last executing test programs:

8.004825897s ago: executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0x400000000000003, 0x0, 0x403, 0x17, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_lifetime={0x4, 0x3}]}, 0xb8}}, 0x0)
socket(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xc0742, 0x47)
r1 = fanotify_init(0x200, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dfa90000005f7819800008000d00b22e7b1c716a1101ee8ff8e76cad7f3f087f00d06a14f89698c46ef40164f188560ae4131b548d31e0cc2648183fef9132b1282ed3072b4bc8bad1f16923b9825c976aa682e13ec7423bc57ff842ddb94e34da833eddfe29fffe47df70cb74913b977a8ee8d2cbe6cba00cf0048ed9102f87435c504fcce623e42644f2c1b8be3d4e702d2ab33e9de44a39dd88872d602a194149ce7798b4729da10f9337476bd0923d8dce2110179d41d40019b27cb553b673ef1c33", @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x3800}, 0x0)
fanotify_mark(r1, 0x80, 0x48001014, 0xffffffffffffffff, 0x0)
r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x2})
getresgid(&(0x7f00000000c0), 0x0, 0x0)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ftruncate(r3, 0x800)
lseek(r3, 0x200, 0x0)
open(0x0, 0x8040, 0x88)
fanotify_mark(r1, 0x20, 0x8000010, r3, &(0x7f0000000100)='./bus\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@mcast1, @in=@dev}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xfffffffffffffff2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(0xffffffffffffffff, 0x0)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)

7.627052323s ago: executing program 4:
sched_setscheduler(0x0, 0x5, &(0x7f0000000100))
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
sendfile(r0, r0, 0x0, 0x548)

7.45042079s ago: executing program 4:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$eJzs3M1vVFUbAPDn3mnLN+3Li6h8SBWNjR8tLags3Gh0p4mJLnBjUttCKgM1tCRCiFZjcGlI3BvdGKJ/gSvdGHVl4lb3hoQoMQFdmDF35t4yU2ZKW6YdcH6/5JZz5p7pOc+ce+499x6mAXStwexHErE1In6JiP5atrHAYO2f61fPT/x19fxEEpXKq78n1XLXrp6fKIoW79uSZ4bSiPTDJK+k0ezZcyfGy+Wp03l+ZO7k2yOzZ889OX1y/PjU8alTY0eOHD40+szTY0+1Jc4srmu7353Zm/S8fvHliaMX3/zhqzQidu2r7a+P47akWxaSg1ngf1SqFhd7pC2V3Tm21aWTng42hBUpRUTWXb3V8d8fpbjRef3x4gcdbRywprJr04bWu+crwH9YEp1uAdAZxYU+u/8ttnWaetwRrjxXuwHK4r6eb7U9PZHmZXrXsP77IuLo/N+fZlvk/fDP1jWsEADoet9k858nms3/0thVV257voYyEBH/i4gdEfH/iNgZEfdEVMvem89nVqK2NFRayN88/0wvrzq4Zcjmf8/ma1uN879i9hcDpTy3rRp/b3Jsujx1MP9MhqJ3Q5YfXaKOb1/4+eNW+wbr5n/ZltVfzAXzdlzuWfSAbnJ8brxdk9Ir70fs7mkWf7KwEpBExP0RsXtlv3p7kZh+7NLeVoVuHf8S2rDOVPks4tFa/8/HovgLydLrkyMbozx1cKQ4Km72408XXmle+8bbi78Nsv7f3Hj8LyrR/2dSv147u/I6Lvz6Uct7ytUe/33Ja9Ux2Ze/9s743Nzp0Yi+5KVqvuH1sRvvLfJF+Sz+oQPNx/+O/D1Z/HsiIjuI90XEAxGxP2/7gxHxUEQcWCL+759/+K0VxT+9vv0/2fT8t3D8DzT2/8oTpRPffd2q/jz+4mTbov8PV1ND+SvV898ttG5OlKciKpVVH80AAABw98luvLdGkg4vpNN0eLj2f/h3xua0PDM79/ixmTOnJmvfERiI3rR40tWfPw/N7rZHk/n8N9aej47lz4qL56WH8ufGn5Q2VfPDEzPlyQ7HDt1uS4vxn/mt1OnWAWvO97Wgey0e/2mH2gGsP9d/6F7GP3Qv4x+6V934//LMhT3VxHvVn/sXdjRdC1jiL4cAd4dF1/9Ln3eqIcC6M/+H7mX8Q/cy/qEr3c73+juT2JS3/FaF+zrf1NUlvuidLWXx1e1KeiI637DGRKRLlXkjmu8ajIg1aljcER9LuxPJMg715SaOHc+HznIKd/KsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D7/BgAA//9ajd4t")
mount$bind(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x375, &(0x7f0000000880)="$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")
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
socket$inet6(0xa, 0x80000, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000002000000000000000080008500000041000000850000002a0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0xfd14)
fallocate(0xffffffffffffffff, 0x100000003, 0x2e00, 0x2811fffd)

6.956657527s ago: executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001900)="b3e385093150ba62121184cce18535bec5784dab1dc17156c37d8f30dc1d318f", 0x20}], 0x1}}], 0x1, 0x8004)
sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

6.829347334s ago: executing program 1:
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0)
pwrite64(r0, 0x0, 0x0, 0x4010000bffd)
open(0x0, 0x0, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
fallocate(r1, 0x0, 0xfffffffb, 0xffeffeff000)

5.383126234s ago: executing program 0:
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000800000009500"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$inet6_sctp(0xa, 0x0, 0x84)
sendmmsg$inet6(r5, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="ab", 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000001c0)={0x2d, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r7})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r7, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r7, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000})
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000000000fe80000000000000000000"], 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)

5.339530037s ago: executing program 4:
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[]}, 0x78)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.338292529s ago: executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53c, &(0x7f00000025c0)="$eJzs3c9vI1cdAPDvTH52mzZb6AEqYBcoLGi19sbbrqpe2r2AUFUJUXFAHLYh8UZh7XWIndKESKR/A0ggcYI/gQMSB6SeOHDjyA0hlQPSAhFog0SF0YwnqZvYjWkcm8afjzQ7P178vu/FO/Oe38TzAphYVyNiLyJmI+L1iFgsjifFEi93luznHu3vrhzs767Ef9rt1/6W5OnZseh6TebxIs/5iPjGVyO+k5yM29zeub9cq1U3i/1yq75Rbm7v3FivL69V16oPKpXbS7dvvnDr+crQ6nql/suHX1l/5Zu/+fWn3/n93pd/kBVroUjrrscwdao+cxQnMx0Rr5xHsDGYKtazYy4HH04aER+LiM/l5/9iTOX/OwGAi6zdXoz2Yvc+AHDRpfkYWJKWirGAhUjTUqkzhvd0XEprjWbr+r3G1oPVzljZ5ZhJ54q+wvfyf2eSe+u16lKelqfn+5Vj+7ci4qmI+PHcY/l+aaVRWx1PlwcAJt7jx9r/f8512v8B9LirBwB8ZMyPuwAAwMhp/wFg8mj/AWDyDND+Fzf79869LADAaPj8DwCTR/sPAJNH+w8AE+Xrr76aLe2D4vnXq29sb91vvHFjtdq8X6pvrZRWGpsbpbVGYy1/Zk/9tPxqjcbG0nOx9Wa5VW22ys3tnbv1xtaD1t38ud53qzMjqRUA8EGeuvL2H5KI2HvxsXwJcznAxEjHXQBgbKbGXQBgbMz2BZNr8PH4351rOYDx6fkw7/mem+/30/8hiL8zgv8r1z7Zf/z/eN/AfQG4WIz/w+T6cOP/Lw29HMDo9Rr/18+HydBuJ8fn/J89SgIALqQzfB+v/cNhdUKAsTptMu+h3P8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2YhIr4bSVoq5gJfiDQtlSKeiIjLMZPcW69Vb0bEk3ElImbmsv2lcRcaADij9C9JMf/XtcVnF46nzib/motiTvDv/+y1n7y53GptLmXH/350fO5w+rDKe687w7yCAMCQ5e13pVh3fZB/tL+7criMsjwP78S7xVTEKwf7u/nSSZmO6Xw9n/clLv0jKfY7c5E+ExFTQ4i/91ZEfOKo/sm77XYRP8nHRi4XM592x48i9hPDj9/1+z8eP31f/DRP66yzztfHj+WbDqFscNG9fSciXu51/qVxNV/3Pv/n8yvU2T2808ns8Np30BX/8Po31SN+ds5fHTTGc7/92omD7cVO2lsRz0z3ip8cxU/6xH92wPh//NRnfvRSn7T2zyOuRe/43bHKrfpGubm9c2O9vrxWXas+qFRuL92++cKt5yvlfIy6fDhSfdJfX7z+ZL+yZfW/1Cf+fM/6zx699gsD1v8X/37925/9gPhf+nzv9//pnvE7sjbxiwPGX770q77Td2fxV/vU/7T3//qA8d/5887qgD8KAIxAc3vn/nKtVt0800b2aXMY+ZzYyIo41AxP2fhTjC7WqRsz5/VbPfeN6aO+4nBz/laW44irkw69FmfaeDSqWOO9LgHn772TftwlAQAAAAAAAAAAAAAA+hnFV5fGXUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAurv8GAAD//5S5ywU=")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000700, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xee00, 0x8cffffff00000000)

5.336498408s ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521)
recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES64], 0x100000530)
unshare(0x4000400)
capset(0x0, &(0x7f0000000040))
shmget$private(0x0, 0x1000, 0x800, &(0x7f000036a000/0x1000)=nil)

3.605694252s ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x31})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r3}, 0x10)
socket(0x1e, 0x0, 0x0)
socket(0x0, 0x4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x5, &(0x7f00000029c0), 0x64, 0x4fd, &(0x7f0000000540)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48)

3.38692942s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000440)='GPL\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0)

3.341997079s ago: executing program 0:
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00d893e7e118344b12abfceb00f86edae940f61dcbaa8a35f1d60b020000000000000070be19eeb3aa51919298f1321c006f339ad729d28c152d3e9f792fada88ae32ad4aeb5fca781a8533dcbf3bbd17c76cc6806c1437682e56259321045b06ea946d3d49c28983c4ff91cef4ce15632ae5c3fbb95874196866dbc52d72d146b08019b8c3ad33f581dc69340d2fc0e4826b898ed591880c651654138bef2c61da04a5ff139d747b7f22d8078ac93794d23a75b088e7055a631f1e126c458fa922105f565097d94795b364579b9b8a2a3f85a6cc81753fd8f281c3c4794246dbda6f226ee140c25c040c387db3749abf5ff3f5a82763e1d55f6d333688bf6f9f9690b995f52", @ANYRES64, @ANYRESHEX, @ANYBLOB="4b7ac322ff13d4433e463d3e19bee9e6791dca9fe778e4e37e6db395d791971e12e9816c9f5c1db15a7b895d4de2b4054a7de62a09deb3895875aece0971120e5039238d27978c30ef89885d1198c45720c69e317c63971074577d7f2869d9ea38c794232bc383b2fcab40e1c0767250f5c6bf9748d6be7de4aa3280aebb83da138fc17bf481de4722ea98b0069a24de51eef74571783f992f0b1dbd863421e05624faf7a8dd70aa8ba8a6f6a49f0fe520"], 0x1, 0x14d3, &(0x7f00000015c0)="$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")
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"})
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
fsync(r1)

2.780073358s ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7fffffffffffffff)
ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f00000002c0))
mkdir(0x0, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x7800, 0x8, 0x5, 0xffffffe1, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x67, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x1f, 0xb9, [@loopback, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}]}}}}})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406d0500c0000000000001090224eefc0001"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x0, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)='!', &(0x7f0000000780), 0x6}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960)
r7 = inotify_init1(0x0)
inotify_add_watch(r7, &(0x7f0000000000)='./control\x00', 0x40000000)
rmdir(&(0x7f0000000100)='./control\x00')

2.750372584s ago: executing program 3:
syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000e80)=<r0=>0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000080)='d', 0x1}])

2.599302623s ago: executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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")
mount$bind(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x375, &(0x7f0000000880)="$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")
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
socket$inet6(0xa, 0x80000, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000002000000000000000080008500000041000000850000002a0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0xfd14)
fallocate(0xffffffffffffffff, 0x100000003, 0x2e00, 0x2811fffd)

2.462589571s ago: executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001900)="b3e385093150ba62121184cce18535bec5784dab1dc17156c37d8f30dc1d318f", 0x20}], 0x1}}], 0x1, 0x8004)
sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

