19103] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1284.615888][T19122] udevd[19122]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[ 1284.626759][T19111] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1284.637564][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1284.646740][T19111] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1284.661670][T19103] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.3475: Failed to acquire dquot type 1
[ 1284.897176][T19122] udevd[19122]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[ 1284.981902][T17460] EXT4-fs (loop2): unmounting filesystem.
[ 1285.073570][ T4386] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1285.425726][T19122] udevd[19122]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[ 1285.443474][T19149] loop2: detected capacity change from 0 to 1024
[ 1285.677038][T19149] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1285.881188][T19145] loop5: detected capacity change from 0 to 8192
[ 1285.932388][T17460] EXT4-fs (loop2): unmounting filesystem.
[ 1286.073481][T19163] loop1: detected capacity change from 0 to 512
[ 1286.136472][T19163] EXT4-fs: Ignoring removed orlov option
[ 1286.186078][T19163] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1286.195107][T19165] loop2: detected capacity change from 0 to 512
[ 1286.225528][T19163] EXT4-fs: Ignoring removed orlov option
[ 1286.238189][T19165] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1286.265941][T19163] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[ 1286.482694][T19163] loop1: detected capacity change from 0 to 2048
[ 1287.251426][ T4386] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[ 1287.273729][T19163] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1287.306690][ T4386] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[ 1287.325997][T19163] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1287.443838][ T4386] aqc111 7-1:1.105 eth14: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f2:29:fd:0d:0f:a2
[ 1287.524123][T19178] loop2: detected capacity change from 0 to 128
[ 1287.562446][T18295] EXT4-fs (loop1): unmounting filesystem.
[ 1287.574857][ T4386] usb 7-1: USB disconnect, device number 19
[ 1287.587220][T19178] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[ 1287.636819][T19178] FAT-fs (loop2): Filesystem has been set read-only
[ 1287.648082][T19178] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[ 1287.661440][ T4386] aqc111 7-1:1.105 eth14: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[ 1287.691628][T19178] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[ 1287.706513][T19178] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[ 1287.717039][T19178] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[ 1287.729217][T19178] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[ 1287.740072][T19178] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[ 1287.751499][T19178] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[ 1287.796511][T19178] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[ 1287.813541][T19178] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[ 1287.821936][ T4386] aqc111 7-1:1.105 eth14 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1287.833612][   T26] audit: type=1800 audit(2000001052.630:185): pid=19178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3488" name="file2" dev="loop2" ino=1048957 res=0 errno=0
[ 1288.024359][ T4386] aqc111 7-1:1.105 eth14 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1288.041174][ T4386] aqc111 7-1:1.105 eth14 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[ 1289.960809][T15384] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1290.182151][T15384] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1290.223827][T15384] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1290.291555][T19214] loop6: detected capacity change from 0 to 1024
[ 1290.309241][T15384] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1290.373514][T16668] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[ 1290.384266][T15384] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1290.404495][T15384] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1290.435003][T15384] usb 10-1: config 0 descriptor??
[ 1290.602938][T16668] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[ 1290.618701][T16668] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1290.636115][T16668] usb 6-1: config 0 has no interface number 0
[ 1290.642900][T16668] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0
[ 1290.653232][T16668] usb 6-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1290.676659][T16668] usb 6-1: config 0 interface 2 has no altsetting 0
[ 1290.688428][T16668] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f
[ 1290.720922][T16668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1290.740716][T16668] usb 6-1: Product: syz
[ 1290.755352][T16668] usb 6-1: Manufacturer: syz
[ 1290.760045][T16668] usb 6-1: SerialNumber: syz
[ 1290.822001][T16668] usb 6-1: config 0 descriptor??
