last executing test programs:

6m27.577779751s ago: executing program 2 (id=12):
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x82, 0x0)
ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, 0x0)

6m27.367374585s ago: executing program 2 (id=14):
r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x7)
read(r0, &(0x7f0000000b40)=""/4116, 0x1014)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002f40), 0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001b80)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})

6m26.355963989s ago: executing program 2 (id=16):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000001c0)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES8], 0x10, 0x1213, &(0x7f0000000600)="$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")
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1360, 0x11c0, 0xc8, 0x8, 0x0, 0x5803, 0x1290, 0x2e8, 0x2e8, 0x1290, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x142, 0x1198, 0x11c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfc0f80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67327fa6a47864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe47d2a1fcfe36bbf12eca0a7b66c60c527bac2b500", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0x1a66, 0x2}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffff00], [0xff000000, 0xffffff00, 0xff, 0xffffff00], 'ip_vti0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x5e, 0x8, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x4, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13c0)

6m25.963159949s ago: executing program 32 (id=17):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x8000000000002})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000240), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
io_submit(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001e80)={0x44, r5, 0x321, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000)

6m25.515377869s ago: executing program 2 (id=20):
r0 = socket(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000340), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0)
tkill(0x0, 0xb)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x20600, 0x0)
r5 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000440)={0x40000012})
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000480))
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000002500)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil)
getsockopt(r0, 0x200000000114, 0x2713, &(0x7f0000002580)=""/1, &(0x7f00000025c0)=0xf002)

6m24.248665129s ago: executing program 2 (id=21):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000b40)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000b80)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000bc0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})

6m24.003063945s ago: executing program 2 (id=24):
r0 = gettid()
timer_create(0x1, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x190acdad69e857c3, &(0x7f0000000100))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x40002, 0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000340))
syz_socket_connect_nvme_tcp()
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
getdents64(r2, 0xffffffffffffffff, 0x43)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = accept(r3, &(0x7f0000000400)=@llc, &(0x7f00000003c0)=0x80)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40400c1}, 0x40081)
r6 = syz_open_dev$MSR(&(0x7f0000000000), 0x82, 0x0)
r7 = syz_clone(0x640e7100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
sched_setparam(r7, &(0x7f0000000140)=0x9)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r8, 0x0, 0x54)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x124)
r10 = fanotify_init(0x2, 0x1000)
fanotify_mark(r10, 0x541, 0x40001019, r9, 0x0)
fanotify_mark(r10, 0x80, 0x8001021, r9, 0x0)
r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r11, 0x0)
ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, 0x0)

6m8.023846221s ago: executing program 33 (id=24):
r0 = gettid()
timer_create(0x1, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x190acdad69e857c3, &(0x7f0000000100))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x40002, 0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000340))
syz_socket_connect_nvme_tcp()
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
getdents64(r2, 0xffffffffffffffff, 0x43)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = accept(r3, &(0x7f0000000400)=@llc, &(0x7f00000003c0)=0x80)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40400c1}, 0x40081)
r6 = syz_open_dev$MSR(&(0x7f0000000000), 0x82, 0x0)
r7 = syz_clone(0x640e7100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
sched_setparam(r7, &(0x7f0000000140)=0x9)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r8, 0x0, 0x54)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x124)
r10 = fanotify_init(0x2, 0x1000)
fanotify_mark(r10, 0x541, 0x40001019, r9, 0x0)
fanotify_mark(r10, 0x80, 0x8001021, r9, 0x0)
r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r11, 0x0)
ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, 0x0)

5m56.896833234s ago: executing program 1 (id=74):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./trace\x00', 0x18000, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="64a76bcced1c9629b675d83b3222c4f62a7070bff40940b3edfde093982000f560a0215b6cade370f6cc65ca093ba4295b"], 0x1, 0x304, &(0x7f0000000bc0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000712000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x0)
fdatasync(r0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5)
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0xd)
r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
fsetxattr(0xffffffffffffffff, &(0x7f0000000340)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x1)

5m55.666325343s ago: executing program 1 (id=77):
setresuid(0xee00, 0xee00, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2503"], 0x28}, 0x1, 0x0, 0x0, 0x40011}, 0x800)

5m55.186728514s ago: executing program 5 (id=18):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, &(0x7f00000001c0)=ANY=[], 0x1, 0x1548, &(0x7f0000001c40)="$eJzs3AuYTlXbOPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJEmSJKfklCZ5JSExhCQNSUgOQxJDSA4Tk8b5fD4kJEmTJCE5Jet/Tbi8vdW/vq++1/e9c/+ua1+z7mfve+21n3s/z7P2npnnm65DazauVa0hEcFfghd+JAJALAAMBIDcABAAQLm4cnGZ67NLTPxrO2F/rwdTrvQI2JXE9c/auP5ZG9c/a+P6Z21c/6yN65+1cf2zNq4/Y1nZpmkFruEl6y58////uNi/ksyf//9BMkqN/WJNqeu6AcT8ia2zA9c/y+P6/8cK/sxGXP+sjeufVf2laSP7P+DpP7ENv/6zgmy/u4brn7Vx/RnLyq70/ec/vyAA/P39QuR/2XNwJPuFwvyb9nelzz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nDaX+ZAoBL7Ss9LsYYY4wxxhhjjP19fLYrPQLGGGOMMcYYY4z9z0MQIEFBADGQDWIhO+QAAQBXQy7IDRG4BuLgWsgD10FeyAf5oQDEQ0EoBBoMWCAIoTAUgShcD0XhBigGxaEElAQHpaA03Ahl4CYoCzdDObgFysOtUAEqQiWoDLdBFbgdqsIdUA3uhOpQA2pCLbgLasPdUAfugbpwL9SD+6A+3A8N4AFoCA9CI3gIGsPD0AQegabQDJpDC2j5+/ntEOB38p+DnvA89ILekAh9oC+8AP2gPwyAF2EgvASD4GUYDK9AEgyBofAqDIPXYDi8DiNgJIyCN2A0vAljYCyMg/GQDBNgIrwFk+BtmAzvwBSYCikwDabDuzADZsIseA9mw/swB+bCPJgPqfABLICFkAYfwiL4CNJhMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22ww74GHbCJ7ALdsMe+BT2wmf/xfxT/5LfDQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA7zYB7Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oRlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78K7sA/WwTpYF+tiPax36fYUNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsBW2xtbYFttie2yPHbADJmACdsSO2Ak7YWfsjF2wC3bFrtgNu2P3jOeyAT6Pz2NvrC76YF/si/0wKdsAfBFfxJdwEL6ML+MrmIRDcCi+iq/iazgcT+IIHImjcBRWEW/iGByLJMZjMibjRJyIk3BS5ukG7+BUTMFpOB2n4wyciTPxPZyN7+P7OBfn4nxMxVRcgAsxDdNwEZ7CdFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9GBYCf4G7cjUm4F/fiPtyH+3E/HsADmIEZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/CZ+K8afVx8dRKITEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEHpFH5BV5RX6RX8SLeFFIFBJGGEEijAEAERVRUVQUFcVEMVFClBBOOFFalBZlRBlRVpQV5cQtory4VVQQFUUbV1lUFlVEW1dV3CGqiWqiuqghaopaopaoLWqLOqKOqCvqinqinqgv7hcNRB8cgA+KzMo0FkOwiRiKTUUzIS++g7USw7G1aCPainZiJI7ADqKVSxBPio5iDHYS/xBj8WnRRYzHruJZ0U10Fz3Ec6KnaO16id5iMvYRfcVU7Cf6iwHiRTEDa4j3cHb2muIVkSSGiKHiVTEfXxPDxetihBgpRok3so8Wb4oxYqwYJ8aLZDFBTBRviUnibTFZvCOmiKkiRUwT08W7YoaYKWaJ98Rs8b6YI+aKeWK+SBUfiAVioUgTH4pF4iORLhaLJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosd4mOxU3widondYo/4VOwVn4l94nOxX3whDogvRYb4ShwUX4tD4htxWHwrjojvxFFxTBwX34sT4gdxUpwSp8UZcVb8KM6Jn8R54QVIlEJKqWQgY2Q2GSuzyxzyKplTBhef3WtknLxW5pHXybwyn8wvC8h4WVAWkloaaSXJUBaWRWRUXi+LyhtkMVlclpAlpZOlZGl5oywjb5Jl5c2ynLxFlpe3ygqyoqwkK8vbZBV5u4TIhX1UlzVkTVlL3iUT4W5ZR94j68p7ZT15n6wv75cN5AOyoXxQNpIPycbyYdlEPiKbymayuWwhW8pHZSv5mGwt28i2sp1sLx+XHeQTMkE+KTtKf/EUeVp2kc/IrvJZ2U12lz3kT/K89LKX7C2hD8i+8gXZT/aXA2IBQL4kB8mX5WD5ikySQ+RQ+aocJl+Tw+XrcoQcKUfJN+Ro+aYcI8fKcXK8TJYT5ET5lpwk35aT5TtyipwqU+Q0OUAO/LmnWVL+Yf5bv5E/+Oe9b5Sb5Ga5RW6V2+R2uUN+LHfKnXKX3CX3yD1yr9wr98l9cr/cLw/IAzJDZsiD8qA8JA/Jw/KwPCKPyKPymDwjv5cn5A/ypDwlT8kz8qw8K89dfA5AoRJKKqUCFaOyqViVXeVQV6mc6mqVS+VWEXWNist8F1bXqbwqn8qvCqh4VVAVUloZZRWpUBVWRVRUXY8XTxhVQpVUTpVSpdWNF/LVtSrPH+erouoGVUwV/0X+pfEl/s74WqqWqpVqpVqr1qqtaqvaq/aqg+qgElSC6qg6qk6qk+qsOqsuqovqqrqqbqqb6qF6qJ6qp+qleqlElaj6qhdUP9VfDVAvqoHqJTVIDVKD1WCVpJLUUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVLJKVhPVRDVJTVKT1WQ1RU1RKSpFTVfT1Qw1Q81Ss9RsNVvNUXPUPDVPpapUtUAtUGkqTS1Si1S6WqwWq6VqqVqulquVaqVarVartWqtWq/Wq3S1SW1SW9QWtU1tUzvUDrVT7VS71C61R+1Re9VetU/tU/vVfnVAHVAZKkMdVAfVIXVIHVaH1RF1RB1VR9VxdVydUCfUSXVSnVan1Vl1Vp1T59R5dT5z2heIQAQqUEFMEBPEBrFBjiBHkDPIGeQKcgWRIBLEBXFBnuC6IG+QL8gfFAjig4JBoUAHJrCBuFj0aHB9UDS4ISgWFA9KBCUDF5QKSgc3BmWCm4Kywc1BueCWoHxwa1AhqBhUCioHtwVVgtuDqsEdQbXgzqB6UCOoGdQK7gpqB3cHdYJ7grrBvUG94L6gfnB/0CB4IGgYPBg0Ch4KGgcPB02CR4KmQbOgedAiaPm39u/9yXyPuV66t07UfXRf/YLup/vrAfpFPVC/pAfpl/Vg/YpO0kP0UP2qHqZf08P163qEHqlH6Tf0aP2mHqPH6nF6vE7WE/RE/ZaepN/Wk/U7eoqeqlP0ND1dv6tn6Jl6ln5Pz9bv6zl6rp6n5+tU/YFeoBfqNP2hXqQ/0ul6sV6il+plerleoVfqVXq1XqPX6nV6vQK9UW/Sm/UWvVVv09v1Dv2x3qk/0bv0br1Hf6r36s/0Pv253q+/0Af0lzpDf6UP6q/1If2NPqy/1Uf0d/qoPqaP6+/1Cf2DPqlP6dP6jD6rf9Tn9E/6vPaZk/vMj3ejjDIxJsbEmliTw+QwOU1Ok8vkMhETMXEmzuQxeUxek9fkN/lNvIk3hUwhk4kMmcKmsImaqClqippippgpYUoYZ5wpbUqbMqaMKWvKmnKmnClvypsKpoKpZCqZ28xt5nZzu7nD3GHuNHeaGqaGqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYpqapaW6am5ampWllWpnWprVpa9qa9qa96WA6mASTYDqajqaT6WQ6m86mi+liupquppvpZnqYHqan6Wl6mV4m0SSavqav6Wf6mQFmgBloBppBZpAZbAabJJNkhpqhZpgZZoab4WaEGWlGZU5UzZtmjBlrxpnxJtkkm4lmoplkJpnJZrKZYqaYFJNippvpZoaZYWaZWWa2mW3mmDlmnplnUk2qWWAWmDSTZhaZRSbdpJslZolZZpaZFWaFWWVWmTVmjVkH68wGs8FsMpvMFrPFbDPbzA6zw+w0O80us8vsMXvMXrPXI4DZb/abA+aAyTAZ5qA5aA6ZQ+awOWyOmCPmqDlqjpvj5oQ5YU6ak+a0OW3OmnwXPy+9ibXZbQ57lc1pr7a5bG77r3F+W8DG24K2kNU2r833i9hYa4vZ4raELWmdLWVL2xt/FVewFW0lW9neZqvY223VX8W17d22jr3H1rX32lr2rl/E9ex9tr592DZABLDNbCPbwja2D9sm9hHb1DazzW0L294+bjvYJ2yCfdJ2tE/9Kl5gF9pVdrVdY9faXXa3PW3P2EP2G3vW/mh72d52oH3JDrIv28H2FZtkh/wqHmXfsKPtm3aMHWvH2fG/iqfYqTbFTrPT7bt2hp35qzjVfmBn2zQ7x8618+z8n+PMMaXZD+0i+5FNtwEssUvtMrvcrrArL43V57br7Qa70e60n9gtdqvdZrfbHZcmwna33WM/tXvtZ/ag/drut1/YA/awzbBf/RxnHt9h+609Yr+zR+0xe9x+b0/YH9Sl7Mxj/97+ZM9bb4GQgCQpCiiGslEsZaccdBXlpKspF+WmCF1DcXQt5aHrKC/lo/xUgOKpIBUiTYYsEYVUmIpQlK6nS8MrQSXJUSkqTTdSGbqJytLNVI5uofJ0K1WgilSJKtNtVIVup6p0B1WjO6k61aCaVIvuotp0N9Whe6gu3Uv16D6qT/dTA3qAGtKD1Igeosb0MDWhR6gpNaPm1IJa0qPUih6j1tSG2lI7ak+PUwd6ghLoSepIT1En+gd1pqepCz1DXelZ6kbdqQc9Rz3peepFvSmR+lBfeoH6UX8aQC/SQHqJBtHLNJheoSQaQkPpVRpGr9Fwep1G0EgaRW/QaHqTxtBYGkfjKZkm0ER6iybR2zSZ3qEpNJVSaBpNp3dpBs2kWfQezab3aQ7NpXk0n1LpA1pACymNPqRF9BGl02JaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacd9DHtpE9oF+2mPfQp7aXPaB99TvvpCzpAX1IGfUUH6Ws6RN/QYfrW96bv6Cgdo+P0PZ2gH+gknaLTdIbO0o90jn6i8+QJQgxFKEMVBmFMmC2MDbOHOcKrwpzh1WGuMHcYCa8J48JrwzzhdWHeMF+YPywQxocFw0KhDk1oQwrDsHBYJIyG14dFwxvCYmHxsERYMnRhqbB0eGNYJrwpLBveHJYLbwnLh7eGFcKK4cP3Vg5vC6uEt4dVwzvCauGdYfWwRlgzrBXeFdYO7w7rhPeEdcN7w7LhfWH98P6wQfhA2DB8MGwUPhQ2Dh8Om4SPhE3DZmHzsEXYMnw0bBU+FrYO24Rtw3Zh+/DxsEP4RJgQPhl2DJ/6ef19C39/fWLYJ+wbvhC+EHp/j5wXnR9NjX4QXRBdGE2LfhhdFP0omh5dHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3Rj1vlY2cOiEk065wMW4bC7WZXc53FUup7va5XK5XcRd4+LctS6Pu87ldflcflfAxbuCrpDTzjjryIWusCviou56V9Td4Iq54q6EK+mcK+VKuxaupWvpWrnHXGvXxrV17Vw797h73D3hnnBPuo7uKdfJ/cN1dk+7Lu4Z94x71nVz3V0P95zr6SbkuvCaTHR9XV/Xz/VzA9wAN9ANdIPcIDfYDXZJLskNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbtkN9FNdJPcJDfZTXZT3BSX4lLcdDfdzXAzXJWZF/Yyx81x89w8l+pS3QKXOWdMc4vcIpfu0t0St8Qtc8vcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3A63w+10O90un/tCp26v2+f2uf1uvzvgvnQZ7it30H3tDrlv3GH3rTvivnNH3TF33H3vTrgf3El3yp12Z9xZ96M7535y5513yZEJkYmRtyKTIm9HJkfeiUyJTI2kRKZFpkfejcyIzIzMirwXmR15PzInMjcyLzI/khr5ILIgsjCSFvkwsijyUSQ9sjiyJLI0siyyPOJ9wS2hL+yL+Ki/3hf1N/hivrgv4Ut650v50v5GX8bf5Mv6m305f4sv72/1FXxFX8k/4pv6Zr65b+Fb+kd9K/+Yb+3b+La+nW/vH/cd/BM+wT/pO/qnfCf/D9/ZP+27+Gd8V/+s7+a7+x7+Od/TP+97+d4+0ffxff0Lvp/v7wf4F/1A/5If5F/2g/0rPskP8UP9q36Yf80P96/7EX6kHxXzhh996RIZxvtkP8FP9G/5Sf5tP9m/46f4qT7FT/PT/bt+hp/pZ/n3/Gz/vp/j5/p5fr5P9R/4BX6hT/Mf+kX+I5/uF1+6qexX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/iP/U7/id/ld/s9/lO/13/m9/nP/X7/hT/gv/QZ/it/0H/tD/lv/GH/rT/iv/NH/TF/3H/vT/gf/El/yp/2Z/xZ/6M/53/y5/l/1hhjjDHG/pQJl5vil2su3M7v8xs54p827gsAV28tkPHP6zNnlOvyXmj3F/HtIwDwZO+uD15aqldPTEy8uG26hKDIXIBLvwnKFAOX48XQFh6HBGgDZX5z/P1F97P0B/1HbwHI8U85sXA5vtz/5wCY+Bv9P9pu1ILy4em4/0//cwGKFbmckx0ux4uh7c/3V9pA2d8Zf75WfzD+7F8kA7T+p5yccCk+ePHbGjLHXxoeg6cg4RdbMsYYY4wxxhhjF/QXlTpfuv689Befv3V9Hq8u52SDy/EfXZ8zxhhjjDHGGGPsynu6e48nHk1IaNP5v96o+t/K+tONJvA/1TM3frPhPcClRxQA/MUOATIb8t95FJv/LftKuvjS+ddVy874AP53lPLvaFzhNybGGGOMMcbY3+7ypP+Xj6srNSDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+nd8ndiVPkbGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsSvt/AQAA///BeAKt")
chroot(0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000003300)='.\x00', &(0x7f0000003340)='./file0\x00', 0x0, 0x2a05004, 0x0)

