last executing test programs:

5m2.437056639s ago: executing program 1 (id=118):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
preadv(r0, &(0x7f00000011c0)=[{&(0x7f00000012c0)=""/214, 0xd6}], 0x1, 0x3c, 0xfffefff6)

5m2.315073517s ago: executing program 1 (id=121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

5m2.178573323s ago: executing program 1 (id=124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x54, r2, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0x28, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x22004000)

5m2.125093122s ago: executing program 1 (id=126):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00')

5m2.053250861s ago: executing program 1 (id=128):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x1)

5m0.526173513s ago: executing program 1 (id=144):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
process_mrelease(r1, 0x0)

5m0.397172822s ago: executing program 32 (id=144):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
process_mrelease(r1, 0x0)

4m47.325459823s ago: executing program 2 (id=297):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000006c0)='GPL\x00', 0x4, 0xc4, &(0x7f0000000140)=""/196}, 0x94)

4m47.246945843s ago: executing program 2 (id=299):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x11, 0x7ffffffe}]})
readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)

4m47.185624146s ago: executing program 2 (id=301):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})

4m47.185317521s ago: executing program 2 (id=302):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b97966be023d208b8964152778594a1c"}})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
chdir(&(0x7f0000000080)='./file0\x00')

4m47.037105971s ago: executing program 2 (id=305):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000200000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4m46.764729317s ago: executing program 2 (id=308):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000006700000008001c01"], 0x1c}}, 0x0)

4m46.581050887s ago: executing program 33 (id=308):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000006700000008001c01"], 0x1c}}, 0x0)

4m44.58233092s ago: executing program 0 (id=323):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0xa6, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x5, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0x80000df, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x6, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x3, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0xfd, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x7, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0x6, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x4, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0)

4m44.578688353s ago: executing program 0 (id=324):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000104000000080000000000000000", @ANYRES32=r2, @ANYBLOB="00210000ac000600280012800b000100697036746e6c0000180002"], 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)

4m44.457307957s ago: executing program 0 (id=326):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

4m44.373651088s ago: executing program 0 (id=328):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000840)={[{@nomblk_io_submit}, {@noquota}]}, 0x1, 0x489, &(0x7f0000000d40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x8)
getdents(r0, &(0x7f0000000880)=""/232, 0xe8)

4m44.065919032s ago: executing program 0 (id=332):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="5c35fdcaedf2", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xc7, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x17, 0xd, [@private=0xa010100, @remote, @local, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x4, 0xbf, 0x0, 0x2}]}}, {0x1, 0x4e20, 0x8}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)

4m43.496071775s ago: executing program 0 (id=339):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

4m43.430852282s ago: executing program 34 (id=339):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

4m11.483740745s ago: executing program 5 (id=647):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x0, 0x4, 0x9, 0x4}, 0x0, 0x401a, 0x0, 0x6, 0x0, 0x8}})

4m11.481430765s ago: executing program 5 (id=649):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x3, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m11.387464472s ago: executing program 5 (id=651):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x800)
recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c)

4m11.24607366s ago: executing program 5 (id=654):
syz_mount_image$iso9660(&(0x7f00000016c0), &(0x7f0000000000)='./file1\x00', 0x3800813, &(0x7f00000006c0)={[{@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@map_off}, {@dmode={'dmode', 0x3d, 0x3}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfe5}}, {@cruft}, {@session={'session', 0x3d, 0x5f}}, {@map_acorn}, {@showassoc}, {@check_strict}, {}, {@uid}, {@cruft}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}, 0x5, 0xa5c, &(0x7f0000004e40)="$eJzs3c1vHGleB/Bvte3E4wxJdjYMQzQbdzIk6501ju0wCdEclsTuJF78gmxHmojDZtk4KIphYAek2RHSZiXEaUcggZCA24gTp5H2wnJAc0FwY08ckND8CytO4WRU1W27bXe7nawdezKfj9Xd9fKr53nq5anH3V1dT/hiWTu1ZWxtrXo85/jdf3oBJeYIuzn9+Sefflw+fvQkx9KXd4p/TgaT1JP+JG8kA1PTiwtzPRJ6nNxP8llSJDme5uue3E/xl3l1c/yzFP9Q5tvVsb2mTC9rfKkd9vEHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHUTE1PT4+URzLzPzd9+pNSX2HqenFhSJrazvnrC/T9NOq1+/ipz3zTYrykcHB9a6+3zizOfv1JPULebM59mbVIXkG89GJ10+/+9X+2vry3UrzCzm+92Q/+MFHj7+7urry/Y5zi2IfS3XENI+R2435maWFmbkbtxv1maWF+vWrV8cv37m1VL81M9tYure03JirTy02biwvLNZHpr5Rn7h+/Uq9MXZv4e787emx2cb6xGu/Pjk+frX+7bHfadxYXFqYv/ztsaWpOzOzszPzt6uYcnYZc608EH97Zrm+3LgxV68/fLS6cmVbyfqy7fgtgyZ6rU8ZNNkraHJ8cnJiYnJy4ket3rM3Jlx95/o718bH+8ebXk1rIDsiDuig5Wh5pftu3v+TODynWrP9T2Yzk/nczXupd/ybynQWs5C5LvNb1tv/i5cbu2abtva/1cr3t80/Wz5dyLnW6GCX9r9LWbr/vfLMS+z+90F+kI/yON/Nalazku/vc/pH/e92GpnPTJaykJnM5UY1pd6aUs/1XM3VjOc7uZPhLKU/tzKT2TSylHtZynIa1RE1lcU0ciPLWchi6hnJVL6ReiZyPddzJfU0MpZ7WcjdzOd2pnOjSuVhHlXb/couZdwImthL0OQuQTsa827t/4btizS2/3PCS6i2614+gLM4PJ+1Vvt/rHfoyNSW0f6DKxQAAACwr371P3LyzGv//j9Jka9V38vfmpltjB92sQAAAIB9VF2u92b5MlAOfS2F9/8AAADwsimq39gVSYYy3Bxa/yWUDwEAAADgJVF9/38uxfDmBO//AQAA4CXT+x77PSOK0fXb/9YfNF8ftCKaY8XQrZnZxtjUwuy7E7lU3WWg+qXBjtT6kmKg+vnB2znfjDo/1Hwd2kyxzHOwjJoYe3cib+dCa0VG3ipf3hrpEDnZjPx6M/Lr7ZF92RJ5pYwEgJfdhV3a4722/29ntBkxerZq8vvPbmmD+6qWdVzLCgBHxUYfO//X6tKsQ/t/rnlvgHPd2v/f2OX9fxnxWh4ONy8pGMv38n5W8yCjaV1xMNwp1fXeCJqXIYz2+DRgqHXJws+u1TK64/OAwY11bY9dyWRGO34i0JZusV6GK824voPaCwDwYl3YtR1eb/+rD8m7tv+ju7//b2tzXVIIAEfBRg/2zzowvPfgw15HAGArrTQAAAAAAAAAAAAAAAAAAAAAAAAAAADsvz3dwP8/LyWrqyvJ83YW0GHgZ//2L7/UNebHJ5LBZynh7gO17EuZjyfZl3U/uIG+JIeV+7fyzEuV+/iobLqXaaB4UlXYXyidQz4xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EIUSV+n6bXkeJLxJJdffKkOzpPDLsB+qT/fYsXTPM2HObnfxQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+LJr3f+/lubrieak9NeSi0nuJ/ndwy7jsxjsMf/pCyrH0fMH1XPb/f9ryUDWivRnbW1tLSkGpqYXF+bKQ6E4Xs7//JNPPy4fXZP84frAzl4VygTKHLZ0LtHKoW3KwNalvlItNTS98sHjP3n/j+rTN6sD8+byrdnpuduLv7UZ+Hrxk2YXCO3dIKyX988u/utftU0+1sr8J+nvtiLb871V5Tu9M99f6bR0l3z34NHqymSZ03LjveU//cNa+6zXcj55ayQZ2ZrT75ePLjmd3749typ+XvxFcTJ/m/vV/i+3RrFWlLvoVLX+rzx8tLoy9r33Vx9slOmHjz5sS+B0hpM82FrLepRpuDqfdHSiynWgzHW8CiqfzvRIb1dtKU5sbtct6/CV6pAZeqZ1qHdfh0qP7d4q0ZXtJVorK8lf//FXc2nXPX28Q4qXeuTYUfHz4r+LO/mv/Hlb/x+1cv9fTMfa2SGJKrLtSGmft6V61S5urvlk+4zvbE+za63kAPw4v5ff3Nj/ter8315vJrvUm43z0bfaJnapN+tVq0u9OL61pu6oFy296sXOmvqPp3a0KFtzzZltLVLr7NNtmVY5zzSjupTzl/PNpP/sM51RvtnjjNJr+eet/39fjOR/80T/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNFXJH2dpteSi0lOJzlVjteTte0xT9pH/m5v+dWGiuct6r54cqi5vyhF1xUtnuZpPszJF10iAAAAAAAAAA7GzenPP/n04/JRfR/fl1+rtebUk/4kp4u/GZiaXlyY65HQQHJ//Sv9wc4hXSbnfvn06ub4Z+XYGz3yO9zLBwDgC+3/AwAA//8TEm60")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

4m11.143018324s ago: executing program 5 (id=657):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1401, 0x0)
io_setup(0x3, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000001240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x26ee, r0, 0x0, 0x0, 0x4}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}])

4m10.801433285s ago: executing program 5 (id=665):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1489, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x20000000, 0x2, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0)

4m10.685788844s ago: executing program 35 (id=665):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1489, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x20000000, 0x2, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0)

2m8.586712794s ago: executing program 4 (id=2052):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x80000002, 0x1}}, 0x20)

2m8.526479432s ago: executing program 4 (id=2054):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000001bc0)=ANY=[@ANYBLOB='adinicb,mode=00000000000000000000006,iocharset=cp862,uid=', @ANYRESDEC=0x0, @ANYBLOB=',novrs,unhide,mode=00000000000000000000010,noadinicb,adinicb,gid=forget,lastblock=00000000000000000003,gid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',s?bj_user=^[,smackfshat=utf8,dont_measure,smackfsdef=]/,uid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=%*,\x00'], 0x1, 0xc4d, &(0x7f0000000f40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
cachestat(r0, &(0x7f00000001c0)={0x8}, &(0x7f0000000200), 0x0)

2m7.83424831s ago: executing program 4 (id=2060):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="07000000000000d70c001a8008000480040001"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2m7.737172548s ago: executing program 4 (id=2061):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@grpid}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M1vFOUfAPDvTLvl11/RVsQ38KWKRmK0pYDKwYMaTTxgYqIHPW7aSpCChtZESBOLBzwZY+LdePRf8KQXYzyZeNW7ISGGi+BpzezObHe7L7S4wwL7+SQL32dmdp/nu888u8+8bAMYWbPZP0nE7oj4PSKmG8X2DWYb/129sr547cr6YhK12tt/JfXt/r6yvlhsWjxvqrUQSezvUu/qufOnqisry2fz8vza6Y/mV8+df+7k6eqJ5RPLZw4fO3b0yMKLLxx+fiB5TkWaR2+899Wbx79oy39LHgMy22/lU7XagKsbrrta4vEhtoOdGcv7q1If/9Mx1tJ70/H6Z83Cp0NqIFCaWq1Wm+q9eqMG3MGSaC8b8jAqii/64vi323Hwy6XNPobv8iuNA6As76v5o7FmvHnGoLLl+HaQZiPi3Y1/vskeUc55CACANj9k859ns9nO+mI299icf6Rxf8t2d+fXhmYi4p6I2BMR98aZ2BsR90XUt30gIh7cYf0tF0nq08zO+U966YaT24Zs/vdSfm2rff5XzP5iZqxeOtcoRCV5/+TK8qH8PTkYlV1ZeaFPHT++9tuXvda1zv+yR1Z/MRfM23FpfFf7c5aqa9Ubz7jd5QsR+8a75Z80rwQkEfFQROzr9gLp9es4+cx3D/da1zP/yjYaP4ALTbVvI55u9P9GbMm/kPS/Pjn/v1hZPjRf7BWdfvn14lu96r9+/5cr6///d93/m/nPJK3Xa1d3XsfFPz7veUwzW/TzDvb/jepadSJ5px5P5Ms+qa6tnV2ImEiONxrduvzw5nOLcrF9lv/BA93H/57YfCf2R0S2Ez8SEY9GxGN53z0eEU9ExIE++f/86pMfbF02WeR/C/T/0o76fzOYiPYlaZdtsmDs1E/ft1U6sxnm+V/r//l3tB4dzJds5/OvsxXdg//6/gEAAMDtII2I3ZGkc804TefmGvfw743mWbiPzyw1fiMwE5W0ONM13XI+dCE/rG+UL0RE49aCYv2RSOvnjb8em6yX5xY/XFkaaubAVI/xn/lzbNitA0rnB1swuox/GF19x3/PG3EcHcCdoGP89735blepbQFuri7f/5PDaAdw83Wb/3f+vR/f+3An2jL+HdjDCHH+H0aX8Q+jy/iHkbQ6Gaeqk9v9tXy3oHilG3z69YLpiCjnlUsOonJLNKO0INLSq5god9cqLUhuwzZ3BMP7TAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABikfwMAAP//TfbN6A==")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m7.608731505s ago: executing program 4 (id=2062):
r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x22d, "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"}, 0x0)
write$apparmor_current(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff)

2m7.044800769s ago: executing program 4 (id=2067):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_connect(0x6, 0x2c3, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2a, 0xb7, 0xfb, 0x40, 0x413c, 0x81a9, 0xeb17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b1, 0x2, 0x0, 0xa6, 0x50, 0x1}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

2m6.752605737s ago: executing program 36 (id=2067):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_connect(0x6, 0x2c3, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2a, 0xb7, 0xfb, 0x40, 0x413c, 0x81a9, 0xeb17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b1, 0x2, 0x0, 0xa6, 0x50, 0x1}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

24.444684641s ago: executing program 6 (id=3365):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10)

24.376942944s ago: executing program 6 (id=3366):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r3, 0xda90)
r4 = accept4(r3, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00')
read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020)
timer_create(0x9, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r7, &(0x7f0000000840), &(0x7f0000000440), 0x1}, 0x20)
timer_delete(r6)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x503}, &(0x7f0000000080)=0x8)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmmsg$unix(r8, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/215, 0xd7}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000004b00)=""/202, 0xca}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}], 0x1, 0x0, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc)

23.46489387s ago: executing program 6 (id=3379):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002600), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000002640)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x8, 0x3a, '.\xb3\\--\xe0', 0x3a, '+\\&&\x90!', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x35)

23.464191107s ago: executing program 6 (id=3381):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)

23.383587692s ago: executing program 6 (id=3384):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
statx(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x6000, &(0x7f0000000240))

23.320975524s ago: executing program 6 (id=3386):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00')

8.276912178s ago: executing program 37 (id=3386):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00')