[ 1290.873921][T15384] plantronics 0003:047F:FFFF.001F: unknown main item tag 0xd
[ 1290.909456][T15384] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving
[ 1290.959125][T15384] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1291.200101][T15384] usb 10-1: USB disconnect, device number 9
[ 1291.263175][T16668] snd-usb-audio: probe of 6-1:0.2 failed with error -12
[ 1291.304678][T17977] udevd[17977]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1291.329547][  T128] usb 6-1: USB disconnect, device number 16
[ 1291.433388][T19235] loop6: detected capacity change from 0 to 1024
[ 1291.472899][T19230] fido_id[19230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1292.050947][ T4277] Bluetooth: hci0: command 0x0406 tx timeout
[ 1292.520902][ T9357] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1292.730843][ T9357] usb 10-1: Using ep0 maxpacket: 16
[ 1292.743495][ T9357] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1292.839051][ T9357] usb 10-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[ 1292.859162][ T9357] usb 10-1: New USB device strings: Mfr=19, Product=0, SerialNumber=0
[ 1292.879390][ T9357] usb 10-1: Manufacturer: syz
[ 1292.944513][ T9357] usb 10-1: config 0 descriptor??
[ 1292.991498][ T9357] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1293.066465][T19256] loop1: detected capacity change from 0 to 512
[ 1293.216601][T19260] loop6: detected capacity change from 0 to 128
[ 1293.284211][T19260] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1293.341436][T19260] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1293.439621][T19265] loop1: detected capacity change from 0 to 1024
[ 1293.447915][T19265] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1293.507954][T19265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1293.596007][T19260] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 1293.701071][T16605] EXT4-fs (loop6): unmounting filesystem.
[ 1293.709273][T18295] EXT4-fs (loop1): unmounting filesystem.
[ 1295.153223][ T9357] usb 10-1: USB disconnect, device number 10
[ 1295.371365][T19295] loop6: detected capacity change from 0 to 512
[ 1295.378779][T19295] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1295.557769][T19300] loop5: detected capacity change from 0 to 1024
[ 1296.357010][ T4463] hfsplus: b-tree write err: -5, ino 3
[ 1296.387491][T19311] loop9: detected capacity change from 0 to 1024
[ 1296.623160][T19317] loop1: detected capacity change from 0 to 16
[ 1296.633213][T19317] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1296.647143][T19317] erofs: (device loop1): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36
[ 1296.660306][T19317] erofs: (device loop1): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36
[ 1296.673820][T19317] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[ 1296.682488][T19317] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36
[ 1296.730585][T19311] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1296.883464][T19322] loop6: detected capacity change from 0 to 512
[ 1297.118453][T19322] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1297.178158][T19322] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1297.236662][T19331] loop2: detected capacity change from 0 to 256
[ 1297.257430][T19331] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1297.295628][T17614] EXT4-fs (loop9): unmounting filesystem.
[ 1297.380084][   T26] audit: type=1800 audit(2000001062.080:186): pid=19331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3525" name="file1" dev="loop2" ino=1048958 res=0 errno=0
[ 1297.439390][   T26] audit: type=1800 audit(2000001062.140:187): pid=19332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3525" name="file1" dev="loop2" ino=1048958 res=0 errno=0
[ 1297.871458][T19322] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[ 1298.069484][T19332] syz.2.3525: attempt to access beyond end of device
[ 1298.069484][T19332] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[ 1298.357198][T19345] loop5: detected capacity change from 0 to 256
[ 1298.416230][T19345] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1298.540305][T19345] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[ 1298.569899][T16605] EXT4-fs (loop6): unmounting filesystem.
[ 1299.490096][T19347] loop9: detected capacity change from 0 to 8192
[ 1299.508474][T19359] loop2: detected capacity change from 0 to 128
[ 1299.544841][T19359] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[ 1299.561762][T19360] loop1: detected capacity change from 0 to 512
[ 1299.621666][T19360] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1299.635993][T19359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1300.765229][T19373] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[ 1300.780927][T19373] Error parsing options; rc = [-22]
[ 1302.467303][T19385] loop2: detected capacity change from 0 to 2048
[ 1302.573815][T19385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1302.749554][T19378] loop1: detected capacity change from 0 to 8192
[ 1302.786111][T17460] EXT4-fs (loop2): unmounting filesystem.
