last executing test programs:

9m36.257689668s ago: executing program 32 (id=19):
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399})
io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6c619ea}, 0x94)
io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

8m27.41556563s ago: executing program 0 (id=120):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_80211_inject_frame(0x0, 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0xfffffffe, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x0, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)

8m24.343833582s ago: executing program 0 (id=123):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
fanotify_init(0x4, 0x40000)
close(r4)

8m19.559819433s ago: executing program 0 (id=129):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8m16.415858156s ago: executing program 0 (id=136):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
syz_open_procfs(0x0, 0x0)
unlink(&(0x7f0000000440)='./file0/../file0\x00')

8m15.8227542s ago: executing program 0 (id=137):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

8m15.177039295s ago: executing program 0 (id=139):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, 0x0, 0x80)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x210a}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
keyctl$clear(0x7, 0x0)
syz_usb_connect$uac3(0x2, 0x9c, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8f5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xfd, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x26, 0x7}, [@feature_unit={0x9, 0x24, 0x7, 0x4, 0x3, [0xc]}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x402, 0x3, 0x5, 0x4, 0x4, 0x7ff, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x40, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0xd}}}}}}}}]}}, 0x0)

8m13.417517026s ago: executing program 33 (id=139):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, 0x0, 0x80)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x210a}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
keyctl$clear(0x7, 0x0)
syz_usb_connect$uac3(0x2, 0x9c, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8f5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xfd, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x26, 0x7}, [@feature_unit={0x9, 0x24, 0x7, 0x4, 0x3, [0xc]}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x402, 0x3, 0x5, 0x4, 0x4, 0x7ff, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x40, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0xd}}}}}}}}]}}, 0x0)

5m46.876051579s ago: executing program 1 (id=317):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080))
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="e9", 0x1, 0x20008045, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020)

5m44.745239678s ago: executing program 1 (id=320):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpgrp(0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x87fa4000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000240)={[{@map_off}, {@check_strict}, {@cruft}, {@dmode={'dmode', 0x3d, 0x4}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0xff, 0x544, &(0x7f0000001000)="$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")

5m41.614289931s ago: executing program 1 (id=322):
shmctl$SHM_UNLOCK(0x0, 0xc)
ioperm(0x0, 0x7c7, 0xff)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
shmctl$SHM_UNLOCK(0x0, 0xc)

5m38.103952393s ago: executing program 1 (id=327):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x8, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x1)
fchdir(r6)
r7 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents64(0xffffffffffffffff, 0x0, 0x0)
getdents(r7, 0x0, 0x0)

5m36.758491554s ago: executing program 1 (id=329):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x190)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0x1007f}, 0xfffffffffffffee8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c76000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x8b9, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0x3, 0x30002b7})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5m30.192180187s ago: executing program 1 (id=341):
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50)

5m15.098206768s ago: executing program 34 (id=341):
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50)

3m35.179194914s ago: executing program 5 (id=515):
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfff)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600), 0x2008800, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63)
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x300040ac, 0x0, 0xffff, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa8f86, 0x1)
close(r0)
writev(r2, &(0x7f0000006200)=[{&(0x7f0000000380)="351ff41382b42d72b9556ae0b0ec6490dc0891cb2aef3b4038562f7590c51d70a1b9a6675afc584390dc01ff3fb56173f73a1624ac74a2d6638d031a88cb26a75ea403232a85ec8886e2956a528e37bccdff0c580677eba488809e51a23b4c72da70300267986f6ada24324a020d07af2f1690a5afdcfc257abe65519d79816e65", 0x81}, {&(0x7f0000004140)="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", 0xf80}], 0x2)

3m34.707831704s ago: executing program 5 (id=517):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000))
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000001ac0)=ANY=[@ANYBLOB='dmask=00000000000000000000006,umask=00000000000013325662516,keep_last_dots,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c646973636172642c666d61736b3d30303030303030303030303030303030303030313030312c666da98a67b51d1f305e61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d6d68636761656c69632c616c6c6f775f7574696d653d30303030303030303030303030303030303134373035372c726f6f74636f6e746578743d757365725f752c7569643e", @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=G-,smackfstransmute=^,\x00'], 0x1, 0x152a, &(0x7f0000000400)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100), 0x200081, &(0x7f00000000c0)=ANY=[])
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r2, 0x1)
r3 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e)
flock(r3, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3m33.320879997s ago: executing program 5 (id=521):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
read$msr(r3, &(0x7f00000000c0)=""/50, 0x32)

3m32.265253542s ago: executing program 5 (id=522):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x8, 0x408400)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f0000001640)="$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")
io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40})
socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='bfq', 0x3)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r3)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fallocate(r4, 0x23, 0x100000000, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000))
r5 = socket$nl_route(0x10, 0x3, 0x0)
write(r5, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0xc6)

3m27.319931367s ago: executing program 5 (id=534):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)

3m25.727961584s ago: executing program 5 (id=539):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000)

3m24.499176262s ago: executing program 35 (id=539):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000)

2m55.164131955s ago: executing program 6 (id=609):
ioperm(0x0, 0x7c7, 0xff)
select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, 0x0)

2m55.003974359s ago: executing program 6 (id=611):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x48, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x48}}, 0x0)

2m54.94550534s ago: executing program 6 (id=612):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @any, 0xff01}, 0x10)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
recvfrom(r1, &(0x7f0000000200)=""/106, 0x6a, 0x40000716, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x2, 0x101}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno', 0x4)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000000)={r0, 0x0, 0x6, 0x5, 0x8, 0x4})

2m50.808011867s ago: executing program 6 (id=624):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0xff, 0x4b2, &(0x7f0000000540)="$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")
mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000004c0)='1', 0x1)

2m50.269966489s ago: executing program 6 (id=628):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001bc0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x7}}}}, 0x9)

2m48.603317567s ago: executing program 6 (id=633):
r0 = io_uring_setup(0x1a67, &(0x7f0000000040)={0x0, 0xa8f5, 0x8, 0x0, 0xc9})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
ioctl$TIOCSBRK(r1, 0x5427)
close(r0)
setuid(0xee01)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

2m48.034898531s ago: executing program 36 (id=633):
r0 = io_uring_setup(0x1a67, &(0x7f0000000040)={0x0, 0xa8f5, 0x8, 0x0, 0xc9})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
ioctl$TIOCSBRK(r1, 0x5427)
close(r0)
setuid(0xee01)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

2m45.400932132s ago: executing program 3 (id=644):
r0 = io_uring_setup(0x539a, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x2, 0x2fb})
r1 = open(0x0, 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r2, 0x1)
r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e)
flock(r4, 0x1)
flock(r3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

2m45.0771892s ago: executing program 3 (id=645):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000d00)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168)
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)

2m42.339944513s ago: executing program 3 (id=649):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
read(r1, &(0x7f0000001380)=""/4096, 0x1000)
close(r1)

2m41.817735236s ago: executing program 3 (id=650):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080))
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="e9", 0x1, 0x20008045, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020)

2m41.120986172s ago: executing program 3 (id=652):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e0915ca8703c0e8f94b157f55799d27afa84640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8", 0x4c}, {&(0x7f0000000840)="3f67466b434f0f1dab64b413f241dddea2dbdf0911184a79c6d06cb884a50159037441904c0acf6a994e41d7790cac9d46215c54cd9cd1", 0x37}, {&(0x7f0000000a40)="7f9dd881777fea034ee968a3f4d1b230a014767a2fcd073cbd069735a30f70cb161811abe3cb1a0695e82c10a79ab1ff167fd5fcd27035cba4fd82b59b4c6e95368bdf3f511238bb", 0x48}], 0x3}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)

2m37.191625373s ago: executing program 3 (id=659):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = syz_usb_connect(0x2, 0x68, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x300}, 0x8)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000c40)=ANY=[@ANYBLOB="200ef40000005ffd"], 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0})

2m36.599394837s ago: executing program 37 (id=659):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = syz_usb_connect(0x2, 0x68, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x300}, 0x8)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000c40)=ANY=[@ANYBLOB="200ef40000005ffd"], 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0})

1m44.431350491s ago: executing program 8 (id=765):
syz_emit_ethernet(0x36, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffffff}}}}}, 0x0)

1m43.375888236s ago: executing program 8 (id=768):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
chdir(&(0x7f00000001c0)='./bus\x00')
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x201008, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12)

1m43.18498669s ago: executing program 8 (id=769):
syz_ublk_setup_io_uring(0x530f, &(0x7f0000000080)={0x0, 0xae95, 0x80, 0x1, 0x1cc}, 0x0, 0x0, 0x0)

1m43.001244914s ago: executing program 8 (id=771):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x1e, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2ebcfadc660e677df7019051caafa00afaaf755a314a10400000000220000000000004000", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]})
write$FUSE_DIRENTPLUS(r0, 0x0, 0x138)

1m39.76001847s ago: executing program 8 (id=782):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001800dd8d00000000fedbdf25021010000000360b00000020080006"], 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
dup(0xffffffffffffffff)
sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0)

1m36.864121927s ago: executing program 8 (id=788):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000002c0)={0x40071d4, 0x1, [{0x5}]})

1m36.364273549s ago: executing program 38 (id=788):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000002c0)={0x40071d4, 0x1, [{0x5}]})

14.772023814s ago: executing program 2 (id=1031):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x8914, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042)
memfd_create(&(0x7f00000001c0)='/d\xf7r/sda1\x00', 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
semtimedop(0x0, 0x0, 0x0, 0x0)
semop(0x0, &(0x7f0000000140)=[{0x2, 0xce97, 0x800}, {0x1, 0x5, 0x1000}], 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))

14.212032798s ago: executing program 2 (id=1034):
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)

13.098800544s ago: executing program 2 (id=1035):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x400c008}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(r2, 0x0, &(0x7f00000002c0)={'U+', 0x20004000000}, 0x16, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r5, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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")

6.270113679s ago: executing program 7 (id=1048):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)

5.189637855s ago: executing program 7 (id=1050):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86820102, r1})

4.377566045s ago: executing program 4 (id=1052):
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)

3.379167918s ago: executing program 4 (id=1053):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000ac0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3012000000000700", @ANYRES32=r4, @ANYBLOB="000000000a000200000000000000000008000900feffffff"], 0x30}}, 0x0)
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f00000001c0)=0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.574196618s ago: executing program 7 (id=1056):
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x51, 0xffff, 0x7ff, {0xffff, 0x1}, {0x45, 0xfbfe}, @rumble={0x0, 0x40}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x4, 0x70bd2d, 0x25dfdbf8, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40011)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
syz_read_part_table(0x5e2, &(0x7f0000000600)="$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")

2.250461896s ago: executing program 2 (id=1058):
mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed)
mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000340), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed)
mkdirat(r0, 0x0, 0x1ed)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')

2.184013237s ago: executing program 9 (id=1059):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xfc778000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xfffffffe)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000580)="b6", 0x1}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000017c0)=""/110, 0x6e}], 0x1}}], 0x1, 0x40000042, 0x0)

2.169073138s ago: executing program 7 (id=1060):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64], 0x108}}], 0x2, 0xc040)

2.048025591s ago: executing program 9 (id=1061):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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")
r0 = creat(&(0x7f0000000240)='./file1\x00', 0x140)
io_setup(0x200, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0, 0x0, 0x3}])

1.964003583s ago: executing program 7 (id=1062):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)

1.069202694s ago: executing program 7 (id=1063):
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]})
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
write(r1, &(0x7f0000000300), 0x100)

878.938438ms ago: executing program 9 (id=1064):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1e, 0x0, @void}, 0x10)

656.004884ms ago: executing program 2 (id=1065):
r0 = creat(&(0x7f0000000240)='./file0\x00', 0x153)
unshare(0x22020600)
write$char_usb(r0, 0x0, 0x0)

597.657305ms ago: executing program 4 (id=1066):
rseq(&(0x7f0000000040), 0x7c, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1}, [@printk={@d, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x8}, {0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x46}}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

575.271686ms ago: executing program 9 (id=1067):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x400c008}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(r2, 0x0, &(0x7f00000002c0)={'U+', 0x20004000000}, 0x16, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r5, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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")

376.044161ms ago: executing program 4 (id=1068):
ioperm(0x4, 0x8, 0x5)
syz_ublk_setup_io_uring(0x20e5, &(0x7f0000000300)={0x0, 0x817d, 0x200, 0x1, 0x308}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400))

329.939052ms ago: executing program 9 (id=1069):
r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[::1]\x1c/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='::1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

226.983745ms ago: executing program 4 (id=1070):
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x200000000000000)
unshare(0x400)
vmsplice(r0, 0x0, 0x0, 0x3)

147.937706ms ago: executing program 2 (id=1071):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fchownat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0)

142.509956ms ago: executing program 9 (id=1072):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10)
truncate(&(0x7f0000000040)='./file0\x00', 0x40200)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x11bfb03f, &(0x7f0000000100)=""/230})

0s ago: executing program 4 (id=1073):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_getscheduler(0x0)
getpid()
pipe(&(0x7f0000000600))
io_setup(0x7, &(0x7f0000000500))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xfffffffffffffffc})
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)

kernel console output (not intermixed with test programs):