2.449100766s ago: executing program 4:
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0)
pwrite64(r0, 0x0, 0x0, 0x4010000bffd)
open(0x0, 0x0, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
fallocate(r1, 0x0, 0xfffffffb, 0xffeffeff000)

2.382703766s ago: executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b00010065787468647200002c00028005000200000000000800034000000000080006400000000208000440000000fa080001400000000f0900010073797a30"], 0xdc}}, 0x0)

2.186761631s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"})

2.084495448s ago: executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0)

1.644185397s ago: executing program 0:
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
personality(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000100)={0x0, 0x7})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x4000001)
inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0xa5000002)

1.338155838s ago: executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
epoll_create1(0x0)
epoll_create1(0x0)
epoll_create1(0x0)
socket(0x2, 0xa, 0x0)
socket(0x1d, 0x2, 0x6)
socket$rxrpc(0x21, 0x2, 0xa)
socket(0x10, 0x803, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0)

1.159093117s ago: executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x3, r3, 0x80000001, 0x0, 0xb, 0x1fd, 0x1})
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000060c0)="970b180393e57da0084004606e0f7eb55b4379b678ec58dd5832867fc4741e325499108ee901f5ade42a10a2a5ca59b706328aca067422dcda816a63687f6b445fdf7c8c4c158921aab593be18f8f3e3a72a3c634c089c468f2afa55a47fcb36c8ec931a3b8e995ca8f9da378136eee8d00878a33e262e3718e8829586fb5a3bdd2143ea5a880a6322892369f494dd40593794a88b4f0e69dfc3d573117dc27d511cb0b7e7d1c13dac381d4472cb9eba0637c9611565d496c7a6936582144f524085bf34af3a90ac0a0db2f79a423fa8b797909b65b72ee23068ebf92a9ae53fdeca4a47ec6838e363039c63988cf6f4f393f907cff08e13520751cfa3bfeb452f120d8a5f462b040f8537f7add203eb2b2f5784376b4e0d85c027c4e0d5817ce1db986581a147a5c7e820212907992afff07f13a43b2a2c23e6f61d7bdafdea1d396e0fa1e79afd07195dfdab53cbe75d4b96971caef941b69525b87d59fcb99bfb348a12236968f9dacbfbdc4d9b0b01df755ba3b6c320a29e5bc23bd6b20f3b27dc3d63d2d2ef11865347c5ca1504ded5d549e17e1194d717c79bc330ebfc3929d079152f51f3ab9701a3241c7df4130027ca1a6d0e6b5f2f2c3b659cbea4cef19728b45f1325e04151af66111cabddafa17b90f193c52d1c4fb646f99fd42d77a3f16c05a491a775962a2a4ee9f9f6c1a5eaa68305a88add9d6f35815f37cadae92293a0db1613662f145991ba5fd632c4a170588f8265e11b3e1a4ff2b17f3664b98d9c6f54a356f19a9b72175e7eb46ff4330812993886cd7b42ffdc3767a4ac16dd21d76417b70cfe97ad6ad0ddea7284d0e3ecf0c6c6b57833f65963f3764e297c994e0181bbf693c8fc0e57fc15b2ad776a00c19a805a906ffa80efa4116d5f5c9863a74bb340008d958db841c5f1e3b286afac717ceabcc7310e75e45b61215f6ba0bb496bd5e094b6139326758c1d81b176e11da5eda522f05346e1a71a6358b4c9b7653a66ae7153858fac4695d64fe2962b0d62d6d8aac14cf9cd2199fb039b54b64f5085434b2339f90bc11f2e407a6e84557de9a7a7edcc3b15a7798cbc68c1b1e1a822103bd43b656e933bfe886736a2bda6ccb228a8e4fae5956673db0105999017d8b68159f7a9480fd2ca70bb7e9fbc8f4f1c3581b1f528c8fb5b5d6beb769dd5e9650739f3cfcb61ab7b066c342a6c6886b0bd83f399e3eb74d2cafce7fc76febe624a37e185924afa8695caa7d3c1a97fd6684979ef33957a334fbf10c7a9bba18397082580df2425129a87c4868d41d1bcda8a7faaf1afd492cb4c83b7c5ce7a950f92186cc07bf27dcf58ac56506f2453399070ae8e5b009e40eb1970bbe8a1c9f3befb54255602bd191bd46c56c0fda2842462c0b68884f9a922d2a8b161aa9ca2c0c52bcfa26b7b7a152f2ccd16ec4974361f7322dc3b345e926e1a1b56200dc425e2e03c3d7194f9cbd321e10de387adf9790a5706bcf05d9b8c16e40e5633c44553c2aa8611f7656fc732b5dfce1eaf212d2521eb013fcf154d251553ba7a6a1f7ba8b7ceb3a1df621376543a451fe76671beaab4833f1be28247919c7cdf4177e2c9cca78ce52b5a7e4dde913dd8b13ce861bbf7048822041f4b29b3441b4880a8f7a4a289ad3c6258494e7736e48373408d248c3b033372ebdb3d9a406869445b5d956434a576b83d4a7e7b47ae8c69f50be20ea56f171e592e114602ed4f47e86dc34008770940adb4f0167811c474ada06693b55f567cc3201f97c08a3711dca486a86c367f59ce44259c1d71cdb135aa8630c4cae61ad07998a2f781ff87c946e8aef9bde6d4738bc009fc43fd176bc38756a0ca48c382395b48bc55da32892551ecdd0bd3f4c69a79bbe600f4103f21e443821492b92516833b231942e91a39e7401a42ba3e99a3a2fefa6167365b9050305b6f09a013f41e764a80f422cce051e5b30ba6528540ee5d4ea5872572c85f321b68e730f40f64b648be31a9e530718ec17443a1a4dcdb79cf799cfa75d0bfa0fde71828d8f51e38dc3d1d77430ceed007426f689d5843c34afdec5dde3e480a36ffa25db4b3483cde91e56eee8756dd953a3abff11bd7901d6b37c8371b023d7457361908576f92990f19e9f48dc58ca550e61a035161f1539b14b7bcce535b3a3783021094129f312c03e51df62579ae9423927021e8bcf530116f3658a1e94d39a800452f7461d2f001f86b911a8a14b9e61c2fd8f959ea40793df240aed5e5862ea59d78fb235788c1ba3c0ec44fbefc29c2e6f22d70849750625c3c15227579d42858b5fac30bbe86491697cec1c4543addc1f50202fdf77a6d2d23e70ed611a63368694e459012ebdbe71c4f702980d7ae63aaee33d5f8df5fce071c73cd918991c6ba2f95f33a9917a22c9e7342dd492c9e2c2f6457c3a48f35edc1720f2224f2af2ef4c0a38b75ce27aae5d5ef615920ab9245851590cdcdcfaa7e5a66b73f5a0a1bcf1bab66ecdfc0dcbd8cebb1b98f6256cea6761c835a761819018fd9c3d2f541eba25abde06f1551328800b1efc04d8e10594dbe95f9f10005cae8c5b27cc18268ebaa4578f9dcfa99aa61567a55b43545ec729764af99d224cfea6a36a93d4f70bae3225256e179e81a0c64dffce9c2141994253af664c33f881aa417fa3b7e9424f1841f1aa845ea0fe05c4e47b318bef60709d6f20c9eee6e8c0c18bd161d3dbe57d82903937e10c41aa9066dcee124354584232afdcb60d185bc39fcc5e7e5124d17e2f998b64836b587cf233469b92af65a70f4a8f35df9e24c7d5d21bda27ae44ce6706f86d3747db675aa329e8b43652bb1e89687dd003dd7924d300f498d444639b3fd413840cfa958e436e5959e95486161af807cbb7304d99284818eabe39493c66664e92143ff41602a3805369f461abeae5e5b6987a20fa47495cbeeeb322c848147dd9a052384a49898138557e10eb015df370d01977083ad24c7defc8c80583d5f5eca20d0853afb9f41c356f8da0e2435d423528f67f091fc614645980a57ed893ded1c3d37881b243b8a5503f45672492f3849895c9377277a91e7090241832629032872294896107628ffd1151c444153f54b484fa3e5ca057cbe073e6039c11b1eceaf7e20eef2576aa99e7a3f36aed9beb089af28d82e2dc5e97da4878b76b5224e1d293f5223c09f715fba13945695a98624eade1381e31c5651069805e6f707811586f5f81e431e8624a608ba1ab405d2593b1f9f667b89d82e60048e4ef3be98bd3078beb4e5e66e8823c8b427d6f84468f1f18f1ff8a8c11515426993334bcbe0c3ba37b91be07eb800fb2e00a24351457d8fc067b4bfec43c0ce8cd26b23bfbb27d3da7bca3efb7fe6f7715760eda4e3a27a7be7419b803667ef6057bdd5d44250b47fa156af04db91fc57f25425b3cfbaf90a840fe5cfcefcd1500cf4908ec4df10c8bc14ec284bb99b13a8f6136e5e1c669806cb5a4a5227f7952c5b605a2b443866fae399a1f8fea323784935c3e5a9ba9e831749efc9b8228421bdb91afed16341962535cebf6fb02679e5412f67db405c90e218789b634d92a41aaf528c92b8bf38b629a1797c036465b77dc3bb124bdddd309136681d3fbe0251698da27c6f89589171e4492209f7eb48d50a161a5135602fca3355f8934f879c54afb91224901b635ed372fdacc9469471225d2ef3c980466027b86cfe3d664071edaa29b47455064a074da56f4e098ddf27984dac546826aed38e464d5c5a79a3ece544cdb3801de0e29bf5164dbcc14578e3e6c44a4a9041e2315f1243358c5949377352911e0a67c6de7e11b0881af528fe478c34909a1178a8a4f7fb727317e4f3981706d9c9215224604c2d6a4faeefc21bd635c8412931ac4feb2c60666672fb6dc5deda0d6c4ce31f2b6cb45907427691488abb280c3fd001f3d7507c0db358af7151d3b8e2e98eb8a78ee69966f7a1307882c5b57530e0dab5c57f84852c42db013e3448da2fb0a754ed97c001f33cca549eb71d7aef88d1ae7fac0d96f334556d75f600a029ed698ce9e4302279999726a57337b9afda0b0292c14d1687a85326120d9fcd84cdc02718f26c12ca28cac81af0dede79685233be41c7269c57100c603a4f9536f757fa753353bd0cded7d4edab29dff6f7dd5faa81078c263c9d1d7e662a0ffae22d8d12e679de9ec6c634ba46ddf6aa86ac0be41cabd9b14fd12107ffce96915fa0154f5b6017fa866d14ff47754a58ba14c1a3eb3f23f040779a788b774604c3a8a7dd818619352cf47849eebfdd3b49b56f376044e7cb218759059fa85057f96c159ccd63ea6cd0bf47781c2d023411854dd3ea46f4913cda9672655e566d2e83fe2e0eb5476bd6fd7a84557e37a4e8d32c75ab51dbffc59f0cebc3edeb395f38f82765ed3cfdce75b2fd570e783c8c3afb31049383af0b51575e5c9dd9332bde6f684a3e11d199f43004439ed535a20c7f2a695cf9b547985421ac62c2289c71491f0617d23cb7a9466c8f0482eb2e8aa782118702761e0267ef500afc52f4a3a7a53ef22aea542f679dc5c751c766e06af453576689c87b3b89c091e5444ff6fb1472fbd271fffb268a2eada125d7acfc70c8ff4cfd3f5421941c2857e54ed0617d6430b806d605c2e508cd5a7764d6ecdc69dbd050a97f8696535585bbb95b66f751566ce612aebce9a0b021f9fbf067870fe447dd05e8c521413e7f27955db3b8239836b6ad120f5fb48e9003bd19b05f94752743d89bdc5492c2ca1bc3133fe0ceb29451900e2ac713cf2cbc3a531048a473a195ad40c685b539f806f434c9e2cb6a8a25df84d41c13d1ceb90de1a3efecd06a53ac9a32654d1ece86dcf6fa17ea6a4f367f9b360b3e26514bf94af1f52d9c0b0691241e3c6c302e7054bb738cb234019c0e45a7db270ab9d75df73568f25579d33e7b42743c924b1f888df85c6166228f5391962b689f0a4d9683b43ddc98982a820b5c60d9c4e3997cd2212fc3850b2bd41342ccbefc1e4ec2ad7ae285f156f4a4f383281018c73ca4f2e9d255487a9717dd39cd744a000c68c53f82a22a08bcb734b5bbb8364180991140c2e727dfce4b19e70c968c97393b56019ef84688772d488b9bd6fa9354ab64f731e6adab543851e5ca1470fd13d0334ba025b57db5d9ea13c970642726284fefddab8fdf7155f5b8e3b3b86d098c4207b428bffcc7ff76f6397b6a3efc3c0b0fb2a4343b4051271f87e384c2b659086ba668c66a15d68b87faf82a60b184f27256e36a9ada7c4422754be56dbbab50ed781f36e40ded65a30378003de5b5cd5f80a6042613c76e80851312c7ed2c07b762b85a1b6928a7b2428d2bc7a6bfdfa2ba55aed54fd3c878ec655caf1223245433b7c6fc2a2d3b0393d7ba4e12f26a53b9d5afdbab230b9148f061df2e1c0fe73c2abcd142125367fa5e598e500263d9b27e759c08b7debee4695a5b192d968108c134241f236cae0434ed71e5099cd466cfb04d5f7cef2e94683172f82a9841610cb6fe55d4bfe73920992bb76f362b9cf7919c906495d4b37a915d23168fd7ffc2f36de55a1b17fa2232df03663ffa2a4c5e76aad90fd5abc80b6dfc16ec6aa328cc7714dc2d7bb14aae9f86c999e93a59fd18fb2300539bca25e69b04943a16c985ff481a42c9d8af43eb61ef7432b8e3aa5bc391c181b7d546b94ac659bc4b501157d3adf9d4cda4e298a4e4271fa2cd08919b055eb3f168df76c1f0b0d5cf5760b56774f105e51c93cc03ce97b00768b9620a6fd5162b9d9191ac0928d2460e4e821a276680cedb3b8167bc156b48a34d4c24d4a87fd09968a725d4b6a1b54b169f1e14143e97a84cf3d8eb4ec5458dcd5ff93365396c00533c3493847f595725a4f15300183eac306d16ea136b97a9864d16330d8c5b8321a6947caeb9cdc7ff4e53c419518ce9bc11f7355651be27a2c2b9ff4127ad86b96c1b5967def371d5d6a3f365abaca55c5f19600d1d5051d320b065c2f78f2147c170b9153a0eefd7b3f1e637cac3fff14b0eeaf472e6a6a9f7553ed3267c911d4d77a4f7285b77df725b3a88fbfd221343f656d60b61808b52a8facc81b8516698f2ac50cd8769371e67278c59ab1cc890fab36206b939f23b31ab976651ca8a4e7754bb10d03d4cc6506f13d98f2bda76477a69a8794a34614a88a7ec94e1a229ad6f747724a3bfb674cc87ea0dfb610f66057671f664206672e78c00a3f4585f17fc40827d0c8af88d3437f811274f662e9ee73d550833d0c8fde449089f8b5e8a25d25096537ac960699a07ebb51271a8f8556037436307063282febae745d53f8db65f13f24cc2e525ae465c9bf79f76b82dceada3bf34529321f913dd18548ab2a26f2a065028f46f4dfb18294dff30a7e5b131a08c671787baea45545d15629ec2f435d9138e517055cd48af7120b3b79f2275baed8a4b6a0f33c30890105ae2c07a332df79f2fd6767ecc66f1ed628c968a2685813342677a2823d10263958eee79d03e393a557475701694b5ec3dec8773f37b980f5812f1cbaed6e5253da037b5f88ba2070f445d74907679460dd48e16442d345abbd37f7853ec7123ff16db46c8571987db63ed711d36c05c2dafac47ea366f9467624b6296a2b9fb7056702d4ba38b4df72e7db3244421f31aa0911af3e3a09f9e08e96aa1545c37465f990bab4ee2821b1a701aa707db1dc18d52fcede15245f54a5f1a47b0d82c33fa378625d247b08753ac5fa5444b2e3f9d1d3918b154665b02fba87e39d0e27bdf60b27930eee02c31d847d40166544ab9ef801bd79bcc8d93980354021b8c7a1b9592934a90917db115bcd92068a970680011cb074da705f1cd06a0142862a777c6a47afd38721979323e27151c114e8901d41f79358e78289af10134e22d903415e2ebd2edf34ae10eefeec219db7b13ac983583dd4b02dcc615c6f70e6cf35ea216807c4b9c81482c2b941c7d6cd6621d9480ba924a3372ca3e3ca78438b0e9bf7c8436fcc0047b3bdb8d70190076d9feea778005d5d69f1b1194c76dce628e17b6beb299146b25f3f6660263c23dbcd08f70ccb45569a81a140eff66f2190110cf0977d9df7a2c437042961606ca1a378c8f59a310ad6c9cb4ff30a2d55411eeb38d927bb4d0f60ae75d90ab78dad14097f6dd38f512af2f932e1ad6a5e201180373689981f23bd9f59e4ca29244a8ea4236527fe2249eaa299af174f25b13d72b181c2f421652ece630ee1358098c29f84506654ffad3647792852a7faf107e36ae330886ffcef6e3a1725495e430568a9cd85d385e5a15d2f77ed274be3c8edfc52c230d21785b927bb8e470f989e8c89b01af8d04fc7050fc978013fbc5dcedd2baf5e8bfa8e2e1d3f193c224375db2f71d4655d2f647e9b1739657a0ad8ef6751a88151a3413ab870e0d7ba3f0a55ce3f30d55e8eb9e47e3d82563d9180399e7895490b8561a374acf5c94a1c648fa06780c4141c58ed913fb92865d3b4883301ba69b3f2b20c1f82024bd75e62ce2972d3219bdb961ab3bbac8f1d873ddece6d85f540f82c9d79b0937973335fe05e5c6ad8fcc525620a57678d58c7c2f0f157e03073d01fe4f6de520b390794cefdc6c828b4512fb6b2000d08e38693fa22834e69180d31b3978f9da75389f919a0d49ff961997d14ae6bdffcfb179c2ead52c69dae97416eef2602843dcbe4e5ae613d429feef7ffba6a31a8be8bf2e62c6d374c807363a986519a8cf9dfc99fc6607486e10599ae415b51e23f639194885e5119036e0e535accb4f126b4c45c47a53658af1e049daa2967b01d9450625d92f8f8e9d151633646044fcc5f6ad835479d48702839456decf070c7e6143cd31033810bd7da01c4a2cfb08605b25c00336f17d3b5a3db48866ef864b8d9cea9530429d3fb1afc7ae9e7d06aea9034db89b2ec8fc2a96d8d701fc51994305077dbea527bc0fc398b6bb7d42f0c408be69b98eb173d285fd8010ba75c57f2dd982582153814ff959fccc78aa5f7901357f6129f840af6649534f9ebc7750a20502a7cbf2d2f28c6f97884f43779bbbf93c550f8e79949db0e066538456b4e966761656eb7bebd5afe9b9fc241711b874682b226e9c6baecc1e909858e01b32472f6f8d483c073d3b576a4b03534dc4b620e21e6feb4bb2ddb37e3f0d4ff92c0af19e6087034c72c5928707748bc10ea22788bd938a0e6512cae4733fc1a2e47f3d4961932fe564684872922b44db143bea77580b0704675290e0839cb5ee529ada8b4c0bb14f05c5c396e29376f1ea80dea2852a88ddf8929fd402571fb242ead60d2be61f1662e1a833969e18e23e0b808900e7ed4be9d6944942da7d384739da1055cddc94937e1ea4cd305bf161c407b471df0ce3fb3413c5bd511d3c65e70edeb5397b0a8701538be7d2f1765688cbb0379744281231e60f5edcbfa6abd177405c455f77e30b95011ae4fda2a3c6d3f9a29bfe7656f6afba48358d57b4e1a84ebca241b7a427c6f806d1f771b540912f05a6df0d5223f85639fd7c163799e28abd08e4013aa43ddbc11ccc9d53131ec5c75f7682481968ad13ef34ba23d4759b51c4cac5a7ca2c73b3103c5b9e4b8686b872edcaca791d669589655e239920fc088eeced3a131ddff2eee9fab3cced40163eebfb29a85b3e97bbd97d17c3b06d3123409f115cf3e3d1c74dcc359664ab942e6ab36c41b1af4015ff5baf700eb99abd658e6833039051a235a2f84b70cb8d90271a481ce40e2a18bef8dcf7f54952b090bbaaaad391cb6cfa218a1e823ca7b16311e35e0350dd8016f67ed34771d7f3a607c1c9ed63524ea0c865148b05f1d017e475641b5076df632b7c261ef54c23eaf7cf52c22864a8ae8f8c3442d147fd52a801f87665b47e229a77b8e85c21d7996c7de9ac4899b098380f74eff119369c81b21b0b916017d0b604ca2a74b1424a4c3132d265d12a01ec2e8cff9809ed2f7891c55bc5cb932c6ea3cdba14cef47a2a0521e36869e9d62914447c3e6cf3da9ecaed915dec41e81605a46a4ec71a8b5ec0bc2f62b3237de7203e4b6d01bc32a5b2dc416623936a324b73e0c63ec414ce1bb4b344db85f014979ae866c4a2c2cce0f814862c0691883dd2d7bcd63fdf2ddf0cb2c6a1a10aa878ba997b74db8e894e4a7ed5e8ea1e3c0b602bae23c6c8c5f38b919aeef5625501fe5d4759c43e90de56122f3ecf87e8023f25e0d3ce64ab629409e881d2d1c5f083da90d45907e62ce3177f7982e514779a13f70bc207d9aa55835e37a5f4782242681ff46600ac9e63f90a245957440987b54b3678ae808c481d25755dba747cd7c3cc0fafb9a142e1ec1a9a5f81b5cdd6dbbc3a4ba5d49f58be6196c305e2af35fdbfbbae02cc4efe771d65e6000ec3f6cf394650f5144308c95279b9df3b29236a32ad3e9cd377296a4252e7dda1bb95d99c32cb81d970de4ff47760ee087dd2fa98392c8ede48391b49cd40e314adb896f0f5b08ffcdffdd70775160144552b13edfac23a09d53a4a4a827a1f216b2827cb9fb47a9fe6412d509d35b754d3700cc0dc8d7a3406a53bd1b0ee5112c50fb8f805be52a6c4e1e664d174727f33720bb371fbe9adc747a234013fcaadbce5cd2d416414b1900074e3ec73a36f32f9d7baa96ed4ea37aea560df4d9c724c69b440139a6dc1758bc74b59c521bc59958da71c4e5c23e4a8999305d989369a9bcd10f0faa789f4040950c349ef0ee910a822ba8df4a6cc16bd72dfb85d7c9a97911e96541a7fb6fb4711cdfe1e1083b2e8e870e2d2a7304f99296a496fe30553971b75f78ace054a8e3c6d54d40b2dbb2ee38a6244139fcba31b88a3ce91d637e7c88db35794002ca28533a46af85929f603e4cf4f5aea715ac4495d2c07e8bf79da078521fac5059dfe6dff61405fb6962987d15a2c7b27a851e3076803c7b4374a85f05b96e9bae91656a003e9acad767c9ac88b339fd868136b63fcb0520a2ee2f25128c8b97a0d43d60be7436756614108cfee63fb0fd65cce0bb0afcf5ea7fa817134c876c949945642a29d71aab10d05522b4b1788bb051ae1ad23fc7e75607580f9bfb7ed901a66d69e79ba742ba169f7e0d36d0c8482d3a85d66a9fc08b3e4c1669ffb4f74f418d4317fbf03b785859601b9e3af056b6a2543289738fe1e601e635ff04d750f8724bdebbbc920a7ca2f99cdaff265299bef09a2e20878682f2f37e46b5d2d3ade8d857ec6d3f7a2779080a5927749086b33b22def28633d53dae49362b4c4d47d2899562a52f22618a45998233048f0e54ba01dd53953c9f508abcb0acb1c1fb1d110e5d6c14d707713cea4cf0403b7573ab5b0a1439e6b2d29c46a3077e0dd296ca751db66f829a42c5afe0304c48fbef52c526c8f2100f6826fd4a5295f7492855f841fdb1f8487fba63b6db19af983a75468ad29a2b6cc58f9ef2dfeec8d798d60e1950731e65c5e2ec1065a22915a30845a5f87a26c067ea870d4e1ef71f67617906080b7b122b8ac9e4da1b05442b5477ee97343cb20f2587744abfa5f318ce29cbd24df1a6dbd42470789e17ae8115a588788d910a171b88dd1b94228728bfef3b28b2b32f523d603fa28d00cf23b0a201658f28ef7920f36a0da8917068a4435e0d710d320258114e2fcde2e1dec0c9faac26d671ea3735ee2b26cb644ba56ced9031cdd2b391c4b96aee7a4c38063e61dbd8ada24cea7ced0728a365bc2320eda9746823b7d83afdc8b3b293b56739011554000aec6272004a002328f20368c0902b8a8d251afebfb4d7b427cfa8927385626a474e3918ff557c8f19a8691011523a63c7e578b98c8951157f0763db3ebc4ea24388527e83b149ef89d4173ebb1c0c9aa3cf4e1a47faa3ebe7ca625e7ef077b38235781236797360696e552b9289a80491d4c3e70ff00b01540deb0de1b3385549b667cfa3598a34751868a14ccb22a420781452699563b16d0d0f1a7f0ba3f0ff45cc2d2536f1de9e024bbc923cede7725f84bf3e6a645f43c4ab3db6ddff671f283857262570b6652dbd8c869ca6a3896b870235047db08a54e5c39d7516c4b0d621d87a9c3e8c53249ff2ab9145f026ba4743a46197af56a0df022363ed59a5c2011e664a05fb952d5ad9ee2037c59a4075e4b504d91e87d303e0bc55cccaeb17e1cbab6176d2d148ce05fe986c79eb843886194f80e202c4f373244b38fd46643c1bc0fa8723ac498c71919e4ed8e5092832aec00a35ceeca94df7bd2c0c02dabc886cedf1fd044db2b45c30f8c0334c992eed40290baaeeb4d00e2cb504ca1173b6b6eec8d2aa3a1bf46e64c1ae1b3ca2882545729fe78d5e1e99c6f1f31c0b0f2190889c7318ce7605128a86c62c8a1fa107304c4609e28a2a43c6799ff6a7d70909ee10676801ee670004cf9632e34cb8cfb43d2f477ad335f5142da0baa4f4542dc93704e93a3420ec50284626fe36618b079d0db013d691583aba257947bdb1514d0318180ae43d0f94712f5c0de35f3e342ce7da65f755761506b9bfd186641fdbd03d5a2d4fe170fe23af8", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={<r5=>0xffffffffffffffff, 0x3})
close_range(r5, 0xffffffffffffffff, 0x0)