[ 1302.890196][T19397] loop6: detected capacity change from 0 to 256
[ 1303.000040][T19397] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1303.100729][   T26] audit: type=1800 audit(2000001067.900:188): pid=19397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3542" name="file1" dev="loop6" ino=1048960 res=0 errno=0
[ 1303.211246][   T26] audit: type=1800 audit(2000001068.020:189): pid=19403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3542" name="file1" dev="loop6" ino=1048960 res=0 errno=0
[ 1303.240778][T16668] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1303.450745][T16668] usb 3-1: Using ep0 maxpacket: 32
[ 1303.458000][T16668] usb 3-1: config 249 has an invalid interface number: 88 but max is 0
[ 1303.470703][T16668] usb 3-1: config 249 has no interface number 0
[ 1303.477147][T16668] usb 3-1: config 249 interface 88 has no altsetting 0
[ 1303.504114][T16668] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[ 1303.566766][T16668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1303.627560][T16668] usb 3-1: Product: syz
[ 1303.662666][T16668] usb 3-1: Manufacturer: syz
[ 1303.696506][T16668] usb 3-1: SerialNumber: syz
[ 1303.955903][T16668] asix: probe of 3-1:249.88 failed with error -71
[ 1303.968639][T19403] syz.6.3542: attempt to access beyond end of device
[ 1303.968639][T19403] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[ 1304.030571][T16668] usb 3-1: USB disconnect, device number 15
[ 1305.326051][T19426] loop2: detected capacity change from 0 to 512
[ 1305.370978][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1305.377374][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1305.403948][T19426] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1307.797043][T19455] loop2: detected capacity change from 0 to 256
[ 1308.225689][T19455] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1308.633929][   T26] audit: type=1800 audit(2000001073.440:190): pid=19455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3557" name="file1" dev="loop2" ino=1048961 res=0 errno=0
[ 1308.769251][   T26] audit: type=1800 audit(2000001073.480:191): pid=19455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3557" name="file1" dev="loop2" ino=1048961 res=0 errno=0
[ 1308.878643][T19455] syz.2.3557: attempt to access beyond end of device
[ 1308.878643][T19455] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[ 1309.056334][T19471] loop9: detected capacity change from 0 to 1024
[ 1309.075478][T19473] loop6: detected capacity change from 0 to 512
[ 1309.109208][T19473] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1309.140002][T19471] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002]
[ 1309.216273][T19471] System zones: 0-1, 3-36
[ 1310.273246][T19471] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.3561: bad orphan inode 134217728
[ 1310.341015][T19471] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1310.660212][T19485] loop6: detected capacity change from 0 to 4096
[ 1310.710068][T17614] EXT4-fs (loop9): unmounting filesystem.
[ 1310.737454][T19485] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1310.802484][T19485] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1310.848771][T19485] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[ 1310.885612][T19485] System zones: 0-5
[ 1310.897290][T19485] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1311.017010][T19493] binder: 19492:19493 ioctl c00c620f 2000000000c0 returned -22
[ 1311.110459][T16605] EXT4-fs (loop6): unmounting filesystem.
[ 1311.604665][T19512] loop6: detected capacity change from 0 to 512
[ 1311.625884][T19512] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1311.640875][ T6666] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1311.970784][ T6666] usb 2-1: Using ep0 maxpacket: 16
[ 1311.978127][ T6666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1313.204069][T19527] loop5: detected capacity change from 0 to 1024
[ 1313.215664][ T6666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1313.227531][ T6666] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1313.240475][ T6666] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1313.249631][ T6666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1313.272863][ T6666] usb 2-1: config 0 descriptor??