(device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  363.945333][ T7765] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.370: Invalid inode table block 0 in block_group 0
[  363.971424][ T7765] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  363.983985][ T7765] EXT4-fs error (device loop3): ext4_truncate:4302: inode #13: comm syz.3.370: mark_inode_dirty error
[  364.002800][ T7765] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  364.013263][ T7765] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.370: Invalid inode table block 0 in block_group 0
[  364.078395][ T7765] EXT4-fs (loop3): 1 truncate cleaned up
[  364.101237][ T7765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  364.250258][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.432774][   T42] hsr_slave_0: left promiscuous mode
[  365.312902][   T42] hsr_slave_1: left promiscuous mode
[  365.326213][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.333725][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.358422][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.378788][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.399383][   T42] bridge_slave_1: left allmulticast mode
[  365.405072][   T42] bridge_slave_1: left promiscuous mode
[  365.425834][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.444689][   T42] bridge_slave_0: left allmulticast mode
[  365.471450][   T42] bridge_slave_0: left promiscuous mode
[  365.496283][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.582548][   T42] veth1_macvtap: left promiscuous mode
[  365.603802][   T42] veth0_macvtap: left promiscuous mode
[  365.614066][   T42] veth1_vlan: left promiscuous mode
[  365.624226][   T42] veth0_vlan: left promiscuous mode
[  369.135082][ T7800] loop4: detected capacity change from 0 to 512
[  369.242834][ T7800] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.379: Invalid block bitmap block 0 in block_group 0
[  370.537073][ T7800] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  370.587277][ T7800] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.379: attempt to clear invalid blocks 983261 len 1
[  370.611980][ T7800] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.379: invalid indirect mapped block 2683928664 (level 0)
[  370.632165][ T7800] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.379: Invalid inode table block 0 in block_group 0
[  370.651173][ T7800] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  370.662012][ T7800] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  370.678813][ T7800] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.379: Invalid inode table block 0 in block_group 0
[  370.700454][ T7800] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  370.712995][ T7800] EXT4-fs error (device loop4): ext4_truncate:4302: inode #13: comm syz.4.379: mark_inode_dirty error
[  370.730468][ T7800] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  370.740041][ T7800] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.379: Invalid inode table block 0 in block_group 0
[  370.762966][ T7800] EXT4-fs (loop4): 1 truncate cleaned up
[  370.770327][ T7800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.900430][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.351926][   T42] team0 (unregistering): Port device team_slave_1 removed
[  372.493287][   T42] team0 (unregistering): Port device team_slave_0 removed
[  373.467473][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  373.697487][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  373.856591][ T7815] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  375.674969][ T7822] loop4: detected capacity change from 0 to 8
[  375.744826][ T7822] SQUASHFS error: Unable to read inode 0x11f
[  375.851932][   T42] bond0 (unregistering): Released all slaves
[  376.111822][ T7831] loop4: detected capacity change from 0 to 16
[  376.177148][ T7831] erofs: (device loop4): mounted with root inode @ nid 36.
[  376.327429][ T7708] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  376.379029][ T7708] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  376.424974][ T7708] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  376.524484][ T7708] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  377.721028][ T7708] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.852071][ T7708] 8021q: adding VLAN 0 to HW filter on device team0
[  377.918499][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.926199][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.971309][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.978556][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.664255][ T7708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.790473][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  379.429127][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  379.714218][ T7873] loop4: detected capacity change from 0 to 256
[  379.766758][ T7873] exfat: Unknown parameter 'fm©Šgµ0^ask'
[  379.844833][ T7722] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  379.945692][ T7876] loop5: detected capacity change from 0 to 1024
[  380.044995][ T7876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.268763][ T6561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.408517][ T7708] veth0_vlan: entered promiscuous mode
[  381.447631][ T7708] veth1_vlan: entered promiscuous mode
[  382.393056][ T7708] veth0_macvtap: entered promiscuous mode
[  382.454943][ T7708] veth1_macvtap: entered promiscuous mode
[  382.571951][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.655328][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.665201][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.705428][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.745345][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.775313][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.796904][ T7708] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.852675][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.911880][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.942270][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.985315][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.017975][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.075331][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.106800][ T7708] batman_adv: batadv0: Interface activated: batadv_slave_1
[  383.138115][ T7708] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.161683][ T7708] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.201838][ T7708] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.225509][ T7708] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.586641][ T7665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.594504][ T7665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.736761][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.744721][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.161257][ T7925] loop5: detected capacity change from 0 to 512
[  384.195987][ T7925] EXT4-fs: Ignoring removed bh option
[  385.126077][ T7925] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  385.224099][   T28] audit: type=1326 audit(1788698671.992:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.3.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdb19e159 code=0x7ffc0000
[  385.225378][ T7925] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  385.276631][ T7925] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.398: Corrupt directory, running e2fsck is recommended
[  385.298263][   T28] audit: type=1326 audit(1788698671.992:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.3.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdb19e159 code=0x7ffc0000
[  385.346617][ T7925] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  385.349571][ T7927] loop6: detected capacity change from 0 to 164
[  385.354926][ T7925] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.398: corrupted in-inode xattr: e_name out of bounds
[  385.392174][   T28] audit: type=1326 audit(1788698672.072:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.3.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8cdb19e159 code=0x7ffc0000
[  385.456389][ T7925] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.398: couldn't read orphan inode 15 (err -117)
[  385.500291][   T28] audit: type=1326 audit(1788698672.072:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.3.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdb19e159 code=0x7ffc0000
[  386.805338][   T28] audit: type=1326 audit(1788698672.072:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.3.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8cdb19e159 code=0x7ffc0000
[  386.830427][   T28] audit: type=1326 audit(1788698672.072:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.3.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdb19e159 code=0x7ffc0000
[  386.846600][ T7925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  386.854589][   T28] audit: type=1326 audit(1788698672.072:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.3.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdb19e159 code=0x7ffc0000
[  386.903665][   T28] audit: type=1326 audit(1788698672.072:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.3.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8cdb19e159 code=0x7ffc0000
[  386.965766][ T7925] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  386.984437][   T28] audit: type=1326 audit(1788698672.072:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.3.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdb19e159 code=0x7ffc0000
[  387.017719][ T7925] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  387.045364][ T7925] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.398: Corrupt directory, running e2fsck is recommended
[  387.085308][   T28] audit: type=1326 audit(1788698672.072:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.3.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdb19e159 code=0x7ffc0000
[  387.119910][ T7945] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  387.165353][ T7945] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  387.195444][ T7933] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  387.249601][ T7945] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.398: Corrupt directory, running e2fsck is recommended
[  388.261352][ T7946] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  388.316075][ T7925] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  388.352288][ T7925] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  388.391195][ T7946] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  388.501448][ T6561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.102924][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'.
[  392.406342][ T7998] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  393.451836][ T8000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  393.772064][ T8006] loop6: detected capacity change from 0 to 1024
[  393.843427][ T7722] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  396.760407][ T8029] loop5: detected capacity change from 0 to 256
[  396.772466][ T8029] exfat: Unknown parameter 'fm©Šgµ0^ask'
[  397.263009][ T8036] loop5: detected capacity change from 0 to 512
[  397.364115][ T8036] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.421: Invalid block bitmap block 0 in block_group 0
[  397.446111][ T8036] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  397.475494][ T8036] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.421: attempt to clear invalid blocks 983261 len 1
[  398.404191][ T8036] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.421: invalid indirect mapped block 2683928664 (level 0)
[  398.435754][ T8036] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.421: Invalid inode table block 0 in block_group 0
[  398.470846][ T8036] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  398.514903][ T8036] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  398.585352][ T8036] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.421: Invalid inode table block 0 in block_group 0
[  398.629626][ T8036] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  398.651408][ T8036] EXT4-fs error (device loop5): ext4_truncate:4302: inode #13: comm syz.5.421: mark_inode_dirty error
[  398.671601][ T8036] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  398.688774][ T8036] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.421: Invalid inode table block 0 in block_group 0
[  398.729686][ T8036] EXT4-fs (loop5): 1 truncate cleaned up
[  398.766670][ T8036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.916240][ T6561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.811982][ T8061] input: syz0 as /devices/virtual/input/input21
[  400.350077][ T8058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.739691][ T8070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  403.692952][ T8094] netlink: 'syz.5.429': attribute type 4 has an invalid length.
[  404.532057][ T8094] syz.5.429 (8094) used greatest stack depth: 19816 bytes left
[  404.832218][ T8099] loop4: detected capacity change from 0 to 1024
[  404.947111][ T8099] hfsplus: invalid length 32517 has been corrected to 255
[  405.047350][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  405.047388][   T28] audit: type=1800 audit(1788698691.822:20): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.430" name="file1" dev="loop4" ino=20 res=0 errno=0
[  405.186597][   T11] hfsplus: b-tree write err: -5, ino 20
[  405.220619][ T8106] loop3: detected capacity change from 0 to 512
[  406.849667][ T8119] loop4: detected capacity change from 0 to 2048
[  406.877564][ T8106] EXT4-fs (loop3): Test dummy encryption mode enabled
[  406.878531][ T8119] UDF-fs: bad mount option "obj_role=(" or missing value
[  406.884361][ T8106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  406.925423][ T8106] EXT4-fs (loop3): SIPHASH is not a valid default hash value
[  407.880269][ T8133] input: syz0 as /devices/virtual/input/input23
[  408.419588][ T8129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.079482][ T8172] loop5: detected capacity change from 0 to 512
[  413.086683][ T8169] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  414.378565][ T8172] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 33619980: comm syz.5.431: invalid block
[  414.584264][ T8172] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.431: Invalid block bitmap block 0 in block_group 0
[  414.732116][ T8172] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  414.750453][ T8172] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.431: attempt to clear invalid blocks 983261 len 1
[  414.764533][ T8172] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.431: invalid indirect mapped block 2683928664 (level 0)
[  414.796992][ T8172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.431: Invalid inode table block 0 in block_group 0
[  414.820159][ T8172] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  414.840345][ T8172] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  414.873143][ T8172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.431: Invalid inode table block 0 in block_group 0
[  414.937705][ T8172] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  414.966813][ T8172] EXT4-fs error (device loop5): ext4_truncate:4302: inode #13: comm syz.5.431: mark_inode_dirty error
[  414.985724][ T8172] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  415.009749][ T8172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.431: Invalid inode table block 0 in block_group 0
[  415.027561][ T8172] EXT4-fs (loop5): 1 truncate cleaned up
[  415.096169][ T8172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.388982][ T6561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.440550][ T8191] loop4: detected capacity change from 0 to 164
[  417.778945][ T5820] smpboot: CPU 1 is now offline
[  417.988177][ T8195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  419.534489][ T8231] loop5: detected capacity change from 0 to 512
[  419.551726][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.452'.
[  419.671523][ T8231] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.453: Invalid block bitmap block 0 in block_group 0
[  419.816618][ T8231] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  419.897548][ T8231] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.453: attempt to clear invalid blocks 983261 len 1
[  420.031640][ T8242] loop6: detected capacity change from 0 to 256
[  420.045669][ T8231] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.453: invalid indirect mapped block 2683928664 (level 0)
[  420.219157][ T8231] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.453: Invalid inode table block 0 in block_group 0
[  420.311092][ T8231] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  420.329471][ T8249] loop4: detected capacity change from 0 to 256