2.024884215s ago: executing program 8 (id=3678):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f00000000c0)=ANY=[@ANYBLOB='iocharset=cp737,umask=0\x00\x00\x00\x00\x00\x00\x00@0800d=', @ANYRESHEX=0x0, @ANYBLOB="2c696e746567726974792c6572726f72733d636f6e7451d8c7696e75652c646973636172642c6e6f71756f746100696f636861727365743d63703835302c67727071756f74612c75737271756f74612c75", @ANYBLOB="423170a811445258", @ANYBLOB=',quota,gid=', @ANYRES16, @ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="cc3977603026303cfb5136881ca45cbe15e3fd04144e7cff37373ab915dded4400", @ANYRESDEC=0x0, @ANYBLOB=',measure,\x00', @ANYRES8=0x0], 0x1, 0x615b, &(0x7f0000008b40)="$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")
open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0)

1.656032632s ago: executing program 8 (id=3681):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x0, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x400, 0x3, 0x5, 0x2, 0x4, 0xfffffff9, 0x5})

1.604727692s ago: executing program 8 (id=3682):
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904"], 0x0)

1.373902347s ago: executing program 7 (id=3685):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0xb, 0x2, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xffffffff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xfffffe3d}, {0x584c7ecce36612d3, 0x8, {0x1}}}}]}]}, 0x74}}, 0x0)

1.272711748s ago: executing program 7 (id=3686):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)

1.206197717s ago: executing program 7 (id=3687):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r0=>0x0)
sched_rr_get_interval(r0, &(0x7f00000000c0))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="040000000000590000e4ffffffffffe3107eb6eb8b84abc5cbf85f5c5ed715ffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300"/18], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000075266f83000000000000000004000000ffffffffc3000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xed4, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @filter_kind_options=@f_u32={{0x8}, {0xe88, 0x2, [@TCA_U32_ACT={0xe84, 0x7, [@m_skbedit={0x30, 0x7, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x206, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0xfffffe00, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x8, 0x3, 0x5, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x20000100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x8, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0x0, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0x0, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x2, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xe, 0x4000000, 0x5ea, 0x30, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x4}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xed4}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040)
r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.199264828s ago: executing program 3 (id=3688):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
copy_file_range(r0, 0x0, r0, 0x0, 0x8, 0x0)

1.066500626s ago: executing program 3 (id=3689):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="03e7"], 0xa)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/custom1\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045503, &(0x7f0000000340)={0x1, 0x1})
socket$kcm(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
recvfrom$x25(0xffffffffffffffff, &(0x7f00000005c0)=""/229, 0xe5, 0x12140, &(0x7f00000006c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
dup(r2)
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$l2tp(0x2, 0x2, 0x73)
r7 = timerfd_create(0x0, 0x80000)
read(r7, &(0x7f0000000ac0)=""/149, 0x95)
ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f0000000280)=0x8)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r8], 0x40}}, 0x40040d0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="d4ba81e74230d2541569f709dcc5d54814e451d3a7dd978180afa975737e0b567db6bd004d7c65e77bf6ccb11b74c2a613d0bfdb40cc28823da18022c43d727ea4344964704cba9f8352cf5558b4c7078c33c1b36038c84ad870b7fa73961b17d7c789444d386cc62cbe3753dc5e9d6f47210535aff233f166960c0ea54fa65b0ccd5fe7aa2522ed65717a1b2b5622dc095cbc26f6bc3cde2ae69cd4d16fd231528821fc", 0xa4)

328.297393ms ago: executing program 7 (id=3690):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]})
r1 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
fanotify_init(0x200, 0x0)
capset(0x0, 0x0)
syz_io_uring_setup(0x126b, 0x0, 0x0, 0x0, 0x0)
lseek(r1, 0x5, 0x4)

282.186778ms ago: executing program 7 (id=3691):
r0 = gettid()
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
readv(r1, &(0x7f0000000580)=[{0x0, 0xfffffd51}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f0000000840)=""/245, 0xf5}], 0x3)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb})

279.157535ms ago: executing program 3 (id=3692):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd76}}}, {{@arp={@multicast1, @multicast2, 0x0, 0xff000000, 0x0, 0x0, {@mac=@local, {[0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="84f19a8b62cc", @empty, @rand_addr=0x64010102, @multicast2, 0xa, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

197.981376ms ago: executing program 3 (id=3693):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)

197.706186ms ago: executing program 7 (id=3694):
timer_create(0x2, 0x0, &(0x7f0000bbdffc)=<r0=>0x0)
io_setup(0x401, &(0x7f0000000140)=<r1=>0x0)
io_pgetevents(r1, 0x4, 0x1, &(0x7f0000000200)=[{}], &(0x7f0000000080), &(0x7f0000000180)={&(0x7f00000001c0)={[0x8000000]}, 0x8})
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x7, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073114b00000000008510000002000000850000005400000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

182.483623ms ago: executing program 8 (id=3695):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x2)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x405, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c)
listen(r0, 0x200b)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f00004e220000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

125.982375ms ago: executing program 3 (id=3696):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x200000f8}}, {@minixdf}, {@nombcache}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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")
syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0xfd, 0x0, &(0x7f0000000000))
truncate(&(0x7f0000000040)='./file1\x00', 0x8800000)

125.594863ms ago: executing program 8 (id=3697):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x81}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x5c}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0xc010)

65.941659ms ago: executing program 8 (id=3698):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000))
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
ptrace$ARCH_GET_GS(0x1e, r0, 0x0, 0x1004)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448)

0s ago: executing program 3 (id=3699):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$tipc(0x1e, 0x1, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r1, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea85766575551d40e3", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