[ 1313.580526][T19532] loop2: detected capacity change from 0 to 2048
[ 1313.848011][ T6666] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max
[ 1313.868329][T19532] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1313.877979][T19541] loop9: detected capacity change from 0 to 256
[ 1314.669139][ T6666] microsoft 0003:045E:07DA.0020: No inputs registered, leaving
[ 1314.696098][ T6666] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 1314.728127][ T6666] microsoft 0003:045E:07DA.0020: no inputs found
[ 1314.781193][ T6666] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway
[ 1314.852593][ T6666] usb 2-1: USB disconnect, device number 17
[ 1314.894569][T17460] EXT4-fs (loop2): unmounting filesystem.
[ 1315.215514][T19561] loop5: detected capacity change from 0 to 256
[ 1315.226726][T19562] loop2: detected capacity change from 0 to 512
[ 1315.265857][T19561] FAT-fs (loop5): bogus sectors per cluster 0
[ 1315.323685][T19562] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1315.343490][T19561] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1315.357377][T19565] loop1: detected capacity change from 0 to 512
[ 1315.372538][T19562] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1315.391209][T19555] fido_id[19555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1315.436494][T19565] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1316.204659][T19576] loop5: detected capacity change from 0 to 512
[ 1316.402664][T19576] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3590: bg 0: block 288: padding at end of block bitmap is not set
[ 1316.554508][T17460] EXT4-fs (loop2): unmounting filesystem.
[ 1316.581537][T19576] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6181: Corrupt filesystem
[ 1316.615317][T19576] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.3590: attempt to clear invalid blocks 1024 len 1
[ 1316.725731][T19576] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3590: invalid indirect mapped block 1819239214 (level 0)
[ 1316.773793][T19576] EXT4-fs (loop5): 1 truncate cleaned up
[ 1316.809332][T19576] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1317.963234][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1319.233558][T19609] loop5: detected capacity change from 0 to 4096
[ 1319.271067][T19609] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1319.316434][T19609] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1319.441565][T19609] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[ 1319.457571][T19609] System zones: 0-5
[ 1319.508700][T19609] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1319.557097][T19622] loop2: detected capacity change from 0 to 512
[ 1319.580118][T19619] loop6: detected capacity change from 0 to 256
[ 1319.609105][T19622] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1319.624391][T19624] loop9: detected capacity change from 0 to 8
[ 1319.663721][T17977] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1320.095145][T19631] input: syz1 as /devices/virtual/input/input40
[ 1320.765155][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1320.806328][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'.
[ 1320.880965][T19643] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1321.682807][T19663] loop5: detected capacity change from 0 to 128
[ 1322.172829][T19663] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1322.211956][T19663] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1322.311773][T19671] loop2: detected capacity change from 0 to 16
[ 1322.525689][T19671] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1322.618492][T19672] xt_socket: unknown flags 0x4c
[ 1322.677537][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3615'.
[ 1323.031700][T19681] loop1: detected capacity change from 0 to 512
[ 1323.106013][T19681] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1323.902607][T19688] loop9: detected capacity change from 0 to 1024
[ 1324.072655][T19688] hfsplus: request for non-existent node 3 in B*Tree
[ 1324.130929][T19688] hfsplus: request for non-existent node 3 in B*Tree
[ 1324.259101][T19688] hfsplus: request for non-existent node 4 in B*Tree
[ 1324.289349][T19688] hfsplus: request for non-existent node 4 in B*Tree
[ 1324.625482][T19698] loop2: detected capacity change from 0 to 2048
[ 1324.720575][T19698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1324.936296][T17460] EXT4-fs (loop2): unmounting filesystem.
[ 1325.163108][T19714] loop9: detected capacity change from 0 to 1024
[ 1325.201547][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1325.379241][T19722] loop5: detected capacity change from 0 to 512
[ 1325.410855][ T4386] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1325.470930][T19722] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[ 1325.615274][T19722] EXT4-fs (loop5): 1 truncate cleaned up
[ 1325.621032][ T4386] usb 3-1: Using ep0 maxpacket: 16
[ 1325.625754][ T4386] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1325.654298][T19722] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1325.662569][ T4386] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[ 1325.675481][ T4386] usb 3-1: New USB device strings: Mfr=19, Product=0, SerialNumber=0
[ 1325.690833][ T4386] usb 3-1: Manufacturer: syz
[ 1325.708278][ T4386] usb 3-1: config 0 descriptor??