[  420.341847][ T8242] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  420.354847][ T8249] exfat: Unknown parameter 'fm©Šgµ0^ask'
[  420.403591][ T8231] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  420.471450][ T7722] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  420.494435][ T8231] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.453: Invalid inode table block 0 in block_group 0
[  420.587557][ T8231] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  420.777747][ T8231] EXT4-fs error (device loop5): ext4_truncate:4302: inode #13: comm syz.5.453: mark_inode_dirty error
[  420.800957][ T8250] FAULT_INJECTION: forcing a failure.
[  420.800957][ T8250] name failslab, interval 1, probability 0, space 0, times 0
[  420.813653][ T8250] CPU: 0 PID: 8250 Comm: syz.6.454 Not tainted syzkaller #0
[  420.820927][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  420.831066][ T8250] Call Trace:
[  420.834400][ T8250]  <TASK>
[  420.837372][ T8250]  dump_stack_lvl+0x18c/0x250
[  420.842190][ T8250]  ? show_regs_print_info+0x20/0x20
[  420.847413][ T8250]  ? load_image+0x420/0x420
[  420.851919][ T8250]  ? __might_sleep+0xe0/0xe0
[  420.856518][ T8250]  ? __lock_acquire+0x7d80/0x7d80
[  420.861541][ T8250]  should_fail_ex+0x394/0x4c0
[  420.866224][ T8250]  should_failslab+0x9/0x20
[  420.870721][ T8250]  slab_pre_alloc_hook+0x59/0x300
[  420.875750][ T8250]  ? __lock_acquire+0x7d80/0x7d80
[  420.880760][ T8250]  ? vmemdup_user+0x49/0x1e0
[  420.885427][ T8250]  ? vmemdup_user+0x49/0x1e0
[  420.890006][ T8250]  __kmem_cache_alloc_node+0x53/0x250
[  420.895370][ T8250]  ? vmemdup_user+0x49/0x1e0
[  420.899942][ T8250]  __kmalloc_node+0xa6/0x240
[  420.904521][ T8250]  vmemdup_user+0x49/0x1e0
[  420.908922][ T8250]  path_setxattr+0x207/0x590
[  420.913526][ T8250]  ? vfs_write+0x5de/0x9a0
[  420.917928][ T8250]  ? simple_xattrs_free+0x150/0x150
[  420.923124][ T8250]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  420.929111][ T8250]  ? lock_chain_count+0x20/0x20
[  420.933947][ T8250]  __x64_sys_setxattr+0xbb/0xd0
[  420.938785][ T8250]  do_syscall_64+0x55/0xb0
[  420.943191][ T8250]  ? clear_bhb_loop+0x40/0x90
[  420.947937][ T8250]  ? clear_bhb_loop+0x40/0x90
[  420.952619][ T8250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  420.958499][ T8250] RIP: 0033:0x7f320939e159
[  420.962965][ T8250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.982626][ T8250] RSP: 002b:00007f320a326028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  420.991035][ T8250] RAX: ffffffffffffffda RBX: 00007f3209626090 RCX: 00007f320939e159
[  420.998990][ T8250] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 0000200000000100
[  421.006960][ T8250] RBP: 00007f3209435024 R08: 0000000000000002 R09: 0000000000000000
[  421.014932][ T8250] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000
[  421.022891][ T8250] R13: 00007f3209626128 R14: 00007f3209626090 R15: 00007ffe28b06e48
[  421.030871][ T8250]  </TASK>
[  421.035697][   T28] audit: type=1800 audit(1788698707.572:21): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.454" name="file1" dev="loop6" ino=1048621 res=0 errno=0
[  421.133454][ T8231] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  421.268582][ T8231] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.453: Invalid inode table block 0 in block_group 0
[  422.289673][ T8231] EXT4-fs (loop5): 1 truncate cleaned up
[  422.309197][ T8262] binder: 8258:8262 ioctl c0306201 200000000080 returned -14
[  422.348410][ T8231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.386265][ T8262] binder: BINDER_SET_CONTEXT_MGR already set
[  422.392475][ T8262] binder: 8258:8262 ioctl 4018620d 200000000040 returned -16
[  422.445743][ T8262] binder: 8258:8262 ioctl c0306201 2000000003c0 returned -14
[  422.668960][ T6561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.779118][ T8272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  425.209749][ T8294] loop4: detected capacity change from 0 to 256
[  425.226048][ T8294] exfat: Unknown parameter 'fm©Šgµ0^ask'
[  425.386605][ T8298] loop3: detected capacity change from 0 to 1024
[  430.508144][ T8339] loop6: detected capacity change from 0 to 128
[  430.533921][ T8339] EXT4-fs: Ignoring removed bh option
[  430.619452][ T8339] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  430.693670][ T8339] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  430.910813][ T7708] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  432.023920][ T8352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.129320][ T8357] loop4: detected capacity change from 0 to 764
[  432.194888][ T8357] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  432.739431][ T8366] loop3: detected capacity change from 0 to 512
[  432.858264][ T8366] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.468: Invalid block bitmap block 0 in block_group 0
[  433.772190][ T5785] Bluetooth: hci2: command tx timeout
[  433.930456][ T8366] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  433.992379][ T8366] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.468: attempt to clear invalid blocks 983261 len 1
[  434.083152][ T8366] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.468: invalid indirect mapped block 2683928664 (level 0)
[  434.206005][ T8366] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.468: Invalid inode table block 0 in block_group 0
[  434.290129][ T8366] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  434.377104][ T8366] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  434.465359][ T8366] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.468: Invalid inode table block 0 in block_group 0
[  434.555499][ T8366] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  434.627665][ T8366] EXT4-fs error (device loop3): ext4_truncate:4302: inode #13: comm syz.3.468: mark_inode_dirty error
[  434.716430][ T8366] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  434.845211][ T8366] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.468: Invalid inode table block 0 in block_group 0
[  434.929360][ T8366] EXT4-fs (loop3): 1 truncate cleaned up
[  434.970980][ T8366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.128706][ T8390] loop4: detected capacity change from 0 to 164
[  435.349930][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.396475][ T5785] Bluetooth: hci0: unexpected cc 0x0c05 length: 4 > 1
[  435.403296][ T5785] Bluetooth: hci0: unexpected event for opcode 0x0c05
[  435.485895][ T8405] loop4: detected capacity change from 0 to 512
[  436.538828][ T7722] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  436.807012][ T8417] loop3: detected capacity change from 0 to 2048
[  436.908235][ T8417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  436.994494][ T8420] loop6: detected capacity change from 0 to 512
[  437.076697][ T8420] EXT4-fs (loop6): 1 truncate cleaned up
[  437.129737][ T8420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.274636][   T28] audit: type=1800 audit(1788698724.042:22): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.481" name="file1" dev="loop6" ino=13 res=0 errno=0
[  437.330754][ T8420] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.481: bg 0: block 465: padding at end of block bitmap is not set
[  437.418600][ T8420] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28
[  437.475767][ T8420] EXT4-fs (loop6): This should not happen!! Data will be lost
[  437.475767][ T8420] 
[  438.395046][ T8420] EXT4-fs (loop6): Total free blocks count 0
[  438.409606][ T8420] EXT4-fs (loop6): Free/Dirty block details
[  438.431351][ T8420] EXT4-fs (loop6): free_blocks=0
[  438.450032][ T8420] EXT4-fs (loop6): dirty_blocks=2
[  438.483230][ T8420] EXT4-fs (loop6): Block reservation details
[  438.563135][ T8433] loop4: detected capacity change from 0 to 256
[  438.577054][ T8420] EXT4-fs (loop6): i_reserved_data_blocks=2
[  439.478769][ T8433] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  439.618186][ T7708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.859027][ T8436] loop6: detected capacity change from 0 to 512
[  439.868746][ T8438] loop4: detected capacity change from 0 to 164
[  439.888214][ T8438] Unable to read rock-ridge attributes
[  439.932629][ T8436] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:478: comm syz.6.492: Invalid block bitmap block 0 in block_group 0
[  439.949778][ T8438] Unable to read rock-ridge attributes
[  439.988473][ T8438] iso9660: Corrupted directory entry in block 1 of inode 1792
[  440.016457][ T8436] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  440.053400][ T8436] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.492: attempt to clear invalid blocks 983261 len 1
[  440.126951][ T8436] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.492: invalid indirect mapped block 2683928664 (level 0)
[  440.172869][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  440.179275][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  440.198148][ T8442] loop4: detected capacity change from 0 to 512
[  440.229139][ T8442] EXT4-fs: Ignoring removed mblk_io_submit option
[  440.238602][ T8436] EXT4-fs error (device loop6): __ext4_get_inode_loc:4497: comm syz.6.492: Invalid inode table block 0 in block_group 0
[  440.267688][ T8442] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  440.307025][ T8442] EXT4-fs (loop4): Test dummy encryption mode enabled
[  440.314696][ T8436] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  440.332145][ T8442] EXT4-fs (loop4): orphan cleanup on readonly fs
[  440.341944][ T8442] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.494: Attempting to read directory block (0) that is past i_size (256)
[  440.376380][ T8436] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  440.389368][ T8442] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  440.398696][ T8436] EXT4-fs error (device loop6): __ext4_get_inode_loc:4497: comm syz.6.492: Invalid inode table block 0 in block_group 0
[  440.427953][ T8442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  440.448530][ T8436] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  440.540851][ T8436] EXT4-fs error (device loop6): ext4_truncate:4302: inode #13: comm syz.6.492: mark_inode_dirty error
[  440.560901][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.601808][ T8436] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  440.654769][ T8436] EXT4-fs error (device loop6): __ext4_get_inode_loc:4497: comm syz.6.492: Invalid inode table block 0 in block_group 0
[  440.712853][ T8436] EXT4-fs (loop6): 1 truncate cleaned up
[  440.726428][ T8436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.894294][ T7708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.211718][ T8451] Bluetooth: MGMT ver 1.22
[  442.375853][ T8459] loop4: detected capacity change from 0 to 128
[  442.686204][ T5820] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  442.884524][ T5820] usb 5-1: config index 0 descriptor too short (expected 16383, got 18)
[  442.914499][ T5820] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  442.934715][ T5820] usb 5-1: can't read configurations, error -22
[  443.742037][ T8460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  444.697824][ T5820] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  445.775975][ T5820] usb 5-1: config index 0 descriptor too short (expected 16383, got 18)
[  445.790533][ T5820] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  445.883767][ T5820] usb 5-1: can't read configurations, error -22
[  445.901400][ T5820] usb usb5-port1: attempt power cycle
[  446.335510][ T5820] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  446.400797][ T5820] usb 5-1: config index 0 descriptor too short (expected 16383, got 18)
[  446.413045][ T5820] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  446.439681][ T5820] usb 5-1: can't read configurations, error -22
[  446.615541][ T5820] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  446.678329][ T5820] usb 5-1: config index 0 descriptor too short (expected 16383, got 18)
[  446.691075][ T5820] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  446.740561][ T5820] usb 5-1: can't read configurations, error -22
[  446.774424][ T5820] usb usb5-port1: unable to enumerate USB device
[  446.797946][ T8472] loop6: detected capacity change from 0 to 256
[  446.848962][ T8474] loop4: detected capacity change from 0 to 512
[  446.862236][ T8472] exfat: Unknown parameter 'fm©Šgµ0^ask'
[  446.901625][ T8474] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.505: invalid block
[  446.977135][ T8474] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.505: Invalid block bitmap block 0 in block_group 0
[  447.036616][ T8474] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  447.048474][ T8474] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.505: attempt to clear invalid blocks 983261 len 1
[  447.072357][ T8474] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.505: invalid indirect mapped block 2683928664 (level 0)
[  447.111621][ T8474] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.505: Invalid inode table block 0 in block_group 0
[  447.138019][ T8474] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  447.161456][ T8474] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  447.203895][ T8474] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.505: Invalid inode table block 0 in block_group 0
[  447.229143][ T8474] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  447.249872][ T8474] EXT4-fs error (device loop4): ext4_truncate:4302: inode #13: comm syz.4.505: mark_inode_dirty error
[  447.274664][ T8474] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  447.293087][ T8474] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.505: Invalid inode table block 0 in block_group 0
[  447.343137][ T8482] loop5: detected capacity change from 0 to 512
[  447.352817][ T8474] EXT4-fs (loop4): 1 truncate cleaned up
[  447.364820][ T8474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.388002][ T8482] EXT4-fs: Ignoring removed i_version option
[  447.435177][ T8482] EXT4-fs: Ignoring removed oldalloc option
[  447.494103][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.538471][ T8482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  448.444134][ T8494] loop6: detected capacity change from 0 to 512
[  448.472981][ T8495] loop3: detected capacity change from 0 to 256
[  448.487860][ T8494] ext3: Bad value for 'init_itable'
[  448.515877][ T7722] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  448.532002][ T8495] exfat: Unknown parameter 'fm©Šgµ0^ask'
[  448.552795][ T6561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.648372][ T8502] FAULT_INJECTION: forcing a failure.
[  449.648372][ T8502] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  449.685402][ T5820] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  449.727591][ T8502] CPU: 0 PID: 8502 Comm: syz.5.511 Not tainted syzkaller #0
[  449.734918][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  449.744977][ T8502] Call Trace:
[  449.748255][ T8502]  <TASK>
[  449.751171][ T8502]  dump_stack_lvl+0x18c/0x250
[  449.755839][ T8502]  ? show_regs_print_info+0x20/0x20
[  449.761019][ T8502]  ? load_image+0x420/0x420
[  449.765501][ T8502]  ? __might_fault+0xaa/0x120
[  449.770183][ T8502]  ? __lock_acquire+0x7d80/0x7d80
[  449.775192][ T8502]  should_fail_ex+0x394/0x4c0
[  449.779855][ T8502]  _copy_from_iter+0x1cd/0x1290
[  449.784692][ T8502]  ? kmalloc_reserve+0x95/0x240
[  449.789572][ T8502]  ? copyout_mc+0x70/0x70
[  449.793883][ T8502]  ? __virt_addr_valid+0x10c/0x380
[  449.798988][ T8502]  ? __virt_addr_valid+0x10c/0x380
[  449.804082][ T8502]  ? __virt_addr_valid+0x10c/0x380
[  449.809178][ T8502]  ? __check_object_size+0x4fc/0xa40
[  449.814448][ T8502]  vhci_write+0x13e/0x460
[  449.818852][ T8502]  vfs_write+0x474/0x9a0
[  449.823087][ T8502]  ? file_end_write+0x250/0x250
[  449.827923][ T8502]  ? __fget_files+0x3fc/0x460
[  449.832588][ T8502]  ? __fdget_pos+0x1d8/0x330
[  449.837162][ T8502]  ? ksys_write+0x74/0x260
[  449.841565][ T8502]  ksys_write+0x151/0x260
[  449.845905][ T8502]  ? __ia32_sys_read+0x90/0x90
[  449.850683][ T8502]  ? lockdep_hardirqs_on+0x98/0x150
[  449.855884][ T8502]  do_syscall_64+0x55/0xb0
[  449.860394][ T8502]  ? clear_bhb_loop+0x40/0x90
[  449.865054][ T8502]  ? clear_bhb_loop+0x40/0x90
[  449.869719][ T8502]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  449.875594][ T8502] RIP: 0033:0x7f4d7df5e98e
[  449.879996][ T8502] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  449.899598][ T8502] RSP: 002b:00007f4d7edfcfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  449.907993][ T8502] RAX: ffffffffffffffda RBX: 00007f4d7edfd6c0 RCX: 00007f4d7df5e98e
[  449.915946][ T8502] RDX: 000000000000000d RSI: 0000200000000240 RDI: 00000000000000ca