5m55.023653018s ago: executing program 1 (id=88):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x2004054, &(0x7f00000009c0)={[{@mode={'mode', 0x3d, 0x7}}, {@longad}, {@mode={'mode', 0x3d, 0xcc}}, {@anchor={'anchor', 0x3d, 0x1}}, {@rootdir={'rootdir', 0x3d, 0x6}}, {}, {@uid_forget}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0xffffffffffffffff}}, {@uid_ignore}, {@unhide}, {@unhide}, {@utf8}, {@fileset={'fileset', 0x3d, 0x2000000000e42}}, {@undelete}, {@partition={'partition', 0x3d, 0x2}}, {@utf8}, {@rootdir={'rootdir', 0x3d, 0x1}}], [{@dont_measure}, {@subj_type={'subj_type', 0x3d, '\x00\x00\x00\x00.'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'longad'}}, {@smackfstransmute}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@seclabel}]}, 0x1, 0xc43, &(0x7f0000001000)="$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")
symlink(&(0x7f0000001d80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000001e00)='.\x02\x00')
syz_mount_image$ext4(&(0x7f0000001e40)='ext4\x00', &(0x7f0000001e80)='./mnt\x00', 0x840, &(0x7f0000001ec0)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000001f00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000002180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000021c0)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000002280)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000002300), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000002340), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000002380)='ext4\x00', &(0x7f00000023c0)='./file0\x00', 0x8052, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8174}}, {@dax}, {@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0xb2ea}}]}, 0x7, 0x4dd, &(0x7f0000002440)="$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")
rename(&(0x7f00000029c0)='.\x02\x00', &(0x7f0000002a00)='.\x02/file0\x00')

5m54.070119621s ago: executing program 5 (id=81):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x8000000000025a5, 0x5)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

5m53.055934624s ago: executing program 5 (id=85):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101142, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x18)

5m52.81015956s ago: executing program 34 (id=85):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101142, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x18)

5m48.770451835s ago: executing program 1 (id=92):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, &(0x7f00000001c0)=ANY=[], 0x1, 0x1548, &(0x7f0000001c40)="$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")
chroot(0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000003300)='.\x00', &(0x7f0000003340)='./file0\x00', 0x0, 0x2a05004, 0x0)

5m47.386074508s ago: executing program 1 (id=102):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0xe8400)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
write$uinput_user_dev(r3, &(0x7f00000006c0)={'syz1\x00', {0x8000}, 0x0, [0x7, 0x0, 0x0, 0x2, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x1002, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000, 0x7, 0x0, 0x80, 0x0, 0x0, 0x1, 0x10001, 0x27], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0xffffffff, 0x5, 0x0, 0x401, 0x806, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0xffffaed9, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x400001, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)

5m46.128697808s ago: executing program 1 (id=97):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r2, 0x2, 0x7fff)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019380)=0x7)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000001c0)={0xb, {0x1, 0xa, 0x6, 0x5, 0x5, 0x7}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
dup3(r4, r4, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000019400)={0x6, 0xb, &(0x7f00000194c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000019540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0)

5m45.141963741s ago: executing program 35 (id=97):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r2, 0x2, 0x7fff)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019380)=0x7)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000001c0)={0xb, {0x1, 0xa, 0x6, 0x5, 0x5, 0x7}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
dup3(r4, r4, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000019400)={0x6, 0xb, &(0x7f00000194c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000019540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0)

5m28.452111305s ago: executing program 6 (id=133):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
shmctl$SHM_INFO(0x0, 0xe, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000006)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000001c0))

5m28.22423563s ago: executing program 6 (id=135):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
unshare(0x2c020600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000b00)={r1, 0x0, 0x0, 0x4}, 0x20)

5m28.039507634s ago: executing program 6 (id=137):
r0 = msgget(0x0, 0x322)
msgctl$IPC_RMID(r0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sync_file_range(r4, 0x6, 0x9fd, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000080)={&(0x7f0000000000)=""/7, 0x7, 0x3, 0x9})
syz_open_dev$usbfs(&(0x7f0000000240), 0x10000000f, 0x101301)
r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x0)
r6 = inotify_init1(0x800)
inotify_add_watch(r6, &(0x7f0000000180)='.\x00', 0x60000526)
chdir(&(0x7f00000001c0)='./bus\x00')
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x90)
getdents64(r7, &(0x7f0000000880)=""/4096, 0x1000)

5m26.790410574s ago: executing program 6 (id=139):
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0xe8400)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
write$uinput_user_dev(r3, &(0x7f00000006c0)={'syz1\x00', {0x8000}, 0x0, [0x7, 0x0, 0x0, 0x2, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x1002, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000, 0x7, 0x0, 0x80, 0x0, 0x0, 0x1, 0x10001, 0x27], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0xffffffff, 0x5, 0x0, 0x401, 0x806, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0xffffaed9, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x400001, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)

5m24.248437124s ago: executing program 6 (id=146):
prlimit64(0x0, 0xe, &(0x7f0000000c80)={0x8, 0x80020100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000cc0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000d00)=0x5)
quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000d40)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000d80), 0x0, 0x0)
read$msr(r3, &(0x7f0000000dc0)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000019dc0)=0x7)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
process_vm_readv(r2, &(0x7f000001a3c0)=[{&(0x7f000001a400)=""/3, 0x3}], 0x1, &(0x7f000001a600)=[{&(0x7f000001a6c0)=""/216, 0xd8}], 0x1, 0x0)

5m22.72473936s ago: executing program 6 (id=147):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x3008003, &(0x7f0000000340)=ANY=[], 0x2, 0x211, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0x0, 0x0)
fadvise64(r0, 0xe0fffb, 0x7fffffffffffffff, 0x3)

5m7.678051024s ago: executing program 36 (id=147):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x3008003, &(0x7f0000000340)=ANY=[], 0x2, 0x211, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0x0, 0x0)
fadvise64(r0, 0xe0fffb, 0x7fffffffffffffff, 0x3)

5m0.956038113s ago: executing program 3 (id=188):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x2004054, &(0x7f00000009c0)={[{@mode={'mode', 0x3d, 0x7}}, {@longad}, {@mode={'mode', 0x3d, 0xcc}}, {@anchor={'anchor', 0x3d, 0x1}}, {@rootdir={'rootdir', 0x3d, 0x6}}, {}, {@uid_forget}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0xffffffffffffffff}}, {@uid_ignore}, {@unhide}, {@unhide}, {@utf8}, {@fileset={'fileset', 0x3d, 0x2000000000e42}}, {@undelete}, {@partition={'partition', 0x3d, 0x2}}, {@utf8}, {@rootdir={'rootdir', 0x3d, 0x1}}], [{@dont_measure}, {@subj_type={'subj_type', 0x3d, '\x00\x00\x00\x00.'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'longad'}}, {@smackfstransmute}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@seclabel}]}, 0x1, 0xc43, &(0x7f0000001000)="$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")
syz_mount_image$vfat(&(0x7f0000001c80), &(0x7f0000001cc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001d40))
symlink(&(0x7f0000001d80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000001e40)='ext4\x00', &(0x7f0000001e80)='./mnt\x00', 0x840, &(0x7f0000001ec0)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000001f00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000002180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000021c0)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000002280)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000002300), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000002340), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000002380)='ext4\x00', &(0x7f00000023c0)='./file0\x00', 0x8052, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8174}}, {@dax}, {@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0xb2ea}}]}, 0x7, 0x4dd, &(0x7f0000002440)="$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")
rename(&(0x7f00000029c0)='.\x02\x00', &(0x7f0000002a00)='.\x02/file0\x00')

4m58.926490581s ago: executing program 3 (id=192):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x1, 0x0, 0x73f0, 0x9})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000006c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7)
r2 = getpid()
setrlimit(0x1, &(0x7f0000000000)={0x6f, 0x52})
sched_setscheduler(r2, 0x2, &(0x7f0000000780)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000019840)=""/102368, 0x18fe0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
unshare(0x22020600)
write(0xffffffffffffffff, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c)
dup3(0xffffffffffffffff, r0, 0x80000)

4m57.768041948s ago: executing program 3 (id=193):
r0 = io_uring_setup(0x650b, &(0x7f0000000340)={0x0, 0x5ca, 0x0, 0x21, 0xab})
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x4000, 0x0)
write(0xffffffffffffffff, &(0x7f00000004c0)='27', 0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x16, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300), 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)

4m53.268784574s ago: executing program 3 (id=201):
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000900)='./file1\x00', 0x1218088, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000b00)="$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")
mount$nfs4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2004, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x15)

4m52.267320018s ago: executing program 3 (id=204):
prlimit64(0x0, 0xe, &(0x7f0000000c80)={0x8, 0x80020100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000cc0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000d00)=0x5)
quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000d40)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000d80), 0x0, 0x0)
read$msr(r3, &(0x7f0000000dc0)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000019dc0)=0x7)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
process_vm_readv(r2, &(0x7f000001a3c0)=[{&(0x7f000001a400)=""/3, 0x3}], 0x1, &(0x7f000001a600)=[{&(0x7f000001a6c0)=""/216, 0xd8}], 0x1, 0x0)

4m50.759080703s ago: executing program 3 (id=205):
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
unshare(0x40000000)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)

4m35.570795792s ago: executing program 37 (id=205):
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
unshare(0x40000000)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)

14.161262706s ago: executing program 8 (id=899):
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xe8400)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz1\x00', {0x8000}, 0x0, [0x7, 0x0, 0x0, 0x2, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x1002, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000, 0x7, 0x0, 0x80, 0x0, 0x0, 0x1, 0x10001, 0x27], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0xffffffff, 0x5, 0x0, 0x401, 0x806, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0xffffaed9, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x400001, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {0x2, 0x8, 0x1, 0x7}, 0xe, [0x200, 0x0, 0xfb7, 0x6, 0x1ff, 0x400, 0x5, 0xd, 0xc, 0xfffffff7, 0x0, 0xffffffff, 0x3, 0xd4a, 0x9, 0x1, 0x8, 0x2, 0x3, 0x0, 0x1000, 0x7, 0x4, 0x8000, 0x6, 0x5b68, 0x0, 0x0, 0x3, 0x4, 0x7, 0x8d, 0xc2df, 0x4, 0x3, 0x9, 0x7, 0xd42, 0x0, 0xfdba, 0xd58, 0x0, 0x8, 0x0, 0x3, 0x200, 0xfffffffd, 0xb, 0xfffff133, 0x9, 0x4, 0xd0d, 0x5, 0x8001, 0x6, 0x80, 0x2, 0x800, 0xf39, 0x7, 0x80000001, 0x100, 0x100, 0x4], [0x7, 0x60000000, 0x6e72, 0x6, 0x9, 0xff, 0x1, 0x2, 0x9f4, 0x5, 0xffffffff, 0x3, 0x46b, 0x4, 0x5, 0x3, 0x5, 0x7f, 0x40, 0x6, 0xf23, 0x9, 0xb, 0x3, 0x0, 0x4, 0xfffffffd, 0xe, 0x2c8, 0x1, 0x8001, 0x3, 0x3, 0x80000000, 0xf5, 0x2, 0xfffffffd, 0x80000000, 0x1, 0x6, 0x0, 0x8, 0xfffffff3, 0x5, 0x29, 0x0, 0x0, 0x100, 0x4, 0x0, 0x7, 0x3, 0x7, 0x3, 0x6, 0x4, 0x6, 0x3, 0x6, 0x3, 0x7, 0x1, 0x80000000, 0x8], [0x80, 0x944e, 0xd, 0x3, 0x6, 0x3, 0x1000, 0x4, 0xed8, 0x80000001, 0x1, 0x36922bcf, 0x3, 0x4, 0x2, 0xfffffe00, 0x8, 0x1, 0x8, 0x4, 0x100, 0x1, 0x8, 0xa, 0x3, 0xff, 0x4, 0x3, 0x6, 0x10000, 0xfffffff7, 0x7, 0x9, 0x8a24, 0xe, 0xffffff19, 0x3, 0x7, 0x4, 0x40, 0x1, 0xfffffff9, 0x7, 0x7, 0x6, 0x4, 0x6, 0xc484, 0x5, 0x1, 0x10001, 0x4, 0xd, 0xe01, 0xd62, 0x3, 0x7fffffff, 0x3, 0x8, 0x9, 0x10, 0x40, 0x80000000, 0x8], [0xffffff3a, 0x0, 0xc, 0x2, 0x7, 0xfab2, 0x6, 0x401, 0x8, 0x3, 0x5, 0x95, 0xb, 0x2, 0x7f, 0x1fd, 0xff, 0x4, 0xffff, 0x71, 0x1, 0x9, 0x400, 0xfff, 0x1, 0x1, 0x34200000, 0x3ff, 0xb35, 0x4, 0x5, 0x0, 0x2, 0x8, 0xdb2, 0x0, 0x1, 0x2ce, 0xff, 0x46, 0x0, 0x2, 0x98, 0x8, 0x7, 0x7, 0x80000001, 0x9, 0xa0, 0x2, 0xba, 0x80, 0xccc, 0x5, 0xffffffff, 0x40, 0x3, 0x4, 0x6, 0x7fffffff, 0x100, 0xc2, 0x9, 0x7]}, 0x45c)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x5420, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000001a40)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000001b00)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001b80), 0xa8c01)
write$sndseq(r5, &(0x7f0000001bc0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001780)={{0xfffffffe, 0x0, 0x6, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x800000, 'syz1\x00', 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