[ 1325.724099][ T4386] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1325.732624][T19731] loop1: detected capacity change from 0 to 512
[ 1325.739958][T19731] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1325.828435][T19722] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3626: invalid indirect mapped block 4294901760 (level 0)
[ 1325.961593][T19722] EXT4-fs (loop5): Remounting filesystem read-only
[ 1326.088357][T19722] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3626: invalid indirect mapped block 4294967295 (level 1)
[ 1326.786509][T19722] EXT4-fs (loop5): Remounting filesystem read-only
[ 1326.975326][T19748] loop1: detected capacity change from 0 to 1024
[ 1326.985618][T16963] EXT4-fs (loop5): unmounting filesystem.
[ 1326.991651][T19743] loop9: detected capacity change from 0 to 2048
[ 1327.028085][T19748] EXT4-fs: inline encryption not supported
[ 1327.129820][T19748] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1327.198035][T19748] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1327.210014][T19743] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1327.233408][T19743] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1327.363396][   T26] audit: type=1800 audit(2000001092.170:192): pid=19748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3635" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1327.468116][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3633'.
[ 1327.708244][T18295] EXT4-fs (loop1): unmounting filesystem.
[ 1327.745412][T17614] EXT4-fs (loop9): unmounting filesystem.
[ 1328.135478][ T9357] usb 3-1: USB disconnect, device number 16
[ 1328.151253][ T4317] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1328.380873][ T4317] usb 10-1: Using ep0 maxpacket: 8
[ 1328.388990][ T4317] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1328.449570][ T4317] usb 10-1: config 1 has an invalid interface number: 5 but max is 2
[ 1328.505136][ T4317] usb 10-1: config 1 has no interface number 1
[ 1328.534479][ T4317] usb 10-1: too many endpoints for config 1 interface 5 altsetting 16: 195, using maximum allowed: 30
[ 1328.630863][ T6666] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1328.858000][ T6666] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[ 1328.932514][ T6666] usb 2-1: config 0 has no interface number 0
[ 1329.056910][ T6666] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1329.260726][ T6666] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1329.330815][ T6666] usb 2-1: config 0 interface 255 has no altsetting 0
[ 1329.367823][ T4317] usb 10-1: config 1 interface 5 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 195
[ 1329.381223][ T4317] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1329.392543][ T4317] usb 10-1: config 1 interface 5 has no altsetting 0
[ 1329.477151][ T4317] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1329.534133][ T4317] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1329.575275][ T6666] usb 2-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a
[ 1329.600705][ T6666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1329.608926][ T6666] usb 2-1: Product: syz
[ 1329.618292][ T4317] usb 10-1: Product: syz
[ 1329.622220][ T6666] usb 2-1: Manufacturer: syz
[ 1329.627295][ T6666] usb 2-1: SerialNumber: syz
[ 1329.632327][ T4317] usb 10-1: Manufacturer: syz
[ 1331.160682][ T6666] usb 2-1: config 0 descriptor??
[ 1331.217749][ T4317] usb 10-1: SerialNumber: syz
[ 1331.360686][ T4317] usb 10-1: can't set config #1, error -71
[ 1331.376831][ T6666] usb 2-1: can't set config #0, error -71
[ 1331.390892][ T4317] usb 10-1: USB disconnect, device number 11
[ 1331.401542][ T6666] usb 2-1: USB disconnect, device number 18
[ 1332.390274][T19805] loop9: detected capacity change from 0 to 4096
[ 1332.450999][T19805] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1332.521540][T19805] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[ 1332.529805][T19805] System zones: 0-5
[ 1332.544339][T19805] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1333.431189][T19819] loop2: detected capacity change from 0 to 256
[ 1333.518162][T19819] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[ 1333.561873][T17614] EXT4-fs (loop9): unmounting filesystem.