[  449.923898][ T8502] RBP: 00007f4d7e035024 R08: 0000000000000000 R09: 0000000000000000
[  449.931849][ T8502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  449.939804][ T8502] R13: 00007f4d7e226038 R14: 00007f4d7e225fa0 R15: 00007ffdf9e1abe8
[  449.947799][ T8502]  </TASK>
[  450.077695][ T5820] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  450.981111][ T5820] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  451.927089][ T5820] usb 7-1: string descriptor 0 read error: -71
[  451.933408][ T5820] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  452.068979][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.148703][ T5820] usb 7-1: can't set config #1, error -71
[  452.218932][ T5820] usb 7-1: USB disconnect, device number 2
[  452.781750][ T8522] loop5: detected capacity change from 0 to 256
[  452.836807][ T8522] exfat: Unknown parameter 'fm©Šgµ0^ask'
[  452.903718][ T8524] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  452.930654][ T7722] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  455.349827][ T8538] netlink: 176 bytes leftover after parsing attributes in process `syz.4.520'.
[  455.419780][ T8535] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  456.342591][ T8539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  456.532124][ T8545] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  459.190283][ T8555] loop6: detected capacity change from 0 to 1024
[  459.309240][ T8557] loop5: detected capacity change from 0 to 256
[  459.392351][ T8557] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  459.761637][ T8560] netlink: 'syz.5.522': attribute type 2 has an invalid length.
[  459.898364][ T6561] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00)
[  460.772841][ T6561] FAT-fs (loop5): Filesystem has been set read-only
[  460.872972][ T6561] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00)
[  461.098133][ T8572] kvm: kvm [8570]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  461.207361][ T8575] loop3: detected capacity change from 0 to 164
[  461.562126][ T7665] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.701484][ T7665] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.587388][ T8583] loop3: detected capacity change from 0 to 512
[  462.644168][ T8583] EXT4-fs: Ignoring removed mblk_io_submit option
[  462.691868][ T8583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  462.808270][ T7665] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.859514][ T8583] EXT4-fs (loop3): Test dummy encryption mode enabled
[  462.929500][ T8583] EXT4-fs (loop3): orphan cleanup on readonly fs
[  462.971204][ T7665] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.018516][ T8583] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.538: Attempting to read directory block (0) that is past i_size (256)
[  463.139050][ T8583] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  463.208633][ T8583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  463.581703][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.626346][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  463.639121][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  463.646891][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  463.654879][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  463.662761][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  463.671146][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  465.757568][   T51] Bluetooth: hci0: command tx timeout
[  465.860059][ T8595] chnl_net:caif_netlink_parms(): no params data found
[  467.716033][ T8630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  467.835921][   T51] Bluetooth: hci0: command tx timeout
[  468.058204][ T7665] hsr_slave_0: left promiscuous mode
[  468.073886][ T7665] hsr_slave_1: left promiscuous mode
[  468.094149][ T8640] loop4: detected capacity change from 0 to 256
[  468.108674][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  468.128908][ T8640] exfat: Unknown parameter 'fm©Šgµ0^ask'
[  468.140424][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  468.160382][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  468.172906][ T7722] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  468.204116][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  468.346645][ T7665] bridge_slave_1: left allmulticast mode
[  468.352311][ T7665] bridge_slave_1: left promiscuous mode
[  468.406226][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.438831][ T7665] bridge_slave_0: left allmulticast mode
[  468.462297][ T7665] bridge_slave_0: left promiscuous mode
[  468.478278][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.570457][ T7665] veth1_macvtap: left promiscuous mode
[  468.586746][ T7665] veth0_macvtap: left promiscuous mode
[  468.610460][ T7665] veth1_vlan: left promiscuous mode
[  468.639645][ T7665] veth0_vlan: left promiscuous mode
[  469.907546][ T8659] loop6: detected capacity change from 0 to 512
[  469.915549][   T51] Bluetooth: hci0: command tx timeout
[  469.946727][ T8659] EXT4-fs: Ignoring removed mblk_io_submit option
[  469.988822][ T8659] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  470.031621][ T8659] EXT4-fs (loop6): Test dummy encryption mode enabled
[  470.064219][ T8659] EXT4-fs (loop6): orphan cleanup on readonly fs
[  470.093242][ T8659] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.552: Attempting to read directory block (0) that is past i_size (256)
[  470.124106][ T8662] loop3: detected capacity change from 0 to 512
[  470.152486][ T8659] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  470.182615][ T7665] team0 (unregistering): Port device team_slave_1 removed
[  470.202763][ T8662] EXT4-fs (loop3): orphan cleanup on readonly fs
[  470.210084][ T8659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  470.260409][ T8662] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  470.314320][ T7665] team0 (unregistering): Port device team_slave_0 removed
[  470.330278][ T8662] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  470.347907][ T7708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.384385][ T8662] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.550: Failed to acquire dquot type 1
[  470.448319][ T7665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  470.499665][ T8662] EXT4-fs (loop3): 1 truncate cleaned up
[  470.530826][ T8662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  470.568282][ T7665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  470.664389][ T8662] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  470.711664][ T8662] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8
[  470.861694][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.105607][ T8673] FAULT_INJECTION: forcing a failure.
[  471.105607][ T8673] name failslab, interval 1, probability 0, space 0, times 0
[  471.118629][ T8673] CPU: 0 PID: 8673 Comm: syz.3.557 Not tainted syzkaller #0
[  471.125903][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  471.135981][ T8673] Call Trace:
[  471.139267][ T8673]  <TASK>
[  471.142190][ T8673]  dump_stack_lvl+0x18c/0x250
[  471.146877][ T8673]  ? show_regs_print_info+0x20/0x20
[  471.152085][ T8673]  ? load_image+0x420/0x420
[  471.156580][ T8673]  ? mark_lock+0x94/0x320
[  471.160906][ T8673]  ? __lock_acquire+0x1336/0x7d80
[  471.165926][ T8673]  should_fail_ex+0x394/0x4c0
[  471.170597][ T8673]  should_failslab+0x9/0x20
[  471.175091][ T8673]  slab_pre_alloc_hook+0x59/0x300
[  471.180111][ T8673]  kmem_cache_alloc+0x5a/0x2c0
[  471.184882][ T8673]  ? radix_tree_node_alloc+0x7e/0x3a0
[  471.190306][ T8673]  radix_tree_node_alloc+0x7e/0x3a0
[  471.195498][ T8673]  idr_get_free+0x28f/0xa10
[  471.200032][ T8673]  idr_alloc_cyclic+0x28a/0x610
[  471.204968][ T8673]  ? idr_alloc+0x2e0/0x2e0
[  471.209392][ T8673]  ? do_raw_spin_lock+0x11f/0x2b0
[  471.214432][ T8673]  ? bpf_map_alloc_id+0x21/0xd0
[  471.219345][ T8673]  bpf_map_alloc_id+0x40/0xd0
[  471.224034][ T8673]  map_create+0xe24/0x12f0
[  471.228445][ T8673]  __sys_bpf+0x651/0x890
[  471.232677][ T8673]  ? bpf_link_show_fdinfo+0x390/0x390
[  471.238040][ T8673]  ? lock_chain_count+0x20/0x20
[  471.242882][ T8673]  __x64_sys_bpf+0x7c/0x90
[  471.247286][ T8673]  do_syscall_64+0x55/0xb0
[  471.251687][ T8673]  ? clear_bhb_loop+0x40/0x90
[  471.256349][ T8673]  ? clear_bhb_loop+0x40/0x90
[  471.261112][ T8673]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  471.267023][ T8673] RIP: 0033:0x7f8cdb19e159
[  471.271462][ T8673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.291092][ T8673] RSP: 002b:00007f8cdc0f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  471.299495][ T8673] RAX: ffffffffffffffda RBX: 00007f8cdb425fa0 RCX: 00007f8cdb19e159
[  471.307462][ T8673] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000000
[  471.315424][ T8673] RBP: 00007f8cdb235024 R08: 0000000000000000 R09: 0000000000000000
[  471.323379][ T8673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  471.331343][ T8673] R13: 00007f8cdb426038 R14: 00007f8cdb425fa0 R15: 00007ffc28e23688
[  471.339331][ T8673]  </TASK>
[  471.599282][ T7665] bond0 (unregistering): Released all slaves
[  471.702823][ T8595] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.713676][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.740686][ T8595] bridge_slave_0: entered allmulticast mode
[  471.751117][ T8595] bridge_slave_0: entered promiscuous mode
[  471.858997][ T8595] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.932974][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.743864][ T8679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.765549][   T51] Bluetooth: hci0: command tx timeout
[  472.793932][ T8688] loop4: detected capacity change from 0 to 256
[  472.814865][ T8595] bridge_slave_1: entered allmulticast mode
[  472.844497][ T8688] exfat: Unknown parameter 'fm©Šgµ0^ask'
[  472.854779][ T8595] bridge_slave_1: entered promiscuous mode
[  472.988307][ T8595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  473.041637][ T8595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.164058][ T8595] team0: Port device team_slave_0 added
[  473.218823][ T8595] team0: Port device team_slave_1 added
[  473.404608][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.420074][ T8699] FAULT_INJECTION: forcing a failure.
[  473.420074][ T8699] name failslab, interval 1, probability 0, space 0, times 0
[  473.446708][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.491526][ T8699] CPU: 0 PID: 8699 Comm: syz.4.564 Not tainted syzkaller #0
[  473.498843][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  473.508917][ T8699] Call Trace:
[  473.512189][ T8699]  <TASK>
[  473.515126][ T8699]  dump_stack_lvl+0x18c/0x250
[  473.519799][ T8699]  ? show_regs_print_info+0x20/0x20
[  473.524984][ T8699]  ? load_image+0x420/0x420
[  473.529475][ T8699]  ? __might_sleep+0xe0/0xe0
[  473.534069][ T8699]  ? __lock_acquire+0x7d80/0x7d80
[  473.539171][ T8699]  should_fail_ex+0x394/0x4c0
[  473.543840][ T8699]  should_failslab+0x9/0x20
[  473.548329][ T8699]  slab_pre_alloc_hook+0x59/0x300
[  473.553340][ T8699]  ? prepend_path+0x8a7/0x950
[  473.558004][ T8699]  ? tomoyo_encode+0x2ad/0x570
[  473.562843][ T8699]  ? tomoyo_encode+0x2ad/0x570
[  473.567595][ T8699]  __kmem_cache_alloc_node+0x53/0x250
[  473.572958][ T8699]  ? tomoyo_encode+0x2ad/0x570
[  473.577726][ T8699]  __kmalloc+0xa7/0x240
[  473.581876][ T8699]  tomoyo_encode+0x2ad/0x570
[  473.586457][ T8699]  tomoyo_realpath_from_path+0x57c/0x5c0
[  473.592086][ T8699]  tomoyo_check_open_permission+0x224/0x460
[  473.598001][ T8699]  ? tomoyo_check_open_permission+0x1cf/0x460
[  473.604066][ T8699]  ? tomoyo_check_path_number_acl+0x280/0x280
[  473.610130][ T8699]  ? __asan_memset+0x22/0x40
[  473.614720][ T8699]  ? __rwlock_init+0x150/0x150
[  473.619473][ T8699]  ? tomoyo_file_open+0xed/0x180
[  473.624395][ T8699]  security_file_open+0x62/0xa0
[  473.629295][ T8699]  do_dentry_open+0x32b/0x14b0
[  473.634049][ T8699]  ? __asan_memcpy+0x40/0x70
[  473.638630][ T8699]  path_openat+0x284f/0x3270
[  473.643232][ T8699]  ? do_sys_openat2+0xda/0x1d0
[  473.648065][ T8699]  ? __x64_sys_openat+0x139/0x160
[  473.653185][ T8699]  ? verify_lock_unused+0x140/0x140
[  473.658388][ T8699]  ? do_filp_open+0x430/0x430
[  473.663080][ T8699]  do_filp_open+0x1f2/0x430
[  473.667574][ T8699]  ? vfs_tmpfile+0x620/0x620
[  473.672161][ T8699]  ? _raw_spin_unlock+0x28/0x40
[  473.677084][ T8699]  ? alloc_fd+0x590/0x640
[  473.681403][ T8699]  do_sys_openat2+0x134/0x1d0
[  473.686069][ T8699]  ? do_sys_open+0xe0/0xe0
[  473.690472][ T8699]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  473.696441][ T8699]  ? lock_chain_count+0x20/0x20
[  473.701278][ T8699]  ? lock_chain_count+0x20/0x20
[  473.706128][ T8699]  __x64_sys_openat+0x139/0x160
[  473.710975][ T8699]  do_syscall_64+0x55/0xb0
[  473.715401][ T8699]  ? clear_bhb_loop+0x40/0x90
[  473.720071][ T8699]  ? clear_bhb_loop+0x40/0x90
[  473.724749][ T8699]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  473.730630][ T8699] RIP: 0033:0x7f054e75e98e
[  473.735050][ T8699] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  473.754648][ T8699] RSP: 002b:00007f054f6b1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  473.763059][ T8699] RAX: ffffffffffffffda RBX: 00007f054f6b26c0 RCX: 00007f054e75e98e
[  473.771020][ T8699] RDX: 0000000000000000 RSI: 00007f054f6b1c00 RDI: ffffffffffffff9c
[  473.778989][ T8699] RBP: 00007f054f6b1c00 R08: 0000000000000000 R09: 0000000000000000
[  473.786946][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  473.794918][ T8699] R13: 00007f054ea26038 R14: 00007f054ea25fa0 R15: 00007ffc602ce7a8
[  473.802883][ T8699]  </TASK>
[  473.816598][ T8595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  473.836648][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_1
[  473.843611][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.893490][ T8595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.032516][ T8595] hsr_slave_0: entered promiscuous mode
[  474.065708][ T8595] hsr_slave_1: entered promiscuous mode
[  474.269278][ T8699] ERROR: Out of memory at tomoyo_realpath_from_path.
[  474.575128][ T8595] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  474.607469][ T8595] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  474.651704][ T8595] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  474.689785][ T8595] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  474.979952][ T8595] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.928473][ T8595] 8021q: adding VLAN 0 to HW filter on device team0
[  476.009666][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.016826][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.025995][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.033077][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.153134][ T8595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  476.696945][ T8595] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.119350][ T8758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  478.214517][ T8595] veth0_vlan: entered promiscuous mode
[  478.288554][ T8595] veth1_vlan: entered promiscuous mode
[  478.386692][ T8595] veth0_macvtap: entered promiscuous mode
[  478.438664][ T8595] veth1_macvtap: entered promiscuous mode
[  478.484153][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  478.521485][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.554425][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  478.595261][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.617017][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  478.652907][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.700429][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_0
[  478.756144][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.797805][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.838451][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.874359][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.907616][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.941687][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.974695][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_1
[  479.017348][ T8595] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.049771][ T8595] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.075128][ T8595] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.100714][ T8595] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.109685][  T175] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  479.253606][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.284753][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.307593][  T175] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  479.361080][  T175] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  479.399748][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.429435][  T175] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 168, changing to 11