12.736123011s ago: executing program 8 (id=905):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x62cd, &(0x7f0000000280)="$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")
creat(&(0x7f0000006a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000006bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000006cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

9.601402808s ago: executing program 0 (id=918):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000400), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000440), 0x10106, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000500)={0x0, [[0xffffffff, 0xffffffdf, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0)
readv(r2, &(0x7f0000000800)=[{0x0}], 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)

9.026836005s ago: executing program 7 (id=919):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000000240)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000019240)=0x7)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

7.66002063s ago: executing program 8 (id=920):
r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000380)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000003c0)=@attr_arm64={0x0, 0x4, 0x4, 0x0})

7.65854498s ago: executing program 7 (id=930):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'syz_tun\x00', 0x0})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200012, &(0x7f0000000c00)={[{@noauto_da_alloc}, {@abort}, {@grpjquota}, {@usrjquota}, {@discard}, {@sysvgroups}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@nogrpid}, {@jqfmt_vfsold}]}, 0x4, 0x5a4, &(0x7f0000000480)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a80)={'wlan0\x00'})

7.250660649s ago: executing program 9 (id=924):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100c8c4, &(0x7f0000000200)=ANY=[], 0x0, 0x5f1, &(0x7f0000000240)="$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")
umount2(&(0x7f0000000840)='./file0\x00', 0x6)
ftruncate(r1, 0x461)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_MASK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000000))
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x800]}, 0x8, 0x80800)
close_range(r3, r3, 0x2)
ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000040))

7.204922408s ago: executing program 8 (id=925):
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x1a, 0xf, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2ab4d}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x31)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003340), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000003380)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r4, &(0x7f0000003440)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

7.133918038s ago: executing program 0 (id=927):
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xe8400)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz1\x00', {0x8000}, 0x0, [0x7, 0x0, 0x0, 0x2, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x1002, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000, 0x7, 0x0, 0x80, 0x0, 0x0, 0x1, 0x10001, 0x27], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0xffffffff, 0x5, 0x0, 0x401, 0x806, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0xffffaed9, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x400001, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {0x2, 0x8, 0x1, 0x7}, 0xe, [0x200, 0x0, 0xfb7, 0x6, 0x1ff, 0x400, 0x5, 0xd, 0xc, 0xfffffff7, 0x0, 0xffffffff, 0x3, 0xd4a, 0x9, 0x1, 0x8, 0x2, 0x3, 0x0, 0x1000, 0x7, 0x4, 0x8000, 0x6, 0x5b68, 0x0, 0x0, 0x3, 0x4, 0x7, 0x8d, 0xc2df, 0x4, 0x3, 0x9, 0x7, 0xd42, 0x0, 0xfdba, 0xd58, 0x0, 0x8, 0x0, 0x3, 0x200, 0xfffffffd, 0xb, 0xfffff133, 0x9, 0x4, 0xd0d, 0x5, 0x8001, 0x6, 0x80, 0x2, 0x800, 0xf39, 0x7, 0x80000001, 0x100, 0x100, 0x4], [0x7, 0x60000000, 0x6e72, 0x6, 0x9, 0xff, 0x1, 0x2, 0x9f4, 0x5, 0xffffffff, 0x3, 0x46b, 0x4, 0x5, 0x3, 0x5, 0x7f, 0x40, 0x6, 0xf23, 0x9, 0xb, 0x3, 0x0, 0x4, 0xfffffffd, 0xe, 0x2c8, 0x1, 0x8001, 0x3, 0x3, 0x80000000, 0xf5, 0x2, 0xfffffffd, 0x80000000, 0x1, 0x6, 0x0, 0x8, 0xfffffff3, 0x5, 0x29, 0x0, 0x0, 0x100, 0x4, 0x0, 0x7, 0x3, 0x7, 0x3, 0x6, 0x4, 0x6, 0x3, 0x6, 0x3, 0x7, 0x1, 0x80000000, 0x8], [0x80, 0x944e, 0xd, 0x3, 0x6, 0x3, 0x1000, 0x4, 0xed8, 0x80000001, 0x1, 0x36922bcf, 0x3, 0x4, 0x2, 0xfffffe00, 0x8, 0x1, 0x8, 0x4, 0x100, 0x1, 0x8, 0xa, 0x3, 0xff, 0x4, 0x3, 0x6, 0x10000, 0xfffffff7, 0x7, 0x9, 0x8a24, 0xe, 0xffffff19, 0x3, 0x7, 0x4, 0x40, 0x1, 0xfffffff9, 0x7, 0x7, 0x6, 0x4, 0x6, 0xc484, 0x5, 0x1, 0x10001, 0x4, 0xd, 0xe01, 0xd62, 0x3, 0x7fffffff, 0x3, 0x8, 0x9, 0x10, 0x40, 0x80000000, 0x8], [0xffffff3a, 0x0, 0xc, 0x2, 0x7, 0xfab2, 0x6, 0x401, 0x8, 0x3, 0x5, 0x95, 0xb, 0x2, 0x7f, 0x1fd, 0xff, 0x4, 0xffff, 0x71, 0x1, 0x9, 0x400, 0xfff, 0x1, 0x1, 0x34200000, 0x3ff, 0xb35, 0x4, 0x5, 0x0, 0x2, 0x8, 0xdb2, 0x0, 0x1, 0x2ce, 0xff, 0x46, 0x0, 0x2, 0x98, 0x8, 0x7, 0x7, 0x80000001, 0x9, 0xa0, 0x2, 0xba, 0x80, 0xccc, 0x5, 0xffffffff, 0x40, 0x3, 0x4, 0x6, 0x7fffffff, 0x100, 0xc2, 0x9, 0x7]}, 0x45c)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x5420, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000001a40)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000001b00)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001b80), 0xa8c01)
write$sndseq(r5, &(0x7f0000001bc0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001780)={{0xfffffffe, 0x0, 0x6, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x800000, 'syz1\x00', 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

6.767009907s ago: executing program 0 (id=928):
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
write$uinput_user_dev(r3, &(0x7f00000006c0)={'syz1\x00', {0x8000}, 0x0, [0x7, 0x0, 0x0, 0x2, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x1002, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000, 0x7, 0x0, 0x80, 0x0, 0x0, 0x1, 0x10001, 0x27], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0xffffffff, 0x5, 0x0, 0x401, 0x806, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0xffffaed9, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x400001, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000b40)={'syz1\x00', {0x2, 0x8, 0x1, 0x7}, 0xe, [0x200, 0x0, 0xfb7, 0x6, 0x1ff, 0x400, 0x5, 0xd, 0xc, 0xfffffff7, 0x0, 0xffffffff, 0x3, 0xd4a, 0x9, 0x1, 0x8, 0x2, 0x3, 0x0, 0x1000, 0x7, 0x4, 0x8000, 0x6, 0x5b68, 0x0, 0x0, 0x3, 0x4, 0x7, 0x8d, 0xc2df, 0x4, 0x3, 0x9, 0x7, 0xd42, 0x0, 0xfdba, 0xd58, 0x0, 0x8, 0x0, 0x3, 0x200, 0xfffffffd, 0xb, 0xfffff133, 0x9, 0x4, 0xd0d, 0x5, 0x8001, 0x6, 0x80, 0x2, 0x800, 0xf39, 0x7, 0x80000001, 0x100, 0x100, 0x4], [0x7, 0x60000000, 0x6e72, 0x6, 0x9, 0xff, 0x1, 0x2, 0x9f4, 0x5, 0xffffffff, 0x3, 0x46b, 0x4, 0x5, 0x3, 0x5, 0x7f, 0x40, 0x6, 0xf23, 0x9, 0xb, 0x3, 0x0, 0x4, 0xfffffffd, 0xe, 0x2c8, 0x1, 0x8001, 0x3, 0x3, 0x80000000, 0xf5, 0x2, 0xfffffffd, 0x80000000, 0x1, 0x6, 0x0, 0x8, 0xfffffff3, 0x5, 0x29, 0x0, 0x0, 0x100, 0x4, 0x0, 0x7, 0x3, 0x7, 0x3, 0x6, 0x4, 0x6, 0x3, 0x6, 0x3, 0x7, 0x1, 0x80000000, 0x8], [0x80, 0x944e, 0xd, 0x3, 0x6, 0x3, 0x1000, 0x4, 0xed8, 0x80000001, 0x1, 0x36922bcf, 0x3, 0x4, 0x2, 0xfffffe00, 0x8, 0x1, 0x8, 0x4, 0x100, 0x1, 0x8, 0xa, 0x3, 0xff, 0x4, 0x3, 0x6, 0x10000, 0xfffffff7, 0x7, 0x9, 0x8a24, 0xe, 0xffffff19, 0x3, 0x7, 0x4, 0x40, 0x1, 0xfffffff9, 0x7, 0x7, 0x6, 0x4, 0x6, 0xc484, 0x5, 0x1, 0x10001, 0x4, 0xd, 0xe01, 0xd62, 0x3, 0x7fffffff, 0x3, 0x8, 0x9, 0x10, 0x40, 0x80000000, 0x8], [0xffffff3a, 0x0, 0xc, 0x2, 0x7, 0xfab2, 0x6, 0x401, 0x8, 0x3, 0x5, 0x95, 0xb, 0x2, 0x7f, 0x1fd, 0xff, 0x4, 0xffff, 0x71, 0x1, 0x9, 0x400, 0xfff, 0x1, 0x1, 0x34200000, 0x3ff, 0xb35, 0x4, 0x5, 0x0, 0x2, 0x8, 0xdb2, 0x0, 0x1, 0x2ce, 0xff, 0x46, 0x0, 0x2, 0x98, 0x8, 0x7, 0x7, 0x80000001, 0x9, 0xa0, 0x2, 0xba, 0x80, 0xccc, 0x5, 0xffffffff, 0x40, 0x3, 0x4, 0x6, 0x7fffffff, 0x100, 0xc2, 0x9, 0x7]}, 0x45c)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x5420, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000001a40)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000001b00)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001b80), 0xa8c01)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)

5.891243763s ago: executing program 9 (id=929):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f78", 0x8a}, {&(0x7f0000000cc0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d3", 0x3b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001340)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1", 0xda}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5.421488671s ago: executing program 0 (id=931):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000000240)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000019240)=0x7)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

5.175132001s ago: executing program 4 (id=932):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioperm(0x2, 0x7, 0x13)
lseek(0xffffffffffffffff, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x4f1, &(0x7f0000000740)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff)

4.156118966s ago: executing program 0 (id=933):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[], 0x6)

3.926034855s ago: executing program 9 (id=934):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0)

3.658451324s ago: executing program 8 (id=935):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000400), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000440), 0x10106, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000500)={0x0, [[0xffffffff, 0xffffffdf, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000780)={0x0, &(0x7f00000007c0)='\x00', 0x10040})
ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0)
readv(r2, &(0x7f0000000800)=[{0x0}], 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)

3.632694104s ago: executing program 4 (id=936):
r0 = socket$kcm(0x2d, 0x2, 0x0)
bind$xdp(r0, &(0x7f00000000c0)={0x2d, 0x9, 0x0, 0x5}, 0x10)

3.420180734s ago: executing program 9 (id=937):
r0 = add_key$keyring(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000001240)='asymmetric\x00', &(0x7f0000001280)=@secondary)
add_key(&(0x7f00000012c0)='asymmetric\x00', 0x0, &(0x7f0000001300)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee2925", 0x1d8, r0)

3.262109293s ago: executing program 4 (id=938):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000400), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000440), 0x10106, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000500)={0x0, [[0xffffffff, 0xffffffdf, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0)
readv(r2, &(0x7f0000000800)=[{0x0}], 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)

2.840692351s ago: executing program 9 (id=939):
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0xe8400)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {0x2, 0x8, 0x1, 0x7}, 0xe, [0x200, 0x0, 0xfb7, 0x6, 0x1ff, 0x400, 0x5, 0xd, 0xc, 0xfffffff7, 0x0, 0xffffffff, 0x3, 0xd4a, 0x9, 0x1, 0x8, 0x2, 0x3, 0x0, 0x1000, 0x7, 0x4, 0x8000, 0x6, 0x5b68, 0x0, 0x0, 0x3, 0x4, 0x7, 0x8d, 0xc2df, 0x4, 0x3, 0x9, 0x7, 0xd42, 0x0, 0xfdba, 0xd58, 0x0, 0x8, 0x0, 0x3, 0x200, 0xfffffffd, 0xb, 0xfffff133, 0x9, 0x4, 0xd0d, 0x5, 0x8001, 0x6, 0x80, 0x2, 0x800, 0xf39, 0x7, 0x80000001, 0x100, 0x100, 0x4], [0x7, 0x60000000, 0x6e72, 0x6, 0x9, 0xff, 0x1, 0x2, 0x9f4, 0x5, 0xffffffff, 0x3, 0x46b, 0x4, 0x5, 0x3, 0x5, 0x7f, 0x40, 0x6, 0xf23, 0x9, 0xb, 0x3, 0x0, 0x4, 0xfffffffd, 0xe, 0x2c8, 0x1, 0x8001, 0x3, 0x3, 0x80000000, 0xf5, 0x2, 0xfffffffd, 0x80000000, 0x1, 0x6, 0x0, 0x8, 0xfffffff3, 0x5, 0x29, 0x0, 0x0, 0x100, 0x4, 0x0, 0x7, 0x3, 0x7, 0x3, 0x6, 0x4, 0x6, 0x3, 0x6, 0x3, 0x7, 0x1, 0x80000000, 0x8], [0x80, 0x944e, 0xd, 0x3, 0x6, 0x3, 0x1000, 0x4, 0xed8, 0x80000001, 0x1, 0x36922bcf, 0x3, 0x4, 0x2, 0xfffffe00, 0x8, 0x1, 0x8, 0x4, 0x100, 0x1, 0x8, 0xa, 0x3, 0xff, 0x4, 0x3, 0x6, 0x10000, 0xfffffff7, 0x7, 0x9, 0x8a24, 0xe, 0xffffff19, 0x3, 0x7, 0x4, 0x40, 0x1, 0xfffffff9, 0x7, 0x7, 0x6, 0x4, 0x6, 0xc484, 0x5, 0x1, 0x10001, 0x4, 0xd, 0xe01, 0xd62, 0x3, 0x7fffffff, 0x3, 0x8, 0x9, 0x10, 0x40, 0x80000000, 0x8], [0xffffff3a, 0x0, 0xc, 0x2, 0x7, 0xfab2, 0x6, 0x401, 0x8, 0x3, 0x5, 0x95, 0xb, 0x2, 0x7f, 0x1fd, 0xff, 0x4, 0xffff, 0x71, 0x1, 0x9, 0x400, 0xfff, 0x1, 0x1, 0x34200000, 0x3ff, 0xb35, 0x4, 0x5, 0x0, 0x2, 0x8, 0xdb2, 0x0, 0x1, 0x2ce, 0xff, 0x46, 0x0, 0x2, 0x98, 0x8, 0x7, 0x7, 0x80000001, 0x9, 0xa0, 0x2, 0xba, 0x80, 0xccc, 0x5, 0xffffffff, 0x40, 0x3, 0x4, 0x6, 0x7fffffff, 0x100, 0xc2, 0x9, 0x7]}, 0x45c)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x5420, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000001a40)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000001b00)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001b80), 0xa8c01)
write$sndseq(r5, &(0x7f0000001bc0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001780)={{0xfffffffe, 0x0, 0x6, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x800000, 'syz1\x00', 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