T10987] BTRFS info (device loop3): rebuilding free space tree
[  238.552405][T10987] BTRFS info (device loop3): disabling free space tree
[  238.554793][T10987] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  238.559006][T10987] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  238.566308][T10987] BTRFS info (device loop3): checking UUID tree
[  238.569110][T10987] BTRFS info (device loop3): enabling ssd optimizations
[  238.571637][T10987] BTRFS info (device loop3): using spread ssd allocation scheme
[  238.574302][T10987] BTRFS info (device loop3): turning on async discard
[  238.576812][T10987] BTRFS info (device loop3): force clearing of disk cache
[  238.579245][T10987] BTRFS info (device loop3): enabling auto defrag
[  238.581401][T10987] BTRFS info (device loop3): trying to use backup root at mount time
[  238.584178][T10987] BTRFS info (device loop3): use zstd compression, level 3
[  238.602297][T11010] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  238.603567][T11010] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1972: invalid indirect mapped block 1819239214 (level 1)
[  238.630265][T11010] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  238.630660][T11010] EXT4-fs (loop4): 1 truncate cleaned up
[  238.667581][T11010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  238.697145][ T8990] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  238.700351][T11010] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.1972: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0
[  238.740424][   T33] audit: type=1800 audit(1778275407.552:210): pid=10985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1968" name="file1" dev="loop6" ino=7 res=0 errno=0
[  238.749158][ T6443] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.082004][T11019] loop4: detected capacity change from 0 to 256
[  239.094296][T11019] exfat: Deprecated parameter 'namecase'
[  239.113548][T11019] exfat: Deprecated parameter 'namecase'
[  239.118343][T11019] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  239.340064][T11033] loop4: detected capacity change from 0 to 256
[  239.342408][T11033] exfat: Deprecated parameter 'utf8'
[  239.351797][T11033] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  239.415926][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.934466][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1990'.
[  239.941997][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1990'.
[  240.014765][T11060] loop3: detected capacity change from 0 to 512
[  240.026657][T11060] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.1994: missing EA_INODE flag
[  240.032477][T11060] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  240.043473][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  240.050010][    C1] EXT4-fs (loop3): initial error at time 1778275408: ext4_xattr_inode_iget:441: inode 12
[  240.053991][    C1] EXT4-fs (loop3): last error at time 1778275408: ext4_xattr_inode_iget:441: inode 12
[  240.070031][T11060] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1994: error while reading EA inode 12 err=-117
[  240.081326][T11060] loop3: lost filesystem error report for type 5 error -117
[  240.087844][T11060] EXT4-fs (loop3): 1 orphan inode deleted
[  240.097021][T11060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.151550][ T8990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.215900][T11071] netlink: 'syz.4.1999': attribute type 5 has an invalid length.
[  240.217015][T11068] loop6: detected capacity change from 0 to 2048
[  240.221800][T11072] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1997'.
[  240.226641][T11068] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  240.237886][T11068] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  240.257113][T11068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.377120][  T812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.380695][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.454627][  T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.663509][T11081] loop6: detected capacity change from 0 to 32768
[  240.775097][T11085] loop3: detected capacity change from 0 to 32768
[  240.784379][T11085] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2005 (11085)
[  240.819318][T11085] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  240.822461][T11085] BTRFS info (device loop3): using crc32c checksum algorithm
[  240.883101][T11085] BTRFS info (device loop3): enabling ssd optimizations
[  240.886790][T11085] BTRFS info (device loop3): turning on flush-on-commit
[  240.893074][T11085] BTRFS info (device loop3): enabling free space tree
[  240.895308][T11085] BTRFS info (device loop3): enabling auto defrag
[  240.898843][T11085] BTRFS info (device loop3): use lzo compression, level 1
[  240.903196][T11085] BTRFS info (device loop3): max_inline set to 4096
[  240.997786][ T8990] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  241.044599][T11089] loop6: detected capacity change from 0 to 32768
[  241.095258][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.098520][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.343578][  T812] page_pool_release_retry() stalled pool shutdown: id 64, 1 inflight 60 sec
[  241.494018][  T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.746174][   T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.749030][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.863485][  T812] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  242.033622][  T812] usb 4-1: Using ep0 maxpacket: 16
[  242.038666][  T812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.043127][  T812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.047166][  T812] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  242.052239][  T812] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  242.057235][  T812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.063614][  T812] usb 4-1: config 0 descriptor??
[  242.471449][T11128] loop6: detected capacity change from 0 to 1024
[  242.480760][T11128] hfsplus: extend alloc file! (16384,256,150995124)
[  242.510240][  T812] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000A/input/input14
[  242.534453][  T812] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  242.694645][  T798] usb 4-1: USB disconnect, device number 19
[  242.948028][T11143] loop6: detected capacity change from 0 to 128
[  243.501662][T11149] loop3: detected capacity change from 0 to 32768
[  244.913001][T11163] loop3: detected capacity change from 0 to 64
[  245.218988][T11165] input: syz1 as /devices/virtual/input/input15
[  245.466410][T11174] netlink: 'syz.3.2038': attribute type 4 has an invalid length.
[  245.908957][T11186] loop3: detected capacity change from 0 to 2048
[  245.915330][T11186] NILFS (loop3): too small inode size: 0 bytes
[  246.035328][T11191] net_ratelimit: 1 callbacks suppressed
[  246.035344][T11191] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  246.149156][T11195] loop6: detected capacity change from 0 to 512
[  246.152045][T11195] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  246.164759][T11195] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2047: bg 0: block 401: padding at end of block bitmap is not set
[  246.170310][T11195] loop6: lost filesystem error report for type 5 error -117
[  246.172330][T11195] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  246.174813][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  246.174826][    C1] EXT4-fs (loop6): initial error at time 1778275414: ext4_validate_block_bitmap:441
[  246.174844][    C1] EXT4-fs (loop6): last error at time 1778275414: ext4_validate_block_bitmap:441
[  246.197707][T11195] loop6: lost filesystem error report for type 5 error -117
[  246.198013][T11195] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.2047: attempt to clear invalid blocks 983260 len 1
[  246.206723][T11195] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  246.207038][T11195] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.2047: Invalid inode table block 0 in block_group 0
[  246.214710][T11195] loop6: lost filesystem error report for type 5 error -117
[  246.214914][T11195] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  246.220294][T11195] loop6: lost filesystem error report for type 5 error -117
[  246.220531][T11195] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  246.226162][T11195] loop6: lost filesystem error report for type 5 error -117
[  246.226339][T11195] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.2047: Invalid inode table block 0 in block_group 0
[  246.234254][T11195] loop6: lost filesystem error report for type 5 error -117
[  246.234444][T11195] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  246.240864][T11195] loop6: lost filesystem error report for type 5 error -117
[  246.241052][T11195] EXT4-fs error (device loop6): ext4_truncate:4690: inode #11: comm syz.6.2047: mark_inode_dirty error
[  246.248788][T11195] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  246.248975][T11195] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  246.256516][T11195] loop6: lost filesystem error report for type 5 error -117
[  246.256750][T11195] EXT4-fs (loop6): 1 truncate cleaned up
[  246.262561][T11195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.270335][T11195] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.2047: Invalid inode table block 0 in block_group 0
[  246.280746][T11195] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  246.287143][T11195] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #2: comm syz.6.2047: mark_inode_dirty error
[  246.306930][   T27] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm kworker/u10:0: Invalid inode table block 0 in block_group 0
[  246.318297][ T7531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.568445][T11211] loop4: detected capacity change from 0 to 2048
[  246.578226][T11211] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  246.692224][T11218] loop6: detected capacity change from 0 to 256
[  246.704261][T11218] exfat: Deprecated parameter 'utf8'
[  246.717766][T11218] exFAT-fs (loop6): error, data size is invalid(34359738378)
[  246.720877][T11218] exFAT-fs (loop6): Filesystem has been set read-only
[  247.337612][T11229] loop4: detected capacity change from 0 to 512
[  247.343756][T11229] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  247.367386][T11229] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2061: bad orphan inode 131083
[  247.371478][T11229] loop4: lost filesystem error report for type 5 error -117
[  247.373074][T11229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.399473][T11229] overlayfs: upper fs needs to support d_type.
[  247.422910][T11225] loop3: detected capacity change from 0 to 32768
[  247.448889][T11225] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  247.463270][T11225] XFS (loop3): Ending clean mount
[  247.488203][ T6443] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /592/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  247.501100][ T8990] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  247.663510][ T5002] Bluetooth: hci0: command 0x0406 tx timeout
[  247.695049][T11240] loop6: detected capacity change from 0 to 512
[  247.722807][T11240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.743793][T11240] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  247.769733][T11244] autofs: Bad value for 'fd'
[  247.928184][ T7531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.931632][T11246] wg2 speed is unknown, defaulting to 1000
[  247.949604][ T9259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.172208][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.175771][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.330094][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.333297][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.373079][T11247] netlink: 'syz.3.2065': attribute type 4 has an invalid length.
[  248.378642][T11247] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2065'.
[  248.426401][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.430153][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.456317][ T5002] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  248.462686][ T5002] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  248.468779][ T5002] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  248.472953][ T5002] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  248.478775][ T5002] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  248.526433][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.538075][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.795158][T11254] wg2 speed is unknown, defaulting to 1000
[  248.817998][   T12] bridge_slave_1: left allmulticast mode
[  248.825992][   T12] bridge_slave_1: left promiscuous mode
[  248.830895][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.850812][   T12] bridge_slave_0: left allmulticast mode
[  248.858964][   T12] bridge_slave_0: left promiscuous mode
[  248.863760][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.151764][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.157720][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.161644][   T12] bond0 (unregistering): Released all slaves
[  249.171713][ T5356] 8021q: adding VLAN 0 to HW filter on device eth17
[  249.257147][   T12] tipc: Left network mode
[  249.513131][ T5356] 8021q: adding VLAN 0 to HW filter on device eth18
[  249.859067][   T12] hsr_slave_0: left promiscuous mode
[  249.866957][   T12] hsr_slave_1: left promiscuous mode
[  249.869745][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.872855][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.878499][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.883645][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.906630][   T12] veth1_macvtap: left promiscuous mode
[  249.909187][   T12] veth0_macvtap: left promiscuous mode
[  249.911654][   T12] veth1_vlan: left promiscuous mode
[  249.914244][   T12] veth0_vlan: left promiscuous mode
[  250.063815][  T798] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  250.171901][   T12] team0 (unregistering): Port device team_slave_1 removed
[  250.184478][   T12] team0 (unregistering): Port device team_slave_0 removed
[  250.217723][  T798] usb 4-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40
[  250.221542][  T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.225987][  T798] usb 4-1: Product: syz
[  250.228012][  T798] usb 4-1: Manufacturer: syz
[  250.230111][  T798] usb 4-1: SerialNumber: syz
[  250.326617][ T5356] 8021q: adding VLAN 0 to HW filter on device eth19
[  250.378422][T11254] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.380773][T11254] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.385285][T11254] bridge_slave_0: entered allmulticast mode
[  250.388922][T11254] bridge_slave_0: entered promiscuous mode
[  250.396116][T11254] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.398758][T11254] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.401444][T11254] bridge_slave_1: entered allmulticast mode
[  250.405173][T11254] bridge_slave_1: entered promiscuous mode
[  250.455019][  T798] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  250.463861][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.479511][  T798] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  250.483593][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.522657][T11254] team0: Port device team_slave_0 added
[  250.526867][T11254] team0: Port device team_slave_1 added
[  250.543691][   T53] Bluetooth: hci2: command tx timeout
[  250.621866][  T798] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  250.622006][T11254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.630720][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.632935][  T798] usb 4-1: USB disconnect, device number 20
[  250.650062][T11254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.687919][T11254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.693010][ T6947] udevd[6947]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  250.701280][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.724433][T11254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.749922][   T12] IPVS: stop unused estimator thread 0...
[  250.776915][ T5356] 8021q: adding VLAN 0 to HW filter on device eth20
[  250.788663][T11254] hsr_slave_0: entered promiscuous mode
[  250.792240][T11254] hsr_slave_1: entered promiscuous mode
[  250.796813][T11254] debugfs: 'hsr0' already exists in 'hsr'
[  250.798763][T11254] Cannot create hsr debugfs directory
[  251.127383][T11254] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  251.139900][T11254] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  251.145828][T11254] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  251.176675][T11254] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  251.188188][T11254] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  251.239727][T11254] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  251.249405][T11254] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  251.261650][T11254] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  251.282466][T11254] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.284889][T11254] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.287685][T11254] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.290533][T11254] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.348824][ T2048] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.352950][ T2048] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.401462][T11254] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.428103][T11254] 8021q: adding VLAN 0 to HW filter on device team0
[  251.434618][ T2048] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.437413][ T2048] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.456356][ T2048] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.459159][ T2048] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.475803][T11254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  251.531482][T11344] CIFS: VFS: UNC: missing share name
[  251.536896][T11344] CIFS: VFS: Malformed UNC in devname
[  251.842316][T11357] openvswitch: netlink: Message has 4 unknown bytes.
[  251.846528][T11357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.887175][T11362] loop6: detected capacity change from 0 to 256
[  251.898686][T11362] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  251.941868][T11254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.150614][T11254] veth0_vlan: entered promiscuous mode
[  252.164721][T11254] veth1_vlan: entered promiscuous mode
[  252.204692][T11254] veth0_macvtap: entered promiscuous mode
[  252.211494][T11254] veth1_macvtap: entered promiscuous mode
[  252.232588][T11254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.250860][T11254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.312861][ T5766] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.316984][ T5766] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.321419][   T53] Bluetooth: hci0: unexpected event for opcode 0x1003
[  252.342310][ T5766] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.348145][ T5766] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.463185][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.467807][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.481337][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.492004][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.614364][   T53] Bluetooth: hci2: command tx timeout
[  253.830085][T11398] loop7: detected capacity change from 0 to 256
[  253.864600][T11398] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  254.092513][T11402] loop7: detected capacity change from 0 to 4096
[  254.181840][T11403] trusted_key: syz.7.2103 sent an empty control message without MSG_MORE.
[  254.695353][ T5002] Bluetooth: hci2: command tx timeout
[  254.735882][T11407] loop3: detected capacity change from 0 to 256
[  254.787904][T11407] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d)
[  256.316934][T11423] loop3: detected capacity change from 0 to 2048