[  479.454101][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.501788][  T175] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  479.546109][  T175] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.592787][  T175] usb 7-1: Product: syz
[  479.610656][  T175] usb 7-1: Manufacturer: syz
[  479.635121][  T175] usb 7-1: SerialNumber: syz
[  479.681939][ T8782] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  479.741733][ T8782] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  479.810316][  T175] oti6858 7-1:1.0: oti6858 converter detected
[  479.898833][  T175] usb 7-1: oti6858 converter now attached to ttyUSB0
[  481.135352][  T175] usb 7-1: USB disconnect, device number 3
[  481.195436][  T175] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  481.203849][  T175] oti6858 7-1:1.0: device disconnected
[  483.091412][ T8833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  485.080620][ T8863] loop4: detected capacity change from 0 to 512
[  485.294336][ T8863] EXT4-fs (loop4): orphan cleanup on readonly fs
[  485.425532][ T8863] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  485.585369][ T8863] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  485.675592][ T8863] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.589: Failed to acquire dquot type 1
[  485.856181][ T8863] EXT4-fs (loop4): 1 truncate cleaned up
[  485.862605][ T8863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  487.073477][ T8863] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  487.213819][ T8863] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8
[  487.500374][ T8893] loop3: detected capacity change from 0 to 1024
[  487.516787][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.576205][ T8893] EXT4-fs: Ignoring removed oldalloc option
[  487.735811][ T8893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.898199][ T8893] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  489.050264][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  490.908465][ T8938] Bluetooth: MGMT ver 1.22
[  491.315549][ T5883] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  491.507164][ T5883] usb 8-1: Using ep0 maxpacket: 16
[  491.528517][ T5883] usb 8-1: config 0 has an invalid interface number: 98 but max is 0
[  491.547026][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  491.574468][ T5883] usb 8-1: config 0 has no interface number 0
[  491.592986][ T5883] usb 8-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  491.630669][ T5883] usb 8-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  491.668956][ T5883] usb 8-1: config 0 interface 98 has no altsetting 0
[  491.698187][ T5883] usb 8-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  491.717392][   T28] audit: type=1326 audit(1788698778.492:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.4.599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f054e79e159 code=0x0
[  491.743306][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.760292][ T5883] usb 8-1: Product: syz
[  491.767208][ T5883] usb 8-1: Manufacturer: syz
[  491.774000][ T5883] usb 8-1: SerialNumber: syz
[  491.791495][ T5883] usb 8-1: config 0 descriptor??
[  491.803488][ T8942] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  491.812129][ T8942] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  492.032996][ T8942] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  492.066259][ T8942] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  493.936354][ T5883] asix 8-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  493.998637][ T5883] asix: probe of 8-1:0.98 failed with error -71
[  494.071854][ T5883] usb 8-1: USB disconnect, device number 2
[  494.894564][ T8993] loop3: detected capacity change from 0 to 164
[  496.556100][ T9009] loop6: detected capacity change from 0 to 512
[  496.598385][ T9009] EXT4-fs: Ignoring removed oldalloc option
[  496.655465][ T9009] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  496.748223][ T9009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.826552][ T9009] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  497.006825][ T7708] EXT4-fs error (device loop6): ext4_lookup:1855: inode #11: comm syz-executor: '	' linked to parent dir
[  497.091817][ T7708] EXT4-fs error (device loop6): ext4_lookup:1855: inode #11: comm syz-executor: '	' linked to parent dir
[  498.218303][ T9030] binder: 9029:9030 ioctl 4018620d 0 returned -22
[  498.421342][ T7708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.431058][ T9036] loop7: detected capacity change from 0 to 256
[  498.468287][ T9036] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  498.588005][   T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.929131][   T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.236525][   T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.534748][   T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.167165][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  501.178798][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  501.186574][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  501.194284][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  501.203941][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  501.211385][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  501.602436][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  501.822507][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  502.492308][ T9095] loop3: detected capacity change from 0 to 2048
[  503.282688][   T51] Bluetooth: hci2: command tx timeout
[  503.417358][ T9095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  503.540127][ T9072] chnl_net:caif_netlink_parms(): no params data found
[  503.889760][   T28] audit: type=1800 audit(1788698790.652:24): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.645" name="file1" dev="loop3" ino=1415 res=0 errno=0
[  504.949364][   T11] hsr_slave_0: left promiscuous mode
[  504.988785][   T11] hsr_slave_1: left promiscuous mode
[  505.045659][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  505.053711][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  505.156118][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  505.163563][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  505.253307][   T11] bridge_slave_1: left allmulticast mode
[  505.283629][   T11] bridge_slave_1: left promiscuous mode
[  505.325447][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.358784][   T51] Bluetooth: hci2: command tx timeout
[  505.440623][   T11] bridge_slave_0: left allmulticast mode
[  505.455035][   T11] bridge_slave_0: left promiscuous mode
[  505.506951][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.728113][   T11] veth1_macvtap: left promiscuous mode
[  505.765162][   T11] veth0_macvtap: left promiscuous mode
[  505.806694][   T11] veth1_vlan: left promiscuous mode
[  505.812012][   T11] veth0_vlan: left promiscuous mode
[  506.922399][   T11] team0 (unregistering): Port device team_slave_1 removed
[  506.968101][   T11] team0 (unregistering): Port device team_slave_0 removed
[  507.014889][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.863677][   T51] Bluetooth: hci2: command tx timeout
[  507.883833][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.559198][   T11] bond0 (unregistering): Released all slaves
[  509.803906][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.849886][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.886059][ T9072] bridge_slave_0: entered allmulticast mode
[  509.893127][ T9072] bridge_slave_0: entered promiscuous mode
[  509.919695][   T51] Bluetooth: hci2: command tx timeout
[  509.963633][ T9072] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.998186][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.031447][ T9072] bridge_slave_1: entered allmulticast mode
[  510.054915][ T9072] bridge_slave_1: entered promiscuous mode
[  510.162253][ T9072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.239028][ T9072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.388529][ T9072] team0: Port device team_slave_0 added
[  510.460596][ T9072] team0: Port device team_slave_1 added
[  510.597581][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  510.604734][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.769703][ T9072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.843613][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  511.482518][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.635397][ T9072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  511.653010][ T9177] loop4: detected capacity change from 0 to 2048
[  511.709803][ T9177] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  511.748396][ T9177] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  511.843053][ T9177] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  511.887283][ T9072] hsr_slave_0: entered promiscuous mode
[  511.936147][ T9072] hsr_slave_1: entered promiscuous mode
[  512.026006][ T9072] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  512.033589][ T9072] Cannot create hsr debugfs directory
[  512.206117][ T9185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  512.222574][ T9185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  512.230887][ T9185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  512.243340][ T9185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  512.253060][ T9185] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  512.260500][ T9185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  512.392118][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.609703][ T9188] loop4: detected capacity change from 0 to 164
[  512.721523][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.803296][ T9200] loop4: detected capacity change from 0 to 1024
[  513.865899][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.069035][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.085357][ T9185] Bluetooth: hci1: command tx timeout
[  515.459891][ T9072] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  515.522780][ T9072] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  515.572018][ T9180] chnl_net:caif_netlink_parms(): no params data found
[  515.630420][ T9072] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  515.672927][ T9072] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  517.119003][ T9185] Bluetooth: hci1: command tx timeout
[  517.431680][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.266303][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.273483][ T9180] bridge_slave_0: entered allmulticast mode
[  518.386752][ T9180] bridge_slave_0: entered promiscuous mode
[  518.656090][ T9072] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.678118][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.725494][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.732676][ T9180] bridge_slave_1: entered allmulticast mode
[  518.826210][ T9180] bridge_slave_1: entered promiscuous mode
[  519.445621][ T9185] Bluetooth: hci1: command tx timeout
[  519.793026][ T9072] 8021q: adding VLAN 0 to HW filter on device team0
[  519.844256][ T9180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.899387][ T9180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.039525][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.046675][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state
[  520.113485][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.120634][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state
[  520.198939][ T9253] loop4: detected capacity change from 0 to 512
[  520.252661][ T9253] EXT4-fs: Ignoring removed i_version option
[  520.313037][ T9253] EXT4-fs: Ignoring removed bh option
[  520.412886][ T9253] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.670: inode #13: comm syz.4.670: iget: illegal inode #
[  520.449289][ T9072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  520.475660][ T9253] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.670: couldn't read orphan inode 13 (err -117)
[  520.518209][ T9180] team0: Port device team_slave_0 added
[  520.564848][ T9253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.607777][ T9180] team0: Port device team_slave_1 added
[  521.515532][ T9185] Bluetooth: hci1: command tx timeout
[  521.663786][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.895698][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.902665][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.105536][ T9180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.194803][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.225207][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.370598][ T9180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.543604][ T9072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  523.388879][ T9180] hsr_slave_0: entered promiscuous mode
[  523.443989][ T9180] hsr_slave_1: entered promiscuous mode
[  523.515459][ T9180] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  523.523076][ T9180] Cannot create hsr debugfs directory
[  523.682386][   T11] hsr_slave_0: left promiscuous mode
[  523.762755][   T11] hsr_slave_1: left promiscuous mode
[  523.784231][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  523.815664][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  523.844475][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  523.864506][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.883512][   T11] bridge_slave_1: left allmulticast mode
[  523.898144][   T11] bridge_slave_1: left promiscuous mode
[  523.913974][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.934269][   T11] bridge_slave_0: left allmulticast mode
[  523.949882][   T11] bridge_slave_0: left promiscuous mode
[  523.967847][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.003710][   T11] veth1_macvtap: left promiscuous mode
[  524.032342][   T11] veth0_macvtap: left promiscuous mode
[  524.056149][   T11] veth1_vlan: left promiscuous mode
[  524.071960][   T11] veth0_vlan: left promiscuous mode
[  526.887239][ T9325] loop4: detected capacity change from 0 to 128
[  526.951010][ T9325] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  527.013267][ T9325] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  527.156714][ T9325] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.683: Invalid inode table block 8700909665223251601 in block_group 0
[  527.194798][ T7722] udevd[7722]: incorrect ext4 checksum on /dev/loop4
[  527.220697][ T9325] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  527.280587][ T7665] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm kworker/u4:7: Invalid inode table block 8700909665223251601 in block_group 0
[  527.343727][ T5911] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  527.512997][   T11] team0 (unregistering): Port device team_slave_1 removed
[  528.202917][   T11] team0 (unregistering): Port device team_slave_0 removed
[  528.290155][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  528.388537][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  528.712716][ T9336] FAULT_INJECTION: forcing a failure.
[  528.712716][ T9336] name failslab, interval 1, probability 0, space 0, times 0
[  528.737421][ T9336] CPU: 0 PID: 9336 Comm: syz.4.685 Not tainted syzkaller #0
[  528.744738][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  528.754810][ T9336] Call Trace:
[  528.758082][ T9336]  <TASK>
[  528.761038][ T9336]  dump_stack_lvl+0x18c/0x250
[  528.765735][ T9336]  ? show_regs_print_info+0x20/0x20
[  528.771034][ T9336]  ? load_image+0x420/0x420
[  528.775530][ T9336]  ? __might_sleep+0xe0/0xe0
[  528.780137][ T9336]  ? __lock_acquire+0x7d80/0x7d80
[  528.785150][ T9336]  ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0
[  528.791832][ T9336]  should_fail_ex+0x394/0x4c0
[  528.796505][ T9336]  should_failslab+0x9/0x20
[  528.800994][ T9336]  slab_pre_alloc_hook+0x59/0x300
[  528.806019][ T9336]  ? pcpu_alloc+0x11e7/0x1880
[  528.810691][ T9336]  ? percpu_ref_init+0xc3/0x340
[  528.815527][ T9336]  __kmem_cache_alloc_node+0x53/0x250
[  528.820891][ T9336]  ? percpu_ref_init+0xc3/0x340
[  528.825725][ T9336]  ? io_allocate_scq_urings+0x620/0x620
[  528.831288][ T9336]  kmalloc_trace+0x2a/0xe0
[  528.835696][ T9336]  percpu_ref_init+0xc3/0x340
[  528.840360][ T9336]  io_ring_ctx_alloc+0x205/0xc10
[  528.845295][ T9336]  io_uring_create+0x2df/0x1330
[  528.850140][ T9336]  ? __might_fault+0xc6/0x120
[  528.854801][ T9336]  ? __might_fault+0xaa/0x120
[  528.859469][ T9336]  __se_sys_io_uring_setup+0x29f/0x2b0
[  528.864957][ T9336]  ? __x64_sys_io_uring_setup+0x60/0x60
[  528.870500][ T9336]  ? lockdep_hardirqs_on+0x98/0x150
[  528.875689][ T9336]  do_syscall_64+0x55/0xb0
[  528.880094][ T9336]  ? clear_bhb_loop+0x40/0x90
[  528.884757][ T9336]  ? clear_bhb_loop+0x40/0x90
[  528.889418][ T9336]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  528.895295][ T9336] RIP: 0033:0x7f054e79e159