1.080829117s ago: executing program 0:
syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0)
r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x6, 0x0, &(0x7f0000000180))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000020000000000000000095a2ba3e3b68d06c8eea824a6c57eec6d0de0000181b000000000e93fb726d03e7f650004b2a652cbfc9a19ec8b9522a4ec838f4e323c30b39033b3b7872bed7e1601b82"], &(0x7f0000000540)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
ftruncate(r1, 0x2007ffb)
sendfile(r0, r1, 0x0, 0x1000000201005)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0)
r5 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f00000001c0)={0x1100, 0x0, 0x0, 0x2a44})
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000080))
mkdir(&(0x7f0000000580)='./file0/file0\x00', 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r8, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000240)={<r9=>0x0, ""/256, <r10=>0x0, <r11=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r12=>0x0})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000005c0)='.\x00', 0x1a4243c, &(0x7f0000000440)=ANY=[@ANYRES16=r11, @ANYRES8, @ANYRES8, @ANYRESOCT=r9, @ANYRESOCT=r11, @ANYRESOCT, @ANYRES64=r12, @ANYRES32=r9, @ANYRES8=r10, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000))
sendfile(r4, r5, 0x0, 0x1000000201005)

323.400477ms ago: executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
close(r0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x10)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x8, &(0x7f0000000000), 0x8)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
unshare(0x2000400)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002040)={&(0x7f0000002080)='page_pool_release\x00'}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0)

297.594734ms ago: executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xffffff1f, 0x12)

263.722737ms ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x31})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r3}, 0x10)
socket(0x1e, 0x0, 0x0)
socket(0x0, 0x4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x5, &(0x7f00000029c0), 0x64, 0x4fd, &(0x7f0000000540)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48)

154.955061ms ago: executing program 3:
r0 = socket(0x1e, 0x1, 0x0)
r1 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x353, 0x0, 0x0, 0x0, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)

75.07679ms ago: executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

0s ago: executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000005c0), 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1}, 0x0)
sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7b00008f28aaf0"}, 0x10}}, 0x0)

kernel console output (not intermixed with test programs):