[  256.321991][T11423] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  256.327015][T11423] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  256.330185][T11423] UDF-fs: Scanning with blocksize 512 failed
[  256.338175][T11423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  256.347883][T11425] autofs: Unknown parameter 'no9 PG!8E	'
[  256.376390][ T5002] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  256.382273][   T33] audit: type=1800 audit(1778275425.192:211): pid=11423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2110" name=125B7C394C53EAFDF096E17380B4BC297C66E70145E2E44274E41CFAF97F93268479BE0ECA9244B04384665D20CB8CDBC5C5D746 dev="loop3" ino=925 res=0 errno=0
[  256.384075][ T5002] Bluetooth: hci0: Injecting HCI hardware error event
[  256.400692][ T5002] Bluetooth: hci0: hardware error 0x00
[  256.559954][T11434] x_tables: duplicate underflow at hook 4
[  256.773779][   T53] Bluetooth: hci2: command tx timeout
[  258.453705][ T5002] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  259.538058][T11509] loop7: detected capacity change from 0 to 164
[  260.536018][T11542] loop6: detected capacity change from 0 to 32768
[  260.544481][T11542] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2161 (11542)
[  260.571396][T11542] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  260.576169][T11542] BTRFS info (device loop6): using xxhash64 checksum algorithm
[  260.615079][T11542] BTRFS info (device loop6): enabling ssd optimizations
[  260.618106][T11542] BTRFS info (device loop6): turning on flush-on-commit
[  260.621092][T11542] BTRFS info (device loop6): turning on async discard
[  260.624228][T11542] BTRFS info (device loop6): enabling free space tree
[  260.627088][T11542] BTRFS info (device loop6): force zlib compression, level 3
[  260.630270][T11542] BTRFS info (device loop6): max_inline set to 4096
[  260.672617][ T7531] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  260.941652][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  260.990111][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2165'.
[  261.009620][T11564] loop3: detected capacity change from 0 to 4096
[  261.060412][T11564] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  261.090993][T11564] ntfs3(loop3): ino=1e, "file1" attr_set_size_ex
[  261.098882][T11564] ntfs3(loop3): ino=1e, "file1" attr_set_size_ex
[  261.369465][T11582] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  261.527640][T11589] netlink: 133536 bytes leftover after parsing attributes in process `syz.7.2174'.
[  261.684039][T11594] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  262.559305][T11625] netlink: zone id is out of range
[  262.572784][T11625] netlink: zone id is out of range
[  262.577842][T11625] netlink: zone id is out of range
[  262.581340][T11625] netlink: zone id is out of range
[  262.586345][T11625] netlink: zone id is out of range
[  262.590268][T11625] netlink: zone id is out of range
[  262.596669][T11625] netlink: set zone limit has 4 unknown bytes
[  262.999417][T11638] loop3: detected capacity change from 0 to 32768
[  263.009774][T11638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2189 (11638)
[  263.041546][T11638] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  263.048116][T11638] BTRFS info (device loop3): using sha256 checksum algorithm
[  263.125429][T11638] BTRFS info (device loop3): enabling ssd optimizations
[  263.129404][T11638] BTRFS info (device loop3): turning on async discard
[  263.132650][T11638] BTRFS info (device loop3): enabling free space tree
[  263.278457][ T8990] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  263.486280][T11635] loop6: detected capacity change from 0 to 131072
[  263.492975][T11635] F2FS-fs (loop6): invalid crc value
[  263.633169][T11635] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  263.684700][T11635] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  263.688982][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2200'.
[  265.427597][T11748] netlink: 'syz.3.2228': attribute type 23 has an invalid length.
[  265.752715][T11774] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  265.840911][T11781] loop3: detected capacity change from 0 to 512
[  265.844736][T11781] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  265.865279][T11781] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2243: bg 0: block 104: invalid block bitmap
[  265.873912][T11781] loop3: lost filesystem error report for type 5 error -117
[  265.875487][T11781] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  265.882623][T11781] loop3: lost filesystem error report for type 5 error -117
[  265.882862][T11781] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2243: invalid indirect mapped block 1 (level 1)
[  265.885244][    C1] EXT4-fs (loop3): error count since last fsck: 2
[  265.885254][    C1] EXT4-fs (loop3): initial error at time 1778275434: ext4_validate_block_bitmap:432
[  265.885264][    C1] EXT4-fs (loop3): last error at time 1778275434: ext4_mb_clear_bb:6679
[  265.898122][T11781] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  265.898887][T11781] EXT4-fs (loop3): 1 truncate cleaned up
[  265.909997][T11781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.922462][   T33] audit: type=1800 audit(1778275434.732:212): pid=11781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2243" name="file1" dev="loop3" ino=18 res=0 errno=0
[  266.129880][T11788] xt_CT: You must specify a L4 protocol and not use inversions on it
[  267.376104][ T8990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.704909][ T5786] bridge0: entered promiscuous mode
[  269.744930][T11835] IPv6: addrconf: prefix option has invalid lifetime
[  270.920408][T11857] netlink: 'syz.3.2272': attribute type 16 has an invalid length.
[  270.922896][T11857] netlink: 'syz.3.2272': attribute type 17 has an invalid length.
[  270.939649][T11857] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.947037][T11857] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.981785][   T10] wg2 speed is unknown, defaulting to 1000
[  271.072855][T11863] loop3: detected capacity change from 0 to 4096
[  271.725563][T11893] overlay: Unknown parameter '\'
[  272.403060][T11900] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  272.408791][T11900] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  272.420299][T11900] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  272.830054][T11907] loop3: detected capacity change from 0 to 32768
[  272.858633][T11907] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  272.879389][T11907] XFS (loop3): Ending clean mount
[  272.958675][   T84] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  272.965014][   T84] XFS (loop3): Unmount and run xfs_repair
[  272.969148][   T84] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  272.973533][   T84] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  272.977260][   T84] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10  ................
[  272.980944][   T84] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  272.986207][   T84] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01  ....lK..........
[  272.989981][   T84] 00000040: ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00  ................
[  272.994766][   T84] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  272.998365][   T84] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  273.001893][   T84] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  273.005671][   T84] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x14 len 4 error 74
[  273.024815][   T84] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8f0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  273.029624][   T84] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  273.048026][ T8990] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  273.400686][T11933] loop3: detected capacity change from 0 to 4096
[  273.424226][T11933] ntfs3(loop3): ino=0, mi_enum_attr
[  273.440695][T11933] ntfs3(loop3): ino=0, mi_enum_attr
[  273.442891][T11933] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  273.455290][T11933] ntfs3(loop3): ino=0, mi_enum_attr
[  273.582776][T11939] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2305'.
[  273.785265][T11948] loop3: detected capacity change from 0 to 4096
[  273.843769][T11949] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  273.933731][   T33] audit: type=1326 audit(1778275442.732:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca1d9cdd9 code=0x7ffc0000
[  273.949242][   T33] audit: type=1326 audit(1778275442.732:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca1d9cdd9 code=0x7ffc0000
[  273.969370][   T33] audit: type=1326 audit(1778275442.732:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca1d9cdd9 code=0x7ffc0000
[  273.990875][   T33] audit: type=1326 audit(1778275442.732:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2ca1d9cdd9 code=0x7ffc0000
[  274.018019][   T33] audit: type=1326 audit(1778275442.802:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ca1d5d60e code=0x7ffc0000
[  274.038995][   T33] audit: type=1326 audit(1778275442.802:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ca1d5d60e code=0x7ffc0000
[  274.055973][   T33] audit: type=1326 audit(1778275442.802:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ca1d5d60e code=0x7ffc0000
[  274.092064][   T33] audit: type=1326 audit(1778275442.802:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ca1d5d60e code=0x7ffc0000
[  274.116468][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2312'.
[  274.119659][   T33] audit: type=1326 audit(1778275442.802:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ca1d5d60e code=0x7ffc0000
[  274.132807][   T33] audit: type=1326 audit(1778275442.802:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ca1d5d60e code=0x7ffc0000
[  274.155800][T11956] 8021q: adding VLAN 0 to HW filter on device bond1
[  274.230768][T11959] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2313'.
[  274.446299][T11973] loop6: detected capacity change from 0 to 512
[  274.468729][T11973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.473541][T11973] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.494046][ T7531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.636865][T11982] loop6: detected capacity change from 0 to 512
[  274.641764][T11982] EXT4-fs (loop6): orphan cleanup on readonly fs
[  274.645906][T11982] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.2323: corrupted inode contents
[  274.651129][T11982] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  274.651443][T11982] EXT4-fs (loop6): Remounting filesystem read-only
[  274.655237][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  274.655253][    C0] EXT4-fs (loop6): initial error at time 1778275443: ext4_do_update_inode:5690: inode 15
[  274.655275][    C0] EXT4-fs (loop6): last error at time 1778275443: ext4_do_update_inode:5690: inode 15
[  274.675737][T11982] EXT4-fs (loop6): 1 orphan inode deleted
[  274.680007][T11982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  274.700694][ T7531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.807832][T11985] loop6: detected capacity change from 0 to 4096
[  274.826190][T11985] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  274.858767][T11985] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  274.948343][T11987] loop3: detected capacity change from 0 to 128
[  274.957629][T11987] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  274.962680][T11987] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.980236][T11987] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[  275.033323][ T8990] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  275.176203][T12001] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2330'.
[  275.182708][T12001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.422712][T12011] sctp: [Deprecated]: syz.7.2336 (pid 12011) Use of struct sctp_assoc_value in delayed_ack socket option.
[  275.422712][T12011] Use struct sctp_sack_info instead
[  275.613056][T12015] loop3: detected capacity change from 0 to 4096
[  275.625666][T12015] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  275.652666][T12015] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  275.655132][T12015] ntfs3(loop3): Failed to load $Extend (-22).
[  275.657342][T12015] ntfs3(loop3): Failed to initialize $Extend.
[  275.674375][T12015] ntfs3(loop3): ino=0, attr_set_size_ex
[  275.685697][T12015] ntfs3(loop3): ino=0, attr_set_size_ex
[  275.690770][T12015] ntfs3(loop3): ino=0, attr_set_size_ex
[  275.717256][T12015] ntfs3(loop3): ino=0, attr_set_size_ex
[  275.900668][T12025] loop3: detected capacity change from 0 to 1024
[  276.422674][T12035] loop3: detected capacity change from 0 to 65536
[  276.432867][T12035] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  276.455690][T12035] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x1a9/0x1590, inode 0x21 dinode
[  276.460043][T12035] XFS (loop3): Unmount and run xfs_repair
[  276.462389][T12035] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  276.466398][T12035] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  276.470077][T12035] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  276.473479][T12035] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 69 c5 80 b8  ..e.....4.Xhi...
[  276.476414][T12035] 00000030: 34 f7 58 68 69 c5 80 b8 00 00 00 00 00 00 00 00  4.Xhi...........
[  276.479297][T12035] 00000040: 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00  ................
[  276.482237][T12035] 00000050: 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 00  ................
[  276.485198][T12035] 00000060: ff ff ff ff f6 31 a3 b2 00 00 00 00 00 00 00 02  .....1..........
[  276.488214][T12035] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08  ................
[  276.491077][T12035] loop3: lost filesystem error report for type 5 error -117
[  276.491384][T12035] XFS (loop3): metadata inode 0x21 type 5 is corrupt
[  276.495884][T12035] loop3: lost filesystem error report for type 5 error -117
[  276.496216][T12035] loop3: lost filesystem error report for type 5 error -117
[  276.498915][T12035] XFS (loop3): failed to read RT inodes
[  276.505233][T12035] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  276.747825][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2359'.
[  277.281735][T12107] cgroup: name respecified
[  277.833610][   T32] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  278.013470][   T32] usb 4-1: Using ep0 maxpacket: 16
[  278.017070][   T32] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.021071][   T32] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  278.025400][   T32] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  278.030183][   T32] usb 4-1: config 0 interface 0 has no altsetting 0
[  278.032616][   T32] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  278.036078][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.043619][   T32] usb 4-1: config 0 descriptor??
[  278.139544][T12125] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2387'.
[  278.293091][T12121] loop3: detected capacity change from 0 to 1024
[  278.332249][T12121] hfsplus: failed to load extents file
[  278.556840][   T32] hid (null): unknown global tag 0xd
[  278.559224][   T32] hid (null): unknown global tag 0xe
[  278.561719][   T32] hid (null): unknown global tag 0xe
[  278.759715][   T32] usb 4-1: USB disconnect, device number 21
[  279.408233][T12166] bond1: option miimon: invalid value (18446744073709551607)
[  279.411579][T12166] bond1: option miimon: allowed values 0 - 2147483647
[  279.420647][T12166] bond1 (unregistering): Released all slaves
[  279.577612][   T33] kauditd_printk_skb: 413 callbacks suppressed
[  279.577629][   T33] audit: type=1107 audit(1778275448.362:636): pid=12168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  279.809367][T12184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2412'.
[  279.983048][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2413'.
[  279.994766][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2413'.
[  280.153575][ T5786] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  280.303505][ T5786] usb 4-1: Using ep0 maxpacket: 16
[  280.307447][ T5786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  280.311805][ T5786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  280.318560][ T5786] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  280.322424][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.326747][ T5786] usb 4-1: Product: syz
[  280.328590][ T5786] usb 4-1: Manufacturer: syz
[  280.330605][ T5786] usb 4-1: SerialNumber: syz
[  280.342313][ T5786] usb 4-1: 0:2 : does not exist
[  280.443132][T12194] bridge0: port 3(macvlan2) entered blocking state
[  280.446394][T12194] bridge0: port 3(macvlan2) entered disabled state
[  280.448679][T12194] macvlan2: entered allmulticast mode
[  280.450502][T12194] bridge0: entered allmulticast mode
[  280.452356][T12194] bridge0: entered promiscuous mode
[  280.458117][T12194] macvlan2: left allmulticast mode
[  280.459948][T12194] bridge0: left allmulticast mode
[  280.475358][    T9] bridge0: left promiscuous mode
[  280.544825][ T5786] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  280.557685][T12197] 8021q: adding VLAN 0 to HW filter on device macsec1
[  280.560538][   T32] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  280.578629][ T5786] usb 4-1: USB disconnect, device number 22
[  280.669447][ T6947] udevd[6947]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  280.838023][T12217] program syz.6.2428 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  280.866819][T12220] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2429'.
[  280.929810][T12225] loop6: detected capacity change from 0 to 512
[  280.961062][T12225] EXT4-fs (loop6): 1 truncate cleaned up
[  280.964789][T12225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.986588][ T7531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.899874][T12276] loop3: detected capacity change from 0 to 32768
[  282.914427][T12276] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2453 (12276)
[  282.928064][T12276] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  282.932263][T12276] BTRFS info (device loop3): using sha256 checksum algorithm
[  283.055267][T12276] BTRFS info (device loop3): setting nodatasum
[  283.057907][T12276] BTRFS info (device loop3): enabling ssd optimizations
[  283.060708][T12276] BTRFS info (device loop3): turning on async discard
[  283.063712][T12276] BTRFS info (device loop3): enabling free space tree
[  283.078250][   T33] audit: type=1800 audit(1778275451.892:637): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2453" name="file1" dev="loop3" ino=260 res=0 errno=0
[  283.094839][   T33] audit: type=1800 audit(1778275451.892:638): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2453" name="file1" dev="loop3" ino=260 res=0 errno=0
[  283.108549][   T33] audit: type=1800 audit(1778275451.892:639): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2453" name="file1" dev="loop3" ino=260 res=0 errno=0
[  283.773727][ T8990] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  284.051381][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2454'.
[  284.234530][T12311] Zero length message leads to an empty skb
[  284.371349][T12321] TCP: tcp_parse_options: Illegal window scaling value 19 > 14 received
[  284.759175][T12347] loop6: detected capacity change from 0 to 8
[  285.235396][T12367] xt_nat: multiple ranges no longer supported
[  285.479072][   T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  285.636062][   T10] usb 4-1: config 0 has an invalid interface number: 32 but max is 0
[  285.639533][   T10] usb 4-1: config 0 has no interface number 0
[  285.642056][   T10] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.646763][   T10] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.650842][   T10] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  285.654549][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.660259][   T10] usb 4-1: config 0 descriptor??
[  286.047816][T12378] loop6: detected capacity change from 0 to 2048