[  528.899695][ T9336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.919295][ T9336] RSP: 002b:00007f054f6b1fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  528.927779][ T9336] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f054e79e159
[  528.935758][ T9336] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000530f
[  528.943719][ T9336] RBP: 00007f054e835024 R08: 0000000000000000 R09: 0000000000000000
[  528.951676][ T9336] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  528.959631][ T9336] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc602ce7a8
[  528.967597][ T9336]  </TASK>
[  529.219900][   T11] bond0 (unregistering): Released all slaves
[  530.841607][ T9180] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  530.931055][ T9180] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  530.995857][ T9180] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  531.035141][ T9072] veth0_vlan: entered promiscuous mode
[  531.099524][ T9072] veth1_vlan: entered promiscuous mode
[  531.156306][ T9180] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  531.958019][ T9072] veth0_macvtap: entered promiscuous mode
[  532.038562][ T9180] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.081004][ T9072] veth1_macvtap: entered promiscuous mode
[  532.122635][ T9180] 8021q: adding VLAN 0 to HW filter on device team0
[  532.183877][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.245604][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.318876][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.360798][ T9371] loop4: detected capacity change from 0 to 2048
[  532.375534][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.420168][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  532.442395][ T9371] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  532.523620][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.530790][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.618010][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.625131][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.731854][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.765851][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.801698][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.820079][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.847618][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.928306][ T9072] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.990121][ T9072] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.043444][ T9072] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.069367][ T9072] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  534.235125][ T9390] loop4: detected capacity change from 0 to 128
[  534.280200][ T9180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.305829][ T9390] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  534.361789][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  534.418593][   T28] audit: type=1800 audit(1788698821.172:25): pid=9390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.696" name="file1" dev="loop4" ino=94 res=0 errno=0
[  534.456696][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.476370][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  534.484208][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.519003][ T9394] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  534.628016][ T9394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.696'.
[  534.686607][ T9390] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  535.297935][ T9180] veth0_vlan: entered promiscuous mode
[  535.961539][ T9180] veth1_vlan: entered promiscuous mode
[  536.122046][ T9180] veth0_macvtap: entered promiscuous mode
[  536.154136][ T9180] veth1_macvtap: entered promiscuous mode
[  536.980825][ T9420] loop8: detected capacity change from 0 to 1024
[  536.988025][ T9420] hfsplus: unable to find HFS+ superblock
[  537.176690][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.267178][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.335396][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.389497][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.438034][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.477107][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.548785][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.620297][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  537.705324][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.772361][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  537.825300][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.875460][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  537.925297][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.968516][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.037641][ T9180] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.098232][ T9180] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.158243][ T9180] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.852799][ T9180] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  539.147109][ T7665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.154978][ T7665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.331786][ T7665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.369030][ T7665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.535527][ T5883] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  539.737910][ T5883] usb 9-1: device descriptor read/64, error -71
[  540.575368][ T5883] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  540.726528][ T9467] FAULT_INJECTION: forcing a failure.
[  540.726528][ T9467] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  540.768991][ T5883] usb 9-1: device descriptor read/64, error -71
[  540.798815][ T9467] CPU: 0 PID: 9467 Comm: syz.9.709 Not tainted syzkaller #0
[  540.806137][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  540.816199][ T9467] Call Trace:
[  540.819473][ T9467]  <TASK>
[  540.822395][ T9467]  dump_stack_lvl+0x18c/0x250
[  540.827157][ T9467]  ? show_regs_print_info+0x20/0x20
[  540.832344][ T9467]  ? load_image+0x420/0x420
[  540.836832][ T9467]  ? __lock_acquire+0x7d80/0x7d80
[  540.841844][ T9467]  should_fail_ex+0x394/0x4c0
[  540.846512][ T9467]  prepare_alloc_pages+0x1e1/0x5b0
[  540.851613][ T9467]  __alloc_pages+0x134/0x460
[  540.856184][ T9467]  ? zone_statistics+0x170/0x170
[  540.861109][ T9467]  ? __asan_memset+0x22/0x40
[  540.865686][ T9467]  ? lockdep_init_map_type+0x9c/0x8e0
[  540.871045][ T9467]  ? lockdep_softirqs_off+0x440/0x440
[  540.876401][ T9467]  __kmalloc_large_node+0x8c/0x1f0
[  540.881505][ T9467]  ? io_alloc_hash_table+0x2d/0xb0
[  540.886601][ T9467]  __kmalloc+0x114/0x240
[  540.890828][ T9467]  io_alloc_hash_table+0x2d/0xb0
[  540.895752][ T9467]  io_ring_ctx_alloc+0x132/0xc10
[  540.900681][ T9467]  io_uring_create+0x2df/0x1330
[  540.905516][ T9467]  ? __might_fault+0xc6/0x120
[  540.910174][ T9467]  ? __might_fault+0xaa/0x120
[  540.914837][ T9467]  __se_sys_io_uring_setup+0x29f/0x2b0
[  540.920286][ T9467]  ? __x64_sys_io_uring_setup+0x60/0x60
[  540.925823][ T9467]  ? lockdep_hardirqs_on+0x98/0x150
[  540.931011][ T9467]  do_syscall_64+0x55/0xb0
[  540.935433][ T9467]  ? clear_bhb_loop+0x40/0x90
[  540.940098][ T9467]  ? clear_bhb_loop+0x40/0x90
[  540.944759][ T9467]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  540.950636][ T9467] RIP: 0033:0x7fee2e19e159
[  540.955034][ T9467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.974633][ T9467] RSP: 002b:00007fee2c3f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  540.983034][ T9467] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007fee2e19e159
[  540.990996][ T9467] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000530f
[  540.998957][ T9467] RBP: 00007fee2e235024 R08: 0000000000000000 R09: 0000000000000000
[  541.006913][ T9467] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  541.014867][ T9467] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff5a74618
[  541.022827][ T9467]  </TASK>
[  541.195677][ T5883] usb usb9-port1: attempt power cycle
[  543.197141][ T5883] usb usb9-port1: Cannot enable. Maybe the USB cable is bad?
[  543.355862][ T5883] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  543.438973][ T5883] usb 9-1: Using ep0 maxpacket: 16
[  543.450894][ T5883] usb 9-1: config 0 has an invalid interface number: 34 but max is 0
[  543.504284][ T5883] usb 9-1: config 0 has no interface number 0
[  543.547578][ T5883] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  543.599305][ T5883] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  543.646368][ T9491] loop9: detected capacity change from 0 to 2048
[  543.684746][ T5883] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  543.705464][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.713493][ T5883] usb 9-1: Product: syz
[  543.752357][ T9491] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  543.797131][ T9491] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  543.828573][ T5883] usb 9-1: Manufacturer: syz
[  543.833221][ T5883] usb 9-1: SerialNumber: syz
[  543.859943][ T9491] UDF-fs: Scanning with blocksize 512 failed
[  543.908014][ T5883] usb 9-1: config 0 descriptor??
[  543.946991][ T9491] UDF-fs: warning (device loop9): udf_fill_super: No fileset found
[  543.958075][ T9481] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  543.966481][ T9481] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  544.240470][ T9481] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  544.256879][ T9481] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  544.511091][ T5883] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  547.095766][ T5883] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  547.143630][ T5883] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  547.215733][ T5883] asix: probe of 9-1:0.34 failed with error -71
[  547.288644][ T5883] usb 9-1: USB disconnect, device number 5
[  548.123151][ T9538] loop9: detected capacity change from 0 to 2048
[  548.193362][ T9540] loop8: detected capacity change from 0 to 512
[  548.233233][ T9538] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  548.261148][ T9540] EXT4-fs: Ignoring removed i_version option
[  548.308397][ T9540] EXT4-fs: Ignoring removed oldalloc option
[  548.314349][ T9540] ext4: Unknown parameter 'smackfsdef'
[  550.384318][ T9185] Bluetooth: hci2: link tx timeout
[  550.390807][ T9185] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  550.621764][ T9561] loop9: detected capacity change from 0 to 164
[  551.023035][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.730'.
[  551.207916][ T9580] loop9: detected capacity change from 0 to 256
[  551.311392][ T9580] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  552.168566][ T9583] loop8: detected capacity change from 0 to 1024
[  552.316042][ T9583] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  552.452726][ T9583] EXT4-fs error (device loop8): ext4_empty_dir:3166: inode #11: block 623: comm syz.8.733: Attempting to read directory block (623) that is past i_size (638464)
[  552.488669][ T9185] Bluetooth: hci2: command 0x0406 tx timeout
[  552.726123][ T9072] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.902285][ T9630] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  558.437622][ T9646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  559.063235][ T9663] kvm: kvm [9661]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  559.978571][ T9668] loop8: detected capacity change from 0 to 164
[  560.657428][ T9683] loop8: detected capacity change from 0 to 128
[  560.690582][ T9683] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  560.706455][ T9683] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  561.528705][ T9072] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  563.664904][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  563.685784][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  564.389157][ T9729] loop8: detected capacity change from 0 to 512
[  564.460753][ T9729] EXT4-fs (loop8): invalid journal inode
[  564.517353][ T9729] EXT4-fs (loop8): can't get journal size
[  564.588667][ T9729] EXT4-fs (loop8): 1 truncate cleaned up
[  564.595042][ T9729] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.836803][ T9729] loop8: detected capacity change from 512 to 0
[  564.865751][ T9738] syz.8.771: attempt to access beyond end of device
[  564.865751][ T9738] loop8: rw=524288, sector=12, nr_sectors = 2 limit=0
[  564.932218][ T9738] syz.8.771: attempt to access beyond end of device
[  564.932218][ T9738] loop8: rw=524288, sector=14, nr_sectors = 2 limit=0
[  565.017069][ T9738] syz.8.771: attempt to access beyond end of device
[  565.017069][ T9738] loop8: rw=524288, sector=16, nr_sectors = 2 limit=0
[  565.079634][ T9738] syz.8.771: attempt to access beyond end of device
[  565.079634][ T9738] loop8: rw=524288, sector=20, nr_sectors = 2 limit=0
[  565.144011][ T9738] syz.8.771: attempt to access beyond end of device
[  565.144011][ T9738] loop8: rw=524288, sector=22, nr_sectors = 2 limit=0
[  565.220124][ T9738] syz.8.771: attempt to access beyond end of device
[  565.220124][ T9738] loop8: rw=524288, sector=24, nr_sectors = 2 limit=0
[  565.304956][ T9738] syz.8.771: attempt to access beyond end of device
[  565.304956][ T9738] loop8: rw=524288, sector=26, nr_sectors = 2 limit=0
[  565.372515][ T9738] syz.8.771: attempt to access beyond end of device
[  565.372515][ T9738] loop8: rw=12288, sector=18, nr_sectors = 2 limit=0
[  566.598120][ T9738] EXT4-fs error (device loop8): ext4_get_inode_loc:4635: inode #18: block 9: comm syz.8.771: unable to read itable block
[  566.660608][ T9738] syz.8.771: attempt to access beyond end of device
[  566.660608][ T9738] loop8: rw=145409, sector=2, nr_sectors = 2 limit=0
[  566.689453][ T9743] kvm: kvm [9742]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  566.746079][ T9738] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  566.754361][ T9738] EXT4-fs (loop8): I/O error while writing superblock
[  566.777979][ T9749] loop4: detected capacity change from 0 to 164
[  566.853108][ T9738] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: IO failure
[  566.908813][ T9738] syz.8.771: attempt to access beyond end of device
[  566.908813][ T9738] loop8: rw=145409, sector=2, nr_sectors = 2 limit=0
[  566.977408][ T9738] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  567.031664][ T9738] EXT4-fs (loop8): I/O error while writing superblock
[  567.105376][ T9738] EXT4-fs error (device loop8): ext4_dirty_inode:6144: inode #18: comm syz.8.771: mark_inode_dirty error
[  567.117206][ T9734] EXT4-fs error (device loop8): ext4_check_bdev_write_error:225: comm ext4lazyinit: Error while async write back metadata
[  567.191429][ T9738] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  567.254546][ T9734] EXT4-fs (loop8): previous I/O error to superblock detected
[  567.282134][ T9734] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  567.360407][ T9738] EXT4-fs (loop8): I/O error while writing superblock
[  567.385447][ T9734] EXT4-fs (loop8): I/O error while writing superblock
[  567.469578][ T9072] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  567.566021][ T9072] EXT4-fs error (device loop8): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata
[  567.674211][ T9072] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  567.720271][ T9072] EXT4-fs (loop8): I/O error while writing superblock
[  567.846066][ T3470] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4620: inode #18: block 9: comm kworker/u4:11: unable to read itable block
[  567.937534][ T3470] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  568.877885][ T3470] EXT4-fs (loop8): I/O error while writing superblock
[  568.918809][ T9072] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.009686][ T9072] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  569.075394][ T9072] EXT4-fs (loop8): I/O error while writing superblock
[  570.729875][ T3470] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.121249][ T3470] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.486726][ T3470] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.686503][ T9807] FAULT_INJECTION: forcing a failure.
[  571.686503][ T9807] name failslab, interval 1, probability 0, space 0, times 0
[  571.717189][ T3470] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.777662][ T9807] CPU: 0 PID: 9807 Comm: syz.4.792 Not tainted syzkaller #0
[  571.785000][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  571.795043][ T9807] Call Trace:
[  571.798311][ T9807]  <TASK>
[  571.801230][ T9807]  dump_stack_lvl+0x18c/0x250
[  571.805900][ T9807]  ? show_regs_print_info+0x20/0x20
[  571.811108][ T9807]  ? load_image+0x420/0x420
[  571.815596][ T9807]  ? __might_sleep+0xe0/0xe0
[  571.820174][ T9807]  ? __lock_acquire+0x7d80/0x7d80