[ 1335.360246][T19845] loop1: detected capacity change from 0 to 512
[ 1335.431306][T19845] EXT4-fs: Ignoring removed bh option
[ 1335.557785][T19845] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1335.633866][T19845] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 1335.686366][T19845] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[ 1335.730720][T19845] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[ 1335.766167][T19845] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1336.215784][T18295] EXT4-fs (loop1): unmounting filesystem.
[ 1337.163112][T19874] loop5: detected capacity change from 0 to 256
[ 1337.232890][T19874] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1337.306367][   T26] audit: type=1800 audit(2000001102.110:193): pid=19874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3666" name="file1" dev="loop5" ino=1048962 res=0 errno=0
[ 1337.390704][   T26] audit: type=1800 audit(2000001102.110:194): pid=19874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3666" name="file1" dev="loop5" ino=1048962 res=0 errno=0
[ 1338.451203][T19874] syz.5.3666: attempt to access beyond end of device
[ 1338.451203][T19874] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[ 1341.440435][T19941] loop2: detected capacity change from 0 to 8192
[ 1341.910715][ T4317] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1342.121027][ T4317] usb 10-1: Using ep0 maxpacket: 16
[ 1342.128463][ T4317] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1342.206948][ T4317] usb 10-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[ 1342.220820][ T4387] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1342.228139][ T4317] usb 10-1: New USB device strings: Mfr=19, Product=0, SerialNumber=0
[ 1342.420247][ T4317] usb 10-1: Manufacturer: syz
[ 1342.438042][ T4317] usb 10-1: config 0 descriptor??
[ 1342.450338][ T4317] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1342.562603][ T4387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1342.590776][ T4387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1342.668317][ T4387] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1342.744441][ T4387] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1342.787104][ T4387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1342.978733][ T4387] usb 3-1: config 0 descriptor??
[ 1343.252393][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[ 1343.599206][ T4387] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving
[ 1343.631995][ T4387] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1343.716999][T19981] loop5: detected capacity change from 0 to 256
[ 1343.845274][T19981] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1343.909032][   T26] audit: type=1800 audit(2000001108.710:195): pid=19981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3699" name="file1" dev="loop5" ino=1048963 res=0 errno=0
[ 1344.485432][T19981] syz.5.3699: attempt to access beyond end of device
[ 1344.485432][T19981] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[ 1344.697744][  T128] usb 10-1: USB disconnect, device number 12
[ 1344.970901][T20013] loop5: detected capacity change from 0 to 512
[ 1344.985433][T20013] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1345.967941][  T128] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1346.739888][  T128] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1346.997492][  T128] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1346.999534][ T9357] usb 3-1: USB disconnect, device number 17
[ 1347.007632][  T128] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1347.054150][  T128] usb 10-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[ 1347.077218][  T128] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1347.093861][  T128] usb 10-1: Product: syz
[ 1347.098190][  T128] usb 10-1: Manufacturer: syz
[ 1347.127627][  T128] usb 10-1: SerialNumber: syz
[ 1347.170266][  T128] usb 10-1: config 0 descriptor??
[ 1347.241928][T20037] loop2: detected capacity change from 0 to 1024
[ 1347.322086][T20037] EXT4-fs: Ignoring removed orlov option
[ 1347.382375][  T128] usb 10-1: Found UVC 34.00 device syz (8086:0b5b)
[ 1347.389160][  T128] usb 10-1: No valid video chain found.
[ 1347.516883][T20037] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1347.593622][  T128] usb 10-1: USB disconnect, device number 13
[ 1347.771119][T17460] EXT4-fs (loop2): unmounting filesystem.
[ 1347.905951][T20052] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[ 1348.336513][T20061] loop9: detected capacity change from 0 to 1024
[ 1348.350673][T15384] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1348.820683][T15384] usb 6-1: Using ep0 maxpacket: 16
[ 1348.827754][T15384] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1349.432685][T15384] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[ 1349.466647][T15384] usb 6-1: New USB device strings: Mfr=19, Product=0, SerialNumber=0
[ 1349.487064][T15384] usb 6-1: Manufacturer: syz
[ 1349.522601][T15384] usb 6-1: config 0 descriptor??