2.62376265s ago: executing program 7 (id=940):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100c8c4, &(0x7f0000000200)=ANY=[], 0x0, 0x5f1, &(0x7f0000000240)="$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")
umount2(&(0x7f0000000840)='./file0\x00', 0x6)
ftruncate(r1, 0x461)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_MASK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000000))
signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x800]}, 0x8, 0x80800)
ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000040))

2.394384339s ago: executing program 9 (id=941):
sched_setscheduler(0x0, 0x1, &(0x7f0000000cc0)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000d40)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000d80), 0x0, 0x0)
read$msr(r2, &(0x7f0000000dc0)=""/102392, 0x18ff8)
process_vm_readv(r1, &(0x7f000001a3c0)=[{&(0x7f000001a400)=""/3, 0x3}], 0x1, &(0x7f000001a600)=[{&(0x7f000001a6c0)=""/216, 0xd8}], 0x1, 0x0)

1.840320107s ago: executing program 4 (id=942):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x405, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettaction={0x24, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}}, 0x0)
read(r0, &(0x7f0000000340)=""/250, 0xfa)

1.837196087s ago: executing program 7 (id=943):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x100, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28)

1.472135275s ago: executing program 4 (id=944):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x1, 0x0, 0x73f0, 0x9})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000780)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0)
read$msr(r2, &(0x7f0000019840)=""/102368, 0x18fe0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
unshare(0x22020600)
write(0xffffffffffffffff, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)
dup3(r2, 0xffffffffffffffff, 0x80000)

342.234641ms ago: executing program 4 (id=945):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000003c0)={0x100c000, 0x2})

267.190921ms ago: executing program 7 (id=946):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x14, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x9ba3, 0x636f, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844)

1.6625ms ago: executing program 0 (id=947):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet(r0, 0x0, 0x0, 0x4050, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004)
syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

578.2µs ago: executing program 7 (id=948):
prlimit64(0x0, 0xe, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10)
r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
getpgrp(0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
sendfile(r0, r0, 0x0, 0x40000000800)
sendfile(r1, r0, 0x0, 0x7ffff000)

0s ago: executing program 8 (id=949):
r0 = socket$kcm(0x23, 0x5, 0x0)
listen(r0, 0x800)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r3 = accept4(r0, 0x0, 0x0, 0x80000)
listen(r3, 0x1)

kernel console output (not intermixed with test programs):