r (device loop2): __ext4_get_inode_loc_noinmem:4480: inode #12: block 7: comm kworker/u8:7: unable to read itable block
[  481.840236][ T2476] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  481.848533][ T2476] EXT4-fs (loop2): I/O error while writing superblock
[  481.850190][   T29] audit: type=1800 audit(1719054183.220:1247): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1963 res=0 errno=0
[  481.936508][ T7791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.940051][T12481] loop1: detected capacity change from 0 to 4096
[  481.971907][ T7791] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  482.003899][ T7791] EXT4-fs (loop2): I/O error while writing superblock
[  482.026977][T12470] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  483.050053][ T9296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.137848][T12493] loop0: detected capacity change from 0 to 47
[  483.302635][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  483.316931][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  483.338626][ T2476] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.399425][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  483.412774][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  483.420667][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  483.428080][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  484.594462][ T2476] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.767396][T12504] loop1: detected capacity change from 0 to 256
[  484.793588][T12498] MINIX-fs: deleted inode referenced: 9
[  484.810840][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  484.827611][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  484.836593][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  484.846815][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  484.858180][ T2476] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.884897][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  484.892549][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  485.023795][ T2476] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.425033][T12494] chnl_net:caif_netlink_parms(): no params data found
[  485.487583][ T2476] bridge_slave_0: left allmulticast mode
[  485.493800][ T2476] bridge_slave_0: left promiscuous mode
[  485.520548][ T2476] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.569563][ T5119] Bluetooth: hci0: command tx timeout
[  486.706407][ T2476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.724301][ T2476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.741535][ T2476] bond0 (unregistering): Released all slaves
[  486.928786][ T5119] Bluetooth: hci2: command tx timeout
[  487.084702][T12494] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.106014][T12494] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.129370][T12494] bridge_slave_0: entered allmulticast mode
[  487.158880][T12494] bridge_slave_0: entered promiscuous mode
[  487.333915][T12494] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.353117][T12494] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.384860][T12494] bridge_slave_1: entered allmulticast mode
[  487.401472][T12494] bridge_slave_1: entered promiscuous mode
[  487.553274][ T2476] hsr_slave_0: left promiscuous mode
[  487.570264][ T2476] hsr_slave_1: left promiscuous mode
[  487.606125][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  487.614187][ T2476] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.631393][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  487.640548][ T2476] batman_adv: batadv0: Removing interface: batadv_slave_1
[  487.648928][ T5119] Bluetooth: hci0: command tx timeout
[  487.675250][ T2476] veth1_macvtap: left promiscuous mode
[  487.689202][ T2476] veth0_macvtap: left promiscuous mode
[  487.697520][ T2476] veth1_vlan: left promiscuous mode
[  487.705016][ T2476] veth0_vlan: left promiscuous mode
[  488.148883][  T784] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  488.409960][  T784] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  488.428710][  T784] usb 2-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00
[  488.448688][  T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.455052][T12540] loop0: detected capacity change from 0 to 32768
[  488.476445][T12540] XFS: attr2 mount option is deprecated.
[  488.488417][  T784] usb 2-1: config 0 descriptor??
[  488.517534][T12540] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  488.521526][  T784] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  488.555224][T12540] XFS (loop0): Ending clean mount
[  488.573027][T12540] XFS (loop0): Quotacheck needed: Please wait.
[  488.732871][  T784] usb 2-1: USB disconnect, device number 7
[  488.761223][T12540] XFS (loop0): Quotacheck: Done.
[  488.908417][T12050] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  489.019181][ T5119] Bluetooth: hci2: command tx timeout
[  489.055242][ T2476] team0 (unregistering): Port device team_slave_1 removed
[  489.232124][ T2476] team0 (unregistering): Port device team_slave_0 removed
[  489.705191][T12555] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  489.728859][ T5119] Bluetooth: hci0: command tx timeout
[  490.356430][T12494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.374232][T12554] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  490.401714][T12505] chnl_net:caif_netlink_parms(): no params data found
[  490.437160][T12494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.557641][T12494] team0: Port device team_slave_0 added
[  490.621135][T12494] team0: Port device team_slave_1 added
[  490.810583][T12571] netlink: 'syz-executor.1': attribute type 13 has an invalid length.
[  490.826701][T12571] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'.
[  490.861774][T12571] erspan0: refused to change device tx_queue_len
[  490.868157][T12571] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  490.955328][T12494] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.005407][T12494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.044653][T12494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.088967][ T5119] Bluetooth: hci2: command tx timeout
[  491.126652][T12579] loop1: detected capacity change from 0 to 512
[  491.168560][T12579] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  491.185750][T12505] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.194319][T12505] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.207688][T12579] EXT4-fs (loop1): invalid journal inode
[  491.213441][T12505] bridge_slave_0: entered allmulticast mode
[  491.214761][T12505] bridge_slave_0: entered promiscuous mode
[  491.238766][T12579] EXT4-fs (loop1): can't get journal size
[  491.239433][T12494] batman_adv: batadv0: Adding interface: batadv_slave_1
[  491.274022][T12494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.347533][T12579] EXT4-fs (loop1): 1 truncate cleaned up
[  491.356880][T12579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  491.384304][T12494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.458930][T12505] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.479048][T12505] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.486288][T12505] bridge_slave_1: entered allmulticast mode
[  491.503065][T12505] bridge_slave_1: entered promiscuous mode
[  491.703064][T12494] hsr_slave_0: entered promiscuous mode
[  491.725117][T11898] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.739317][T12494] hsr_slave_1: entered promiscuous mode
[  491.750655][T12494] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  491.780981][T12494] Cannot create hsr debugfs directory
[  491.792647][T12505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  491.808772][ T5119] Bluetooth: hci0: command tx timeout
[  491.817210][T12505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  492.029454][T12505] team0: Port device team_slave_0 added
[  492.096643][T12505] team0: Port device team_slave_1 added
[  492.301877][T12505] batman_adv: batadv0: Adding interface: batadv_slave_0
[  492.309308][   T29] audit: type=1326 audit(1719054193.690:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12594 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1327d0a9 code=0x7ffc0000
[  492.331646][    C0] vkms_vblank_simulate: vblank timer overrun
[  492.336768][T12593] loop1: detected capacity change from 0 to 1024
[  492.344355][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.385727][   T29] audit: type=1326 audit(1719054193.690:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12594 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1327d0a9 code=0x7ffc0000
[  492.407945][T12505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  492.410153][T12505] batman_adv: batadv0: Adding interface: batadv_slave_1
[  492.458706][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.494444][   T29] audit: type=1326 audit(1719054193.710:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12594 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fca1327d0a9 code=0x7ffc0000
[  492.540578][T12505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  492.560183][   T29] audit: type=1326 audit(1719054193.730:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12594 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1327d0a9 code=0x7ffc0000
[  492.582532][    C0] vkms_vblank_simulate: vblank timer overrun
[  492.800489][T12593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  492.938168][T12505] hsr_slave_0: entered promiscuous mode
[  492.959882][T12505] hsr_slave_1: entered promiscuous mode
[  492.978725][T12505] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  492.998484][T12505] Cannot create hsr debugfs directory
[  493.169226][ T5119] Bluetooth: hci2: command tx timeout
[  493.287378][T12494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.617361][T12494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.640924][T12606] loop0: detected capacity change from 0 to 64
[  493.762602][T11898] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.829486][T12494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.007592][T12494] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.047603][T12608] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  494.076362][T12610] loop1: detected capacity change from 0 to 256
[  494.078727][T12608] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  494.108042][T12608] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  494.126478][T12608] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  494.158173][T12608] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  494.176933][T12608] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.516675][   T29] audit: type=1326 audit(1719054195.800:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12609 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x0
[  495.036032][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  495.225772][T12613] loop0: detected capacity change from 0 to 8192
[  495.228965][T12494] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  495.255597][T12494] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  495.287419][T12494] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  495.306275][T12618] loop1: detected capacity change from 0 to 2048
[  495.356705][T12494] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  495.379147][T12618] GPT:first_usable_lbas don't match.
[  495.386468][T12618] GPT:34 != 290
[  495.397156][T12618] GPT: Use GNU Parted to correct GPT errors.
[  495.421816][T12618]  loop1: p1 p2 p3
[  495.615182][T12494] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.782417][T12494] 8021q: adding VLAN 0 to HW filter on device team0
[  495.824657][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.824759][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  495.886688][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.886793][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.111732][T12505] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  496.129395][T12505] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  496.132557][T12505] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  496.148426][T12505] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  496.168897][T12624] loop1: detected capacity change from 0 to 512
[  496.202898][T12494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  496.343093][T12624] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino
[  496.370865][T12624] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117)
[  496.437593][T12624] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  496.540646][T11881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.752841][   T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.839164][T12505] 8021q: adding VLAN 0 to HW filter on device bond0
[  496.905135][T12494] 8021q: adding VLAN 0 to HW filter on device batadv0
[  497.039342][T11898] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000.
[  497.052801][   T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.164610][T12505] 8021q: adding VLAN 0 to HW filter on device team0
[  497.183783][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.190989][ T6023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  497.303897][   T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.357858][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  497.379641][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  497.390637][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  497.410164][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  497.419415][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.426570][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  497.434698][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  497.445858][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  497.530912][   T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.725309][T12648] loop1: detected capacity change from 0 to 4096
[  497.755867][T12494] veth0_vlan: entered promiscuous mode
[  497.823567][T12494] veth1_vlan: entered promiscuous mode
[  498.089342][   T51] bridge_slave_1: left allmulticast mode
[  498.095054][   T51] bridge_slave_1: left promiscuous mode
[  498.101818][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.200120][   T51] bridge_slave_0: left allmulticast mode
[  498.226239][   T51] bridge_slave_0: left promiscuous mode
[  498.238927][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.422361][T12658] loop0: detected capacity change from 0 to 32768
[  499.458253][T12658] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (12658)
[  499.507280][ T5119] Bluetooth: hci3: command tx timeout
[  499.516869][T12658] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  499.534481][T12658] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  499.565337][T12658] BTRFS info (device loop0): disk space caching is enabled
[  499.611225][T12658] BTRFS info (device loop0): rebuilding free space tree
[  499.625420][T12658] BTRFS info (device loop0): disabling free space tree
[  499.632549][T12658] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  499.648656][T12658] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  499.763519][T12677] loop1: detected capacity change from 0 to 4096
[  499.786159][T12677] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  499.823109][T12050] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  499.855223][T12677] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  499.867247][T12677] ntfs3: loop1: mft corrupted
[  499.875053][T12677] ntfs3: loop1: Failed to load $Extend (-22).
[  499.885272][T12677] ntfs3: loop1: Failed to initialize $Extend.
[  499.909202][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  499.946252][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  500.027883][   T51] bond0 (unregistering): Released all slaves
[  500.137199][T12494] veth0_macvtap: entered promiscuous mode
[  500.214473][T12505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  500.253256][T12640] chnl_net:caif_netlink_parms(): no params data found
[  500.344939][T12685] loop0: detected capacity change from 0 to 16
[  500.360969][T12685] erofs: (device loop0): mounted with root inode @ nid 36.
[  500.482386][   T29] audit: type=1326 audit(1719054201.860:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  500.544730][T12494] veth1_macvtap: entered promiscuous mode
[  500.579369][   T29] audit: type=1326 audit(1719054201.880:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  500.606163][   T29] audit: type=1326 audit(1719054201.880:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  500.629759][   T29] audit: type=1326 audit(1719054201.880:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  500.653938][   T29] audit: type=1326 audit(1719054201.880:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  500.695327][   T29] audit: type=1326 audit(1719054201.980:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12679 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca1327d0a9 code=0x0
[  500.717318][   T29] audit: type=1326 audit(1719054202.070:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12688 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x0
[  500.865534][   T51] hsr_slave_0: left promiscuous mode
[  500.873812][   T51] hsr_slave_1: left promiscuous mode
[  500.886175][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  500.893982][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  500.907628][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  500.915371][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  500.957201][   T51] veth1_macvtap: left promiscuous mode
[  500.963171][   T51] veth0_macvtap: left promiscuous mode
[  500.970575][   T51] veth1_vlan: left promiscuous mode
[  500.976187][   T51] veth0_vlan: left promiscuous mode
[  501.568764][ T5119] Bluetooth: hci3: command tx timeout
[  501.820085][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[  501.826392][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[  502.189141][   T51] team0 (unregistering): Port device team_slave_1 removed
[  502.270182][T12705] loop1: detected capacity change from 0 to 24
[  502.277706][T12705] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  502.285101][T12705] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  502.342195][   T51] team0 (unregistering): Port device team_slave_0 removed
[  502.763820][T12721] loop1: detected capacity change from 0 to 64
[  503.047016][T12725] loop1: detected capacity change from 0 to 512
[  503.055337][T12725] EXT4-fs: Ignoring removed mblk_io_submit option
[  503.062718][T12725] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  503.103557][T12725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002]
[  503.116366][T12725] System zones: 1-12
[  503.139244][T12725] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value size too large
[  503.163911][T12725] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117)
[  503.179979][T12725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.214799][T12505] veth0_vlan: entered promiscuous mode
[  503.259839][T12725] overlay: Unknown parameter 'init_itable'
[  503.318219][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.338216][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.354816][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.361079][T11898] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.365334][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.392276][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.410173][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.453855][T12494] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.497379][T12640] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.515221][T12640] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.539982][T12640] bridge_slave_0: entered allmulticast mode
[  503.582197][T12640] bridge_slave_0: entered promiscuous mode
[  503.614999][T12640] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.641341][T12640] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.649264][ T5119] Bluetooth: hci3: command tx timeout
[  503.673709][T12640] bridge_slave_1: entered allmulticast mode
[  503.681165][T12640] bridge_slave_1: entered promiscuous mode
[  503.688127][T12737] loop1: detected capacity change from 0 to 24
[  503.696111][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.705541][T12737] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  503.706851][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.723282][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.733982][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.747010][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.757938][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.795173][T12494] batman_adv: batadv0: Interface activated: batadv_slave_1