[  571.825187][ T9807]  ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0
[  571.831851][ T9807]  should_fail_ex+0x394/0x4c0
[  571.836521][ T9807]  should_failslab+0x9/0x20
[  571.841012][ T9807]  slab_pre_alloc_hook+0x59/0x300
[  571.846048][ T9807]  ? pcpu_alloc+0x11e7/0x1880
[  571.850712][ T9807]  ? percpu_ref_init+0xc3/0x340
[  571.855546][ T9807]  __kmem_cache_alloc_node+0x53/0x250
[  571.860910][ T9807]  ? percpu_ref_init+0xc3/0x340
[  571.865742][ T9807]  ? io_allocate_scq_urings+0x620/0x620
[  571.871275][ T9807]  kmalloc_trace+0x2a/0xe0
[  571.875683][ T9807]  percpu_ref_init+0xc3/0x340
[  571.880344][ T9807]  io_ring_ctx_alloc+0x205/0xc10
[  571.885271][ T9807]  io_uring_create+0x2df/0x1330
[  571.890110][ T9807]  ? __might_fault+0xc6/0x120
[  571.894769][ T9807]  ? __might_fault+0xaa/0x120
[  571.899439][ T9807]  __se_sys_io_uring_setup+0x29f/0x2b0
[  571.904893][ T9807]  ? __x64_sys_io_uring_setup+0x60/0x60
[  571.910433][ T9807]  ? lockdep_hardirqs_on+0x98/0x150
[  571.915620][ T9807]  do_syscall_64+0x55/0xb0
[  571.920019][ T9807]  ? clear_bhb_loop+0x40/0x90
[  571.924680][ T9807]  ? clear_bhb_loop+0x40/0x90
[  571.929360][ T9807]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  571.935336][ T9807] RIP: 0033:0x7f054e79e159
[  571.939736][ T9807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  571.959345][ T9807] RSP: 002b:00007f054f6b1fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  571.967755][ T9807] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f054e79e159
[  571.975710][ T9807] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000530f
[  571.983672][ T9807] RBP: 00007f054e835024 R08: 0000000000000000 R09: 0000000000000000
[  571.991623][ T9807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  571.999577][ T9807] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc602ce7a8
[  572.007541][ T9807]  </TASK>
[  572.318395][ T9185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  572.395577][ T9185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  573.254593][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  573.283056][ T9814] loop9: detected capacity change from 0 to 164
[  573.412826][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  573.518300][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  573.585451][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  573.987330][ T9833] loop9: detected capacity change from 0 to 128
[  574.172220][ T9833] bio_check_eod: 16 callbacks suppressed
[  574.172256][ T9833] syz.9.797: attempt to access beyond end of device
[  574.172256][ T9833] loop9: rw=2049, sector=145, nr_sectors = 73 limit=128
[  574.258580][ T9837] netlink: 'syz.4.798': attribute type 6 has an invalid length.
[  574.286256][ T9837] netlink: 'syz.4.798': attribute type 7 has an invalid length.
[  574.324858][ T9837] netlink: 'syz.4.798': attribute type 8 has an invalid length.
[  574.591710][ T9845] loop4: detected capacity change from 0 to 512
[  574.598797][ T9845] EXT4-fs: Ignoring removed orlov option
[  574.660946][ T9845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  574.673595][ T9845] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  575.787237][ T5785] Bluetooth: hci2: command tx timeout
[  575.874603][ T9811] chnl_net:caif_netlink_parms(): no params data found
[  577.835471][ T5785] Bluetooth: hci2: command tx timeout
[  577.969247][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  578.239215][ T9811] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.279645][ T9811] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.308703][ T9811] bridge_slave_0: entered allmulticast mode
[  578.341431][ T9811] bridge_slave_0: entered promiscuous mode
[  578.416810][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.423919][ T9811] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.450335][ T9875] loop4: detected capacity change from 0 to 164
[  578.526285][ T9811] bridge_slave_1: entered allmulticast mode
[  578.532983][ T9811] bridge_slave_1: entered promiscuous mode
[  578.556804][ T9879] fuse: Bad value for 'fd'
[  579.660705][ T3470] hsr_slave_0: left promiscuous mode
[  580.540405][ T5785] Bluetooth: hci2: command tx timeout
[  580.603642][ T3470] hsr_slave_1: left promiscuous mode
[  580.699889][   T28] audit: type=1326 audit(1788698867.472:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9892 comm="syz.4.807" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f054e79e159 code=0x0
[  580.748735][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  580.795507][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0
[  580.883650][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  580.924570][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.981761][ T3470] bridge_slave_1: left allmulticast mode
[  581.024513][ T3470] bridge_slave_1: left promiscuous mode
[  581.070181][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.168359][ T3470] bridge_slave_0: left allmulticast mode
[  581.190355][ T3470] bridge_slave_0: left promiscuous mode
[  581.210897][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.298648][ T3470] veth1_macvtap: left promiscuous mode
[  581.317478][ T3470] veth0_macvtap: left promiscuous mode
[  581.324224][ T3470] veth1_vlan: left promiscuous mode
[  581.343207][ T3470] veth0_vlan: left promiscuous mode
[  582.556352][ T5785] Bluetooth: hci2: command tx timeout
[  583.428330][ T3470] team0 (unregistering): Port device team_slave_1 removed
[  583.517958][ T3470] team0 (unregistering): Port device team_slave_0 removed
[  583.614555][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  584.285459][ T9910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  584.352637][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  584.674669][ T3470] bond0 (unregistering): Released all slaves
[  584.834495][ T9811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.917193][ T9811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  585.033404][ T9917] loop4: detected capacity change from 0 to 1024
[  585.089290][ T9811] team0: Port device team_slave_0 added
[  585.118857][ T9917] EXT4-fs: Ignoring removed bh option
[  585.166908][ T9811] team0: Port device team_slave_1 added
[  585.238194][ T9917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  585.387829][ T9917] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  585.463280][ T9811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  585.499712][ T9811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.609824][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.635315][ T9811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.727140][ T9811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.734114][ T9811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.946091][ T9811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  587.118242][ T9811] hsr_slave_0: entered promiscuous mode
[  587.157827][ T9811] hsr_slave_1: entered promiscuous mode
[  587.207932][ T9811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  587.245443][ T9811] Cannot create hsr debugfs directory
[  587.554995][ T9939] 9pnet_fd: Insufficient options for proto=fd
[  589.541074][ T9958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.806497][ T9976] unsupported nlmsg_type 40
[  590.407362][ T9811] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  590.529554][ T9811] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  590.646610][ T9811] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  590.710308][ T9811] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  590.718207][ T9995] loop4: detected capacity change from 0 to 512
[  590.766041][ T9995] EXT4-fs: Ignoring removed i_version option
[  590.829369][ T9995] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  590.894465][ T9995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  590.951142][ T9995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  591.032619][ T9811] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.052865][ T9995] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  591.103953][ T9811] 8021q: adding VLAN 0 to HW filter on device team0
[  591.207810][ T9860] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.214943][ T9860] bridge0: port 1(bridge_slave_0) entered forwarding state
[  591.278273][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.299885][ T9860] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.307062][ T9860] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.359066][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  592.942718][ T9811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  593.094450][ T9811] veth0_vlan: entered promiscuous mode
[  593.180433][ T9811] veth1_vlan: entered promiscuous mode
[  593.303688][ T9811] veth0_macvtap: entered promiscuous mode
[  593.344243][ T9811] veth1_macvtap: entered promiscuous mode
[  593.526875][ T9811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.557133][ T9811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.592685][ T9811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.639218][ T9811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.674544][ T9811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.713190][ T9811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.760601][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.809491][ T9811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.854499][ T9811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.878767][ T9811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.903202][ T9811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.931331][ T9811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.944741][T10020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.961239][ T9811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.986267][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  594.042204][ T9811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  594.096065][ T9811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  594.104862][ T9811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  594.156414][ T9811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  594.646125][  T175] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  594.825474][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.856333][  T175] usb 5-1: not running at top speed; connect to a high speed hub
[  594.869639][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.886494][  T175] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  594.932831][  T175] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12592, setting to 64
[  594.991851][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.005350][  T175] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  595.052893][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.955557][  T175] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  595.964618][  T175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.051207][T10045] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  596.083882][  T175] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  596.119391][  T175] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  596.172023][  T175] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[  596.250740][  T175] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  596.316776][  T175] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  597.799561][ T5765] usb 5-1: USB disconnect, device number 7
[  597.875862][ T5765] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  597.952086][ T5765] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  598.013717][ T5765] keyspan 5-1:1.0: device disconnected
[  600.722240][T10072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  602.048206][T10129] loop2: detected capacity change from 0 to 512
[  602.087338][T10129] EXT4-fs: Ignoring removed i_version option
[  602.136501][T10129] EXT4-fs: Ignoring removed oldalloc option
[  602.162098][T10129] ext4: Unknown parameter 'smackfsdef'
[  604.944017][T10167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  605.913396][   T28] audit: type=1326 audit(1788698892.682:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f054e79e159 code=0x0
[  606.501105][T10182] fuse: Bad value for 'fd'
[  607.495534][ T5765] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  608.424593][ T5765] usb 3-1: Using ep0 maxpacket: 32
[  608.453339][ T5765] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  608.512996][ T5765] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  608.574856][ T5765] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  608.617864][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.660774][ T5765] usb 3-1: Product: syz
[  608.664991][ T5765] usb 3-1: Manufacturer: syz
[  608.722489][ T5765] usb 3-1: SerialNumber: syz
[  609.517763][T10234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  609.745366][ T5765] cdc_ncm 3-1:1.0: bind() failure
[  609.752565][ T5765] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  609.853839][ T5765] cdc_ncm 3-1:1.1: bind() failure
[  609.915483][ T5765] usb 3-1: USB disconnect, device number 2
[  610.378257][T10252] fuse: Bad value for 'fd'
[  610.843023][T10267] loop2: detected capacity change from 0 to 512
[  610.918714][T10267] FAT-fs (loop2): Unrecognized mount option "" or missing value
[  611.258474][T10282] loop4: detected capacity change from 0 to 1024
[  611.321278][T10282] EXT4-fs: Ignoring removed orlov option
[  611.358203][T10282] EXT4-fs: Invalid want_extra_isize 5
[  612.847628][T10300] fuse: Bad value for 'fd'
[  614.976904][T10322] loop4: detected capacity change from 0 to 2048
[  615.479203][T10336] loop4: detected capacity change from 0 to 1024
[  616.487770][   T28] audit: type=1800 audit(1788698903.262:28): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.922" name="file1" dev="loop4" ino=20 res=0 errno=0
[  619.049904][T10379] fuse: Unknown parameter 'Z
'
[  619.063435][T10376] loop2: detected capacity change from 0 to 164
[  620.610072][T10404] loop4: detected capacity change from 0 to 128
[  620.686293][T10404] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  620.989475][T10411] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  621.940200][T10429] netlink: 84 bytes leftover after parsing attributes in process `syz.4.942'.
[  622.165875][T10439] syz.9.945 uses obsolete (PF_INET,SOCK_PACKET)
[  623.820014][T10454] loop2: detected capacity change from 0 to 8
[  624.369852][T10470] loop4: detected capacity change from 0 to 128
[  624.459168][T10470] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  624.495646][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  624.501953][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  624.582019][T10471] loop2: detected capacity change from 0 to 1024
[  624.590545][T10470] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  624.678981][T10471] EXT4-fs: Ignoring removed bh option
[  624.807044][T10471] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  624.884264][ T5911] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  625.001357][T10471] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  625.333086][T10471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.659948][T10505] loop4: detected capacity change from 0 to 512
[  626.796471][T10505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.895038][T10505] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  626.959644][ T9811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.628936][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.040515][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.974'.
[  630.688265][T10560] loop2: detected capacity change from 0 to 512
[  631.107743][T10560] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  631.249710][T10560] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  631.349297][T10560] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.977: Failed to acquire dquot type 1
[  631.564034][T10560] EXT4-fs (loop2): 1 truncate cleaned up
[  631.620436][T10560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.864246][T10560] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  632.182817][T10587] loop4: detected capacity change from 0 to 2048
[  632.273244][ T9811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.369433][T10587] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh
[  633.418671][T10608] loop2: detected capacity change from 0 to 128
[  633.709035][T10614] loop4: detected capacity change from 0 to 512
[  633.736037][T10608] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  633.788114][T10614] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  633.907161][T10614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  633.986882][T10608] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  634.004408][T10621] netlink: 64 bytes leftover after parsing attributes in process `syz.7.982'.