5640][ T4198] usb 4-1: USB disconnect, device number 2
[  175.166084][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3641 @ nid 36
[  175.190297][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3640 @ nid 36
[  175.240570][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3639 @ nid 36
[  175.279611][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3638 @ nid 36
[  175.288943][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3637 @ nid 36
[  175.316768][ T5235] fido_id[5235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  175.344633][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3636 @ nid 36
[  175.394034][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3635 @ nid 36
[  175.439136][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3634 @ nid 36
[  175.469388][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3633 @ nid 36
[  175.511495][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3632 @ nid 36
[  175.566483][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3631 @ nid 36
[  175.649669][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3630 @ nid 36
[  175.659033][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3629 @ nid 36
[  175.721478][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3628 @ nid 36
[  175.757200][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3627 @ nid 36
[  175.797201][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3626 @ nid 36
[  175.859692][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3625 @ nid 36
[  175.880872][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3624 @ nid 36
[  175.908834][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3623 @ nid 36
[  176.043222][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3622 @ nid 36
[  176.147687][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3621 @ nid 36
[  176.411454][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3620 @ nid 36
[  176.499601][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3619 @ nid 36
[  176.578840][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3618 @ nid 36
[  176.669566][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3617 @ nid 36
[  176.678849][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3616 @ nid 36
[  176.820445][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3615 @ nid 36
[  176.887099][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3614 @ nid 36
[  177.418898][ T5264] loop3: detected capacity change from 0 to 1024
[  177.541047][ T5264] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  177.648647][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3613 @ nid 36
[  177.695293][ T5264] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6)
[  177.704835][ T5264] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  177.714424][ T5264] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.165: Failed to acquire dquot type 0
[  177.735950][ T5264] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  177.753840][ T5264] EXT4-fs (loop3): 1 truncate cleaned up
[  177.760124][ T5264] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  177.865366][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3612 @ nid 36
[  177.874976][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3611 @ nid 36
[  178.056917][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3610 @ nid 36
[  178.188939][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3609 @ nid 36
[  178.206076][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3608 @ nid 36
[  178.227094][ T5271] loop7: detected capacity change from 0 to 2048
[  178.247675][   T21] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[  178.271098][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3607 @ nid 36
[  178.310067][   T21] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[  178.326359][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3606 @ nid 36
[  178.338878][   T21] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[  178.342540][ T5271] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  178.369700][   T21] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[  178.380902][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3605 @ nid 36
[  178.391459][ T5271] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  178.415523][   T21] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[  178.420218][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3604 @ nid 36
[  178.435988][   T21] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[  178.450539][ T5271] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  178.474400][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3603 @ nid 36
[  178.479649][   T21] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[  178.504133][ T5271] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.512974][   T21] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0
[  178.529552][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3602 @ nid 36
[  178.557668][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3601 @ nid 36
[  178.576215][   T21] hid-generic 0000:0000:0001.0003: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  178.590240][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3600 @ nid 36
[  178.625629][ T5125] erofs: (device loop6): z_erofs_readahead: readahead error at page 3599 @ nid 36
[  178.738992][ T5125] attempt to access beyond end of device
[  178.738992][ T5125] loop6: rw=524288, want=40, limit=16
[  178.787853][ T5281] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  178.827637][ T5125] attempt to access beyond end of device
[  178.827637][ T5125] loop6: rw=524288, want=48, limit=16
[  178.965801][ T5288] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5291] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5288]
[  179.024593][ T5282] fido_id[5282]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  179.040527][ T5284] rxe_eth0 speed is unknown, defaulting to 1000
[  179.374338][ T5297] input: syz1 as /devices/virtual/input/input25
[  180.915932][ T5316] loop8: detected capacity change from 0 to 512
[  180.979829][   T26] Bluetooth: hci4: command 0x0409 tx timeout
[  181.023003][ T5316] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  181.044996][ T5316] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.241800][ T5284] chnl_net:caif_netlink_parms(): no params data found
[  181.600249][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.683963][ T5284] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.716897][ T5284] device bridge_slave_0 entered promiscuous mode
[  181.798194][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.820059][ T5284] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.877378][ T5284] device bridge_slave_1 entered promiscuous mode
[  181.950047][ T5284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.983242][ T5284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.021560][ T5339] loop3: detected capacity change from 0 to 2048
[  182.048391][  T140] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.163946][ T5284] team0: Port device team_slave_0 added
[  182.179560][ T5339] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.198623][ T5284] team0: Port device team_slave_1 added
[  182.262555][ T5347] loop7: detected capacity change from 0 to 2048
[  182.279835][   T25] audit: type=1800 audit(1792478324.325:36): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.178" name="file2" dev="loop3" ino=1347 res=0 errno=0
[  182.326694][  T140] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.356521][ T5347] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: none.
[  182.571436][  T140] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.668172][ T5284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.688767][ T5354] loop3: detected capacity change from 0 to 2048
[  182.699595][ T5284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.771862][ T5354] EXT4-fs (loop3): Unrecognized mount option "dont_appraise" or missing value
[  182.795808][ T5284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.875316][  T140] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.059840][ T1108] Bluetooth: hci4: command 0x041b tx timeout
[  183.070281][ T5284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.088592][ T5284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.816453][ T5363] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26
[  183.854195][ T5365] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5366] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5365]
[  183.860259][ T5284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.228451][ T5284] device hsr_slave_0 entered promiscuous mode
[  184.271649][ T5284] device hsr_slave_1 entered promiscuous mode
[  184.900285][ T4505] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  184.910803][ T5284] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  184.945214][ T5284] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  185.010394][ T5284] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  185.028660][ T5284] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  185.038024][ T5385] input: syz1 as /devices/virtual/input/input27
[  185.179766][ T4505] usb 9-1: Using ep0 maxpacket: 8
[  185.319956][ T4505] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  185.333709][ T5387] loop3: detected capacity change from 0 to 2048
[  185.371793][ T4505] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  185.432367][ T5387] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  185.446648][ T4505] usb 9-1: config 0 interface 0 has no altsetting 0
[  185.495839][ T4505] usb 9-1: New USB device found, idVendor=045e, idProduct=071d, bcdDevice= 0.00
[  185.529835][ T5387] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  185.540741][ T4505] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.611334][ T4505] usb 9-1: config 0 descriptor??
[  185.625232][ T5387] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  185.717556][ T5387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.850118][ T1108] Bluetooth: hci4: command 0x040f tx timeout
[  185.880040][ T5284] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.174049][ T4505] input: HID 045e:071d as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:071D.0004/input/input28
[  186.465889][ T5284] 8021q: adding VLAN 0 to HW filter on device team0
[  186.504331][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  186.564882][ T4505] microsoft 0003:045E:071D.0004: input,hiddev0,hidraw0: USB HID v0.10 Device [HID 045e:071d] on usb-dummy_hcd.8-1/input0
[  186.582478][ T5402] input: syz1 as /devices/virtual/input/input29
[  186.595347][ T4505] usb 9-1: USB disconnect, device number 2
[  186.607291][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  186.775095][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  186.840448][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  186.884682][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.891866][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.962198][ T5407] fido_id[5407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  187.010382][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  187.055746][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  187.113605][ T4305] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  187.123763][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  187.139707][ T4305] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  187.147167][ T4305] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  187.190282][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.197378][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.849638][ T4305] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  187.857477][ T4305] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  187.906500][ T4305] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  187.924344][ T4305] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  187.964917][ T4305] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  187.990626][ T4305] hid-generic 0000:0000:0001.0005: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  188.089614][ T4305] Bluetooth: hci4: command 0x0419 tx timeout
[  188.185590][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.235062][ T5413] fido_id[5413]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  188.251792][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  188.340005][ T5416] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5417] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5416]
[  188.354636][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  188.371987][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  188.480459][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  188.489253][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  188.525818][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  188.566655][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  188.650341][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  188.733917][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  188.771588][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  188.828718][  T140] device hsr_slave_0 left promiscuous mode
[  188.936465][  T140] device hsr_slave_1 left promiscuous mode
[  188.946616][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.974219][  T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.031104][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.038573][  T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.169821][  T140] device bridge_slave_1 left promiscuous mode
[  189.176042][  T140] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.230445][  T140] device bridge_slave_0 left promiscuous mode
[  189.236713][  T140] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.300275][ T5429] loop8: detected capacity change from 0 to 512
[  189.376903][  T140] device veth1_macvtap left promiscuous mode
[  189.413478][  T140] device veth0_macvtap left promiscuous mode
[  189.449702][  T140] device veth1_vlan left promiscuous mode
[  189.495455][  T140] device veth0_vlan left promiscuous mode
[  189.628023][ T5429] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  189.709742][ T5429] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.469209][   T25] audit: type=1800 audit(1792478332.515:37): pid=5443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.197" name=08 dev="sda1" ino=2043 res=0 errno=0
[  190.736297][ T5445] input: syz1 as /devices/virtual/input/input30
[  190.883893][  T140] team0 (unregistering): Port device team_slave_1 removed
[  190.901851][  T140] team0 (unregistering): Port device team_slave_0 removed
[  190.923185][  T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.942823][  T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.519321][  T140] bond0 (unregistering): Released all slaves
[  192.651892][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  192.656936][ T5453] loop3: detected capacity change from 0 to 256
[  193.636057][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  193.690112][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.704704][ T5284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.274657][ T5473] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5474] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5473]
[  195.800308][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  195.837883][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  195.936831][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  195.985670][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  196.040597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  196.057502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  196.117286][ T5284] device veth0_vlan entered promiscuous mode
[  196.148175][ T5284] device veth1_vlan entered promiscuous mode
[  196.269799][ T4257] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  196.313552][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  196.356172][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  196.415005][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  196.436597][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  197.818057][ T5284] device veth0_macvtap entered promiscuous mode
[  197.876363][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  197.884064][ T4257] usb 8-1: Using ep0 maxpacket: 8
[  197.916318][ T5284] device veth1_macvtap entered promiscuous mode
[  197.957220][ T5500] rxe_eth0 speed is unknown, defaulting to 1000
[  198.009837][ T4257] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  198.025758][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.053460][ T4257] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  198.069595][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.108775][ T4257] usb 8-1: config 0 interface 0 has no altsetting 0
[  198.109656][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.141726][ T4257] usb 8-1: New USB device found, idVendor=045e, idProduct=071d, bcdDevice= 0.00
[  198.185454][ T4257] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.193725][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.237055][ T4257] usb 8-1: config 0 descriptor??
[  198.244900][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.307836][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.374919][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.437004][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.516815][ T5284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.556728][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  198.610886][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  198.669180][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.719593][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.743150][ T4257] input: HID 045e:071d as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:071D.0006/input/input31
[  200.327316][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.377167][ T4257] microsoft 0003:045E:071D.0006: input,hiddev0,hidraw0: USB HID v0.10 Device [HID 045e:071d] on usb-dummy_hcd.7-1/input0
[  200.413597][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.495365][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.505600][ T4257] usb 8-1: USB disconnect, device number 2
[  200.599738][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.652484][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  200.659413][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  200.702367][ T5519] loop7: detected capacity change from 0 to 2048
[  200.723368][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.793755][ T5518] fido_id[5518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[  200.826112][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.888134][ T5519] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  200.962279][ T5284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.022114][ T5519] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  201.057529][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  201.096592][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  201.102738][ T5519] UDF-fs: Scanning with blocksize 512 failed
[  201.188552][ T5284] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.237492][ T5519] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  201.261607][ T5284] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.278636][ T5284] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.301668][ T5519] UDF-fs: Scanning with blocksize 1024 failed
[  201.319304][ T5284] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.355882][ T5519] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  201.435361][ T5519] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  201.453641][ T5519] UDF-fs: Scanning with blocksize 2048 failed
[  201.485770][ T5519] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  201.532324][ T5519] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  201.593696][ T5519] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  201.615648][ T5519] UDF-fs: Scanning with blocksize 4096 failed
[  201.639400][ T5519] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1)
[  202.080260][ T5526] input: syz1 as /devices/virtual/input/input32
[  202.389934][ T4570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.497211][ T4570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.603147][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  202.705371][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.849219][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.917408][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  204.851451][ T5548] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input33
[  205.259446][ T5556] input: syz1 as /devices/virtual/input/input34
[  206.247923][ T5563] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5564] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5563]
[  211.306022][ T5611] loop4: detected capacity change from 0 to 1024
[  211.683059][ T5611] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  211.918647][ T5611] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6)
[  211.935911][ T5611] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  211.950616][ T5611] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.226: Failed to acquire dquot type 0
[  211.988656][ T5611] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  212.022077][ T5611] EXT4-fs (loop4): 1 truncate cleaned up
[  212.032802][ T5611] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  212.977300][ T5621] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5622] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5621]
[  214.317219][    T7] Bluetooth: hci3: command 0x0406 tx timeout
[  214.333084][    T7] Bluetooth: hci0: command 0x0406 tx timeout
[  216.220895][ T1111] Bluetooth: hci5: command 0x0409 tx timeout
[  216.257123][ T5618] rxe_eth0 speed is unknown, defaulting to 1000
[  216.510940][ T5632] loop8: detected capacity change from 0 to 1024
[  216.623803][ T5632] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  216.712302][ T5632] EXT4-fs (loop8): invalid journal inode
[  216.759665][ T5632] EXT4-fs (loop8): can't get journal size
[  216.821844][ T5632] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback.
[  217.177394][ T5618] chnl_net:caif_netlink_parms(): no params data found
[  217.549848][ T5627] input: syz1 as /devices/virtual/input/input35
[  217.564928][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.273825][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.328339][ T5618] device bridge_slave_0 entered promiscuous mode
[  219.367838][ T4257] Bluetooth: hci5: command 0x041b tx timeout
[  219.431228][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.476557][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.524946][ T5618] device bridge_slave_1 entered promiscuous mode
[  219.702047][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.804351][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.611339][ T4257] Bluetooth: hci5: command 0x040f tx timeout
[  221.636228][ T5618] team0: Port device team_slave_0 added
[  221.760351][ T5618] team0: Port device team_slave_1 added
[  221.789282][ T5670] loop9: detected capacity change from 0 to 1024
[  221.885369][ T5672] loop4: detected capacity change from 0 to 512
[  221.897779][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.920009][   T25] audit: type=1800 audit(1792478363.975:38): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.238" name=08 dev="sda1" ino=2043 res=0 errno=0
[  221.937205][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.160799][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.234234][ T5672] xt_NFQUEUE: number of total queues is 0
[  222.321812][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.374685][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.525115][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.299900][ T5684] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5686] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5684]
[  223.896042][ T4257] Bluetooth: hci5: command 0x0419 tx timeout
[  224.062539][ T5618] device hsr_slave_0 entered promiscuous mode
[  224.118247][ T5618] device hsr_slave_1 entered promiscuous mode
[  224.213836][ T5618] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.235158][ T5618] Cannot create hsr debugfs directory
[  224.708376][ T4392] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.892673][ T4392] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.512625][ T4392] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.556584][ T5727] loop7: detected capacity change from 0 to 512
[  228.641965][ T4392] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.730457][ T5726] xt_NFQUEUE: number of total queues is 0
[  233.495385][   T25] audit: type=1800 audit(1792478375.545:39): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.259" name=08 dev="sda1" ino=2043 res=0 errno=0
[  236.769846][ T5780] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5782] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5780]
[  242.631308][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  242.756263][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  242.804769][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  243.301907][ T5828] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5830] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5828]
[  243.925396][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  244.348315][ T5838] input: syz1 as /devices/virtual/input/input36
[  244.936236][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.003696][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  245.138275][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  246.020015][ T4262] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  246.041363][   T25] audit: type=1800 audit(1792478388.025:40): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.280" name=08 dev="sda1" ino=2043 res=0 errno=0