[  503.796691][T12737] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  503.805688][T12505] veth1_vlan: entered promiscuous mode
[  503.925180][T12640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  503.976973][T12640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.997119][T12494] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.025753][T12494] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.035921][T12494] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.048443][T12494] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.212602][T12505] veth0_macvtap: entered promiscuous mode
[  504.255195][T12640] team0: Port device team_slave_0 added
[  504.274163][T12640] team0: Port device team_slave_1 added
[  504.286895][T12505] veth1_macvtap: entered promiscuous mode
[  504.390843][T12640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.397920][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.431536][T12640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.523814][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.544390][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.555840][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.567599][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.580856][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.591481][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.601641][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.613528][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.625249][T12505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.675135][T12640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.686573][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.705793][   T29] audit: type=1804 audit(1719054206.070:1260): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2991046330/syzkaller.ZEXoRF/58/bus" dev="sda1" ino=1944 res=1 errno=0
[  504.717581][T12640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.808323][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.820847][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.831707][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.843084][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.865774][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.877491][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.893846][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.904407][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.923547][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.938263][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.950619][T12505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.955022][T12762] loop0: detected capacity change from 0 to 4096
[  504.966534][T12762] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  504.988284][ T2476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.999314][ T2476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.001735][T12505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  505.034443][T12505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  505.051347][T12505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  505.061869][T12505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  505.062340][T12762] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  505.113038][T12640] hsr_slave_0: entered promiscuous mode
[  505.129729][T12640] hsr_slave_1: entered promiscuous mode
[  505.149969][T12640] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  505.157540][T12640] Cannot create hsr debugfs directory
[  505.727186][T12772] futex_wake_op: syz-executor.0 tries to shift op by 144; fix this program
[  505.747307][ T5119] Bluetooth: hci3: command tx timeout
[  506.599780][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.607646][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.747482][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.775851][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.796178][T12768] loop2: detected capacity change from 0 to 32768
[  506.839228][T12768] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 0 smaller than block size 8
[  506.839228][T12768] members_v2 (size 152):
[  506.839228][T12768] Device:                        0
[  506.839228][T12768]   Label:                       (none)
[  506.839228][T12768]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  506.839228][T12768]   Size:                        0
[  506.839228][T12768]   read errors:                 0
[  506.839228][T12768]   write errors:                0
[  506.839228][T12768]   checksum errors:             0
[  506.839228][T12768]   seqread iops:                0
[  506.839228][T12768]   seqwrite iops:               0
[  506.839228][T12768]   randread iops:               0
[  506.839228][T12768]   randwrite iops:              0
[  506.839228][T12768]   Bucket size:                 0
[  506.839228][T12768]   First bucket:                0
[  506.839228][T12768]   Buckets:                     128
[  506.839228][T12768]   Last mount:                  1714681267
[  506.839228][T12768]   Last superblock write:       42
[  506.839228][T12768]   State:                       rw
[  506.839228][T12768]   Data allowed:                journal,btree,user
[  506.839228][T12768]   Has data:                    journal,btree,user
[  506.839228][T12768]   Btree allocated bitmap blocksize:2
[  506.839228][T12768]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  506.839228][T12768]   Durabili
[  507.164566][T12640] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  507.415350][T12775] loop0: detected capacity change from 0 to 32768
[  507.505239][T12640] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  507.536459][T12640] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  507.575665][T12640] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  507.898036][T12640] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.970609][T12783] loop3: detected capacity change from 0 to 40427
[  507.980323][T12640] 8021q: adding VLAN 0 to HW filter on device team0
[  508.009094][T12751] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.016286][T12751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.028901][T12783] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  508.035573][T12783] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  508.074568][T12751] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.081787][T12751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.139946][T12783] F2FS-fs (loop3): Found nat_bits in checkpoint
[  508.214595][T12640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  508.270855][T12805] Unknown uid
[  508.330508][T12783] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  508.344422][T12783] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  508.407349][T12813] bond0: (slave bond_slave_1): Releasing backup interface
[  508.448854][T12813] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  508.840475][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  509.091298][T12640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  509.604162][T12833] loop2: detected capacity change from 0 to 1024
[  509.752659][   T29] audit: type=1800 audit(1719054211.080:1261): pid=12833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1 res=0 errno=0
[  510.074086][T12640] veth0_vlan: entered promiscuous mode
[  510.111267][T12640] veth1_vlan: entered promiscuous mode
[  510.189335][T12640] veth0_macvtap: entered promiscuous mode
[  510.211913][T12640] veth1_macvtap: entered promiscuous mode
[  510.224938][T12852] loop0: detected capacity change from 0 to 64
[  510.268132][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.278881][T12852] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop0
[  510.295489][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.318058][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.338830][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.358843][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.358967][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  510.378777][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.402882][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.414176][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.424719][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.436117][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.450577][T12640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.472861][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.490145][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.503681][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.515637][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.527107][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.545601][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.556159][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.574489][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.595252][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.596255][T12854] syz-executor.2 (12854): drop_caches: 2
[  510.617623][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  510.629836][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  510.643877][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.664504][T12640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.664786][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  510.693097][T12640] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.726786][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  510.742571][T12640] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.752364][    T9] usb 2-1: SerialNumber: syz
[  510.762158][T12640] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.782993][    T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  510.797817][T12640] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.012571][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.041555][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.120853][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.142971][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.203566][T12867] loop1: detected capacity change from 0 to 1764
[  511.258209][T12867] iso9660: Bad value for 'gid'
[  511.416511][T12874] loop4: detected capacity change from 0 to 2048
[  511.481471][T12874]  loop4: p1 < > p4
[  511.498097][T12874] loop4: p4 size 8388608 extends beyond EOD, truncated
[  511.574733][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  511.662113][ T5155] usb 2-1: USB disconnect, device number 8
[  511.669341][T12861] loop2: detected capacity change from 0 to 32768
[  511.681844][T12861] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12861)
[  511.754022][T12861] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  511.804511][T12861] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  511.814023][T12861] BTRFS info (device loop2): disk space caching is enabled
[  511.987615][T12861] BTRFS info (device loop2): rebuilding free space tree
[  512.041677][T12861] BTRFS info (device loop2): disabling free space tree
[  512.082203][T12861] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  512.111362][T12861] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  512.409602][T12494] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  513.869261][T12930] loop3: detected capacity change from 0 to 2048
[  513.983065][T12930] GPT:first_usable_lbas don't match.
[  514.000526][T12930] GPT:34 != 290
[  514.004901][T12930] GPT: Use GNU Parted to correct GPT errors.
[  514.011849][T12930]  loop3: p1 p2 p3
[  514.612284][T12938] loop3: detected capacity change from 0 to 512
[  514.706254][T12928] loop2: detected capacity change from 0 to 40427
[  514.755573][T12938] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino
[  514.755617][T12928] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  514.798795][T12928] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  514.808897][T12938] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117)
[  514.846344][T12938] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  514.899480][T12928] F2FS-fs (loop2): Found nat_bits in checkpoint
[  515.066021][T12922] loop4: detected capacity change from 0 to 32768
[  515.132555][T12928] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  515.142782][T12922] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  515.169530][T12935] loop1: detected capacity change from 0 to 32768
[  515.171077][T12928] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  515.288309][T12922] XFS (loop4): Ending clean mount
[  515.469580][T12505] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000.
[  515.601118][T12961] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  515.619220][T12961] team0: Port device netdevsim0 added
[  516.706762][T12973] loop3: detected capacity change from 0 to 512
[  516.801765][T12973] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  516.814824][T12973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002]
[  516.842708][T12973] System zones: 1-12
[  516.850380][T12973] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[  516.863838][T12973] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[  516.874010][T12973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  516.884054][T12980] loop1: detected capacity change from 0 to 512
[  516.898558][T12973] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[  516.924291][T12640] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  516.929246][T12980] EXT4-fs (loop1): orphan cleanup on readonly fs
[  516.953205][T12980] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  516.972022][T12980] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  517.055030][T12980] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  517.075257][T12505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.098755][T12980] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor.1: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 256(256)
[  517.155296][T12980] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 11 (err -117)
[  517.170583][T12980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  517.202096][T12977] loop2: detected capacity change from 0 to 32768
[  517.239619][T11898] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.255019][T12983] loop3: detected capacity change from 0 to 1024
[  517.311419][   T29] audit: type=1800 audit(1719054218.690:1262): pid=12983 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1 res=0 errno=0
[  517.350467][  T112] blkno = 5002c, nblocks = 1
[  517.355142][  T112] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  517.355142][  T112] 
[  517.382788][  T112] ERROR: (device loop2): remounting filesystem as read-only
[  517.407980][T12977] JFS: metapage_get_blocks failed
[  517.424698][T12977] read_mapping_page failed!
[  517.430676][T12977] bread failed!
[  517.434310][T12977] jfs_lookup: dtSearch returned -5
[  517.477779][T12990] loop3: detected capacity change from 0 to 64
[  517.488270][T12990] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3
[  517.610035][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  518.414912][T13013] loop3: detected capacity change from 0 to 2048
[  518.454011][T13013] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  518.481458][T13013] NILFS (loop3): mounting unchecked fs
[  518.505296][T13017] loop4: detected capacity change from 0 to 164
[  518.508656][T13013] NILFS (loop3): recovery required for readonly filesystem
[  518.527496][T13017] Unable to read rock-ridge attributes
[  518.542149][T13017] Unable to read rock-ridge attributes
[  518.542809][T13013] NILFS (loop3): write access will be enabled during recovery
[  518.593085][T13013] NILFS (loop3): norecovery option specified, skipping roll-forward recovery
[  520.225459][T13051] loop3: detected capacity change from 0 to 256
[  520.322448][T13051] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d)
[  520.360096][T13051] exFAT-fs (loop3): error, invalid access to FAT bad cluster (entry 0x00000005)
[  520.390989][T13051] exFAT-fs (loop3): failed to initialize root inode
[  520.530750][T13057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  520.553237][T13031] loop4: detected capacity change from 0 to 32768
[  520.570653][T13031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13031)
[  520.598423][T13031] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  520.626494][T13031] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  520.637835][T13031] BTRFS info (device loop4): using free-space-tree
[  520.811209][   T29] audit: type=1800 audit(1719054222.190:1263): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  520.867873][   T29] audit: type=1800 audit(1719054222.210:1264): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  520.914343][   T29] audit: type=1800 audit(1719054222.290:1265): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  520.975666][   T29] audit: type=1800 audit(1719054222.320:1266): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  522.124547][T13099] loop3: detected capacity change from 0 to 128
[  522.168176][   T29] audit: type=1326 audit(1719054223.540:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13094 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8baf67d0a9 code=0x0
[  522.903524][T13105] loop1: detected capacity change from 0 to 512
[  522.938470][T13105] EXT4-fs: Ignoring removed mblk_io_submit option
[  522.952697][T13105] EXT4-fs error (device loop1): __ext4_iget:4906: inode #11: block 1: comm syz-executor.1: invalid block
[  522.967762][T13107] loop2: detected capacity change from 0 to 1024
[  522.977132][T13105] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 11 (err -117)
[  522.998663][T13105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.117625][   T29] audit: type=1800 audit(1719054224.490:1268): pid=13107 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1 res=0 errno=0
[  523.279421][T11898] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.558866][T13114] loop2: detected capacity change from 0 to 2048
[  523.583713][T13114] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  523.616701][T13114] NILFS (loop2): mounting unchecked fs
[  523.630348][T13114] NILFS (loop2): recovery required for readonly filesystem
[  523.633148][T12640] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  523.650287][T13114] NILFS (loop2): write access will be enabled during recovery
[  523.715172][T13114] NILFS (loop2): norecovery option specified, skipping roll-forward recovery
[  524.148548][T13121] loop4: detected capacity change from 0 to 1024
[  524.174708][T13118] loop2: detected capacity change from 0 to 2048
[  524.241171][T13118]  loop2: p1 < > p4
[  524.252777][T13118] loop2: p4 size 8388608 extends beyond EOD, truncated
[  524.307548][ T2818] hfsplus: b-tree write err: -5, ino 4
[  524.427978][ T6026] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  524.497212][   T29] audit: type=1800 audit(1719054225.870:1269): pid=13118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1965 res=0 errno=0
[  524.776087][T13126] xt_bpf: check failed: parse error
[  524.944965][ T6026] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  525.159053][ T6026] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  525.179657][ T6026] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  525.268791][ T6026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.352620][ T6026] usb 1-1: Product: syz
[  525.356843][ T6026] usb 1-1: Manufacturer: syz
[  525.446740][ T6026] usb 1-1: SerialNumber: syz
[  525.494421][ T6026] usb 1-1: config 0 descriptor??
[  525.586557][   T29] audit: type=1326 audit(1719054226.960:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f305fc7d0a9 code=0x0
[  525.618689][ T5155] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  525.878749][ T5155] usb 3-1: Using ep0 maxpacket: 16
[  525.917550][ T6023] usb 1-1: USB disconnect, device number 15
[  525.923994][ T5155] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.045118][ T5155] usb 3-1: language id specifier not provided by device, defaulting to English
[  526.124472][ T5155] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.40
[  526.255810][ T5155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.321814][ T5155] usb 3-1: Product: syz
[  526.388668][ T5155] usb 3-1: Manufacturer: 㓊첥눂㺷ᅯ⫦⮴儑끷눙
[  526.438509][ T5155] usb 3-1: SerialNumber: syz
[  526.541548][ T5155] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  526.906615][ T6026] usb 3-1: USB disconnect, device number 11
[  527.372360][T13152] loop3: detected capacity change from 0 to 164
[  527.405430][T13152] Unable to read rock-ridge attributes
[  527.497185][T13152] Unable to read rock-ridge attributes
[  527.786330][T13140] loop4: detected capacity change from 0 to 32768
[  527.830350][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  527.834187][T13140] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13140)