[  634.015122][T10614] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  635.136309][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.542033][ T9811] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  635.882213][T10639] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  636.362859][T10649] loop4: detected capacity change from 0 to 128
[  636.467117][T10649] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  636.577764][T10649] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  636.709271][T10649] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes)
[  636.802695][T10649] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes)
[  637.037706][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  637.548229][T10649] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes)
[  637.634973][T10649] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes)
[  637.726680][T10666] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes)
[  637.859103][T10676] loop2: detected capacity change from 0 to 8
[  638.271768][ T5911] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  638.465364][  T175] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  638.675388][  T175] usb 3-1: Using ep0 maxpacket: 32
[  638.705547][  T175] usb 3-1: config 9 has an invalid interface number: 215 but max is 0
[  638.765395][  T175] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  638.825434][  T175] usb 3-1: config 9 has no interface number 0
[  638.890890][  T175] usb 3-1: config 9 interface 215 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  639.615855][  T175] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=df.53
[  639.647943][T10702] loop4: detected capacity change from 0 to 256
[  639.654333][  T175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.688671][  T175] usb 3-1: Product: syz
[  639.692855][  T175] usb 3-1: Manufacturer: syz
[  639.704245][T10702] exfat: Deprecated parameter 'utf8'
[  639.728607][T10702] exfat: Deprecated parameter 'utf8'
[  639.754207][  T175] usb 3-1: SerialNumber: syz
[  639.816482][T10702] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  639.944947][T10702] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  640.068925][  T175] usb 3-1: USB disconnect, device number 3
[  641.038420][T10722] loop2: detected capacity change from 0 to 1024
[  642.315368][T10731] sit1: entered allmulticast mode
[  642.462974][T10734] Illegal XDP return value 4294967294 on prog  (id 32) dev syz_tun, expect packet loss!
[  645.705403][T10755] loop4: detected capacity change from 0 to 2048
[  645.756701][T10755] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿwœ°æB" or missing value
[  645.925192][T10762] loop2: detected capacity change from 0 to 512
[  645.995995][T10762] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.1013: invalid block
[  646.066834][T10762] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.1013: Invalid block bitmap block 0 in block_group 0
[  646.187771][T10762] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  646.216533][T10762] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1013: attempt to clear invalid blocks 983261 len 1
[  646.295518][T10762] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1013: invalid indirect mapped block 2683928664 (level 0)
[  646.365400][T10762] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.1013: Invalid inode table block 0 in block_group 0
[  646.494282][T10762] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  646.534036][T10762] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  646.611260][T10762] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.1013: Invalid inode table block 0 in block_group 0
[  646.684071][T10762] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  646.742957][T10762] EXT4-fs error (device loop2): ext4_truncate:4302: inode #13: comm syz.2.1013: mark_inode_dirty error
[  646.813510][T10762] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  646.855705][T10762] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.1013: Invalid inode table block 0 in block_group 0
[  646.921480][T10762] EXT4-fs (loop2): 1 truncate cleaned up
[  646.942412][T10762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  647.971659][ T9811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.118527][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1014'.
[  653.188352][T10858] loop4: detected capacity change from 0 to 164
[  655.541069][T10883] loop4: detected capacity change from 0 to 1024
[  655.900457][T10890] futex_wake_op: syz.4.1041 tries to shift op by -1; fix this program
[  660.873020][T10940] loop4: detected capacity change from 0 to 1024
[  662.204197][T10955] loop4: detected capacity change from 0 to 2048
[  662.312234][T10955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  662.769454][T10959] loop2: detected capacity change from 0 to 164
[  664.090759][T10942] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  772.385240][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  772.392225][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P42/1:b..l P11030/1:b..l
[  772.401524][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=55797, q=159 ncpus=1)
[  772.409229][    C0] task:syz.9.1072      state:R  running task     stack:25384 pid:11030 ppid:9180   flags:0x00004000
[  772.420804][    C0] Call Trace:
[  772.424075][    C0]  <TASK>
[  772.426999][    C0]  __schedule+0x15ae/0x4660
[  772.431526][    C0]  ? verify_lock_unused+0x140/0x140
[  772.436718][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  772.442853][    C0]  ? mark_lock+0x94/0x320
[  772.447161][    C0]  ? asan.module_dtor+0x20/0x20
[  772.451999][    C0]  ? preempt_schedule+0xc0/0xd0
[  772.456830][    C0]  preempt_schedule_common+0x82/0xc0
[  772.462096][    C0]  preempt_schedule+0xc0/0xd0
[  772.466752][    C0]  ? schedule_preempt_disabled+0x20/0x20
[  772.472366][    C0]  ? __lock_acquire+0x7d80/0x7d80
[  772.477373][    C0]  preempt_schedule_thunk+0x1a/0x30
[  772.482586][    C0]  _raw_spin_unlock+0x3a/0x40
[  772.487241][    C0]  unmap_page_range+0x2577/0x32f0
[  772.492262][    C0]  ? copy_page_range+0x3700/0x3700
[  772.497359][    C0]  unmap_vmas+0x286/0x3f0
[  772.501671][    C0]  ? unmap_page_range+0x32f0/0x32f0
[  772.506851][    C0]  ? __lock_acquire+0x7d80/0x7d80
[  772.511863][    C0]  exit_mmap+0x238/0xb90
[  772.516107][    C0]  ? exit_mm_release+0x1a/0x30
[  772.520876][    C0]  ? vm_brk+0x30/0x30
[  772.524870][    C0]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  772.530516][    C0]  ? uprobe_clear_state+0x278/0x290
[  772.535712][    C0]  __mmput+0x118/0x3a0
[  772.539853][    C0]  exit_mm+0x23f/0x340
[  772.543909][    C0]  ? sysctl_delayacct+0x220/0x220
[  772.548946][    C0]  ? do_exit+0x2530/0x2530
[  772.553353][    C0]  ? tty_audit_exit+0x14d/0x1f0
[  772.558215][    C0]  do_exit+0x909/0x2530
[  772.562361][    C0]  ? preempt_schedule_common+0x82/0xc0
[  772.567806][    C0]  ? put_task_struct+0xc0/0xc0
[  772.572552][    C0]  ? preempt_schedule+0xc0/0xd0
[  772.577408][    C0]  ? schedule_preempt_disabled+0x20/0x20
[  772.583057][    C0]  ? lock_chain_count+0x20/0x20
[  772.587916][    C0]  do_group_exit+0x22d/0x2f0
[  772.592508][    C0]  __x64_sys_exit_group+0x3f/0x40
[  772.597524][    C0]  do_syscall_64+0x55/0xb0
[  772.601927][    C0]  ? clear_bhb_loop+0x40/0x90
[  772.606601][    C0]  ? clear_bhb_loop+0x40/0x90
[  772.611273][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  772.617154][    C0] RIP: 0033:0x7fee2e19e159
[  772.621569][    C0] RSP: 002b:00007ffff5a74958 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  772.629965][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee2e19e159
[  772.637919][    C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  772.645881][    C0] RBP: 00007ffff5a749bc R08: 0000000000000000 R09: 00000000000927c0
[  772.653835][    C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000050
[  772.661887][    C0] R13: 00000000000927c0 R14: 00000000000a2d8c R15: 00007ffff5a74a10
[  772.669848][    C0]  </TASK>
[  772.672871][    C0] task:kworker/u4:2    state:R  running task     stack:22888 pid:42    ppid:2      flags:0x00004000
[  772.683646][    C0] Workqueue: bat_events batadv_nc_worker
[  772.689365][    C0] Call Trace:
[  772.692643][    C0]  <TASK>
[  772.695596][    C0]  __schedule+0x15ae/0x4660
[  772.700108][    C0]  ? asan.module_dtor+0x20/0x20
[  772.704948][    C0]  ? mark_lock+0x94/0x320
[  772.709286][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  772.715310][    C0]  ? preempt_schedule_irq+0xb4/0x150
[  772.720591][    C0]  preempt_schedule_irq+0xbf/0x150
[  772.725691][    C0]  ? preempt_schedule_notrace+0x110/0x110
[  772.731418][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  772.737232][    C0]  irqentry_exit+0x67/0x70
[  772.741643][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  772.747621][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60
[  772.753680][    C0] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 7c 0d 05 0d 48 89 de 5b e9 c3 b0 57 00 cc cc cc <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0d 80 35 7c 7e 65 8b 15 81 35 7c
[  772.773365][    C0] RSP: 0018:ffffc90000b2fb58 EFLAGS: 00000202
[  772.779422][    C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 107876608a6f6c00
[  772.787463][    C0] RDX: ffff888018ae1e00 RSI: ffffffff8b1d35c0 RDI: ffffffff8b1d3580
[  772.795437][    C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff223dea0
[  772.803399][    C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000
[  772.811370][    C0] R13: ffffffff8a571562 R14: ffff88802ffd4d00 R15: 0000000000000378
[  772.819351][    C0]  ? batadv_nc_worker+0xd2/0x600
[  772.824314][    C0]  batadv_nc_worker+0x20b/0x600
[  772.829152][    C0]  ? process_scheduled_works+0x975/0x1600
[  772.834883][    C0]  process_scheduled_works+0xa60/0x1600
[  772.840462][    C0]  ? worker_attach_to_pool+0x370/0x370
[  772.845913][    C0]  ? assign_work+0x3cc/0x5d0
[  772.850513][    C0]  worker_thread+0xa5e/0xfe0
[  772.855187][    C0]  kthread+0x2fa/0x390
[  772.859243][    C0]  ? pr_cont_work+0x550/0x550
[  772.863943][    C0]  ? kthread_blkcg+0xd0/0xd0
[  772.868522][    C0]  ret_from_fork+0x48/0x80
[  772.872942][    C0]  ? kthread_blkcg+0xd0/0xd0
[  772.877569][    C0]  ret_from_fork_asm+0x11/0x20
[  772.882363][    C0]  </TASK>
[  772.885377][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g55797 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  772.896582][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  772.906537][    C0] rcu: RCU grace-period kthread stack dump:
[  772.912425][    C0] task:rcu_preempt     state:R  running task     stack:27848 pid:17    ppid:2      flags:0x00004000
[  772.923194][    C0] Call Trace:
[  772.926484][    C0]  <TASK>
[  772.929404][    C0]  __schedule+0x15ae/0x4660
[  772.933930][    C0]  ? lock_chain_count+0x20/0x20
[  772.938788][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  772.943974][    C0]  ? lock_chain_count+0x20/0x20
[  772.948811][    C0]  ? finish_task_switch+0x262/0x8f0
[  772.954000][    C0]  ? asan.module_dtor+0x20/0x20
[  772.958837][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  772.964810][    C0]  ? preempt_schedule_irq+0xb4/0x150
[  772.970098][    C0]  preempt_schedule_irq+0xbf/0x150
[  772.975202][    C0]  ? preempt_schedule_notrace+0x110/0x110
[  772.980902][    C0]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  772.986793][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  772.992933][    C0]  irqentry_exit+0x67/0x70
[  772.997350][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  773.003330][    C0] RIP: 0010:schedule_timeout+0x18b/0x2d0
[  773.008960][    C0] Code: c9 45 31 c0 45 31 c9 6a 00 e8 21 07 cf f6 48 83 c4 08 4c 89 ef 48 89 de ba 04 00 00 00 e8 4d 64 dd f6 e8 38 b0 fe ff 4c 89 ef <31> f6 e8 ee 7e dd f6 4c 89 ef 48 c7 c6 60 af cc 8a e8 0f 7e a1 f9
[  773.028558][    C0] RSP: 0018:ffffc90000167b80 EFLAGS: 00000246
[  773.034634][    C0] RAX: 0000000000208040 RBX: 0000000100008ec2 RCX: 0000000000000000
[  773.042588][    C0] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffc90000167ba0
[  773.050542][    C0] RBP: ffffc90000167c70 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5
[  773.058505][    C0] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: 1ffff9200002cf70
[  773.066457][    C0] R13: ffffc90000167ba0 R14: 1ffffffff19c1e40 R15: dffffc0000000000
[  773.074529][    C0]  ? console_conditional_schedule+0x40/0x40
[  773.080421][    C0]  ? update_process_times+0x1b0/0x1b0
[  773.085880][    C0]  ? prepare_to_swait_event+0x344/0x360
[  773.091425][    C0]  rcu_gp_fqs_loop+0x30d/0x1590
[  773.096270][    C0]  ? rcu_gp_kthread+0x3b0/0x3b0
[  773.101114][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  773.107083][    C0]  ? __lock_acquire+0x7d80/0x7d80
[  773.112095][    C0]  ? rcu_gp_init+0x1530/0x1530
[  773.116842][    C0]  ? rcu_gp_cleanup+0xade/0xc30
[  773.121675][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  773.126855][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  773.132044][    C0]  rcu_gp_kthread+0x9d/0x3b0
[  773.136622][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  773.141713][    C0]  ? __kthread_parkme+0x71/0x1c0
[  773.146633][    C0]  ? __kthread_parkme+0x15b/0x1c0
[  773.151640][    C0]  kthread+0x2fa/0x390
[  773.155697][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  773.160789][    C0]  ? kthread_blkcg+0xd0/0xd0
[  773.165360][    C0]  ret_from_fork+0x48/0x80
[  773.169759][    C0]  ? kthread_blkcg+0xd0/0xd0
[  773.174328][    C0]  ret_from_fork_asm+0x11/0x20
[  773.179084][    C0]  </TASK>
[  773.182086][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  773.188398][    C0] CPU: 0 PID: 11036 Comm: syz.4.1073 Not tainted syzkaller #0
[  773.195849][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  773.205904][    C0] RIP: 0010:lock_is_held_type+0x13e/0x190
[  773.211627][    C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  773.231232][    C0] RSP: 0018:ffffc90003337938 EFLAGS: 00000206
[  773.237308][    C0] RAX: b8da05fd1f6fc200 RBX: ffff88802777da00 RCX: b8da05fd1f6fc200
[  773.245262][    C0] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0
[  773.253303][    C0] RBP: 0000000000000000 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5
[  773.261281][    C0] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: 0000000000000001
[  773.269254][    C0] R13: 0000000000000246 R14: ffffffff8d1321a0 R15: ffff88802777e510
[  773.277263][    C0] FS:  00007f054f6b26c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  773.286185][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  773.292758][    C0] CR2: 000000110c334dd1 CR3: 00000000325f9000 CR4: 00000000003506f0
[  773.300719][    C0] Call Trace:
[  773.304033][    C0]  <TASK>
[  773.306954][    C0]  __might_resched+0xee/0x5f0
[  773.311647][    C0]  ? __might_sleep+0xe0/0xe0
[  773.316219][    C0]  ? __lock_acquire+0x7d80/0x7d80
[  773.321230][    C0]  ? mark_lock+0x94/0x320
[  773.325566][    C0]  slab_pre_alloc_hook+0x4a/0x300
[  773.330624][    C0]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  773.336357][    C0]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  773.342157][    C0]  __kmem_cache_alloc_node+0x53/0x250
[  773.347543][    C0]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  773.353248][    C0]  __kmalloc+0xa7/0x240
[  773.357389][    C0]  tomoyo_realpath_from_path+0xe6/0x5c0
[  773.363032][    C0]  ? tomoyo_domain+0xd6/0x120
[  773.367709][    C0]  tomoyo_path_number_perm+0x248/0x5e0
[  773.373160][    C0]  ? tomoyo_path_number_perm+0x217/0x5e0
[  773.379380][    C0]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  773.384822][    C0]  ? setup_signal_shadow_stack+0x1e0/0x1e0
[  773.390611][    C0]  ? __might_fault+0xc6/0x120
[  773.395274][    C0]  ? __might_fault+0xaa/0x120
[  773.399945][    C0]  ? __fget_files+0x28/0x460
[  773.404527][    C0]  security_file_ioctl+0x70/0xa0
[  773.409451][    C0]  __se_sys_ioctl+0x48/0x170
[  773.414025][    C0]  do_syscall_64+0x55/0xb0
[  773.418422][    C0]  ? clear_bhb_loop+0x40/0x90
[  773.423082][    C0]  ? clear_bhb_loop+0x40/0x90
[  773.427739][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  773.433615][    C0] RIP: 0033:0x7f054e79e159
[  773.438021][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  773.457611][    C0] RSP: 002b:00007f054f6b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  773.466028][    C0] RAX: ffffffffffffffda RBX: 00007f054ea25fa0 RCX: 00007f054e79e159
[  773.473981][    C0] RDX: 0000000000000000 RSI: 000000000000545c RDI: 0000000000000005
[  773.481937][    C0] RBP: 00007f054e835024 R08: 0000000000000000 R09: 0000000000000000
[  773.489888][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  773.497839][    C0] R13: 00007f054ea26038 R14: 00007f054ea25fa0 R15: 00007ffc602ce7a8
[  773.505799][    C0]  </TASK>