[  246.103934][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[  246.284121][ T5618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  246.346149][ T5618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  246.373427][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  246.394102][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  246.411835][  T140] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.421348][  T140] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.870145][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  246.958282][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  246.976502][  T140] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.984764][  T140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.007642][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  247.019004][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  247.038433][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  247.074873][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  247.102857][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  247.124184][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  247.150618][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  247.198680][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  247.246064][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  247.290218][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  247.318701][   T25] audit: type=1326 audit(1792478389.325:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87002fb559 code=0x7ffc0000
[  247.390353][   T25] audit: type=1326 audit(1792478389.335:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87002fb559 code=0x7ffc0000
[  247.430503][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  247.455859][   T25] audit: type=1326 audit(1792478389.335:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87002fb559 code=0x7ffc0000
[  247.488915][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  247.969871][ T5866] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5868] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5866]
[  248.547736][ T4262] usb 10-1: Using ep0 maxpacket: 32
[  248.649876][ T4262] usb 10-1: device descriptor read/all, error -71
[  248.664327][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  248.760460][   T25] audit: type=1326 audit(1792478389.335:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87002fb559 code=0x7ffc0000
[  249.069901][   T25] audit: type=1326 audit(1792478389.365:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87002fb559 code=0x7ffc0000
[  249.637527][   T25] audit: type=1326 audit(1792478389.365:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87002fb559 code=0x7ffc0000
[  249.883612][   T25] audit: type=1326 audit(1792478389.365:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87002fb559 code=0x7ffc0000
[  251.670878][   T25] audit: type=1326 audit(1792478389.365:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f87002fb559 code=0x7ffc0000
[  251.754174][   T25] audit: type=1326 audit(1792478389.415:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87002fb559 code=0x7ffc0000
[  251.817053][   T25] audit: type=1326 audit(1792478389.415:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87002fb2c2 code=0x7ffc0000
[  251.988463][   T25] audit: type=1326 audit(1792478389.415:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f87002fb357 code=0x7ffc0000
[  252.140435][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  252.159912][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  252.236106][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.287762][   T25] audit: type=1326 audit(1792478389.415:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f87002b8251 code=0x7ffc0000
[  252.392082][ T4392] device hsr_slave_0 left promiscuous mode
[  252.433693][ T4392] device hsr_slave_1 left promiscuous mode
[  252.465255][   T25] audit: type=1326 audit(1792478389.415:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f87002fc349 code=0x7ffc0000
[  252.508852][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.562546][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.619758][   T25] audit: type=1326 audit(1792478389.435:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87002fb559 code=0x7ffc0000
[  252.668247][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.701427][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.764845][ T4392] device bridge_slave_1 left promiscuous mode
[  252.809589][   T25] audit: type=1326 audit(1792478389.435:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87002fb559 code=0x7ffc0000
[  252.879688][   T25] audit: type=1326 audit(1792478389.435:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f87002b82bb code=0x7ffc0000
[  252.997321][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.021639][   T25] audit: type=1326 audit(1792478389.435:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.7.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87002fb559 code=0x7ffc0000
[  255.929151][ T4392] device bridge_slave_0 left promiscuous mode
[  256.389931][ T5918] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5923] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5918]
[  257.120298][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.165602][ T4392] device veth1_macvtap left promiscuous mode
[  257.750402][ T4392] device veth0_macvtap left promiscuous mode
[  257.890349][ T4392] device veth1_vlan left promiscuous mode
[  257.898138][ T4392] device veth0_vlan left promiscuous mode
[  259.257845][ T4257] Bluetooth: hci1: command 0x0406 tx timeout
[  260.369186][ T5944] loop7: detected capacity change from 0 to 2048
[  260.535837][ T5944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.630965][   T25] kauditd_printk_skb: 32 callbacks suppressed
[  260.630982][   T25] audit: type=1800 audit(1792478402.685:90): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.307" name="file2" dev="loop7" ino=1347 res=0 errno=0
[  261.957792][ T5955] loop7: detected capacity change from 0 to 4096
[  262.095124][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  262.116523][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  262.191211][ T4392] team0 (unregistering): Port device team_slave_1 removed
[  262.513288][ T5955] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  263.432027][ T4392] team0 (unregistering): Port device team_slave_0 removed
[  263.552537][ T4392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  264.100002][ T5968] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5970] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5968]
[  264.784442][ T4262] Bluetooth: hci2: command 0x0406 tx timeout
[  265.444591][ T4392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.770209][ T5987] loop7: detected capacity change from 0 to 512
[  267.044204][ T4392] bond0 (unregistering): Released all slaves
[  267.071582][ T5987] EXT4-fs (loop7): 1 truncate cleaned up
[  267.119678][ T5987] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  267.695817][ T5618] device veth0_vlan entered promiscuous mode
[  268.788802][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  268.821551][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  268.890740][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  268.920731][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  269.020470][ T5618] device veth1_vlan entered promiscuous mode
[  269.072237][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  269.101377][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  269.148351][ T5997] input: syz1 as /devices/virtual/input/input37
[  269.245937][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  269.266530][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  269.295429][ T5618] device veth0_macvtap entered promiscuous mode
[  269.366450][ T5618] device veth1_macvtap entered promiscuous mode
[  269.404271][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.435205][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.456617][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.481763][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.506198][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.531259][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.555135][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.569908][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.585593][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.599907][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  269.633156][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  269.646652][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  269.664254][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  269.680095][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.695187][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.710361][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.798073][ T6005] loop4: detected capacity change from 0 to 1024
[  270.014785][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.371587][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.545589][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.567933][ T5618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.578867][ T5618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.596915][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.625384][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  270.638294][ T6005] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  270.656950][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  270.849670][ T5618] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.906526][ T6005] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6)
[  270.917472][ T6005] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  270.927602][ T6005] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.315: Failed to acquire dquot type 0
[  270.978361][ T6005] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  271.010106][ T6005] EXT4-fs (loop4): 1 truncate cleaned up
[  271.017038][ T6005] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  271.321980][ T5618] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.500892][ T5618] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.519684][ T5618] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.685497][ T6016] loop9: detected capacity change from 0 to 512
[  271.729082][ T6017] input: syz1 as /devices/virtual/input/input38
[  271.780629][ T6016] EXT4-fs (loop9): Ignoring removed orlov option
[  271.871109][ T6018] rxe_eth0 speed is unknown, defaulting to 1000
[  271.941703][ T6016] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  272.021969][ T6016] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it
[  272.042569][ T6016] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.325: Corrupt directory, running e2fsck is recommended
[  272.495609][ T6032] loop4: detected capacity change from 0 to 4096
[  272.767622][ T6016] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  272.852995][ T6038] loop7: detected capacity change from 0 to 256
[  272.872507][ T6032] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  273.096031][ T6016] EXT4-fs error (device loop9): ext4_iget_extra_inode:4573: inode #15: comm syz.9.325: corrupted in-inode xattr
[  273.274160][ T6016] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.325: couldn't read orphan inode 15 (err -117)
[  273.461585][ T6016] EXT4-fs (loop9): mounted filesystem without journal. Opts: noquota,noblock_validity,mb_optimize_scan=0x0000000000000001,noblock_validity,init_itable,grpjquota=.sb=0x0000000000000001,min_batch_time=0x0000000000000007,jqfmt=vfsv1,orlov,bsddf,noinit_itable,noload,,,errors=continue. Quota mode: writeback.
[  273.757546][ T6018] chnl_net:caif_netlink_parms(): no params data found
[  273.849708][ T4294] Bluetooth: hci3: command 0x0409 tx timeout
[  274.057439][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.108245][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.164353][ T6018] device bridge_slave_0 entered promiscuous mode
[  274.205269][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.317305][ T6064] loop9: detected capacity change from 0 to 1024
[  274.418112][ T6064] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  274.526132][ T6064] Quota error (device loop9): find_tree_dqentry: Getting block too big (64 >= 6)
[  274.539349][ T6064] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  274.549673][ T6064] EXT4-fs error (device loop9): ext4_acquire_dquot:6236: comm syz.9.336: Failed to acquire dquot type 0
[  274.695573][ T6064] EXT4-fs error (device loop9): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  274.717631][ T6064] EXT4-fs (loop9): 1 truncate cleaned up
[  274.724446][ T6064] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  275.128194][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.209349][ T6018] device bridge_slave_1 entered promiscuous mode
[  275.278222][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.323500][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.456744][ T6018] team0: Port device team_slave_0 added
[  275.533406][ T6076] input: syz1 as /devices/virtual/input/input39
[  275.931752][ T4262] Bluetooth: hci3: command 0x041b tx timeout
[  276.104395][ T6018] team0: Port device team_slave_1 added
[  276.360528][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.429623][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.680807][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.822317][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.945163][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.071017][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.123404][ T6018] device hsr_slave_0 entered promiscuous mode
[  277.138947][ T6018] device hsr_slave_1 entered promiscuous mode
[  277.148705][ T6093] loop9: detected capacity change from 0 to 4096
[  277.173481][ T6018] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.189600][ T6018] Cannot create hsr debugfs directory
[  278.758520][ T4198] Bluetooth: hci3: command 0x040f tx timeout
[  278.796973][ T6093] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  279.226391][ T6018] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.551542][ T6094] input: syz1 as /devices/virtual/input/input40
[  280.678592][ T6018] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.981044][ T6018] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.109613][ T4198] Bluetooth: hci3: command 0x0419 tx timeout
[  282.583912][ T6018] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.078365][ T6018] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  283.120864][ T6018] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  283.164682][ T6018] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  283.240740][ T6018] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  283.639328][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.727412][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  283.797115][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  283.835726][ T6018] 8021q: adding VLAN 0 to HW filter on device team0
[  283.887420][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  283.939230][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  283.991380][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.002051][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.091331][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  284.145496][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  284.218714][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  284.264142][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.273667][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.342824][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  284.436455][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  284.476597][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  284.533318][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  284.578330][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  284.640905][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  284.692721][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  284.758796][ T6018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  284.796502][ T6018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  284.832779][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  284.868199][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  284.916094][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  284.947610][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  284.969376][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  285.346650][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  285.360123][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  285.375284][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.427919][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  285.440872][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  285.482320][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  285.495846][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  285.514376][ T6018] device veth0_vlan entered promiscuous mode
[  285.540016][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  285.554539][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  285.585150][ T6018] device veth1_vlan entered promiscuous mode
[  285.684291][ T6204] overlayfs: missing 'lowerdir'
[  285.696074][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  286.028918][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  286.339661][ T1108] Bluetooth: hci0: command 0x0c24 tx timeout
[  286.530711][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  286.641824][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  287.660064][ T6216] loop9: detected capacity change from 0 to 1024
[  288.294773][ T6018] device veth0_macvtap entered promiscuous mode
[  288.338626][ T6216] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  288.391114][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  288.408179][ T6216] Quota error (device loop9): find_tree_dqentry: Getting block too big (64 >= 6)
[  288.420970][ T6216] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  288.432259][ T6216] EXT4-fs error (device loop9): ext4_acquire_dquot:6236: comm syz.9.362: Failed to acquire dquot type 0
[  288.472299][ T6216] EXT4-fs error (device loop9): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  289.563180][ T6216] EXT4-fs (loop9): 1 truncate cleaned up
[  289.574712][ T6216] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  289.656987][ T4392] device hsr_slave_0 left promiscuous mode
[  289.738609][ T4392] device hsr_slave_1 left promiscuous mode
[  289.834108][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.902235][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.952745][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.996469][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.048980][ T4392] device bridge_slave_1 left promiscuous mode
[  290.241006][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.352928][ T4392] device bridge_slave_0 left promiscuous mode
[  290.427896][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.829056][ T4392] device veth1_macvtap left promiscuous mode
[  290.840078][ T4392] device veth0_macvtap left promiscuous mode
[  290.862914][ T4392] device veth1_vlan left promiscuous mode
[  290.902163][ T4392] device veth0_vlan left promiscuous mode
[  291.419335][ T4392] team0 (unregistering): Port device team_slave_1 removed
[  291.445631][ T4392] team0 (unregistering): Port device team_slave_0 removed
[  292.531139][ T4392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.576307][ T4392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  292.752548][ T4392] bond0 (unregistering): Released all slaves
[  292.803115][ T6018] device veth1_macvtap entered promiscuous mode
[  292.842009][ T6232] netlink: 36 bytes leftover after parsing attributes in process `syz.4.368'.
[  292.917473][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.010183][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.030432][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.049524][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.090665][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.129524][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.170483][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.211878][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.285191][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.360146][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  293.391791][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  294.356828][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.406437][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.512994][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.177805][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.194616][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.217948][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.674628][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.105141][ T6289] input: syz1 as /devices/virtual/input/input41
[  297.136178][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.976167][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.099589][ T6018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.189091][ T6018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.252029][ T6018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.353985][ T6018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.372487][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  298.400895][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  298.534979][ T6306] loop7: detected capacity change from 0 to 512
[  298.716126][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.739046][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.758956][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  298.846931][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.869191][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.881832][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  298.897479][ T6306] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.381: inode #1: comm syz.7.381: iget: illegal inode #
[  299.039374][ T6306] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.381: error while reading EA inode 1 err=-117
[  299.097754][ T6306] EXT4-fs (loop7): 1 orphan inode deleted
[  299.153257][ T6306] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,journal_dev=0x0000000000004b65,data_err=ignore,noinit_itable,i_version,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005a,errors=continue,dioread_lock,noblock_validity,prjquota,,errors=continue. Quota mode: writeback.
[  299.441337][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200'
[  299.457003][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:3 Not tainted syzkaller #0
[  299.467381][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  299.482938][ T4200] Workqueue: hci1 hci_rx_work
[  299.490515][ T4200] Call Trace:
[  299.496146][ T4200]  <TASK>
[  299.505223][ T4200]  dump_stack_lvl+0x188/0x250
[  299.515584][ T4200]  ? show_regs_print_info+0x20/0x20
[  299.525219][ T4200]  ? load_image+0x410/0x410
[  299.535397][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  299.550189][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  299.559025][ T4200]  ? kthread+0x42e/0x520
[  299.570005][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  299.580016][ T4200]  kobject_add_internal+0x5ba/0xcd0
[  299.587496][ T4200]  kobject_add+0x160/0x230
[  299.595595][ T4200]  ? kobject_init+0x1c0/0x1c0
[  299.604325][ T4200]  ? __raw_spin_lock_init+0x41/0x100
[  299.617615][ T4200]  ? klist_children_get+0x50/0x50
[  299.626859][ T4200]  ? get_device_parent+0x121/0x3e0
[  299.634901][ T4200]  device_add+0x470/0x1050
[  299.642079][ T4200]  ? device_initialize+0x2a5/0x4d0
[  299.654186][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  299.661558][ T4200]  le_conn_complete_evt+0xc55/0x14d0
[  299.669457][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[  299.679290][ T4200]  ? __mutex_trylock_common+0x15c/0x260
[  299.687065][ T4200]  hci_le_meta_evt+0x285/0x3ca0
[  299.694985][ T4200]  ? hci_event_packet+0x363/0x1310
[  299.701821][ T4200]  ? __lock_acquire+0x7d40/0x7d40
[  299.707994][ T4200]  ? hci_remote_host_features_evt+0x240/0x240
[  299.716041][ T4200]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  299.724411][ T4200]  ? mark_lock+0x94/0x320
[  299.729955][ T4200]  ? mutex_unlock+0x10/0x10
[  299.735405][ T4200]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  299.744808][ T4200]  ? lock_chain_count+0x20/0x20
[  299.754717][ T4200]  ? __rwlock_init+0x140/0x140
[  299.763295][ T4200]  hci_event_packet+0xe0b/0x1310
[  299.774138][ T4200]  ? _raw_spin_unlock+0x40/0x40
[  299.780914][ T4200]  ? rcu_lock_release+0x20/0x20
[  299.788786][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[  299.797845][ T4200]  hci_rx_work+0x255/0xa10
[  299.805075][ T4200]  process_one_work+0x867/0xff0
[  299.811992][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  299.820997][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  299.828541][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  299.837029][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  299.844003][ T4200]  ? wq_worker_running+0x97/0x170
[  299.851426][ T4200]  worker_thread+0xad7/0x12a0
[  299.858527][ T4200]  kthread+0x42e/0x520
[  299.864718][ T4200]  ? rcu_lock_release+0x20/0x20
[  299.871126][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  299.878088][ T4200]  ret_from_fork+0x1f/0x30
[  299.883748][ T4200]  </TASK>
[  299.903859][ T4200] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory.
[  299.924036][ T4200] Bluetooth: hci1: failed to register connection device
[  300.219013][ T6325] loop0: detected capacity change from 0 to 16
[  301.236215][ T6325] erofs: (device loop0): mounted with root inode @ nid 36.
[  301.302814][ T6325] attempt to access beyond end of device
[  301.302814][ T6325] loop0: rw=524288, want=48, limit=16