[  286.054555][T12378] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  286.062552][   T33] audit: type=1800 audit(1778275454.872:640): pid=12378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2491" name="file1" dev="loop6" ino=1346 res=0 errno=0
[  286.081125][   T10] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[  286.089870][   T10] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[  286.094212][   T10] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[  286.098025][   T10] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[  286.105012][   T10] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[  286.111254][   T10] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[  286.119454][   T10] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[  286.123690][   T10] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[  286.134152][   T10] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[  286.136940][   T10] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[  286.146325][   T10] prodikeys 0003:041E:2801.000C: hidraw0: USB HID v7f.fd Device [HID 041e:2801] on usb-dummy_hcd.3-1/input32
[  286.220800][T12381] bridge_slave_0: left allmulticast mode
[  286.222592][T12381] bridge_slave_0: left promiscuous mode
[  286.225050][T12381] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.229245][T12381] bridge_slave_1: left allmulticast mode
[  286.231019][T12381] bridge_slave_1: left promiscuous mode
[  286.232832][T12381] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.242821][T12381] bond0: (slave bond_slave_0): Releasing backup interface
[  286.260622][T12381] bond0: (slave bond_slave_1): Releasing backup interface
[  286.278626][T12381] team0: Port device team_slave_0 removed
[  286.287496][T12381] team0: Port device team_slave_1 removed
[  286.304928][T12381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.308222][T12381] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.312729][T12381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.316666][T12381] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.416523][T12381] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  286.459654][ T5786] usb 4-1: USB disconnect, device number 23
[  286.588552][T12388] loop6: detected capacity change from 0 to 512
[  286.597944][T12388] EXT4-fs (loop6): orphan cleanup on readonly fs
[  286.621502][T12388] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.2495: EA inode hash validation failed
[  286.628845][T12388] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  286.636094][T12388] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.2495: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  286.642619][T12388] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  286.643450][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  286.648835][    C0] EXT4-fs (loop6): initial error at time 1778275455: ext4_xattr_inode_update_ref:1037: inode 11
[  286.652855][    C0] EXT4-fs (loop6): last error at time 1778275455: ext4_xattr_inode_update_ref:1037: inode 11
[  286.666949][T12388] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.2495: ea_inode dec ref err=-117
[  286.672216][T12388] EXT4-fs (loop6): 1 orphan inode deleted
[  286.675298][T12388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  286.696673][ T7531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.848964][T12396] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  287.375667][T12433] cgroup: none used incorrectly
[  289.025526][T12480] syz.7.2535 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  289.107901][ T5002] Bluetooth: Frame is too long (len 12, expected len 4)
[  289.157639][T12469] loop6: detected capacity change from 0 to 32768
[  289.179142][T12482] loop3: detected capacity change from 0 to 512
[  289.181598][T12482] EXT4-fs: Ignoring removed i_version option
[  289.184592][T12482] EXT4-fs: Ignoring removed nobh option
[  289.189009][T12482] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  289.197126][T12482] EXT4-fs (loop3): 1 truncate cleaned up
[  289.200621][T12469] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  289.200949][T12482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.245674][ T8990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.269366][T12488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2539'.
[  289.273173][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'.
[  289.277001][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'.
[  289.302908][T12490] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  289.307116][T12490] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  289.310203][T12490] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  289.343770][ T7531] ocfs2: Unmounting device (7,6) on (node local)
[  289.431018][T12498] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2544'.
[  289.609244][ T5002] Bluetooth: hci1: Malformed HCI Event: 0x22
[  290.181853][T12527] erofs (device nbd3): cannot find valid erofs superblock
[  290.278956][T12532] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82
[  291.240946][T12579] netlink: 'syz.3.2582': attribute type 1 has an invalid length.
[  291.249135][T12579] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2582'.
[  291.568498][T12601] loop3: detected capacity change from 0 to 256
[  291.614251][T12605] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2595'.
[  291.641660][T12607] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  291.651378][T12607] bond1 (unregistering): Released all slaves
[  291.651535][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2597'.
[  291.689674][T12612] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  291.692155][T12612] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  291.855068][T12620] loop3: detected capacity change from 0 to 512
[  291.858605][T12620] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  291.863201][T12620] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2602: inode has both inline data and extents flags
[  291.867778][T12620] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  291.867995][T12620] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2602: couldn't read orphan inode 15 (err -117)
[  291.874815][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  291.874826][    C0] EXT4-fs (loop3): initial error at time 1778275460: ext4_orphan_get:1397: inode 15
[  291.874839][    C0] EXT4-fs (loop3): last error at time 1778275460: ext4_orphan_get:1397: inode 15
[  291.882935][T12620] loop3: lost filesystem error report for type 5 error -117
[  291.889349][T12620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.936188][ T8990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.166790][T12643] openvswitch: netlink: IPv4 tun info is not correct
[  292.242701][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2614'.
[  292.267360][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2614'.
[  292.346068][T12657] loop3: detected capacity change from 0 to 512
[  292.353588][T12657] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  292.374624][T12657] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  292.382155][T12657] EXT4-fs (loop3): 1 truncate cleaned up
[  292.387666][T12657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.406711][ T8990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.559881][T12674] loop3: detected capacity change from 0 to 256
[  292.595591][T12674] FAT-fs (loop3): Directory bread(block 64) failed
[  292.598302][T12674] FAT-fs (loop3): Directory bread(block 65) failed
[  292.600981][T12674] FAT-fs (loop3): Directory bread(block 66) failed
[  292.604896][T12674] FAT-fs (loop3): Directory bread(block 67) failed
[  292.607591][T12674] FAT-fs (loop3): Directory bread(block 68) failed
[  292.610201][T12674] FAT-fs (loop3): Directory bread(block 69) failed
[  292.612921][T12674] FAT-fs (loop3): Directory bread(block 70) failed
[  292.617031][T12674] FAT-fs (loop3): Directory bread(block 71) failed
[  292.619773][T12674] FAT-fs (loop3): Directory bread(block 72) failed
[  292.622260][T12674] FAT-fs (loop3): Directory bread(block 73) failed
[  292.696857][T12676] loop3: detected capacity change from 0 to 4096
[  292.715013][T12677] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  292.764767][T12679] loop3: detected capacity change from 0 to 512
[  292.768772][T12679] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  292.776490][T12679] EXT4-fs (loop3): 1 truncate cleaned up
[  292.781075][T12679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.665597][ T8990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.962824][T12699] loop3: detected capacity change from 0 to 40427
[  293.965840][T12699] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  293.968310][T12699] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  293.971525][T12699] F2FS-fs (loop3): invalid crc value
[  294.000136][T12699] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  294.008595][T12699] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  294.011328][T12699] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  294.334305][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2646'.
[  296.333791][   T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  296.493555][   T24] usb 4-1: Using ep0 maxpacket: 32
[  296.497675][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.501253][   T24] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  296.505073][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.508944][   T24] usb 4-1: config 0 descriptor??
[  296.513754][   T24] rndis_host 4-1:0.0: missing cdc header ether descriptor
[  296.720883][   T24] usb 4-1: USB disconnect, device number 24
[  297.780139][T12811] loop3: detected capacity change from 0 to 764
[  297.799472][T12811] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  297.837844][T12811] Symlink component flag not implemented
[  297.842773][T12811] Symlink component flag not implemented (7)
[  297.969996][T12819] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  298.045567][T12830] loop3: detected capacity change from 0 to 128
[  298.051649][T12830] EXT4-fs (loop3): Test dummy encryption mode enabled
[  298.061273][T12830] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  298.069815][T12830] ext4 filesystem being mounted at /528/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  298.170830][ T8990] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  298.178520][T12838] netlink: 6032 bytes leftover after parsing attributes in process `syz.7.2697'.
[  298.351410][T12852] loop3: detected capacity change from 0 to 128
[  298.733551][ T5786] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  298.884847][ T5786] usb 4-1: Using ep0 maxpacket: 16
[  298.890145][ T5786] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253
[  298.899812][ T5786] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  298.905179][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.908525][ T5786] usb 4-1: Product: syz
[  298.910456][ T5786] usb 4-1: Manufacturer: syz
[  298.912451][ T5786] usb 4-1: SerialNumber: syz
[  298.914644][T12862] loop6: detected capacity change from 0 to 4096
[  298.918532][T12862] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  298.935937][ T5786] usb 4-1: config 0 descriptor??
[  298.941215][T12862] ntfs3(loop6): ino=19, mi_enum_attr
[  298.944850][T12862] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  298.948764][T12858] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  299.001454][T12866] fuse: Bad value for 'fd'
[  299.058650][ T5786] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected
[  299.190632][    C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71)
[  299.190967][   T24] usb 4-1: USB disconnect, device number 25
[  299.193222][    C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71)
[  299.211530][   T24] mcba_usb 4-1:0.0 can0: device disconnected
[  299.481028][T12889] loop6: detected capacity change from 0 to 512
[  299.487710][T12889] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  299.512447][T12889] EXT4-fs (loop6): 1 truncate cleaned up
[  299.519048][T12889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.627367][ T7531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.810972][T12906] fuse: Bad value for 'fd'
[  299.935713][T12915] netlink: 'syz.7.2727': attribute type 1 has an invalid length.
[  299.940055][T12915] netlink: 'syz.7.2727': attribute type 2 has an invalid length.
[  299.944930][T12915] netlink: 'syz.7.2727': attribute type 1 has an invalid length.
[  299.948454][T12915] netlink: 'syz.7.2727': attribute type 2 has an invalid length.
[  300.089854][T12927] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2734'.
[  300.098999][T12927] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2734'.
[  300.625539][T12945] loop3: detected capacity change from 0 to 32768
[  300.636484][T12945] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  300.648244][T12945] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  300.656474][T12945] XFS (loop3): Starting recovery (logdev: internal)
[  300.681089][T12945] XFS (loop3): Ending recovery (logdev: internal)
[  300.722400][ T8990] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  300.817845][T12964] loop6: detected capacity change from 0 to 2048
[  300.847511][T12964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  301.041819][T12977] bond1: entered allmulticast mode
[  301.209817][T12994] netlink: 'syz.6.2761': attribute type 13 has an invalid length.
[  301.275908][T13001] loop6: detected capacity change from 0 to 256
[  301.458279][T12999] loop3: detected capacity change from 0 to 40427
[  301.462043][T12999] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  301.465304][T12999] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  301.469607][T12999] F2FS-fs (loop3): invalid crc value
[  301.529843][T12999] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  301.611861][T12999] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  301.614594][T12999] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  302.830120][T13030] loop3: detected capacity change from 0 to 32768
[  302.834703][T13030] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2768 (13030)
[  302.844963][T13030] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  302.849722][T13030] BTRFS info (device loop3): using sha256 checksum algorithm
[  302.950269][T13030] BTRFS info (device loop3): setting nodatasum
[  302.952686][T13030] BTRFS info (device loop3): enabling ssd optimizations
[  302.955604][T13030] BTRFS info (device loop3): turning on async discard
[  302.958153][T13030] BTRFS info (device loop3): enabling free space tree
[  302.970483][   T33] audit: type=1800 audit(1778275471.782:641): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2768" name="file1" dev="loop3" ino=260 res=0 errno=0
[  303.351686][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2779'.
[  303.461217][ T8990] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  303.821175][T13077] netlink: 'syz.3.2786': attribute type 1 has an invalid length.
[  303.908363][T13079] loop3: detected capacity change from 0 to 1024
[  303.912064][T13079] ext4: Bad value for 'barrier'
[  304.129958][T13084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2787'.
[  304.908711][T13108] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 6 out of range (1000000..45000000)
[  304.940469][T13104] loop6: detected capacity change from 0 to 4096
[  304.954902][T13104] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  304.998748][T13104] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  305.002213][T13104] ntfs3(loop6): mft corrupted
[  305.009572][T13104] ntfs3(loop6): Failed to load $Extend (-22).
[  305.012364][T13104] ntfs3(loop6): Failed to initialize $Extend.
[  305.206736][T13125] syz_tun: entered promiscuous mode
[  305.220347][T13125] macvtap1: entered promiscuous mode
[  305.227504][T13125] syz_tun: left promiscuous mode
[  305.577842][T13141] loop6: detected capacity change from 0 to 128
[  306.633452][   T32] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  306.820323][   T32] usb 4-1: unable to get BOS descriptor or descriptor too short
[  306.825395][   T32] usb 4-1: not running at top speed; connect to a high speed hub
[  306.829884][   T32] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  306.835310][   T32] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2
[  306.841240][   T32] usb 4-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70
[  306.846114][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.849886][   T32] usb 4-1: Product: syz
[  306.853263][   T32] usb 4-1: Manufacturer: syz
[  306.861109][   T32] usb 4-1: SerialNumber: syz
[  307.107674][T13163] loop3: detected capacity change from 0 to 256
[  307.110813][T13163] exfat: Invalid uid '0x00000000ffffffff'
[  307.134137][   T32] usb 4-1: USB disconnect, device number 26
[  307.175051][T13172] tipc: Started in network mode
[  307.177214][T13172] tipc: Node identity 4, cluster identity 4711
[  307.179871][T13172] tipc: Node number set to 4
[  309.393587][ T2338] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  309.563590][ T2338] usb 4-1: Using ep0 maxpacket: 32
[  309.578986][ T2338] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  309.585109][ T2338] usb 4-1: config 0 has no interface number 0
[  309.591331][ T2338] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  309.601706][ T2338] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  309.611985][ T2338] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  309.616166][ T2338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.619557][ T2338] usb 4-1: Product: syz
[  309.621529][ T2338] usb 4-1: Manufacturer: syz
[  309.623778][ T2338] usb 4-1: SerialNumber: syz
[  309.659840][ T2338] usb 4-1: config 0 descriptor??
[  309.916244][ T2338] radio-si470x 4-1:0.35: this is not a si470x device.
[  309.957492][T13233] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2854'.
[  309.970032][ T2338] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  309.980063][ T2338] usb 4-1: USB disconnect, device number 27
[  310.131650][   T33] audit: type=1326 audit(1778275478.942:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.7.2857" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7fc00000
[  310.140941][   T33] audit: type=1326 audit(1778275478.962:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.7.2857" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcfdc79cdd9 code=0x7fc00000
[  310.559584][T13248] tmpfs: Cannot retroactively limit size
[  310.626580][    T9] kernel write not supported for file /1275/gid_map (pid: 9 comm: kworker/0:0)
[  310.887943][T13256] loop3: detected capacity change from 0 to 32768
[  310.899935][   T33] audit: type=1800 audit(1778275479.712:644): pid=13256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2865" name="file1" dev="loop3" ino=4 res=0 errno=0
[  310.913994][T13256] syz.3.2865: attempt to access beyond end of device
[  310.913994][T13256] loop3: rw=34817, sector=4680064, nr_sectors = 120 limit=32768
[  310.931688][  T125] blkno = 8ed30, nblocks = f
[  310.934387][  T125] ERROR: (device loop3): dbFree: block to be freed is outside the map
[  310.934387][  T125] 
[  310.940569][  T125] ERROR: (device loop3): remounting filesystem as read-only
[  311.117506][T13269] Invalid option length (0) for dns_resolver key
[  311.481437][T13279] loop3: detected capacity change from 0 to 1024
[  311.503227][T13279] hfsplus: failed to load attributes file
[  313.208100][T13329] loop6: detected capacity change from 0 to 512
[  313.212681][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2898'.
[  313.214729][T13329] EXT4-fs: inline encryption not supported
[  313.236924][T13329] EXT4-fs (loop6): 1 truncate cleaned up
[  313.240021][T13329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.329995][T13335] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2899'.
[  313.355332][ T7531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.479533][T13356] loop6: detected capacity change from 0 to 128
[  313.709095][T13371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2913'.
[  313.713326][T13371] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2913'.
[  313.937852][T13384] loop3: detected capacity change from 0 to 256