[ 1349.547324][T15384] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1349.780136][T15384] usb 6-1: USB disconnect, device number 17
[ 1352.332896][T20113] loop5: detected capacity change from 0 to 1024
[ 1352.457077][T20117] loop2: detected capacity change from 0 to 512
[ 1352.544947][T20117] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1352.590758][T11031] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1352.793666][T11031] usb 2-1: config 0 has an invalid interface number: 120 but max is 0
[ 1352.883542][T11031] usb 2-1: config 0 has no interface number 0
[ 1353.013291][T11031] usb 2-1: config 0 interface 120 has no altsetting 0
[ 1353.188157][T11031] usb 2-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=92.80
[ 1353.350772][T11031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1353.605026][T11031] usb 2-1: config 0 descriptor??
[ 1353.628966][T11031] rtl8150 2-1:0.120: couldn't find required endpoints
[ 1353.636478][T11031] rtl8150: probe of 2-1:0.120 failed with error -5
[ 1353.715569][T20134] loop9: detected capacity change from 0 to 512
[ 1353.998798][T11031] usb 2-1: USB disconnect, device number 19
[ 1355.231676][T20152] loop9: detected capacity change from 0 to 2048
[ 1355.339768][T20152] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1355.419619][T20152] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[ 1355.474839][T20160] loop5: detected capacity change from 0 to 8192
[ 1355.801393][T12251] ------------[ cut here ]------------
[ 1355.806935][T12251] kernel BUG at fs/ext4/inode.c:2760!
[ 1356.761410][T12251] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 1356.767587][T12251] CPU: 0 PID: 12251 Comm: kworker/u4:24 Not tainted syzkaller #0
[ 1356.775425][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1356.785533][T12251] Workqueue: writeback wb_workfn (flush-7:9)
[ 1356.791581][T12251] RIP: 0010:ext4_writepages+0x2f34/0x2f40
[ 1356.797365][T12251] Code: c1 03 38 c1 0f 8c ac fd ff ff 4c 89 e7 e8 54 8d ac ff e9 9f fd ff ff e8 8a a1 5b ff 0f 0b e8 83 a1 5b ff 0f 0b e8 7c a1 5b ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89
[ 1356.817016][T12251] RSP: 0018:ffffc90006707040 EFLAGS: 00010293
[ 1356.823139][T12251] RAX: ffffffff8226d234 RBX: 000000c410000000 RCX: ffff8880593d3b80
[ 1356.831202][T12251] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
[ 1356.839218][T12251] RBP: ffffc900067073b0 R08: ffff888054ccc68f R09: 1ffff1100a9998d1
[ 1356.847230][T12251] R10: dffffc0000000000 R11: ffffed100a9998d2 R12: 1ffff92000ce0ee6
[ 1356.855241][T12251] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff88804ca70000
[ 1356.863250][T12251] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1356.872246][T12251] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1356.878895][T12251] CR2: 00007f2196994368 CR3: 0000000027755000 CR4: 00000000003506f0
[ 1356.886928][T12251] Call Trace:
[ 1356.890255][T12251]  <TASK>
[ 1356.893243][T12251]  ? verify_lock_unused+0x140/0x140
[ 1356.898503][T12251]  ? ext4_read_folio+0x370/0x370
[ 1356.903498][T12251]  ? __lock_acquire+0x13cf/0x7d10
[ 1356.908589][T12251]  ? verify_lock_unused+0x140/0x140
[ 1356.913863][T12251]  ? __lock_acquire+0x7d10/0x7d10
[ 1356.918944][T12251]  ? do_raw_spin_lock+0x128/0x2f0
[ 1356.924021][T12251]  ? do_raw_spin_unlock+0x11d/0x230
[ 1356.929270][T12251]  ? ext4_read_folio+0x370/0x370