[  301.320239][ T6325] attempt to access beyond end of device
[  301.320239][ T6325] loop0: rw=524288, want=40, limit=16
[  302.746391][   T21] Bluetooth: hci1: command 0x2016 tx timeout
[  303.366429][ T6350] loop7: detected capacity change from 0 to 1024
[  304.957877][ T6350] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  305.071453][ T6350] Quota error (device loop7): find_tree_dqentry: Getting block too big (64 >= 6)
[  305.084347][ T6350] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  305.099236][ T6350] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.390: Failed to acquire dquot type 0
[  305.118788][ T6350] EXT4-fs error (device loop7): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  305.140911][ T6350] EXT4-fs (loop7): 1 truncate cleaned up
[  305.150761][ T6350] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  305.451610][ T6355] input: syz1 as /devices/virtual/input/input42
[  311.609929][ T4179] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  312.200030][ T4179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.277474][ T4179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.407723][ T4179] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  312.499599][ T4179] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  312.574877][ T4179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.638322][ T4179] usb 5-1: config 0 descriptor??
[  313.164500][ T6402] loop4: detected capacity change from 0 to 164
[  313.199419][ T6402] Unable to read rock-ridge attributes
[  313.371527][ T6435] loop9: detected capacity change from 0 to 512
[  313.995447][ T6437] Unable to read rock-ridge attributes
[  314.040381][ T6437] iso9660: Corrupted directory entry in block 1 of inode 1792
[  314.700113][ T4179] usbhid 5-1:0.0: can't add hid device: -71
[  315.894261][ T4179] usbhid: probe of 5-1:0.0 failed with error -71
[  316.365037][ T4179] usb 5-1: USB disconnect, device number 4
[  316.455498][ T6435] EXT4-fs (loop9): Ignoring removed nobh option
[  316.463126][ T6435] EXT4-fs (loop9): Unrecognized mount option "func=FILE_CHECK" or missing value
[  319.530404][ T1111] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  320.380009][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.617362][ T1111] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  320.775495][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.882995][ T1111] usb 5-1: config 0 descriptor??
[  321.498446][ T6505] loop4: detected capacity change from 0 to 2048
[  321.530947][ T1111] usbhid 5-1:0.0: can't add hid device: -71
[  321.559585][ T1111] usbhid: probe of 5-1:0.0 failed with error -71
[  321.620872][ T1111] usb 5-1: USB disconnect, device number 5
[  321.738533][ T6516] loop7: detected capacity change from 0 to 256
[  322.942256][ T6505] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  322.995879][ T6516] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  323.189745][ T6505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  323.483099][ T6516] exFAT-fs (loop7): hint_cluster is invalid (17)
[  323.534480][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  323.544545][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  326.479209][ T6542] loop0: detected capacity change from 0 to 512
[  326.869684][ T6542] EXT4-fs (loop0): Ignoring removed nobh option
[  326.880162][ T6542] EXT4-fs (loop0): Unrecognized mount option "func=FILE_CHECK" or missing value
[  327.276855][ T6551] loop7: detected capacity change from 0 to 1024
[  327.347438][ T6551] EXT4-fs (loop7): Ignoring removed bh option
[  327.466741][ T6551] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  327.810496][ T6568] input: syz1 as /devices/virtual/input/input43
[  327.832074][   T25] audit: type=1800 audit(1792478469.885:91): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.445" name=08 dev="sda1" ino=2043 res=0 errno=0
[  327.995295][ T6576] loop9: detected capacity change from 0 to 1024
[  328.238444][ T6576] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  328.359233][ T6576] Quota error (device loop9): find_tree_dqentry: Getting block too big (64 >= 6)
[  328.375121][ T6576] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  328.389508][ T6576] EXT4-fs error (device loop9): ext4_acquire_dquot:6236: comm syz.9.444: Failed to acquire dquot type 0
[  328.430183][ T6576] EXT4-fs error (device loop9): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  328.472071][ T6576] EXT4-fs (loop9): 1 truncate cleaned up
[  328.479566][ T6576] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  328.994096][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200'
[  329.021250][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:4 Not tainted syzkaller #0
[  329.036625][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  329.050984][ T4202] Workqueue: hci1 hci_rx_work
[  329.056833][ T4202] Call Trace:
[  329.061847][ T4202]  <TASK>
[  329.066606][ T4202]  dump_stack_lvl+0x188/0x250
[  329.074455][ T4202]  ? show_regs_print_info+0x20/0x20
[  329.082836][ T4202]  ? load_image+0x410/0x410
[  329.090026][ T4202]  sysfs_create_dir_ns+0x26a/0x290
[  329.099088][ T4202]  ? sysfs_warn_dup+0xa0/0xa0
[  329.107250][ T4202]  ? ret_from_fork+0x1f/0x30
[  329.114446][ T4202]  ? do_raw_spin_unlock+0x11d/0x230
[  329.123363][ T4202]  kobject_add_internal+0x5ba/0xcd0
[  329.134768][ T4202]  kobject_add+0x160/0x230
[  329.142349][ T4202]  ? kobject_init+0x1c0/0x1c0
[  329.149867][ T4202]  ? __raw_spin_lock_init+0x41/0x100
[  329.161385][ T4202]  ? get_device_parent+0x121/0x3e0
[  329.171315][ T4202]  device_add+0x470/0x1050
[  329.179489][ T4202]  hci_conn_add_sysfs+0xd1/0x1e0
[  329.191378][ T4202]  hci_sync_conn_complete_evt+0x647/0x9d0
[  329.200428][ T4202]  ? __rwlock_init+0x140/0x140
[  329.208659][ T4202]  hci_event_packet+0x8cf/0x1310
[  329.217438][ T4202]  ? _raw_spin_unlock+0x40/0x40
[  329.223498][ T4202]  ? rcu_lock_release+0x20/0x20
[  329.232075][ T4202]  ? hci_send_to_monitor+0x9c/0x4a0
[  329.239221][ T4202]  hci_rx_work+0x255/0xa10
[  329.245466][ T4202]  process_one_work+0x867/0xff0
[  329.251551][ T4202]  ? worker_detach_from_pool+0x240/0x240
[  329.260800][ T4202]  ? lockdep_hardirqs_off+0x70/0x100
[  329.267530][ T4202]  ? _raw_spin_lock_irq+0xb7/0xf0
[  329.274440][ T4202]  ? _raw_spin_lock_irqsave+0x100/0x100
[  329.281952][ T4202]  ? wq_worker_running+0x97/0x170
[  329.292750][ T4202]  worker_thread+0xad7/0x12a0
[  329.299192][ T4202]  kthread+0x42e/0x520
[  329.304866][ T4202]  ? rcu_lock_release+0x20/0x20
[  329.312572][ T4202]  ? kthread_blkcg+0xd0/0xd0
[  329.319745][ T4202]  ret_from_fork+0x1f/0x30
[  329.327984][ T4202]  </TASK>
[  329.342619][ T4202] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory.
[  329.364468][ T4202] Bluetooth: hci1: failed to register connection device
[  330.902736][ T4294] Bluetooth: hci4: command 0x0406 tx timeout
[  330.961542][ T6593] hub 5-0:1.0: USB hub found
[  331.016176][ T6593] hub 5-0:1.0: 1 port detected
[  331.049637][ T4294] Bluetooth: hci1: command 0x0409 tx timeout
[  331.883519][ T4198] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  332.249881][ T4198] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.308053][ T4198] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.359363][ T4198] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  332.416973][ T6620] input: syz1 as /devices/virtual/input/input44
[  332.470296][ T4198] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  332.505855][ T4198] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.541638][ T4198] usb 8-1: config 0 descriptor??
[  332.991390][ T6634] loop9: detected capacity change from 0 to 1024
[  333.072619][ T6597] loop7: detected capacity change from 0 to 164
[  333.648487][ T6634] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  333.722582][ T6597] Unable to read rock-ridge attributes
[  333.909823][   T25] audit: type=1800 audit(1792478475.965:92): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.459" name=08 dev="sda1" ino=2043 res=0 errno=0
[  333.967471][ T6634] Quota error (device loop9): find_tree_dqentry: Getting block too big (64 >= 6)
[  333.980198][ T6634] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  333.994697][ T6634] EXT4-fs error (device loop9): ext4_acquire_dquot:6236: comm syz.9.458: Failed to acquire dquot type 0
[  334.012005][ T6634] EXT4-fs error (device loop9): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  334.032100][ T6634] EXT4-fs (loop9): 1 truncate cleaned up
[  334.040415][ T6634] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  334.072815][ T6641] Unable to read rock-ridge attributes
[  334.083201][ T6641] iso9660: Corrupted directory entry in block 1 of inode 1792
[  334.317129][ T4198] usbhid 8-1:0.0: can't add hid device: -71
[  334.342324][ T4198] usbhid: probe of 8-1:0.0 failed with error -71
[  334.464501][ T4198] usb 8-1: USB disconnect, device number 3
[  339.186063][ T6674] loop9: detected capacity change from 0 to 512
[  339.313495][ T6670] input: syz1 as /devices/virtual/input/input45
[  339.490279][ T6674] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  339.512308][ T6674] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  341.529827][   T21] Bluetooth: hci3: command 0x0405 tx timeout
[  342.020535][    T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  342.251781][ T6722] loop7: detected capacity change from 0 to 512
[  342.351513][ T6722] EXT4-fs (loop7): Ignoring removed nobh option
[  342.360831][ T6722] EXT4-fs (loop7): Unrecognized mount option "func=FILE_CHECK" or missing value
[  342.560640][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.770241][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.845622][    T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  342.938429][ T6727] trusted_key: encrypted_key: keyword 'n1w' not recognized
[  342.958820][    T7] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  343.022894][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.052313][ T4505] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  343.120858][    T7] usb 5-1: config 0 descriptor??
[  343.161748][   T25] audit: type=1800 audit(1792478485.215:93): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.479" name=08 dev="sda1" ino=2043 res=0 errno=0
[  343.439694][ T4505] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.507563][ T4505] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.558909][ T4505] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  344.487225][    T7] plantronics 0003:047F:FFFF.0007: unbalanced collection at end of report description
[  344.503659][ T4505] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  344.531116][ T4505] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.555263][    T7] plantronics 0003:047F:FFFF.0007: parse failed
[  344.577966][ T4505] usb 10-1: config 0 descriptor??
[  344.607287][    T7] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22
[  344.694860][    T7] usb 5-1: USB disconnect, device number 6
[  345.008637][ T6745] input: syz1 as /devices/virtual/input/input46
[  345.102914][ T6751] trusted_key: encrypted_key: insufficient parameters specified
[  345.209613][ T6720] loop9: detected capacity change from 0 to 164
[  345.269878][ T6720] Unable to read rock-ridge attributes
[  345.400789][ T6755] Unable to read rock-ridge attributes
[  345.493713][ T6755] iso9660: Corrupted directory entry in block 1 of inode 1792
[  345.588468][ T6757] ip_tables: iptables: counters copy to user failed while replacing table
[  345.606377][ T4505] usbhid 10-1:0.0: can't add hid device: -71
[  345.632284][ T4505] usbhid: probe of 10-1:0.0 failed with error -71
[  345.732612][ T6759] loop4: detected capacity change from 0 to 2048
[  345.777562][ T4505] usb 10-1: USB disconnect, device number 4
[  345.915016][ T6759] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  347.069948][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.9.489'.
[  348.135037][   T25] audit: type=1800 audit(1792478490.185:94): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.492" name=08 dev="sda1" ino=2043 res=0 errno=0
[  350.400478][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.660778][ T6827] loop9: detected capacity change from 0 to 512
[  351.599401][ T6827] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  351.620879][ T6827] EXT4-fs (loop9): orphan cleanup on readonly fs
[  351.643029][ T6827] EXT4-fs error (device loop9): ext4_orphan_get:1410: inode #16: comm syz.9.502: inode has both inline data and extents flags
[  351.701394][ T6827] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.502: couldn't read orphan inode 16 (err -117)
[  351.719851][ T6827] EXT4-fs (loop9): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000000b,dioread_lock,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  352.273188][ T6852] input: syz1 as /devices/virtual/input/input47
[  352.608348][ T6857] loop0: detected capacity change from 0 to 512
[  352.973617][ T6857] EXT4-fs (loop0): Ignoring removed nobh option
[  352.981202][ T6857] EXT4-fs (loop0): Unrecognized mount option "func=FILE_CHECK" or missing value
[  355.275259][ T6877] loop9: detected capacity change from 0 to 1024
[  355.447983][ T6877] EXT4-fs (loop9): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none.
[  355.469829][ T6881] loop0: detected capacity change from 0 to 2048
[  355.490112][ T6877] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.534750][ T6877] EXT4-fs error (device loop9): ext4_free_blocks:6231: comm syz.9.513: Freeing blocks not in datazone - block = 0, count = 16
[  355.577163][ T6877] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.513: bg 0: block 112: padding at end of block bitmap is not set
[  355.605430][ T6881] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,user_xattr,,errors=continue. Quota mode: none.
[  355.616082][ T6877] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  355.708389][ T6881] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.299502][ T6901] loop9: detected capacity change from 0 to 1024
[  358.073059][ T6906] input: syz1 as /devices/virtual/input/input48
[  358.119843][ T6901] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  358.319681][ T6901] Quota error (device loop9): find_tree_dqentry: Getting block too big (64 >= 6)
[  358.333141][ T6901] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  358.349104][ T6901] EXT4-fs error (device loop9): ext4_acquire_dquot:6236: comm syz.9.515: Failed to acquire dquot type 0
[  358.380079][ T6901] EXT4-fs error (device loop9): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  360.016015][ T6901] EXT4-fs (loop9): 1 truncate cleaned up
[  360.023998][ T6901] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  361.232620][ T6929] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  362.113378][ T6923] loop4: detected capacity change from 0 to 512
[  364.601919][   T25] audit: type=1800 audit(1792478506.655:95): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.531" name=08 dev="sda1" ino=2043 res=0 errno=0
[  364.695466][ T6958] loop7: detected capacity change from 0 to 512
[  364.778548][ T6958] EXT4-fs (loop7): Mount option "dioread_lock" incompatible with ext3
[  365.285288][ T6968] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  365.883214][ T6971] input: syz1 as /devices/virtual/input/input49
[  365.944879][ T6973] loop9: detected capacity change from 0 to 128
[  366.070981][ T6973] EXT4-fs (loop9): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none.
[  366.137300][ T6983] capability: warning: `syz.4.533' uses 32-bit capabilities (legacy support in use)
[  367.131017][ T6983] VFS: file-max limit 0 reached
[  367.138168][ T6973] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  367.950168][   T13] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  368.331439][   T13] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  368.392628][   T13] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  368.428829][   T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.521591][   T13] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  368.555415][   T13] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  368.617889][   T13] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  368.696346][   T13] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  368.865869][   T13] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  368.880758][ T7023] input: syz1 as /devices/virtual/input/input50
[  369.015954][ T7013] loop4: detected capacity change from 0 to 512
[  369.889509][ T4505] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  370.109915][   T13] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  370.123577][   T13] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  370.146919][   T13] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  371.194554][ T7013] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  371.220083][   T13] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  371.233708][ T7013] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  371.272256][   T13] usb 8-1: USB disconnect, device number 4
[  371.326817][   T13] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  371.364295][   T13] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  371.389397][ T7013] EXT4-fs: failed to create workqueue
[  371.407788][ T7013] EXT4-fs (loop4): mount failed
[  371.421149][   T13] keyspan 8-1:1.0: device disconnected
[  371.539715][ T4505] usb 1-1: Using ep0 maxpacket: 16
[  371.670592][ T4505] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  371.719493][ T4505] usb 1-1: config 0 has no interfaces?
[  371.919929][ T4505] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  371.948971][ T4505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.997221][ T4505] usb 1-1: Product: syz
[  372.009308][ T4505] usb 1-1: Manufacturer: syz
[  372.025265][ T4505] usb 1-1: SerialNumber: syz
[  372.172204][ T4505] usb 1-1: config 0 descriptor??
[  372.199745][ T4505] usb 1-1: can't set config #0, error -71
[  372.290568][ T4505] usb 1-1: USB disconnect, device number 2
[  372.349018][ T7061] loop0: detected capacity change from 0 to 128
[  372.934546][ T7071] input: syz1 as /devices/virtual/input/input51
[  375.406459][ T7082] loop4: detected capacity change from 0 to 1024
[  375.658754][ T7092] loop7: detected capacity change from 0 to 512
[  376.116257][ T7092] EXT4-fs (loop7): Ignoring removed oldalloc option
[  376.257449][ T7082] hfsplus: b-tree write err: -5, ino 26
[  376.291296][ T7092] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.562: invalid indirect mapped block 4294967295 (level 1)
[  376.376754][ T7092] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.562: invalid indirect mapped block 4294967295 (level 1)
[  376.435259][ T7092] EXT4-fs (loop7): 2 truncates cleaned up
[  376.444184][ T1239] hfsplus: b-tree write err: -5, ino 25
[  376.451021][ T7092] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,oldalloc,minixdf,i_version,,errors=continue. Quota mode: writeback.
[  376.469176][ T1239] hfsplus: b-tree write err: -5, ino 4
[  376.476325][ T1239] hfsplus: b-tree write err: -5, ino 2
[  376.639981][ T7106] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.562: bg 0: block 5: invalid block bitmap
[  376.912412][ T7105] rxe_eth0 speed is unknown, defaulting to 1000
[  377.303243][ T7092] EXT4-fs error (device loop7): ext4_find_dest_de:2117: inode #2: block 13: comm syz.7.562: bad entry in directory: inode out of bounds - offset=108, inode=134217745, rec_len=916, size=1024 fake=0
[  378.131641][ T7119] loop9: detected capacity change from 0 to 1024
[  378.291464][ T7119] hfsplus: unable to parse mount options
[  380.760848][   T25] audit: type=1326 audit(1792478522.815:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.8.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2493c76559 code=0x7ffc0000
[  380.899950][   T25] audit: type=1326 audit(1792478522.885:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.8.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2493c36d8e code=0x7ffc0000
[  380.958148][   T25] audit: type=1326 audit(1792478522.895:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.8.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2493c36d8e code=0x7ffc0000
[  381.310068][ T4198] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  382.520029][ T4198] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46
[  382.594355][   T25] audit: type=1326 audit(1792478522.895:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.8.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2493c76559 code=0x7ffc0000
[  382.647078][   T25] audit: type=1326 audit(1792478522.895:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.8.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f2493c329ac code=0x7ffc0000
[  382.770601][ T4198] usb 1-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0
[  382.779067][ T4198] usb 1-1: Product: syz
[  382.789163][ T4198] usb 1-1: Manufacturer: syz
[  383.067892][   T25] audit: type=1326 audit(1792478522.895:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.8.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2493c32a0e code=0x7ffc0000
[  383.678848][ T4198] usb 1-1: config 0 descriptor??
[  384.899696][   T25] audit: type=1326 audit(1792478522.895:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.8.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2493c761eb code=0x7ffc0000
[  384.939619][ T7177] loop9: detected capacity change from 0 to 512
[  384.973402][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  384.981100][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  385.015273][ T7177] EXT4-fs (loop9): Mount option "dioread_lock" incompatible with ext3
[  385.039868][ T4198] usb 1-1: can't set config #0, error -71
[  385.064039][ T4198] usb 1-1: USB disconnect, device number 3
[  385.126810][   T25] audit: type=1326 audit(1792478522.895:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.8.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f2493c76559 code=0x7ffc0000
[  385.316349][   T25] audit: type=1326 audit(1792478522.895:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.8.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2493c76559 code=0x7ffc0000
[  385.432891][   T25] audit: type=1326 audit(1792478522.915:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.8.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2493c36d8e code=0x7ffc0000
[  385.490783][ T7177] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  388.924045][   T13] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  389.330582][   T13] Bluetooth: hci2: Injecting HCI hardware error event
[  389.562058][ T4202] Bluetooth: hci2: hardware error 0x00
[  389.679185][ T7221] loop9: detected capacity change from 0 to 1024
[  389.791156][ T7228] loop4: detected capacity change from 0 to 512
[  391.415844][ T7228] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext3
[  391.479281][ T7221] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  391.745437][ T7228] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  395.698048][ T7291] loop0: detected capacity change from 0 to 512
[  395.859807][ T7291] EXT4-fs (loop0): Ignoring removed oldalloc option
[  396.159231][ T7291] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.609: invalid indirect mapped block 4294967295 (level 1)
[  396.306030][ T7291] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.609: invalid indirect mapped block 4294967295 (level 1)
[  397.451602][    T7] Bluetooth: hci3: command 0x0406 tx timeout
[  397.480485][ T7291] EXT4-fs (loop0): 2 truncates cleaned up
[  397.550057][ T7291] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,oldalloc,minixdf,i_version,,errors=continue. Quota mode: writeback.
[  399.884001][   T25] kauditd_printk_skb: 29 callbacks suppressed
[  399.884021][   T25] audit: type=1804 audit(1792478541.935:135): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.634" name="/newroot/44/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=25832 res=1 errno=0
[  400.745850][ T7360] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  401.644776][ T7374] loop4: detected capacity change from 0 to 1024
[  401.690332][ T7374] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  401.822236][ T7374] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6)
[  401.838221][ T7374] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  401.854384][ T7374] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.640: Failed to acquire dquot type 0
[  401.875881][ T7374] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  401.901908][ T7374] EXT4-fs (loop4): 1 truncate cleaned up
[  401.912429][ T7374] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  402.665638][ T7392] loop4: detected capacity change from 0 to 512
[  402.790890][ T7397] loop0: detected capacity change from 0 to 512
[  402.962629][ T7392] EXT4-fs (loop4): Ignoring removed oldalloc option
[  403.032967][ T7392] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.643: invalid indirect mapped block 4294967295 (level 1)
[  403.200051][ T7392] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.643: invalid indirect mapped block 4294967295 (level 1)
[  403.240557][ T7409] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  403.270762][ T7392] EXT4-fs (loop4): 2 truncates cleaned up
[  403.277478][ T7392] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,oldalloc,minixdf,i_version,,errors=continue. Quota mode: writeback.
[  403.312943][ T7409] FAT-fs (loop0): Filesystem has been set read-only
[  403.523771][ T7420] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.643: bg 0: block 5: invalid block bitmap
[  403.782631][ T7419] rxe_eth0 speed is unknown, defaulting to 1000
[  404.197435][ T7392] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.643: bad entry in directory: inode out of bounds - offset=108, inode=134217745, rec_len=916, size=1024 fake=0
[  406.278382][ T7431] Zero length message leads to an empty skb
[  408.580796][ T7447] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  409.379770][ T7459] loop7: detected capacity change from 0 to 256