[  313.940378][T13384] exfat: Deprecated parameter 'namecase'
[  313.950308][T13384] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5cb490d, utbl_chksum : 0xe619d30d)
[  314.044086][T13387] vivid-001: =================  START STATUS  =================
[  314.049846][T13387] vivid-001: Radio HW Seek Mode: Bounded
[  314.054203][T13387] vivid-001: Radio Programmable HW Seek: false
[  314.056234][T13387] vivid-001: RDS Rx I/O Mode: Block I/O
[  314.058158][T13387] vivid-001: Generate RBDS Instead of RDS: false
[  314.060201][T13387] vivid-001: RDS Reception: true
[  314.062002][T13387] vivid-001: RDS Program Type: 0 inactive
[  314.065691][T13387] vivid-001: RDS PS Name:  inactive
[  314.067605][T13387] vivid-001: RDS Radio Text:  inactive
[  314.069851][T13387] vivid-001: RDS Traffic Announcement: false inactive
[  314.072200][T13387] vivid-001: RDS Traffic Program: false inactive
[  314.077763][T13387] vivid-001: RDS Music: false inactive
[  314.079962][T13387] vivid-001: ==================  END STATUS  ==================
[  314.223340][T13391] loop3: detected capacity change from 0 to 8192
[  314.244984][T13391] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  314.252378][T13391] FAT-fs (loop3): Filesystem has been set read-only
[  314.255795][T13391] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  314.259205][T13391] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  314.262605][T13391] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  314.266428][T13391] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  314.269920][T13391] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  314.273310][T13391] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  314.281671][T13391] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  314.288956][T13391] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  314.293251][T13391] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  314.297622][T13391] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  314.301030][   T33] audit: type=1800 audit(1778275483.122:645): pid=13391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2922" name="file2" dev="loop3" ino=1048714 res=0 errno=0
[  315.584114][T13415] loop3: detected capacity change from 0 to 32768
[  315.603132][T13427] sctp: [Deprecated]: syz.6.2940 (pid 13427) Use of struct sctp_assoc_value in delayed_ack socket option.
[  315.603132][T13427] Use struct sctp_sack_info instead
[  315.616555][T13415] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  315.668684][T13415] XFS (loop3): Ending clean mount
[  315.679108][T13439] xt_hashlimit: size too large, truncated to 1048576
[  315.728284][ T8990] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  316.480192][T13461] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2950'.
[  316.967881][T13478] netlink: 'syz.7.2959': attribute type 5 has an invalid length.
[  316.970625][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2959'.
[  317.157623][T13483] loop3: detected capacity change from 0 to 128
[  317.194038][T13483] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  317.214361][T13483] hpfs: filesystem error: improperly stopped
[  317.223353][T13483] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  317.229403][T13483] hpfs: You really don't want any checks? You are crazy...
[  317.232694][T13483] hpfs: hpfs_map_sector(): read error
[  317.235438][T13483] hpfs: code page support is disabled
[  317.237942][T13483] hpfs: hpfs_map_4sectors(): unaligned read
[  317.240198][T13483] hpfs: hpfs_map_4sectors(): unaligned read
[  317.244936][T13490] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  317.244969][T13483] hpfs: filesystem error: unable to find root dir
[  317.271998][T13483] hpfs: hpfs_map_4sectors(): unaligned read
[  317.287983][T13483] hpfs: hpfs_map_sector(): read error
[  317.325182][   T33] audit: type=1326 audit(1778275486.132:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.6.2968" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88d359cdd9 code=0x0
[  317.469589][T13505] fuse: fd is not a fuse device
[  318.494211][T13514] netlink: 'syz.7.2973': attribute type 39 has an invalid length.
[  319.287996][   T33] audit: type=1800 audit(1778275487.992:647): pid=13525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2976" name="file0" dev="overlay" ino=3318 res=0 errno=0
[  319.855296][T13541] loop3: detected capacity change from 0 to 32768
[  319.945996][T13541] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  319.970968][T13541] XFS (loop3): Ending clean mount
[  320.225822][    T9] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  320.231654][    T9] XFS (loop3): Unmount and run xfs_repair
[  320.234130][    T9] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  320.237134][    T9] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  320.240581][    T9] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10  ................
[  320.243692][    T9] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  320.246669][    T9] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01  ....lK..........
[  320.250259][    T9] 00000040: ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00  ................
[  320.254347][    T9] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  320.257550][    T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  320.260971][    T9] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  320.264211][    T9] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x14 len 4 error 74
[  320.289945][    T9] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8f0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  320.296726][    T9] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  320.348839][ T8990] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  320.504879][T13561] netlink: 'syz.3.2990': attribute type 21 has an invalid length.
[  320.507853][T13561] IPv6: NLM_F_CREATE should be specified when creating new route
[  320.510503][T13561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2990'.
[  320.783329][T13567] loop3: detected capacity change from 0 to 32768
[  320.802278][T13574] batadv_slave_1: entered promiscuous mode
[  320.811122][T13574] batadv_slave_1: left promiscuous mode
[  320.823145][T11822] JFS: metapage_get_blocks failed
[  320.829786][  T124] blkno = 50030, nblocks = 1
[  320.830100][T13567] JFS: metapage_get_blocks failed
[  320.831767][  T124] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  320.831767][  T124] 
[  320.838141][T11822] JFS: metapage_get_blocks failed
[  320.838226][  T124] ERROR: (device loop3): remounting filesystem as read-only
[  320.842235][  T124] blkno = 5002c, nblocks = 4
[  320.844445][  T124] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  320.844445][  T124] 
[  320.855698][ T8990] JFS: metapage_get_blocks failed
[  320.862036][ T8990] JFS: metapage_get_blocks failed
[  321.062486][T13590] fuse: fd is not a fuse device
[  321.177045][T13594] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3007'.
[  321.304516][T13599] netlink: 'syz.3.3008': attribute type 21 has an invalid length.
[  321.307855][T13599] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3008'.
[  321.384238][   T33] audit: type=1326 audit(1778275490.202:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13593 comm="syz.7.3007" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfdc79cdd9 code=0x0
[  321.767797][T13603] loop3: detected capacity change from 0 to 32768
[  322.372821][T13609] loop3: detected capacity change from 0 to 32768
[  322.380925][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  322.396196][T13609] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  322.396196][T13609] 
[  322.513080][T13615] Cannot find add_set index 0 as target
[  322.910111][T13640] wg2 speed is unknown, defaulting to 1000
[  324.090948][T13664] loop3: detected capacity change from 0 to 1024
[  324.117283][T13664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.245171][T13664] overlayfs: upper fs does not support tmpfile.
[  324.324578][ T8990] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz-executor: missing EA_INODE flag
[  324.347819][ T8990] EXT4-fs (loop3): Remounting filesystem read-only
[  324.354637][ T8990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.417784][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3038'.
[  325.110761][T13702] loop6: detected capacity change from 0 to 2048
[  325.114526][T13702] ext4: Unknown parameter 'dont_measure'
[  325.133838][T13698] loop6: detected capacity change from 0 to 1024
[  325.137009][T13698] EXT4-fs: Ignoring removed orlov option
[  325.149487][T13698] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  325.152902][T13698] System zones: 0-1, 3-12
[  325.159169][T13698] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.385523][ T5793] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  325.533501][ T5793] usb 4-1: Using ep0 maxpacket: 8
[  325.536719][ T5793] usb 4-1: config 3 has an invalid interface number: 36 but max is 0
[  325.539189][ T5793] usb 4-1: config 3 has no interface number 0
[  325.541119][ T5793] usb 4-1: config 3 interface 36 has no altsetting 0
[  325.545224][ T5793] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  325.548031][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.550566][ T5793] usb 4-1: Product: syz
[  325.552032][ T5793] usb 4-1: Manufacturer: syz
[  325.553884][ T5793] usb 4-1: SerialNumber: syz
[  325.698411][ T7531] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  325.769828][ T5793] radioshark 4-1:3.36: Invalid radioSHARK device
[  325.773157][ T5793] radioshark 4-1:3.36: probe with driver radioshark failed with error -22
[  325.777992][ T5793] usbhid 4-1:3.36: couldn't find an input interrupt endpoint
[  325.786568][ T5793] usb 4-1: USB disconnect, device number 28
[  325.930904][    T9] IPVS: starting estimator thread 0...
[  326.034084][T13730] IPVS: using max 41 ests per chain, 98400 per kthread
[  326.070680][T13739] loop6: detected capacity change from 0 to 16
[  326.114956][T13739] erofs (device loop6): algorithm 1 isn't enabled on this kernel
[  327.067882][T13764] loop3: detected capacity change from 0 to 512
[  327.130649][T13764] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  327.147131][T13764] EXT4-fs (loop3): orphan cleanup on readonly fs
[  327.156989][T13764] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  327.167957][T13764] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  327.171389][T13764] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #16: comm syz.3.3075: corrupted xattr block 31: invalid header
[  327.179376][T13764] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  327.179849][T13764] EXT4-fs (loop3): Remounting filesystem read-only
[  327.183660][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  327.183676][    C1] EXT4-fs (loop3): initial error at time 1778275495: ext4_xattr_delete_inode:2972: inode 16
[  327.183698][    C1] EXT4-fs (loop3): last error at time 1778275495: ext4_xattr_delete_inode:2972: inode 16
[  327.195688][T13764] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117)
[  327.199035][T13764] EXT4-fs (loop3): 1 orphan inode deleted
[  327.201701][T13764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  327.239029][ T8990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.380533][T13780] loop6: detected capacity change from 0 to 64
[  328.627120][T13785] loop3: detected capacity change from 0 to 512
[  328.639679][T13785] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.3084: missing EA_INODE flag
[  328.644607][T13785] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  328.644844][T13785] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3084: error while reading EA inode 12 err=-117
[  328.653530][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  328.653548][    C0] EXT4-fs (loop3): initial error at time 1778275497: ext4_xattr_inode_iget:441: inode 12
[  328.653571][    C0] EXT4-fs (loop3): last error at time 1778275497: ext4_xattr_inode_iget:441: inode 12
[  328.665848][T13785] loop3: lost filesystem error report for type 5 error -117
[  328.666115][T13785] EXT4-fs (loop3): 1 orphan inode deleted
[  328.672809][T13785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.693845][T13785] syz.3.3084 (pid 13785) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  328.778758][ T8990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.887652][T13798] openvswitch: netlink: Invalid VLAN frame
[  329.222553][T13806] loop6: detected capacity change from 0 to 40427
[  329.227437][T13806] F2FS-fs (loop6): invalid crc value
[  329.299250][T13806] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  329.310063][T13806] F2FS-fs (loop6): Start checkpoint disabled!
[  329.323575][T13806] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  329.327101][T13806] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  329.348270][   T33] audit: type=1800 audit(1778275498.162:649): pid=13806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3093" name="file1" dev="loop6" ino=10 res=0 errno=0
[  329.487154][ T5793] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  329.680756][T13817] syz.6.3093: attempt to access beyond end of device
[  329.680756][T13817] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  329.697575][T13817] syz.6.3093: attempt to access beyond end of device
[  329.697575][T13817] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  329.710827][T13817] syz.6.3093: attempt to access beyond end of device
[  329.710827][T13817] loop6: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  329.717075][T13817] syz.6.3093: attempt to access beyond end of device
[  329.717075][T13817] loop6: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  329.722839][T13817] syz.6.3093: attempt to access beyond end of device
[  329.722839][T13817] loop6: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  329.729046][T13817] syz.6.3093: attempt to access beyond end of device
[  329.729046][T13817] loop6: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  329.739254][T13817] syz.6.3093: attempt to access beyond end of device
[  329.739254][T13817] loop6: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  329.745087][T13817] syz.6.3093: attempt to access beyond end of device
[  329.745087][T13817] loop6: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  329.750975][T13817] syz.6.3093: attempt to access beyond end of device
[  329.750975][T13817] loop6: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  329.757534][T13817] syz.6.3093: attempt to access beyond end of device
[  329.757534][T13817] loop6: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  329.819303][ T5793] usb 4-1: unable to get BOS descriptor or descriptor too short
[  329.823717][ T5793] usb 4-1: config 2 has an invalid interface number: 34 but max is 0
[  329.827067][ T5793] usb 4-1: config 2 has no interface number 0
[  329.829674][ T5793] usb 4-1: config 2 interface 34 has no altsetting 0
[  329.834829][ T5793] usb 4-1: New USB device found, idVendor=0572, idProduct=1328, bcdDevice=9c.5f
[  329.838675][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.841941][ T5793] usb 4-1: Product: syz
[  329.843918][ T5793] usb 4-1: Manufacturer: syz
[  329.845895][ T5793] usb 4-1: SerialNumber: syz
[  329.986180][   T81] CPU: 1 UID: 0 PID: 81 Comm: kworker/u10:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  329.986198][   T81] Tainted: [L]=SOFTLOCKUP
[  329.986201][   T81] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  329.986206][   T81] Workqueue: writeback wb_workfn (flush-7:6)
[  329.986238][   T81] Call Trace:
[  329.986243][   T81]  <TASK>
[  329.986249][   T81]  dump_stack_lvl+0xe8/0x150
[  329.986263][   T81]  f2fs_stop_checkpoint+0x3c7/0x590
[  329.986280][   T81]  f2fs_write_end_io+0x1274/0x1740
[  329.986313][   T81]  __submit_merged_bio+0x256/0x6a0
[  329.986332][   T81]  __submit_merged_write_cond+0x3c9/0x4e0
[  329.986376][   T81]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  329.986399][   T81]  f2fs_write_data_pages+0x287e/0x34f0
[  329.986408][   T81]  ? f2fs_build_free_nids+0xdc/0x1810
[  329.986428][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  329.986442][   T81]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  329.986467][   T81]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  329.986482][   T81]  ? __lock_acquire+0x6b5/0x2cf0
[  329.986495][   T81]  ? f2fs_update_inode+0x13d9/0x2620
[  329.986507][   T81]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  329.986519][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  329.986529][   T81]  do_writepages+0x32e/0x550
[  329.986540][   T81]  ? reacquire_held_locks+0x104/0x190
[  329.986549][   T81]  ? writeback_sb_inodes+0x463/0x19d0
[  329.986560][   T81]  __writeback_single_inode+0x133/0x10e0
[  329.986569][   T81]  ? do_raw_spin_unlock+0x4d/0x210
[  329.986581][   T81]  writeback_sb_inodes+0x979/0x19d0
[  329.986589][   T81]  ? __lock_acquire+0x6b5/0x2cf0
[  329.986607][   T81]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  329.986633][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  329.986658][   T81]  ? rcu_is_watching+0x15/0xb0
[  329.986670][   T81]  wb_writeback+0x445/0xb00
[  329.986680][   T81]  ? queue_io+0x231/0x470
[  329.986691][   T81]  ? __pfx_wb_writeback+0x10/0x10
[  329.986698][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  329.986715][   T81]  wb_workfn+0x3f8/0xf10
[  329.986724][   T81]  ? __lock_acquire+0x6b5/0x2cf0
[  329.986731][   T81]  ? look_up_lock_class+0x57/0x110
[  329.986749][   T81]  ? __pfx_wb_workfn+0x10/0x10
[  329.986761][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  329.986771][   T81]  ? lock_acquire+0x106/0x350
[  329.986779][   T81]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  329.986791][   T81]  ? process_scheduled_works+0xa70/0x1860
[  329.986800][   T81]  ? process_scheduled_works+0xa70/0x1860
[  329.986810][   T81]  ? process_scheduled_works+0xa70/0x1860
[  329.986817][   T81]  ? process_scheduled_works+0xa70/0x1860
[  329.986825][   T81]  process_scheduled_works+0xb5d/0x1860
[  329.986845][   T81]  ? __pfx_process_scheduled_works+0x10/0x10
[  329.986855][   T81]  ? assign_work+0x3d5/0x5e0
[  329.986864][   T81]  worker_thread+0xa53/0xfc0
[  329.986883][   T81]  kthread+0x388/0x470
[  329.986893][   T81]  ? __pfx_worker_thread+0x10/0x10
[  329.986900][   T81]  ? __pfx_kthread+0x10/0x10
[  329.986910][   T81]  ret_from_fork+0x514/0xb70
[  329.986920][   T81]  ? __pfx_ret_from_fork+0x10/0x10
[  329.986928][   T81]  ? __switch_to+0xc79/0x1410
[  329.986940][   T81]  ? __pfx_kthread+0x10/0x10
[  329.986950][   T81]  ret_from_fork_asm+0x1a/0x30
[  329.986966][   T81]  </TASK>
[  329.987001][   T81] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  330.058466][ T5793] usb 4-1: USB disconnect, device number 29
[  330.366737][T13830] loop6: detected capacity change from 0 to 136
[  330.560700][T13842] netlink: 26 bytes leftover after parsing attributes in process `syz.6.3107'.
[  330.684937][T13848] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  331.703876][T13892] netlink: 'syz.3.3131': attribute type 1 has an invalid length.
[  331.822116][T13898] loop6: detected capacity change from 0 to 4096
[  331.848907][T13898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.898217][ T7531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.947867][T13909] tipc: Can't bind to reserved service type 0