[ 1356.934262][T12251]  do_writepages+0x3ba/0x640
[ 1356.938908][T12251]  ? __writepage+0x130/0x130
[ 1356.943546][T12251]  ? writeback_sb_inodes+0x70f/0x1850
[ 1356.948974][T12251]  ? __lock_acquire+0x7d10/0x7d10
[ 1356.954050][T12251]  ? do_raw_spin_lock+0x128/0x2f0
[ 1356.959146][T12251]  __writeback_single_inode+0x156/0x1160
[ 1356.964844][T12251]  writeback_sb_inodes+0xb30/0x1850
[ 1356.970105][T12251]  ? do_raw_spin_lock+0x128/0x2f0
[ 1356.975183][T12251]  ? queue_io+0x5a0/0x5a0
[ 1356.979578][T12251]  ? rcu_is_watching+0x11/0xa0
[ 1356.984411][T12251]  wb_writeback+0x482/0xd50
[ 1356.988985][T12251]  ? percpu_ref_tryget+0x250/0x250
[ 1356.994931][T12251]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1357.000969][T12251]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1357.006223][T12251]  wb_workfn+0x423/0xee0
[ 1357.010523][T12251]  ? inode_wait_for_writeback+0x220/0x220
[ 1357.016309][T12251]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1357.022354][T12251]  ? read_lock_is_recursive+0x10/0x10
[ 1357.027788][T12251]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1357.033737][T12251]  ? _raw_spin_unlock+0x40/0x40
[ 1357.038651][T12251]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1357.043918][T12251]  ? process_one_work+0x7b0/0x1160
[ 1357.049089][T12251]  process_one_work+0x8a2/0x1160
[ 1357.054088][T12251]  ? worker_detach_from_pool+0x240/0x240
[ 1357.059792][T12251]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1357.064863][T12251]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1357.070451][T12251]  ? kthread_data+0x4b/0xc0
[ 1357.075013][T12251]  worker_thread+0xaa2/0x1270
[ 1357.079751][T12251]  ? __kthread_parkme+0x162/0x1c0
[ 1357.084837][T12251]  kthread+0x29d/0x330
[ 1357.088996][T12251]  ? worker_clr_flags+0x1a0/0x1a0
[ 1357.094081][T12251]  ? kthread_blkcg+0xd0/0xd0
[ 1357.098738][T12251]  ret_from_fork+0x1f/0x30
[ 1357.103211][T12251]  </TASK>
[ 1357.106268][T12251] Modules linked in:
[ 1357.128967][T12251] ---[ end trace 0000000000000000 ]---
[ 1357.135047][T12251] RIP: 0010:ext4_writepages+0x2f34/0x2f40
[ 1357.156254][T12251] Code: c1 03 38 c1 0f 8c ac fd ff ff 4c 89 e7 e8 54 8d ac ff e9 9f fd ff ff e8 8a a1 5b ff 0f 0b e8 83 a1 5b ff 0f 0b e8 7c a1 5b ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89
[ 1357.206876][T12251] RSP: 0018:ffffc90006707040 EFLAGS: 00010293
[ 1357.219739][T12251] RAX: ffffffff8226d234 RBX: 000000c410000000 RCX: ffff8880593d3b80
[ 1357.340735][T12251] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
[ 1357.358299][T12251] RBP: ffffc900067073b0 R08: ffff888054ccc68f R09: 1ffff1100a9998d1
[ 1357.375195][T12251] R10: dffffc0000000000 R11: ffffed100a9998d2 R12: 1ffff92000ce0ee6
[ 1357.389308][T12251] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff88804ca70000
[ 1357.398296][T12251] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1357.407656][T12251] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1357.414965][T12251] CR2: 0000564b290a7950 CR3: 0000000027755000 CR4: 00000000003506e0
[ 1357.423161][T12251] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1357.433537][T12251] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1357.441865][T12251] Kernel panic - not syncing: Fatal exception
[ 1357.448548][T12251] Kernel Offset: disabled
[ 1357.452890][T12251] Rebooting in 86400 seconds..