[  409.502631][ T7463] netlink: 48 bytes leftover after parsing attributes in process `syz.4.656'.
[  409.515055][ T7459] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  410.440401][ T7480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.663'.
[  412.055900][ T4202] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  412.604322][ T7513] loop9: detected capacity change from 0 to 512
[  412.661975][ T7513] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  412.689304][ T7508] loop4: detected capacity change from 0 to 2048
[  412.778808][ T7513] EXT4-fs (loop9): 1 truncate cleaned up
[  412.806134][ T7513] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier=0x0000000000000101,grpid,,errors=continue. Quota mode: none.
[  412.946671][ T7508] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  413.019691][ T7513] EXT4-fs error (device loop9): ext4_empty_dir:3156: inode #2: block 13: comm syz.9.674: bad entry in directory: inode out of bounds - offset=12, inode=2048, rec_len=12, size=1024 fake=1
[  413.269657][ T7513] EXT4-fs warning (device loop9): ext4_empty_dir:3158: inode #2: comm syz.9.674: directory missing '..'
[  413.953876][ T7538] loop7: detected capacity change from 0 to 1024
[  414.077580][ T7538] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  414.788606][ T7554] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7555] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7554]
[  417.719554][    T7] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  417.798053][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.7.691'.
[  418.207439][    T7] usb 9-1: unable to get BOS descriptor or descriptor too short
[  419.308226][ T4258] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  419.590407][    T7] usb 9-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40
[  419.640889][    T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.688292][    T7] usb 9-1: Product: syz
[  419.711595][    T7] usb 9-1: Manufacturer: syz
[  419.760053][    T7] usb 9-1: SerialNumber: syz
[  419.841227][ T7619] loop9: detected capacity change from 0 to 256
[  420.099864][    T7] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  420.127533][ T4258] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  420.137006][ T4258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.155458][ T7619] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  420.159999][ T4258] usb 5-1: Product: syz
[  420.179684][    T7] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  420.209696][ T4258] usb 5-1: Manufacturer: syz
[  420.219728][    T7] usb 9-1: unit 2 not found!
[  420.234425][ T4258] usb 5-1: SerialNumber: syz
[  420.402272][    T7] usb 9-1: USB disconnect, device number 3
[  420.507699][ T7226] udevd[7226]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  420.779590][ T4258] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  420.827442][   T25] audit: type=1800 audit(1792478562.875:136): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.705" name=08 dev="sda1" ino=2043 res=0 errno=0
[  420.997239][ T4258] usb 5-1: USB disconnect, device number 7
[  421.828452][ T7664] loop9: detected capacity change from 0 to 1024
[  422.510593][ T7681] loop4: detected capacity change from 0 to 1024
[  422.661411][ T7681] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  422.702370][ T7681] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6)
[  422.713927][ T7681] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  422.728293][ T7681] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.716: Failed to acquire dquot type 0
[  422.745104][ T7681] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  422.761286][ T7681] EXT4-fs (loop4): 1 truncate cleaned up
[  422.767437][ T7681] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  424.259544][ T4256] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  424.438165][ T7711] input: syz1 as /devices/virtual/input/input52
[  424.478571][ T7718] loop7: detected capacity change from 0 to 512
[  425.089746][ T4256] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  425.105193][ T7733] loop7: detected capacity change from 0 to 1024
[  425.139645][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.195091][ T7733] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  425.237992][ T4256] usb 1-1: Product: syz
[  425.256061][ T7733] Quota error (device loop7): find_tree_dqentry: Getting block too big (64 >= 6)
[  425.267944][ T7733] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  425.278700][ T7733] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.729: Failed to acquire dquot type 0
[  425.298627][ T4256] usb 1-1: Manufacturer: syz
[  425.316226][ T7733] EXT4-fs error (device loop7): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  425.333993][ T7733] EXT4-fs (loop7): 1 truncate cleaned up
[  425.340460][ T7733] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  425.347522][ T4256] usb 1-1: SerialNumber: syz
[  426.039039][ T7748] loop4: detected capacity change from 0 to 512
[  426.099606][ T4256] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  426.195521][ T4256] usb 1-1: USB disconnect, device number 4
[  426.477586][ T7637] udevd[7637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  427.004404][ T7766] input: syz1 as /devices/virtual/input/input53
[  427.431340][ T7779] loop4: detected capacity change from 0 to 2048
[  427.666803][ T7779] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  428.515336][ T7788] loop2: detected capacity change from 0 to 7
[  429.253459][ T7788] Dev loop2: unable to read RDB block 7
[  429.261476][ T7788]  loop2: unable to read partition table
[  429.267850][ T7788] loop2: partition table beyond EOD, truncated
[  429.274388][ T7788] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  429.297249][ T7792] loop7: detected capacity change from 0 to 16
[  429.409670][ T7779] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  429.470776][ T7792] erofs: (device loop7): mounted with root inode @ nid 36.
[  429.494104][ T7779] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  429.564274][ T7792] attempt to access beyond end of device
[  429.564274][ T7792] loop7: rw=524288, want=40, limit=16
[  429.620831][ T7779] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  429.776335][ T7792] attempt to access beyond end of device
[  429.776335][ T7792] loop7: rw=524288, want=104, limit=16
[  429.910317][ T7792] attempt to access beyond end of device
[  429.910317][ T7792] loop7: rw=0, want=24, limit=16
[  429.989069][   T25] audit: type=1800 audit(1792478572.035:137): pid=7792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.745" name="file2" dev="loop7" ino=89 res=0 errno=0
[  430.473945][ T7818] input: syz1 as /devices/virtual/input/input54
[  431.618082][   T25] audit: type=1800 audit(1792478573.665:138): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.760" name=08 dev="sda1" ino=2043 res=0 errno=0
[  431.786594][ T7839] loop9: detected capacity change from 0 to 2048
[  431.885376][ T7839] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  431.975859][ T7839] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  432.052494][ T7839] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  432.115366][ T7839] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  432.598709][ T7858] input: syz1 as /devices/virtual/input/input55
[  432.694731][ T7861] loop7: detected capacity change from 0 to 512
[  432.963937][ T7865] input: syz1 as /devices/virtual/input/input56
[  433.117125][ T7872] loop4: detected capacity change from 0 to 512
[  433.239943][ T7872] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  433.315928][ T7872] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.767: invalid indirect mapped block 32768 (level 2)
[  433.365892][ T7872] EXT4-fs (loop4): 1 orphan inode deleted
[  433.375744][ T7872] EXT4-fs (loop4): 1 truncate cleaned up
[  433.381826][ T7872] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  433.407579][ T7872] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  434.201257][ T7883] loop4: detected capacity change from 0 to 1024
[  435.187414][ T7894] loop4: detected capacity change from 0 to 2048
[  435.267597][ T7894] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  435.385974][ T7894] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  435.637448][ T7894] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  435.752209][ T7894] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  435.789141][   T25] audit: type=1800 audit(1792478577.835:139): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.775" name=08 dev="sda1" ino=2043 res=0 errno=0
[  436.195895][ T7919] loop4: detected capacity change from 0 to 512
[  436.271775][ T7919] FAT-fs (loop4): Unrecognized mount option "ÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ" or missing value
[  436.452619][ T7923] usb usb8: usbfs: process 7923 (syz.8.771) did not claim interface 0 before use
[  436.803858][ T7926] input: syz1 as /devices/virtual/input/input57
[  439.180550][ T7956] loop9: detected capacity change from 0 to 2048
[  439.976357][ T7959] loop2: detected capacity change from 0 to 7
[  440.753139][ T7959] Dev loop2: unable to read RDB block 7
[  440.758793][ T7959]  loop2: unable to read partition table
[  440.764622][ T7959] loop2: partition table beyond EOD, truncated
[  440.770867][ T7959] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  440.949938][ T7956] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  441.059552][ T7956] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  441.127700][ T7956] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  441.174849][ T7965] loop4: detected capacity change from 0 to 512
[  441.211303][ T7956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  441.482997][ T7965] EXT4-fs (loop4): 1 orphan inode deleted
[  441.555598][ T7965] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  441.621366][ T7965] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  441.800723][   T25] audit: type=1800 audit(1792478583.855:140): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.792" name=08 dev="sda1" ino=2043 res=0 errno=0
[  442.142863][ T7984] loop7: detected capacity change from 0 to 1024
[  442.299570][   T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  442.529114][ T7991] input: syz1 as /devices/virtual/input/input58
[  443.366750][ T7999] loop0: detected capacity change from 0 to 4096
[  443.445623][   T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9
[  443.468744][   T21] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  443.588491][ T7999] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  443.610055][   T21] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  443.697064][   T21] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  443.731412][ T7999] EXT4-fs (loop0): Online resizing not supported with bigalloc
[  444.336978][ T8008] loop9: detected capacity change from 0 to 512
[  445.421123][ T8008] EXT4-fs (loop9): Unrecognized mount option "fsuuid=1e550d16-c700-bc44-d828-81681d6d" or missing value
[  445.569654][   T21] usb 5-1: string descriptor 0 read error: -71
[  445.578018][   T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  445.831575][ T8016] loop4: detected capacity change from 0 to 2048
[  445.982993][ T8016] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  446.049686][ T8016] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  446.165475][ T8016] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  446.259151][ T8016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  446.430197][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  446.437456][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  446.593331][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.659746][   T21] usb 5-1: can't set config #1, error -71
[  446.679891][ T8023] loop7: detected capacity change from 0 to 256
[  446.721700][   T21] usb 5-1: USB disconnect, device number 8
[  446.834173][ T8023] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  446.962441][ T8030] loop0: detected capacity change from 0 to 512
[  447.292264][ T8030] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  447.384772][ T8039] loop4: detected capacity change from 0 to 128
[  447.427997][ T8030] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.803: invalid indirect mapped block 32768 (level 2)
[  447.515242][ T8030] EXT4-fs (loop0): 1 orphan inode deleted
[  447.524991][ T8030] EXT4-fs (loop0): 1 truncate cleaned up
[  447.532518][ T8030] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  448.323046][ T8039] EXT4-fs (loop4): Test dummy encryption mode enabled
[  448.410846][ T8039] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none.
[  448.430788][ T8030] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  448.549967][ T8039] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  449.254025][ T8039] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  449.288802][ T8065] loop0: detected capacity change from 0 to 512
[  449.389538][ T8065] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  449.439756][   T21] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  449.509642][ T8065] UDF-fs: Scanning with blocksize 512 failed
[  449.572119][ T8065] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  449.613694][ T8065] UDF-fs: Scanning with blocksize 1024 failed
[  450.187867][ T8074] loop4: detected capacity change from 0 to 512
[  451.093351][ T8074] EXT4-fs (loop4): Unrecognized mount option "fsuuid=1e550d16-c700-bc44-d828-81681d6d" or missing value
[  451.105318][   T21] usb 9-1: Using ep0 maxpacket: 16
[  451.280864][ T8065] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  451.299586][ T8065] UDF-fs: Scanning with blocksize 2048 failed
[  451.323482][ T8065] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  452.862297][ T8065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  453.012084][   T21] usb 9-1: unable to get BOS descriptor or descriptor too short
[  453.099605][   T21] usb 9-1: unable to read config index 0 descriptor/start: -71
[  453.107756][   T21] usb 9-1: can't read configurations, error -71
[  455.817769][ T8104] loop9: detected capacity change from 0 to 512
[  456.666062][ T8104] EXT4-fs (loop9): Test dummy encryption mode enabled
[  456.673748][ T8104] EXT4-fs (loop9): Ignoring removed oldalloc option
[  456.680827][ T8104] EXT4-fs (loop9): Unrecognized mount option "fsuuid=7e550d16-cd91-bc44-db28-81681d64" or missing value
[  459.016997][ T8148] rxe_eth0 speed is unknown, defaulting to 1000
[  459.855212][ T8165] loop0: detected capacity change from 0 to 1024
[  459.967722][ T8165] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  459.986908][ T8170] loop9: detected capacity change from 0 to 128
[  460.020137][ T8165] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6)
[  460.032264][ T8165] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  460.045418][ T8165] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.825: Failed to acquire dquot type 0
[  460.061918][ T8165] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  460.083001][ T8165] EXT4-fs (loop0): 1 truncate cleaned up
[  460.091746][ T8165] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  460.156309][ T8170] EXT4-fs (loop9): Test dummy encryption mode enabled
[  460.233225][ T8170] EXT4-fs (loop9): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none.
[  460.252932][ T8174] loop4: detected capacity change from 0 to 1024
[  460.279772][ T8170] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  460.364905][ T8174] EXT4-fs (loop4): Ignoring removed bh option
[  461.134139][ T8174] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  461.224491][ T8170] fscrypt (loop9): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  461.437851][ T4190] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  461.751274][ T8190] loop9: detected capacity change from 0 to 512
[  461.943819][ T8197] loop2: detected capacity change from 0 to 7
[  461.987267][ T8190] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  462.140669][ T8190] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.843: invalid indirect mapped block 256 (level 1)
[  462.191251][ T8197] Dev loop2: unable to read RDB block 7
[  462.251359][ T8197]  loop2: unable to read partition table
[  462.261090][ T8190] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.843: invalid indirect mapped block 2683928664 (level 1)
[  462.279798][ T8200] loop4: detected capacity change from 0 to 1024
[  462.298798][ T8197] loop2: partition table beyond EOD, truncated
[  462.329953][ T8190] EXT4-fs (loop9): 1 truncate cleaned up
[  462.336584][ T8190] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  462.433019][ T8197] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  462.508521][ T3558] Dev loop2: unable to read RDB block 7
[  462.535185][ T3558]  loop2: unable to read partition table
[  462.582747][ T3558] loop2: partition table beyond EOD, truncated
[  465.387975][ T8234] loop7: detected capacity change from 0 to 128
[  465.592720][ T8234] EXT4-fs (loop7): Test dummy encryption mode enabled
[  465.728640][ T8234] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none.
[  465.959632][ T8234] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  466.041625][ T8250] loop9: detected capacity change from 0 to 1024
[  466.210001][ T8250] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  466.241969][ T8252] netlink: 160 bytes leftover after parsing attributes in process `syz.8.860'.
[  466.279209][ T8250] Quota error (device loop9): find_tree_dqentry: Getting block too big (64 >= 6)
[  466.290294][ T8250] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  466.300647][ T8250] EXT4-fs error (device loop9): ext4_acquire_dquot:6236: comm syz.9.859: Failed to acquire dquot type 0
[  466.342934][ T8250] EXT4-fs error (device loop9): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  466.362473][ T8250] EXT4-fs (loop9): 1 truncate cleaned up
[  466.369441][ T8250] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  466.419245][ T8234] fscrypt (loop7): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  468.765060][ T8324] loop0: detected capacity change from 0 to 1024
[  469.388782][ T8338] input: syz1 as /devices/virtual/input/input59
[  471.364844][ T8379] loop7: detected capacity change from 0 to 1024
[  471.377253][ T8380] loop0: detected capacity change from 0 to 1024
[  471.727895][ T8380] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  472.025036][ T8396] loop4: detected capacity change from 0 to 1024
[  472.122379][ T8396] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  472.290055][ T8396] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6)
[  472.305180][ T8396] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  472.318629][ T8396] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.900: Failed to acquire dquot type 0
[  472.377986][ T8396] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  472.404152][ T8396] EXT4-fs (loop4): 1 truncate cleaned up
[  472.412002][ T8396] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  473.535071][ T8416] input: syz1 as /devices/virtual/input/input60
[  474.336136][ T8426] ip_tables: iptables: counters copy to user failed while replacing table
[  474.424208][ T8433] ip_tables: iptables: counters copy to user failed while replacing table
[  474.780422][ T8438] loop7: detected capacity change from 0 to 1024
[  475.918128][ T8457] loop7: detected capacity change from 0 to 1024
[  475.928131][ T8460] loop4: detected capacity change from 0 to 1024
[  476.077638][ T8459] input: syz1 as /devices/virtual/input/input61
[  476.307218][ T8457] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  476.346727][ T8460] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  476.633527][ T8460] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6)
[  476.644163][ T8460] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  476.655796][ T8460] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.917: Failed to acquire dquot type 0
[  476.683438][ T8460] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  476.710138][ T8460] EXT4-fs (loop4): 1 truncate cleaned up
[  476.716588][ T8460] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  479.318240][ T8493] loop9: detected capacity change from 0 to 1024
[  479.333089][ T8502] input: syz1 as /devices/virtual/input/input62
[  480.232899][ T8489] loop4: detected capacity change from 0 to 32768
[  480.300877][ T8489] XFS: ikeep mount option is deprecated.
[  480.310384][ T8489] xfs: Unknown parameter 'mtpt'
[  480.354967][ T8489] jffs2: notice: (8489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  481.828683][ T8532] loop4: detected capacity change from 0 to 1024
[  482.080634][ T8532] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  482.258174][ T8540] loop7: detected capacity change from 0 to 1024
[  482.526268][ T8540] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  482.609737][ T8540] Quota error (device loop7): find_tree_dqentry: Getting block too big (64 >= 6)
[  482.618963][ T8540] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  482.628920][ T8540] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.930: Failed to acquire dquot type 0
[  482.815911][ T8540] EXT4-fs error (device loop7): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  482.833122][ T8540] EXT4-fs (loop7): 1 truncate cleaned up
[  482.839204][ T8540] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  483.769266][ T8568] loop7: detected capacity change from 0 to 1024
[  483.880823][ T8565] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8572] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8565]
[  485.732367][ T8601] netlink: 160 bytes leftover after parsing attributes in process `syz.7.946'.
[  485.917767][ T8606] netlink: 'syz.8.949': attribute type 2 has an invalid length.
[  486.044694][ T8612] ------------[ cut here ]------------
[  486.063171][ T8612] kernel BUG at net/phonet/socket.c:213!
[  486.089855][ T8612] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  486.098128][ T8612] CPU: 0 PID: 8612 Comm: syz.8.949 Not tainted syzkaller #0
[  486.107334][ T8612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  486.120599][ T8612] RIP: 0010:pn_socket_listen+0x353/0x360
[  486.128286][ T8612] Code: ad f8 e9 e7 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c f6 fe ff ff 4c 89 ff e8 47 29 ad f8 e9 e9 fe ff ff e8 dd e3 67 f8 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 41 56 41
[  486.155039][ T8612] RSP: 0018:ffffc900030cfe00 EFLAGS: 00010287
[  486.161855][ T8612] RAX: ffffffff89113f83 RBX: 0000000000000000 RCX: 0000000000080000
[  486.174192][ T8612] RDX: ffffc9000e2da000 RSI: 0000000000000052 RDI: 0000000000000053
[  486.186610][ T8612] RBP: ffffc900030cfeb8 R08: ffff88813fea2407 R09: 1ffff11027fd4480
[  486.197890][ T8612] R10: dffffc0000000000 R11: ffffed1027fd4481 R12: dffffc0000000000
[  486.206767][ T8612] R13: ffff888046e68b60 R14: 1ffff92000619fc4 R15: ffff888060346600
[  486.216098][ T8612] FS:  00007f2491ead6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  486.226424][ T8612] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  486.233623][ T8612] CR2: 00007fffa71dd020 CR3: 000000005b459000 CR4: 00000000003506f0
[  486.242456][ T8612] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  486.252164][ T8612] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  486.260745][ T8612] Call Trace:
[  486.264038][ T8612]  <TASK>
[  486.267848][ T8612]  ? pn_socket_poll+0x360/0x360
[  486.273949][ T8612]  ? bpf_lsm_socket_listen+0x5/0x10
[  486.280702][ T8612]  __sys_listen+0x19d/0x220
[  486.286187][ T8612]  __x64_sys_listen+0x56/0x60
[  486.298393][ T8612]  do_syscall_64+0x4c/0xa0
[  486.305453][ T8612]  ? clear_bhb_loop+0x30/0x80
[  486.312458][ T8612]  ? clear_bhb_loop+0x30/0x80
[  486.318899][ T8612]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  486.326080][ T8612] RIP: 0033:0x7f2493c76559
[  486.330758][ T8612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  486.354262][ T8612] RSP: 002b:00007f2491ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032
[  486.364287][ T8612] RAX: ffffffffffffffda RBX: 00007f2493efe090 RCX: 00007f2493c76559
[  486.373810][ T8612] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006
[  486.384857][ T8612] RBP: 00007f2493d0dad8 R08: 0000000000000000 R09: 0000000000000000
[  486.394430][ T8612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  486.405397][ T8612] R13: 00007f2493efe128 R14: 00007f2493efe090 R15: 00007ffdc152f5d8
[  486.416912][ T8612]  </TASK>
[  486.420855][ T8612] Modules linked in:
[  487.069649][ T8612] ---[ end trace 869e5c485058ac9d ]---
[  487.078605][ T8612] RIP: 0010:pn_socket_listen+0x353/0x360
[  487.091121][ T8612] Code: ad f8 e9 e7 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c f6 fe ff ff 4c 89 ff e8 47 29 ad f8 e9 e9 fe ff ff e8 dd e3 67 f8 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 41 56 41
[  487.129083][ T8612] RSP: 0018:ffffc900030cfe00 EFLAGS: 00010287
[  487.144474][ T8612] RAX: ffffffff89113f83 RBX: 0000000000000000 RCX: 0000000000080000
[  487.159755][ T8612] RDX: ffffc9000e2da000 RSI: 0000000000000052 RDI: 0000000000000053
[  487.168393][ T8612] RBP: ffffc900030cfeb8 R08: ffff88813fea2407 R09: 1ffff11027fd4480
[  487.189787][ T8612] R10: dffffc0000000000 R11: ffffed1027fd4481 R12: dffffc0000000000
[  487.202853][ T8612] R13: ffff888046e68b60 R14: 1ffff92000619fc4 R15: ffff888060346600
[  487.231717][ T8612] FS:  00007f2491ead6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  487.251069][ T8612] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  487.265671][ T8612] CR2: 00007ffc086781f8 CR3: 000000005b459000 CR4: 00000000003506e0
[  487.282733][ T8612] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  487.304205][ T8612] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  487.353047][ T8612] Kernel panic - not syncing: Fatal exception
[  487.368002][ T8612] Kernel Offset: disabled
[  487.375392][ T8612] Rebooting in 86400 seconds..