[  332.364842][   T33] audit: type=1326 audit(1778275501.199:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13933 comm="syz.7.3148" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  332.381947][   T33] audit: type=1326 audit(1778275501.199:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13933 comm="syz.7.3148" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  332.408379][   T33] audit: type=1326 audit(1778275501.199:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13933 comm="syz.7.3148" exe="/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  332.423326][   T33] audit: type=1326 audit(1778275501.199:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13933 comm="syz.7.3148" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  332.453782][   T33] audit: type=1326 audit(1778275501.199:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13933 comm="syz.7.3148" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  332.462747][   T33] audit: type=1326 audit(1778275501.209:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13933 comm="syz.7.3148" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  332.474052][   T33] audit: type=1326 audit(1778275501.209:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13933 comm="syz.7.3148" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  332.482656][   T33] audit: type=1326 audit(1778275501.209:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13933 comm="syz.7.3148" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  332.492093][   T33] audit: type=1326 audit(1778275501.209:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13933 comm="syz.7.3148" exe="/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  332.550064][T13926] loop6: detected capacity change from 0 to 32768
[  332.555497][T13926] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3144 (13926)
[  332.565977][T13926] BTRFS info (device loop6): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  332.570071][T13926] BTRFS info (device loop6): using sha256 checksum algorithm
[  332.996574][T13926] BTRFS info (device loop6): turning off barriers
[  333.007922][T13926] BTRFS info (device loop6): enabling free space tree
[  333.039134][T13963] overlayfs: failed to clone upperpath
[  333.083177][ T7531] BTRFS info (device loop6): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  333.212218][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3155'.
[  333.658572][T13990] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in;
[  333.658572][T13990]    program syz.6.3165 not setting count and/or reply_len properly
[  333.917159][T13995] loop6: detected capacity change from 0 to 32768
[  333.965376][T13995]  loop6: p1 p2 p3 < p5 p6 p7 >
[  333.986274][T13995] loop6: p2 size 16775168 extends beyond EOD, truncated
[  333.995571][T13995] loop6: p5 start 4294970168 is beyond EOD, truncated
[  335.175467][   T32] usb 4-1: new low-speed USB device number 30 using dummy_hcd
[  335.336267][   T32] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  335.338759][   T32] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  335.342203][   T32] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  335.345938][   T32] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  335.349689][   T32] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  335.354453][   T32] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  335.356981][   T32] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  335.360415][   T32] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  335.364586][   T32] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  335.368904][   T32] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  335.374003][   T32] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  335.377016][   T32] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  335.381183][   T32] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  335.385812][   T32] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  335.389676][   T32] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  335.397890][   T32] usb 4-1: string descriptor 0 read error: -22
[  335.399976][   T32] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  335.402732][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.422765][   T32] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  336.391083][T14056] bridge2: entered promiscuous mode
[  336.393233][T14056] bridge2: entered allmulticast mode
[  337.007094][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3196'.
[  337.611781][T14098] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3203'.
[  337.739115][ T5786] usb 4-1: USB disconnect, device number 30
[  337.895200][T14110] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  338.534024][ T5786] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  338.697024][ T5786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  338.701193][ T5786] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 173, changing to 11
[  338.723564][ T5786] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  338.731465][ T5786] usb 4-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[  338.735596][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.741550][ T5786] usb 4-1: Product: syz
[  338.744580][ T5786] usb 4-1: Manufacturer: syz
[  338.748306][ T5786] usb 4-1: SerialNumber: syz
[  338.964680][ T5786] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  339.000690][ T5786] usb 4-1: USB disconnect, device number 31
[  339.044069][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  339.538770][T14163] loop3: detected capacity change from 0 to 64
[  340.182463][T14202] loop6: detected capacity change from 0 to 512
[  340.191160][T14202] fscrypt (loop6, inode 2): Error -61 getting encryption context
[  340.197295][T14202] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61
[  340.200552][T14202] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #13: comm syz.6.3252: iget: bad i_size value: 12154757448730
[  340.208288][T14202] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  340.208595][T14202] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3252: couldn't read orphan inode 13 (err -117)
[  340.215471][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  340.215482][    C1] EXT4-fs (loop6): initial error at time 1778275509: ext4_orphan_get:1397: inode 13
[  340.215495][    C1] EXT4-fs (loop6): last error at time 1778275509: ext4_orphan_get:1397: inode 13
[  340.224984][T14202] loop6: lost filesystem error report for type 5 error -117
[  340.225931][T14202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.239805][T14208] Bluetooth: MGMT ver 1.23
[  340.274406][ T7531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.750592][T14236] loop6: detected capacity change from 0 to 4096
[  341.264390][T14232] loop3: detected capacity change from 0 to 131072
[  341.268034][T14232] F2FS-fs (loop3): Test dummy encryption mode enabled
[  341.271197][T14232] F2FS-fs (loop3): invalid crc value
[  341.303805][T14232] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  341.311002][T14232] F2FS-fs (loop3): Start checkpoint disabled!
[  341.322503][T14232] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  341.325832][T14232] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  341.451619][T14248] loop6: detected capacity change from 0 to 2048
[  341.922510][T14264] loop3: detected capacity change from 0 to 40427
[  341.936245][T14264] F2FS-fs (loop3): invalid crc value
[  341.986948][T14264] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  341.996705][T14264] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  342.027075][ T8990] bio_check_eod: 176 callbacks suppressed
[  342.027091][ T8990] syz-executor: attempt to access beyond end of device
[  342.027091][ T8990] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  342.040679][ T8990] CPU: 0 UID: 0 PID: 8990 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  342.040700][ T8990] Tainted: [L]=SOFTLOCKUP
[  342.040705][ T8990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.040713][ T8990] Call Trace:
[  342.040718][ T8990]  <TASK>
[  342.040724][ T8990]  dump_stack_lvl+0xe8/0x150
[  342.040744][ T8990]  f2fs_stop_checkpoint+0x3c7/0x590
[  342.040763][ T8990]  f2fs_write_end_io+0x1274/0x1740
[  342.040792][ T8990]  __submit_merged_bio+0x256/0x6a0
[  342.040811][ T8990]  __submit_merged_write_cond+0x3c9/0x4e0
[  342.040831][ T8990]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  342.040860][ T8990]  f2fs_write_data_pages+0x287e/0x34f0
[  342.040876][ T8990]  ? is_bpf_text_address+0x26/0x2b0
[  342.040914][ T8990]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  342.040939][ T8990]  ? do_raw_spin_lock+0x12b/0x2f0
[  342.040975][ T8990]  ? unwind_next_frame+0xa6/0x2550
[  342.040990][ T8990]  ? rcu_is_watching+0x15/0xb0
[  342.041005][ T8990]  ? __kasan_check_byte+0x12/0x40
[  342.041021][ T8990]  ? __pfx_hlock_conflict+0x10/0x10
[  342.041036][ T8990]  ? __bfs+0x153/0x290
[  342.041048][ T8990]  ? __pfx_hlock_conflict+0x10/0x10
[  342.041076][ T8990]  ? lockdep_unlock+0x5d/0xd0
[  342.041086][ T8990]  ? __lock_acquire+0x146e/0x2cf0
[  342.041118][ T8990]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  342.041134][ T8990]  do_writepages+0x32e/0x550
[  342.041155][ T8990]  ? do_raw_spin_unlock+0x4d/0x210
[  342.041176][ T8990]  filemap_fdatawrite+0x1e9/0x2f0
[  342.041193][ T8990]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  342.041245][ T8990]  ? do_raw_spin_unlock+0x4d/0x210
[  342.041266][ T8990]  f2fs_sync_dirty_inodes+0x30e/0x830
[  342.041292][ T8990]  f2fs_write_checkpoint+0x9df/0x26a0
[  342.041346][ T8990]  ? __lock_acquire+0x6b5/0x2cf0
[  342.041381][ T8990]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  342.041431][ T8990]  kill_f2fs_super+0x314/0x730
[  342.041452][ T8990]  ? __pfx_kill_f2fs_super+0x10/0x10
[  342.041476][ T8990]  ? lockdep_hardirqs_on+0x7a/0x110
[  342.041503][ T8990]  deactivate_locked_super+0xbc/0x130
[  342.041523][ T8990]  cleanup_mnt+0x437/0x4d0
[  342.041540][ T8990]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.041558][ T8990]  task_work_run+0x1d9/0x270
[  342.041577][ T8990]  ? __pfx_task_work_run+0x10/0x10
[  342.041599][ T8990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.041613][ T8990]  exit_to_user_mode_loop+0xed/0x480
[  342.041625][ T8990]  ? rcu_is_watching+0x15/0xb0
[  342.041640][ T8990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.041654][ T8990]  do_syscall_64+0x33e/0xf80
[  342.041669][ T8990]  ? trace_irq_disable+0x3b/0x140
[  342.041692][ T8990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.041704][ T8990] RIP: 0033:0x7f2ca1d9e017
[  342.041717][ T8990] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  342.041727][ T8990] RSP: 002b:00007fff5631e3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  342.041740][ T8990] RAX: 0000000000000000 RBX: 00007f2ca1e32120 RCX: 00007f2ca1d9e017
[  342.041748][ T8990] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5631e4a0
[  342.041756][ T8990] RBP: 00007fff5631e4a0 R08: 00007fff5631f4a0 R09: 00000000ffffffff
[  342.041764][ T8990] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff5631f530
[  342.041772][ T8990] R13: 00007f2ca1e32120 R14: 0000000000053799 R15: 00007fff5631f570
[  342.041794][ T8990]  </TASK>
[  342.178519][ T8990] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  342.536970][T14296] bridge0: port 3(vlan2) entered blocking state
[  342.539434][T14296] bridge0: port 3(vlan2) entered disabled state
[  342.541623][T14296] vlan2: entered allmulticast mode
[  342.545527][T14296] dummy0: entered allmulticast mode
[  342.550812][T14296] vlan2: entered promiscuous mode
[  342.552805][T14296] dummy0: entered promiscuous mode
[  344.010190][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3300'.
[  344.030072][T14321] bond2: option ad_actor_sys_prio: invalid value (0)
[  344.032788][T14321] bond2: option ad_actor_sys_prio: allowed values 1 - 65535
[  344.037935][T14321] bond2 (unregistering): Released all slaves
[  344.468552][T14343] loop3: detected capacity change from 0 to 4096
[  344.477540][T14343] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  344.844540][T14357] openvswitch: netlink: IPv4 tun info is not correct
[  345.380141][T14343] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  345.590607][T14376] netlink: 'syz.6.3322': attribute type 49 has an invalid length.
[  348.934853][ T5002] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  349.554049][ T2338] kernel read not supported for file /dsp (pid: 2338 comm: kworker/1:3)
[  349.735963][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'.
[  349.891932][T14468] loop3: detected capacity change from 0 to 1024
[  349.919612][T14468] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  350.137682][T14473] loop3: detected capacity change from 0 to 2048
[  350.143708][T14473] udf: Unknown parameter 'adinivolume'
[  350.609946][T14482] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3363'.
[  351.511388][T14515] loop3: detected capacity change from 0 to 512
[  351.517053][T14515] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  351.609500][T14515] EXT4-fs (loop3): 1 orphan inode deleted
[  351.619145][T14515] EXT4-fs (loop3): 1 truncate cleaned up
[  351.622147][T14515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.655968][ T8990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.737884][T14531] loop3: detected capacity change from 0 to 128
[  351.762197][T14533] netlink: 'syz.7.3385': attribute type 1 has an invalid length.
[  351.765459][T14533] netlink: 63735 bytes leftover after parsing attributes in process `syz.7.3385'.
[  351.838812][T14531] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  351.945463][T14541] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3390'.
[  352.475556][T14547] loop3: detected capacity change from 0 to 32768
[  352.545691][T14555] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes.
[  352.554339][T14547] 
[  352.554339][T14547]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.554339][T14547] 
[  352.888874][ T8990] 
[  352.888874][ T8990]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.888874][ T8990] 
[  352.901678][ T8990] 
[  352.901678][ T8990]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.901678][ T8990] 
[  353.215178][T14560] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3396'.
[  353.800373][T14603] fuse: fd is not a fuse device
[  353.828953][T14605] netlink: 'syz.3.3419': attribute type 1 has an invalid length.
[  353.841657][T14605] netlink: 'syz.3.3419': attribute type 2 has an invalid length.
[  353.850780][T14605] netlink: 'syz.3.3419': attribute type 1 has an invalid length.
[  353.856828][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3419'.
[  355.042898][T14622] loop3: detected capacity change from 0 to 32768
[  355.231002][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3427'.
[  355.235318][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3427'.
[  355.321534][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3430'.
[  355.442958][T14636] loop3: detected capacity change from 0 to 2048
[  355.455983][T14636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  355.471001][   T33] kauditd_printk_skb: 32 callbacks suppressed
[  355.471010][   T33] audit: type=1800 audit(1778275524.299:691): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3433" name="file1" dev="loop3" ino=1415 res=0 errno=0
[  355.575195][T14640] netlink: 'syz.3.3436': attribute type 1 has an invalid length.
[  355.749510][T14652] loop3: detected capacity change from 0 to 1024
[  356.161773][T14668] loop3: detected capacity change from 0 to 136
[  356.164456][T14668] iso9660: Unknown parameter 'overockperm'
[  356.178557][T14668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3449'.
[  356.303122][T14676] kAFS: unable to lookup cell '/'
[  356.721543][T14690] @: renamed from bond_slave_0 (while UP)
[  357.480682][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'.
[  357.492060][ T5766] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  357.496046][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'.
[  357.499501][ T5766] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  357.505783][ T5766] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  357.508760][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'.
[  357.511987][ T5766] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  358.221062][T14741] netlink: 'syz.7.3484': attribute type 83 has an invalid length.
[  358.433127][T14749] wg2 speed is unknown, defaulting to 1000
[  359.443985][T14778] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  359.443985][T14778] The task syz.3.3497 (14778) triggered the difference, watch for misbehavior.
[  360.240806][T14804] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  360.838495][T14815] 9p: Bad value for 'rfdno'
[  361.504882][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3528'.
[  362.406835][T14885] netlink: 'syz.7.3545': attribute type 1 has an invalid length.
[  362.479234][T14885] gretap1: entered allmulticast mode
[  362.497559][T14885] bond2: (slave gretap1): making interface the new active one
[  362.519836][T14885] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  363.358544][T14904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3554'.
[  364.475473][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3567'.
[  364.631799][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3569'.
[  364.643089][T14938] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3569'.
[  365.003196][ T5786] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  365.171676][ T5786] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  365.178545][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.185309][ T5786] usb 4-1: Product: syz
[  365.188584][ T5786] usb 4-1: Manufacturer: syz
[  365.192713][ T5786] usb 4-1: SerialNumber: syz
[  365.615035][ T5786] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  365.636601][ T5786] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  366.244953][ T5786] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE
[  366.257739][ T5786] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  366.276936][ T5786] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  366.309420][ T5786] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  366.332367][ T5786] usb 4-1: USB disconnect, device number 32
[  366.989465][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  367.001858][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  367.005927][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  367.011266][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  367.016480][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  367.147412][T14983] loop3: detected capacity change from 0 to 32768
[  367.197640][T14983] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  367.401899][ T8990] ocfs2: Unmounting device (7,3) on (node local)
[  367.481198][T14984] wg2 speed is unknown, defaulting to 1000
[  367.529685][T15013] loop3: detected capacity change from 0 to 512
[  367.534643][T15013] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  367.700925][ T6612] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.826284][ T6612] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.068302][ T6612] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.236538][ T6612] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.264203][T15055] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3610'.
[  368.345937][T14984] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.349009][T14984] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.352082][T14984] bridge_slave_0: entered allmulticast mode
[  368.358430][T14984] bridge_slave_0: entered promiscuous mode
[  368.363036][T14984] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.367158][T14984] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.370211][T14984] bridge_slave_1: entered allmulticast mode
[  368.415496][T14984] bridge_slave_1: entered promiscuous mode
[  368.441465][T14984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.448643][T14984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.754709][T14984] team0: Port device team_slave_0 added
[  368.819869][T14984] team0: Port device team_slave_1 added
[  368.929837][T14984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.932636][T14984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.942683][T14984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.956304][T14984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.965554][T14984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.977093][T14984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.105590][   T53] Bluetooth: hci3: command tx timeout
[  369.350732][ T6612] bond0 (unregistering): Released all slaves
[  369.356811][ T6612] bond1 (unregistering): Released all slaves
[  369.387717][ T5356] 8021q: adding VLAN 0 to HW filter on device eth21
[  369.409503][T14984] hsr_slave_0: entered promiscuous mode
[  369.412018][T14984] hsr_slave_1: entered promiscuous mode
[  369.424142][T14984] debugfs: 'hsr0' already exists in 'hsr'
[  369.426550][T14984] Cannot create hsr debugfs directory
[  369.439826][ T6612] tipc: Left network mode
[  369.927089][T15110] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3630'.
[  369.948222][T15110] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3630'.
[  369.989799][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3631'.
[  370.176472][ T5356] 8021q: adding VLAN 0 to HW filter on device eth22
[  370.217736][T14984] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  370.237529][T14984] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  370.240739][T14984] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  370.250966][T14984] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  370.252627][T15121] loop3: detected capacity change from 0 to 1024
[  370.254795][T14984] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  370.259072][T15121] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  370.267853][T14984] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  370.296964][T14984] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  370.305654][T14984] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  370.517171][T14984] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.533726][   T53] Bluetooth: hci1: command 0x0406 tx timeout
[  370.536682][T14984] 8021q: adding VLAN 0 to HW filter on device team0
[  370.544072][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.546967][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.559655][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.562712][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.647149][ T5356] 8021q: adding VLAN 0 to HW filter on device eth23
[  370.760110][T15141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3636'.
[  370.904913][ T6612] hsr_slave_0: left promiscuous mode
[  370.914287][ T6612] hsr_slave_1: left promiscuous mode
[  370.938505][ T6612] veth1_macvtap: left promiscuous mode
[  370.950001][ T6612] veth0_macvtap: left promiscuous mode
[  370.957069][ T6612] veth1_vlan: left promiscuous mode
[  370.961011][ T6612] veth0_vlan: left promiscuous mode
[  370.986711][T15154] xt_TPROXY: Can be used only with -p tcp or -p udp
[  371.173805][ T5002] Bluetooth: hci3: command tx timeout
[  371.438837][ T5356] 8021q: adding VLAN 0 to HW filter on device eth24
[  371.749946][ T6612] IPVS: stop unused estimator thread 0...
[  371.774967][   T33] audit: type=1326 audit(1778275540.596:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.7.3646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  371.798587][   T33] audit: type=1326 audit(1778275540.596:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.7.3646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  371.822405][   T33] audit: type=1326 audit(1778275540.606:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.7.3646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  371.852148][   T33] audit: type=1326 audit(1778275540.606:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.7.3646" exe="/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  371.885146][   T33] audit: type=1326 audit(1778275540.606:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.7.3646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  371.907021][T15183] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3647'.
[  371.907532][   T33] audit: type=1326 audit(1778275540.606:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.7.3646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  371.920915][T14984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.929406][   T33] audit: type=1326 audit(1778275540.626:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.7.3646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  371.944358][   T33] audit: type=1326 audit(1778275540.626:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.7.3646" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  371.967656][   T33] audit: type=1326 audit(1778275540.626:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.7.3646" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  372.063197][T14984] veth0_vlan: entered promiscuous mode
[  372.068383][T14984] veth1_vlan: entered promiscuous mode
[  372.088160][T14984] veth0_macvtap: entered promiscuous mode
[  372.094537][T14984] veth1_macvtap: entered promiscuous mode
[  372.104648][T14984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.114605][T14984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.121509][ T6612] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.125490][ T6612] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.129364][ T6612] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.133546][ T6612] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.296841][ T2048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.305010][ T2048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.320993][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.328879][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.521923][T15224] loop3: detected capacity change from 0 to 1024
[  372.558478][T15224] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  372.725196][T15237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3667'.
[  373.113455][   T33] audit: type=1326 audit(1778275541.936:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.7.3679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc79cdd9 code=0x7ffc0000
[  373.243840][T15251] loop3: detected capacity change from 0 to 32768
[  373.250477][T15251] xfs: Deprecated parameter 'attr2'
[  373.254292][ T5002] Bluetooth: hci3: command tx timeout
[  373.265288][T15251] XFS: attr2 mount option is deprecated.
[  373.325202][T15259] loop8: detected capacity change from 0 to 32768
[  373.342875][T15251] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  373.362472][T15259] jfs_lookup: iget failed on inum 4
[  373.405104][T15251] XFS (loop3): Ending clean mount
[  373.459346][T15251] XFS (loop3): Quotacheck needed: Please wait.
[  373.562813][T15251] XFS (loop3): Quotacheck: Done.
[  373.608361][ T8990] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  373.730677][T15281] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3685'.
[  373.736786][T15281] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3685'.
[  373.747197][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  373.915786][   T10] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  373.923514][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.935518][   T10] usb 9-1: config 0 descriptor??
[  373.955943][   T10] ums-realtek 9-1:0.0: USB Mass Storage device detected
[  374.032407][T15294] usb usb8: usbfs: process 15294 (syz.3.3689) did not claim interface 0 before use
[  374.364886][   T10] usb 9-1: USB disconnect, device number 2
[  374.947146][T15317] loop3: detected capacity change from 0 to 512
[  374.953867][T15317] EXT4-fs: Ignoring removed nobh option
[  374.962020][T15317] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  374.992784][T15317] EXT4-fs (loop3): 1 truncate cleaned up
[  375.000378][T15318] wg2 speed is unknown, defaulting to 1000
[  375.003012][T15317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.055253][T15317] EXT4-fs (loop3): can't enable nombcache during remount
[  375.099348][ T8990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.160692][T15324] loop8: detected capacity change from 0 to 32768
[  375.185212][T15324] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  375.227505][T15327] 
[  375.228493][T15327] ======================================================
[  375.231031][T15327] WARNING: possible circular locking dependency detected
[  375.233682][T15327] syzkaller #0 Tainted: G             L     
[  375.236111][T15327] ------------------------------------------------------
[  375.238517][T15327] syz.8.3698/15327 is trying to acquire lock:
[  375.241171][T15327] ffff888116b3e858 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x340
[  375.245353][T15327] 
[  375.245353][T15327] but task is already holding lock:
[  375.247833][T15327] ffff888116b3e8e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x340
[  375.251666][T15327] 
[  375.251666][T15327] which lock already depends on the new lock.
[  375.251666][T15327] 
[  375.255253][T15327] 
[  375.255253][T15327] the existing dependency chain (in reverse order) is:
[  375.258212][T15327] 
[  375.258212][T15327] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[  375.260724][T15327]        down_read+0x47/0x2e0
[  375.262233][T15327]        ocfs2_init_acl+0x2fd/0x7e0
[  375.263865][T15327]        ocfs2_mknod+0x1679/0x2260
[  375.265929][T15327]        ocfs2_create+0x195/0x460
[  375.267913][T15327]        path_openat+0x1395/0x3860
[  375.269841][T15327]        do_file_open+0x23e/0x4a0
[  375.271550][T15327]        do_sys_openat2+0x113/0x200
[  375.273236][T15327]        __x64_sys_openat+0x138/0x170
[  375.274936][T15327]        do_syscall_64+0x15f/0xf80
[  375.276948][T15327]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.279475][T15327] 
[  375.279475][T15327] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  375.282550][T15327]        down_read+0x47/0x2e0
[  375.284211][T15327]        ocfs2_start_trans+0x3ab/0x700
[  375.285897][T15327]        ocfs2_modify_bh+0xe3/0x4d0
[  375.287736][T15327]        ocfs2_local_read_info+0x1454/0x1810
[  375.289786][T15327]        dquot_load_quota_sb+0x791/0xbd0
[  375.291652][T15327]        dquot_load_quota_inode+0x2e1/0x5d0
[  375.293888][T15327]        ocfs2_enable_quotas+0x1c8/0x4a0
[  375.296088][T15327]        ocfs2_fill_super+0x5356/0x6970
[  375.298350][T15327]        get_tree_bdev_flags+0x431/0x4f0
[  375.300607][T15327]        vfs_get_tree+0x92/0x2a0
[  375.302478][T15327]        do_new_mount+0x341/0xd30
[  375.304055][T15327]        __se_sys_mount+0x31d/0x420
[  375.305835][T15327]        do_syscall_64+0x15f/0xf80
[  375.307551][T15327]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.309667][T15327] 
[  375.309667][T15327] -> #1 (sb_internal#2){.+.+}-{0:0}:
[  375.312185][T15327]        ocfs2_start_trans+0x2ac/0x700
[  375.314041][T15327]        ocfs2_setattr+0x110a/0x1ca0
[  375.315798][T15327]        notify_change+0xc1a/0xf40
[  375.317508][T15327]        chown_common+0x466/0x6b0
[  375.319185][T15327]        ksys_fchown+0xe9/0x160
[  375.320871][T15327]        __x64_sys_fchown+0x7a/0x90
[  375.322587][T15327]        do_syscall_64+0x15f/0xf80
[  375.324349][T15327]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.326572][T15327] 
[  375.326572][T15327] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  375.329447][T15327]        __lock_acquire+0x15a5/0x2cf0
[  375.331448][T15327]        lock_acquire+0x106/0x350
[  375.333433][T15327]        down_write+0x96/0x200
[  375.334801][ T5002] Bluetooth: hci3: command tx timeout
[  375.335335][T15327]        ocfs2_try_remove_refcount_tree+0xb6/0x340
[  375.335353][T15327]        ocfs2_truncate_file+0xdf3/0x14e0
[  375.335363][T15327]        ocfs2_setattr+0x15e5/0x1ca0
[  375.335370][T15327]        notify_change+0xc1a/0xf40
[  375.335377][T15327]        do_truncate+0x1c2/0x250
[  375.346578][T15327]        vfs_coredump+0x387b/0x4530
[  375.348366][T15327]        get_signal+0x1107/0x1330
[  375.349949][T15327]        arch_do_signal_or_restart+0xbc/0x830
[  375.351843][T15327]        irqentry_exit+0x284/0x730
[  375.353405][T15327]        asm_exc_page_fault+0x26/0x30
[  375.355147][T15327] 
[  375.355147][T15327] other info that might help us debug this:
[  375.355147][T15327] 
[  375.358170][T15327] Chain exists of:
[  375.358170][T15327]   &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  375.358170][T15327] 
[  375.362956][T15327]  Possible unsafe locking scenario:
[  375.362956][T15327] 
[  375.365137][T15327]        CPU0                    CPU1
[  375.366662][T15327]        ----                    ----
[  375.368175][T15327]   lock(&oi->ip_xattr_sem);
[  375.369551][T15327]                                lock(&journal->j_trans_barrier);
[  375.372111][T15327]                                lock(&oi->ip_xattr_sem);
[  375.374312][T15327]   lock(&ocfs2_file_ip_alloc_sem_key);
[  375.376095][T15327] 
[  375.376095][T15327]  *** DEADLOCK ***
[  375.376095][T15327] 
[  375.379001][T15327] 2 locks held by syz.8.3698/15327:
[  375.380780][T15327]  #0: ffff888116b3eba0 (&sb->s_type->i_mutex_key#31){+.+.}-{4:4}, at: do_truncate+0x18f/0x250
[  375.384417][T15327]  #1: ffff888116b3e8e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x340
[  375.388252][T15327] 
[  375.388252][T15327] stack backtrace:
[  375.390570][T15327] CPU: 0 UID: 0 PID: 15327 Comm: syz.8.3698 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  375.390584][T15327] Tainted: [L]=SOFTLOCKUP
[  375.390587][T15327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  375.390592][T15327] Call Trace:
[  375.390597][T15327]  <TASK>
[  375.390601][T15327]  dump_stack_lvl+0xe8/0x150
[  375.390613][T15327]  print_circular_bug+0x2e1/0x300
[  375.390624][T15327]  check_noncircular+0x12e/0x150
[  375.390634][T15327]  __lock_acquire+0x15a5/0x2cf0
[  375.390645][T15327]  ? ocfs2_try_remove_refcount_tree+0xb6/0x340
[  375.390655][T15327]  lock_acquire+0x106/0x350
[  375.390662][T15327]  ? ocfs2_try_remove_refcount_tree+0xb6/0x340
[  375.390673][T15327]  down_write+0x96/0x200
[  375.390681][T15327]  ? ocfs2_try_remove_refcount_tree+0xb6/0x340
[  375.390690][T15327]  ? __pfx_down_write+0x10/0x10
[  375.390698][T15327]  ocfs2_try_remove_refcount_tree+0xb6/0x340
[  375.390708][T15327]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  375.390718][T15327]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  375.390730][T15327]  ocfs2_truncate_file+0xdf3/0x14e0
[  375.390744][T15327]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[  375.390753][T15327]  ? do_raw_spin_unlock+0x4d/0x210
[  375.390770][T15327]  ? _raw_spin_unlock+0x28/0x50
[  375.390782][T15327]  ? ocfs2_inode_lock_tracker+0x436/0x710
[  375.390797][T15327]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  375.390835][T15327]  ? ocfs2_rw_lock+0x13a/0x250
[  375.390847][T15327]  ? __pfx___dquot_initialize+0x10/0x10
[  375.390867][T15327]  ? __pfx_ocfs2_rw_lock+0x10/0x10
[  375.390880][T15327]  ? do_raw_spin_unlock+0x4d/0x210
[  375.390912][T15327]  ? jbd2_journal_begin_ordered_truncate+0xbb/0x150
[  375.390932][T15327]  ocfs2_setattr+0x15e5/0x1ca0
[  375.390947][T15327]  ? __pfx_ocfs2_setattr+0x10/0x10
[  375.390963][T15327]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  375.390981][T15327]  ? lockdep_hardirqs_on+0x7a/0x110
[  375.390996][T15327]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[  375.391008][T15327]  ? seqcount_lockdep_reader_access+0xea/0x100
[  375.391024][T15327]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[  375.391038][T15327]  ? current_time+0x22a/0x370
[  375.391053][T15327]  ? evm_inode_setattr+0x1b6/0x7d0
[  375.391065][T15327]  ? __pfx_current_time+0x10/0x10
[  375.391080][T15327]  ? try_break_deleg+0x5b/0x180
[  375.391090][T15327]  ? __pfx_ocfs2_setattr+0x10/0x10
[  375.391102][T15327]  notify_change+0xc1a/0xf40
[  375.391116][T15327]  do_truncate+0x1c2/0x250
[  375.391133][T15327]  ? __pfx_do_truncate+0x10/0x10
[  375.391149][T15327]  ? filp_open+0x186/0x1d0
[  375.391165][T15327]  ? vfs_coredump+0x1eb0/0x4530
[  375.391175][T15327]  ? kmem_cache_free+0x182/0x650
[  375.391186][T15327]  vfs_coredump+0x387b/0x4530
[  375.391195][T15327]  ? __pfx_vfs_coredump+0x10/0x10
[  375.391202][T15327]  ? __lock_acquire+0x6b5/0x2cf0
[  375.391209][T15327]  ? __lock_acquire+0x6b5/0x2cf0
[  375.391249][T15327]  ? __lock_acquire+0x6b5/0x2cf0
[  375.391260][T15327]  ? __lock_acquire+0x6b5/0x2cf0
[  375.391267][T15327]  ? __lock_acquire+0x6b5/0x2cf0
[  375.391275][T15327]  ? unwind_next_frame+0xa6/0x2550
[  375.391285][T15327]  ? lock_acquire+0x106/0x350
[  375.391292][T15327]  ? unwind_next_frame+0xa6/0x2550
[  375.391301][T15327]  ? is_bpf_text_address+0x26/0x2b0
[  375.391308][T15327]  ? lock_acquire+0x106/0x350
[  375.391317][T15327]  ? is_bpf_text_address+0x26/0x2b0
[  375.391330][T15327]  ? is_bpf_text_address+0x292/0x2b0
[  375.391337][T15327]  ? is_bpf_text_address+0x26/0x2b0
[  375.391345][T15327]  ? kernel_text_address+0xa5/0xe0
[  375.391355][T15327]  ? __kernel_text_address+0xd/0x30
[  375.391365][T15327]  ? unwind_get_return_address+0x4d/0x90
[  375.391374][T15327]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  375.391384][T15327]  ? arch_stack_walk+0xfb/0x150
[  375.391395][T15327]  ? stack_trace_save+0xa9/0x100
[  375.391405][T15327]  ? __pfx_stack_trace_save+0x10/0x10
[  375.391416][T15327]  ? stack_depot_save_flags+0x33/0x810
[  375.391426][T15327]  ? kasan_save_track+0x4f/0x80
[  375.391435][T15327]  ? kasan_save_track+0x3e/0x80
[  375.391443][T15327]  ? kasan_save_free_info+0x46/0x50
[  375.391451][T15327]  ? __kasan_slab_free+0x5c/0x80
[  375.391461][T15327]  ? kmem_cache_free+0x182/0x650
[  375.391470][T15327]  ? get_signal+0xa4a/0x1330
[  375.391477][T15327]  ? arch_do_signal_or_restart+0xbc/0x830
[  375.391487][T15327]  ? irqentry_exit+0x284/0x730
[  375.391496][T15327]  ? asm_exc_page_fault+0x26/0x30
[  375.391511][T15327]  ? _raw_spin_unlock_irq+0x23/0x50
[  375.391521][T15327]  get_signal+0x1107/0x1330
[  375.391530][T15327]  arch_do_signal_or_restart+0xbc/0x830
[  375.391541][T15327]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  375.391555][T15327]  irqentry_exit+0x284/0x730
[  375.391565][T15327]  ? trace_irq_disable+0x3b/0x140
[  375.391576][T15327]  asm_exc_page_fault+0x26/0x30
[  375.391583][T15327] RIP: 0033:0x7fc4b639cde1
[  375.391591][T15327] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  375.391598][T15327] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[  375.391606][T15327] RAX: 0000000000000000 RBX: 00007fc4b6615fa0 RCX: 00007fc4b639cdd9
[  375.391611][T15327] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[  375.391617][T15327] RBP: 00007fc4b6432d69 R08: 0000000000000000 R09: 0000000000000000
[  375.391622][T15327] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  375.391626][T15327] R13: 00007fc4b6616038 R14: 00007fc4b6615fa0 R15: 00007ffd7fccb6e8
[  375.391634][T15327]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  376.105821][T14984] ocfs2: Unmounting device (7,8) on (node local)
[  376.288498][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.346525][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.388460][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.440240][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.502571][   T12] bridge_slave_1: left allmulticast mode
[  376.505668][   T12] bridge_slave_1: left promiscuous mode
[  376.508476][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.512620][   T12] bridge_slave_0: left allmulticast mode
[  376.515363][   T12] bridge_slave_0: left promiscuous mode
[  376.517870][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.610551][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  376.615509][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  376.619726][   T12] bond0 (unregistering): Released all slaves
[  376.722549][ T5356] 8021q: adding VLAN 0 to HW filter on device eth25
[  376.796448][ T5356] 8021q: adding VLAN 0 to HW filter on device eth26
[  376.866941][   T12] hsr_slave_0: left promiscuous mode
[  376.876818][   T12] hsr_slave_1: left promiscuous mode
[  376.878847][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  376.883575][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.886977][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  376.892120][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  376.897826][   T12] veth1_macvtap: left promiscuous mode
[  376.900134][   T12] veth0_macvtap: left promiscuous mode
[  376.902424][   T12] veth1_vlan: left promiscuous mode
[  376.921744][   T12] veth0_vlan: left promiscuous mode
[  376.987015][   T12] team0 (unregistering): Port device team_slave_1 removed
[  376.992198][   T12] team0 (unregistering): Port device team_slave_0 removed
[  377.038396][ T5356] 8021q: adding VLAN 0 to HW filter on device eth27
[  377.180909][ T5356] 8021q: adding VLAN 0 to HW filter on device eth28
[  383.814929][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