[  527.843799][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  527.862337][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  527.896530][ T2818] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.925815][T13167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  527.944751][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  527.952547][T13140] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  527.963494][T13140] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  527.972432][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  527.980161][T13140] BTRFS info (device loop4): using free-space-tree
[  527.988708][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  528.183561][ T2818] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.266516][   T29] audit: type=1800 audit(1719054229.640:1271): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  528.277123][T13191] loop3: detected capacity change from 0 to 2048
[  528.325345][   T29] audit: type=1800 audit(1719054229.690:1272): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  528.357351][T13191]  loop3: p1 < > p4
[  528.364271][T13191] loop3: p4 size 8388608 extends beyond EOD, truncated
[  528.384277][ T2818] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.400921][   T29] audit: type=1800 audit(1719054229.780:1273): pid=13197 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  528.440391][   T29] audit: type=1800 audit(1719054229.820:1274): pid=13197 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  528.652621][ T2818] team0: Port device netdevsim0 removed
[  528.701191][ T2818] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.828655][   T29] audit: type=1800 audit(1719054230.200:1275): pid=13191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1946 res=0 errno=0
[  529.138702][ T6023] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  529.428686][ T6023] usb 4-1: Using ep0 maxpacket: 16
[  529.473048][ T6023] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  529.598879][ T6023] usb 4-1: language id specifier not provided by device, defaulting to English
[  529.664826][T13219] loop2: detected capacity change from 0 to 24
[  529.706040][ T6023] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.40
[  529.736165][ T6023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.776271][ T6023] usb 4-1: Product: syz
[  529.787395][T13219] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  529.809025][ T6023] usb 4-1: Manufacturer: 㓊첥눂㺷ᅯ⫦⮴儑끷눙
[  529.816271][ T6023] usb 4-1: SerialNumber: syz
[  529.941932][ T6023] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  530.015088][T13219] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  530.056499][ T5114] Bluetooth: hci1: command tx timeout
[  530.330618][ T2818] bridge_slave_1: left allmulticast mode
[  530.336312][ T2818] bridge_slave_1: left promiscuous mode
[  530.389306][ T6023] usb 4-1: USB disconnect, device number 6
[  530.410807][ T2818] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.439734][ T2818] bridge_slave_0: left allmulticast mode
[  530.469035][ T2818] bridge_slave_0: left promiscuous mode
[  530.475694][ T2818] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.580439][T13229] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.1'.
[  530.615895][T12640] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  531.047067][T13239] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  531.457513][T13259] loop1: detected capacity change from 0 to 2048
[  531.483150][T13261] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  531.541219][   T29] audit: type=1800 audit(1719054232.920:1276): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0
[  531.567244][   T29] audit: type=1800 audit(1719054232.920:1277): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0
[  531.626940][T13261] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  531.639531][T13261] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  531.695255][T13261] Remounting filesystem read-only
[  531.708017][ T2878] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  531.715243][ T2878] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  531.722752][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  531.734475][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  531.743557][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  531.753664][ T2878] NILFS (loop1): discard dirty page: offset=0, ino=2
[  531.760780][ T2878] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  531.768315][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  531.785133][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  531.806777][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  531.830266][ T2878] NILFS (loop1): discard dirty page: offset=0, ino=18
[  531.861972][ T2878] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  531.876897][ T2878] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  531.908110][ T2878] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  531.914486][ T2818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  531.915603][ T2878] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  531.944507][ T2878] NILFS (loop1): discard dirty page: offset=0, ino=3
[  531.951596][ T2878] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  531.971888][ T2818] bond0 (unregistering): Released all slaves
[  531.974626][ T2878] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  531.988686][ T2878] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  531.997947][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.023236][T13162] chnl_net:caif_netlink_parms(): no params data found
[  532.058046][ T2878] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  532.120553][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.129614][ T5114] Bluetooth: hci1: command tx timeout
[  532.162351][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.200533][ T2878] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  532.231585][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.295567][ T2878] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  532.305393][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.322969][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.373826][ T2878] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  532.381336][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.423544][ T2878] NILFS (loop1): discard dirty page: offset=0, ino=5
[  532.454852][ T2878] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  532.505044][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.563928][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.614174][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.660562][ T2878] NILFS (loop1): discard dirty page: offset=0, ino=4
[  532.683982][ T2878] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  532.723771][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.741415][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.743041][T13162] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.771479][ T2878] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.783587][T13162] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.799100][T13162] bridge_slave_0: entered allmulticast mode
[  532.799195][T11898] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  532.831549][T13162] bridge_slave_0: entered promiscuous mode
[  532.861702][T11898] NILFS (loop1): discard dirty page: offset=0, ino=6
[  532.872403][T13162] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.882078][T11898] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  532.889265][T13162] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.908990][T11898] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  532.914002][T13162] bridge_slave_1: entered allmulticast mode
[  532.924089][T11898] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  532.944235][T11898] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  532.954581][T13162] bridge_slave_1: entered promiscuous mode
[  533.087543][ T2818] hsr_slave_0: left promiscuous mode
[  533.129303][ T2818] hsr_slave_1: left promiscuous mode
[  533.214705][T13285] loop2: detected capacity change from 0 to 512
[  533.223297][ T2818] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  533.235881][ T2818] batman_adv: batadv0: Removing interface: batadv_slave_0
[  533.243418][T13285] EXT4-fs (loop2): bad s_min_extra_isize: 65535
[  533.256301][ T2818] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.267557][ T2818] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.351679][ T2818] veth1_macvtap: left promiscuous mode
[  533.373416][ T2818] veth0_macvtap: left promiscuous mode
[  533.383591][ T2818] veth1_vlan: left promiscuous mode
[  533.402230][ T2818] veth0_vlan: left promiscuous mode
[  533.636694][T13299] loop4: detected capacity change from 0 to 512
[  533.665854][T13299] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  533.678539][T13299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002]
[  533.703077][T13299] System zones: 1-12
[  533.707239][T13299] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  533.758694][T13299] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  533.781667][T13299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  533.862325][T13299] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  534.151614][T13295] loop1: detected capacity change from 0 to 40427
[  534.172173][T13295] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(175702528)
[  534.193171][T13295] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  534.203741][T13295] F2FS-fs (loop1): invalid crc value
[  534.216118][T13295] F2FS-fs (loop1): Found nat_bits in checkpoint
[  534.230952][ T5114] Bluetooth: hci1: command tx timeout
[  534.283873][T13295] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  534.318409][T13295] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  534.435597][T11898] bio_check_eod: 10 callbacks suppressed
[  534.435617][T11898] syz-executor.1: attempt to access beyond end of device
[  534.435617][T11898] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  534.467768][T11898] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  534.764205][ T2818] team0 (unregistering): Port device team_slave_1 removed
[  534.853597][ T2818] team0 (unregistering): Port device team_slave_0 removed
[  535.339994][T13318] loop1: detected capacity change from 0 to 32768
[  535.391669][  T113] blkno = 5002c, nblocks = 1
[  535.396349][  T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  535.396349][  T113] 
[  535.428345][  T113] ERROR: (device loop1): remounting filesystem as read-only
[  535.438885][T13318] JFS: metapage_get_blocks failed
[  535.454676][T13318] read_mapping_page failed!
[  535.459334][T13318] bread failed!
[  535.463002][T13318] jfs_lookup: dtSearch returned -5
[  535.830533][T13324] UBIFS error (pid: 13324): cannot open "(null)", error -22
[  535.881734][T13162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.921064][T12640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.077552][T13162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.255848][T13162] team0: Port device team_slave_0 added
[  536.279112][T13162] team0: Port device team_slave_1 added
[  536.292219][ T5114] Bluetooth: hci1: command tx timeout
[  536.352949][T13162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.363246][T13162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.393991][T13162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.407507][T13162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.416080][T13162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.455735][T13162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.574073][T13162] hsr_slave_0: entered promiscuous mode
[  536.592544][T13162] hsr_slave_1: entered promiscuous mode
[  536.605463][T13162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  536.622654][T13162] Cannot create hsr debugfs directory
[  536.760862][T13346] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'.
[  536.825466][T13342] loop1: detected capacity change from 0 to 4096
[  536.874631][T13342] NILFS (loop1): invalid segment: Checksum error in segment payload
[  536.885283][T13332] loop4: detected capacity change from 0 to 40427
[  536.901585][T13332] F2FS-fs (loop4): invalid crc value
[  536.908486][T13342] NILFS (loop1): trying rollback from an earlier position
[  536.930968][T13332] F2FS-fs (loop4): Found nat_bits in checkpoint
[  537.002924][T13342] NILFS (loop1): recovery complete
[  537.027750][T13353] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  537.027785][T13332] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  537.053690][T13351] UBIFS error (pid: 13351): cannot open "(null)", error -22
[  537.157785][T12640] syz-executor.4: attempt to access beyond end of device
[  537.157785][T12640] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  537.191024][T12640] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  537.518380][T13356] loop2: detected capacity change from 0 to 32768
[  537.540024][T13356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (13356)
[  537.556567][T13356] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  537.567019][T13356] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  537.575830][T13356] BTRFS info (device loop2): using free-space-tree
[  537.655200][T13345] loop3: detected capacity change from 0 to 32768
[  537.673395][T13345] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13345)
[  537.713746][T13345] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  537.835604][T13162] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  537.847038][T13162] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  537.857512][T13162] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  537.864784][T13345] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  537.916227][T13345] BTRFS info (device loop3): using free-space-tree
[  537.929982][T13162] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  538.651629][T12494] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  538.689271][   T29] audit: type=1800 audit(1719054240.050:1278): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=260 res=0 errno=0
[  538.809641][T13162] 8021q: adding VLAN 0 to HW filter on device bond0
[  538.980226][T13162] 8021q: adding VLAN 0 to HW filter on device team0
[  539.026078][ T1578] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.033415][ T1578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  539.258132][ T1578] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.265357][ T1578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  539.738486][T12505] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  540.226192][T13162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  540.385292][T13162] veth0_vlan: entered promiscuous mode
[  540.438076][T13162] veth1_vlan: entered promiscuous mode
[  540.440975][T13415] loop3: detected capacity change from 0 to 128
[  540.498977][T13415] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  540.570557][T13162] veth0_macvtap: entered promiscuous mode
[  540.615019][T13162] veth1_macvtap: entered promiscuous mode
[  540.647804][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.664089][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.686881][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.720971][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.744865][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.763605][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.801463][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.826490][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.842503][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.857340][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.891099][T13162] batman_adv: batadv0: Interface activated: batadv_slave_0
[  540.900669][T13419] UBIFS error (pid: 13419): cannot open "(null)", error -22
[  540.950394][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.998738][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.038780][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.066083][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.081062][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.092323][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.102454][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.113056][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.123602][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.171595][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.209864][T13162] batman_adv: batadv0: Interface activated: batadv_slave_1
[  541.257526][T13162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.268747][T13162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  541.277771][T13162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  541.290389][T13162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.470959][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  541.504707][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  541.556920][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  541.567477][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  541.758398][T13437] syz-executor.0 (13437): drop_caches: 2
[  542.311310][T13449] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  543.044495][T13454] UBIFS error (pid: 13454): cannot open "(null)", error -22
[  543.065160][T13456] loop0: detected capacity change from 0 to 4096
[  543.095921][T13456] NILFS (loop0): invalid segment: Checksum error in segment payload
[  543.113390][T13456] NILFS (loop0): trying rollback from an earlier position
[  543.141918][T13456] NILFS (loop0): recovery complete
[  543.152221][T13459] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  543.579711][T13467] loop4: detected capacity change from 0 to 2048
[  543.810835][T13467]  loop4: p1 < > p4
[  543.827093][T13467] loop4: p4 size 8388608 extends beyond EOD, truncated
[  544.987282][T13488] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  546.013576][T13462] loop3: detected capacity change from 0 to 32768
[  546.034815][T13462] XFS: ikeep mount option is deprecated.
[  546.058905][T13462] XFS: ikeep mount option is deprecated.
[  546.146095][T13462] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  546.182289][T13462] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR
[  546.183288][T13462] XFS (loop3): log mount failed
[  546.615224][T13480] loop4: detected capacity change from 0 to 32768
[  546.710686][T13480] XFS (loop4): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  546.990429][T13480] XFS (loop4): Ending clean mount
[  547.016882][T13480] XFS (loop4): Quotacheck needed: Please wait.
[  547.787409][T13493] loop0: detected capacity change from 0 to 32768
[  547.821374][T13493] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (13493)
[  547.929976][T13493] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  547.957463][T13493] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  547.990002][T13493] BTRFS info (device loop0): using free-space-tree
[  548.003708][T13480] XFS (loop4): Quotacheck: Done.
[  548.033962][T12640] XFS (loop4): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  548.254466][T13515] loop3: detected capacity change from 0 to 4096
[  548.264865][T13515] ntfs3: Unknown parameter 'cpuset.effective_cpus'
[  548.346169][   T29] audit: type=1800 audit(1719054249.720:1279): pid=13493 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=260 res=0 errno=0
[  548.366432][    C1] vkms_vblank_simulate: vblank timer overrun
[  548.655803][T13534] loop1: detected capacity change from 0 to 256
[  548.733370][T13536] loop3: detected capacity change from 0 to 128
[  548.802740][T13536] FAT-fs (loop3): Unrecognized mount option "18446744073709551615M��*:��l`��u�z��6!�<\iN�Zj^����6��q���ń�����`Y��gB�J��6jEu�	H(_T�nj�6����l{]������� ��q�8k�l3	��hG�>J�y0O��e�`ekD����@�_|f�����76g%ًI�
[  548.802740][T13536] {�͹�ߠ�	��6�R��nE2��%
[  548.802740][T13536] n�jV����(�0i��G�O" or missing value
[  548.834101][    C1] vkms_vblank_simulate: vblank timer overrun
[  548.892943][T13162] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  549.048211][T13539] loop4: detected capacity change from 0 to 256
[  549.568138][T13543] loop3: detected capacity change from 0 to 2048
[  549.694339][T13543] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  549.709444][T13548] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  549.742253][T13543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  549.808471][T13536] [U] 
[  549.819961][T13536] [U] 
[  549.822860][T13536] [U] _T�NJ�6����L{]������
[  549.889492][T13536] [U] � ��Q�8K�L3	��HG�>J�Y0O��E�`EKD����@�_|F�����76G%ًI�
[  549.939088][T13536] [U] {�͹����	��6�R��NE2�б%
[  549.944184][T13536] [U] N�JV����(�0I��G�O��[
[  549.955554][T13536] [U] �B�XY���'
[  549.962536][T13536] [U] 
[  549.967852][T13536] [U] 06,SHORTAD,UID=FORGET,UNDELETE,
[  549.999814][T13536] [U] ��Lë\�Ȃ��\M+��

[  550.016672][T13536] [U] 
[  550.027955][T13536] [U] �ߡ�
[  550.048039][T13536] [U] �6
[  550.058018][T13536] [U] Z^K`Qȟ�������.œH�^
[  550.083914][T13536] [U] ƿ%آB�`��#
[  550.086937][T13536] [U] �ٺ����ؗ�;|�B�=SM�@!N�-J�EK
�Zݮڲ[0
[  550.100455][T13536] [U] D�(^Q�V[H�X��AYR)���P�@!B��P']��IX��AN�����U��2�A�N����M0ܔ�$UӴ��Y)�Z��`��K��Q��ROO���-~�Q#ؐ��[�����K~͂W�LR�XϐMЏ��.6��}��,�1.�"*�M�"�Tˊ2/��G���T����ݕ��*�łXA�
[  550.100602][T13536] [U] Z�KY�����XóW2Z���O$ɮ>�
[  550.101391][T13536] [U] �IM�[ߟ_M�
[  550.101862][T13536] [U] @�Z�>�̄����ɮ=�1
[  550.101898][T13536] [U] H���%
[  550.101969][T13536] [U] نT/��
[  550.102523][T13536] [U] U`˒֩Z'`+��C��S[���!�N)ƼZ�Nɣ7�Y���WP��Y'���6Z��'�SP;�G-PѫWR(�]2�Nٽ
[  550.102941][T13536] [U] ?�-��!MŔI�Ɍѩ���Ռ��0[��1�̥_T�6A�-[0���͞��!֙�ɖ��`�
[  550.103217][T13536] [U] ?Z�Ѳ�X�V���α��R�F
���:��TK��5��G�:ҡ��:%�A
�EFJ�N
[  550.112916][T13536] [U] ;���TI �_<3KG�G��@T;*B���&`!�V����� 'Yӆ�)_<G�G
M�<GXH�Z~�I��W/��
[  550.113122][T13536] [U] SZ9]�;�6{�,����ތG�9VV��ɿQ�G�}�ľ)
Yּ�_
[  550.113563][T13536] [U] ڝ�S.F��H��T��ǛJ�۸I`MQ�DĚ
�ڑS�/�V	?
[  550.116086][T13536] [U] �؟��7{����ڱ��ETO��O��$.
[  550.116459][T13536] [U] 
[  550.126424][T13536] [U] }<4
[  550.133103][T13561] loop4: detected capacity change from 0 to 512
[  550.151545][    C1] vkms_vblank_simulate: vblank timer overrun
[  550.403661][T13561] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 17
[  550.420897][T13561] ext4_test_bit(bit=16, block=4) = 1
[  550.434766][T13532] [U] EOE�W���Q�Q�K?V~�W��W�ؓ��NYֹ�X-�6&�HB<�&RZ�C�?���?��߾٨
[  550.442781][T13561] is_bad_inode(inode)=0
[  550.476590][T13561] NEXT_ORPHAN(inode)=0
[  550.514547][T13561] max_ino=32
[  550.553032][T13561] i_nlink=1
[  550.630493][T13561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  551.023395][T13568] input: syz1 as /devices/virtual/input/input22
[  551.155776][T13570] EXT4-fs error (device loop4): __ext4_iget:4906: inode #12: block 2: comm syz-executor.4: invalid block
[  551.243693][T13571] xt_hashlimit: max too large, truncated to 1048576
[  551.489091][T13566] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  551.607683][T13571] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 7: invalid block bitmap
[  551.731896][T12640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.924581][T13558] loop2: detected capacity change from 0 to 32768
[  552.017000][T13558] XFS (loop2): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  552.093241][T13588] loop3: detected capacity change from 0 to 128
[  552.120437][T13588] VFS: unable to find oldfs superblock on device loop3
[  552.144759][T13558] XFS (loop2): Ending clean mount
[  552.186853][T13558] XFS (loop2): Quotacheck needed: Please wait.
[  552.352804][T13558] XFS (loop2): Quotacheck: Done.
[  552.396962][T13590] loop4: detected capacity change from 0 to 4096
[  552.405977][T13590] ntfs3: Unknown parameter 'cpuset.effective_cpus'
[  552.550825][T12494] XFS (loop2): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  553.097103][T13613] loop2: detected capacity change from 0 to 128
[  553.130188][T13613] FAT-fs (loop2): Unrecognized mount option "18446744073709551615M��*:��l`��u�z��6!�<\iN�Zj^����6��q���ń�����`Y��gB�J��6jEu�	H(_T�nj�6����l{]������� ��q�8k�l3	��hG�>J�y0O��e�`ekD����@�_|f�����76g%ًI�
[  553.130188][T13613] {�͹�ߠ�	��6�R��nE2��%
[  553.130188][T13613] n�jV����(�0i��G�O" or missing value
[  553.277690][T13618] loop4: detected capacity change from 0 to 128
[  553.338132][T13618] VFS: unable to find oldfs superblock on device loop4
[  553.382895][T13623] loop2: detected capacity change from 0 to 2048
[  553.436306][T13623] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  553.488796][T13623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  553.578754][T13623] [U] 
[  553.589223][T13623] [U] 
[  553.592085][T13623] [U] _T�NJ�6����L{]������
[  553.603373][T13625] loop0: detected capacity change from 0 to 8192
[  553.607569][T13629] loop4: detected capacity change from 0 to 64
[  553.617303][T13623] [U] � ��Q�8K�L3	��HG�>J�Y0O��E�`EKD����@�_|F�����76G%ًI�
[  553.636137][T13623] [U] {�͹����	��6�R��NE2�б%
[  553.656455][T13625] REISERFS warning (device loop0): super-6515 reiserfs_parse_options: journaled quota format not specified.
[  553.658100][T13623] [U] N�JV����(�0I��G�O��[
[  553.699588][T13623] [U] �B�XY���'
[  553.706411][T13623] [U] 
[  553.714705][T13623] [U] 06,SHORTAD,UID=FORGET,UNDELETE,
[  553.746078][T13623] [U] ��Lë\�Ȃ��\M+��

[  553.779043][T13623] [U] ;�)���б�K�)MɈ�5�,�4J���C+�ۈ�Ԅ�5��4F��S=E�V�-���T��S��XW�8�@Bۮ��I���6ȯ�
[  553.839112][T13623] [U] �OT+,�����%š"��Ɇ5(J��!}��*D�T�ו	�G�0Q�
H�)��-W:FD�J�J�,SM*�L,�Ֆ,ʼnEؒJ��կ�$BPT0���TY�G�7
[  553.858387][T13623] [U] �ߡ�
[  553.864867][T13623] [U] �6
[  553.868350][T13623] [U] Z^K`Qȟ�������.œH�^
[  553.900327][T13623] [U] ƿ%آB�`��#
[  553.904668][T13623] [U] �ٺ����ؗ�;|�B�=SM�@!N�-J�EK
�Zݮڲ[0
[  553.972411][T13623] [U] D�(^Q�V[H�X��AYR)���P�@!B��P']��IX��AN�����U��2�A�N����M0ܔ�$UӴ��Y)�Z��`��K��Q��ROO���-~�Q#ؐ��[�����K~͂W�LR�XϐMЏ��.6��}��,�1.�"*�M�"�Tˊ2/��G���T����ݕ��*�łXA�
[  554.030171][T13623] [U] Z�KY�����XóW2Z���O$ɮ>�
[  554.036028][T13623] [U] �IM�[ߟ_M�
[  554.040210][T13623] [U] @�Z�>�̄����ɮ=�1
[  554.311711][T13649] loop2: detected capacity change from 0 to 512
[  554.398940][T13649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  554.438867][T13649] ext4 filesystem being mounted at /root/syzkaller-testdir1830767607/syzkaller.nmKaDJ/56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  554.695672][   T29] audit: type=1800 audit(1719054256.030:1280): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0
[  554.731750][T12494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.806794][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  554.825112][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  554.839083][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  554.877296][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  554.907958][T13640] loop1: detected capacity change from 0 to 32768
[  554.914611][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  554.922237][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  554.995359][T13640] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section ext: field too small (40 < 88)
[  554.995359][T13640] ext (size 40):
[  554.995359][T13640] Recovery passes required:      alloc_read,snapshots_read
[  554.995359][T13640] Errors to silently fix:        btree_node_topology_bad_max_key,btree_ptr_val_too_big,btree_ptr_has_non_ptr,ptr_crc_uncompressed_size_too_big,ptr_stripe_redundant,subvol_unreachable,btree_node_bkey_bad_u64s,btree_node_topology_empty_interior_node
[  554.995359][T13640] Btrees with missing data:      inodes,quotas
[  554.995359][T13640] 
[  555.086504][T13662] loop0: detected capacity change from 0 to 128
[  555.127427][T13662] VFS: unable to find oldfs superblock on device loop0
[  555.147151][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.393727][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.615880][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.715477][T13676] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.723226][T13676] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.759098][T13676] bridge0: entered promiscuous mode
[  556.568500][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.868956][   T11] bridge_slave_1: left allmulticast mode
[  556.874654][   T11] bridge_slave_1: left promiscuous mode
[  556.887255][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.969967][   T11] bridge_slave_0: left allmulticast mode
[  556.976922][   T11] bridge_slave_0: left promiscuous mode
[  556.989416][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.009256][T13658] Bluetooth: hci3: command tx timeout
[  557.157008][T13673] loop2: detected capacity change from 0 to 32768
[  557.208038][T13673] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (13673)
[  557.296551][T13694] loop0: detected capacity change from 0 to 32768
[  557.311319][T13694] BTRFS: device /dev/loop0 (7:0) using temp-fsid a015d6cb-f8cf-4695-b548-88253601fda8
[  557.321029][T13694] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (13694)
[  557.335266][T13673] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  557.353639][T13694] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  557.364141][T13673] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  557.364566][T13673] BTRFS info (device loop2): using free-space-tree
[  557.373544][T13694] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  557.373580][T13694] BTRFS info (device loop0): using free-space-tree
[  558.783477][T13162] BTRFS info (device loop0): last unmount of filesystem a015d6cb-f8cf-4695-b548-88253601fda8
[  558.799432][T12494] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  559.093851][   T53] Bluetooth: hci3: command tx timeout
[  559.197575][T13738] loop0: detected capacity change from 0 to 1024
[  559.528192][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  559.553370][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  559.563797][T13743] loop0: detected capacity change from 0 to 2048
[  559.586566][   T11] bond0 (unregistering): Released all slaves
[  559.614827][T13654] chnl_net:caif_netlink_parms(): no params data found
[  559.998720][   T29] audit: type=1326 audit(1719054261.370:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  560.035332][   T29] audit: type=1326 audit(1719054261.370:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  560.102935][   T29] audit: type=1326 audit(1719054261.380:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  560.140879][   T29] audit: type=1326 audit(1719054261.380:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  560.163043][    C1] vkms_vblank_simulate: vblank timer overrun
[  560.170173][   T29] audit: type=1326 audit(1719054261.400:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  560.193027][   T29] audit: type=1326 audit(1719054261.400:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  560.275069][   T29] audit: type=1326 audit(1719054261.400:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6050c7a827 code=0x7ffc0000
[  560.298714][    C1] vkms_vblank_simulate: vblank timer overrun
[  560.354144][   T29] audit: type=1326 audit(1719054261.410:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6050c404e9 code=0x7ffc0000
[  560.377203][T13658] Bluetooth: hci4: command 0x0406 tx timeout
[  560.389202][   T29] audit: type=1326 audit(1719054261.410:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6050c7a827 code=0x7ffc0000
[  560.413746][   T29] audit: type=1326 audit(1719054261.410:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6050c404e9 code=0x7ffc0000
[  560.457465][T13766] loop2: detected capacity change from 0 to 512
[  560.520384][T13766] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 17
[  560.539495][  T784] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  560.569952][T13766] ext4_test_bit(bit=16, block=4) = 1
[  560.575446][   T11] hsr_slave_0: left promiscuous mode
[  560.575501][T13766] is_bad_inode(inode)=0
[  560.586545][T13766] NEXT_ORPHAN(inode)=0
[  560.590811][T13766] max_ino=32
[  560.594145][T13766] i_nlink=1
[  560.601769][T13766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  560.605950][   T11] hsr_slave_1: left promiscuous mode
[  560.622220][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  560.647897][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  560.730526][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  560.746412][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  560.757868][  T784] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping
[  560.972852][  T784] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.023998][T13779] input: syz1 as /devices/virtual/input/input23
[  561.267196][T13779] EXT4-fs error (device loop2): __ext4_iget:4906: inode #12: block 2: comm syz-executor.2: invalid block
[  561.281558][T13658] Bluetooth: hci3: command tx timeout
[  561.297845][T13780] loop3: detected capacity change from 0 to 256
[  561.889371][T13781] xt_hashlimit: max too large, truncated to 1048576
[  564.568875][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[  564.576158][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[  564.595014][  T784] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  564.628652][T13781] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz-executor.2: bg 0: block 7: invalid block bitmap
[  564.685638][   T11] veth1_macvtap: left promiscuous mode
[  564.697386][  T784] usb 2-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=3a.df
[  564.718389][   T11] veth0_macvtap: left promiscuous mode
[  564.734256][  T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.748258][   T11] veth1_vlan: left promiscuous mode
[  564.768023][T12494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.773541][   T11] veth0_vlan: left promiscuous mode
[  564.904201][  T784] usb 2-1: config 0 descriptor??
[  564.911531][  T784] usb 2-1: can't set config #0, error -71
[  564.919135][  T784] usb 2-1: USB disconnect, device number 9
[  566.608769][   T53] Bluetooth: hci3: command tx timeout
[  566.747948][   T11] team0 (unregistering): Port device team_slave_1 removed
[  566.827849][   T11] team0 (unregistering): Port device team_slave_0 removed
[  567.719792][T13654] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.757052][T13654] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.786642][T13654] bridge_slave_0: entered allmulticast mode
[  567.810097][T13654] bridge_slave_0: entered promiscuous mode
[  567.838489][T13654] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.855565][T13654] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.879058][T13654] bridge_slave_1: entered allmulticast mode
[  567.896380][T13654] bridge_slave_1: entered promiscuous mode
[  567.965977][T13825] loop2: detected capacity change from 0 to 4096
[  568.010758][T13825] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  568.023644][T13825] ntfs3: loop2: Failed to load $MFT (-2).
[  568.042700][T13826] tun0: tun_chr_ioctl cmd 1074025677
[  568.065223][T13826] tun0: linktype set to 780
[  568.099848][T13654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  568.200642][T13654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.308200][T13654] team0: Port device team_slave_0 added
[  568.323718][T13654] team0: Port device team_slave_1 added
[  568.422612][T13654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  568.433377][T13654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.478388][T13654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  568.504187][T13654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.516910][T13654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.559166][T13654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  568.707948][T13654] hsr_slave_0: entered promiscuous mode
[  568.715190][T13654] hsr_slave_1: entered promiscuous mode
[  568.742223][T13654] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  568.749956][T13654] Cannot create hsr debugfs directory
[  569.073917][T13859] loop3: detected capacity change from 0 to 2048
[  569.211383][T13859]  loop3: p1 < > p4
[  569.220542][T13859] loop3: p4 size 8388608 extends beyond EOD, truncated
[  569.566725][T13858] loop0: detected capacity change from 0 to 512
[  569.733081][T13861] tun0: tun_chr_ioctl cmd 1074025677
[  569.751990][T13858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  569.789092][T13861] tun0: linktype set to 780
[  569.808872][T13858] ext4 filesystem being mounted at /root/syzkaller-testdir1840783789/syzkaller.MCB90N/36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  569.858342][T13858] EXT4-fs: Cannot change journaled quota options when quota turned on
[  569.975400][T13162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.758181][T13654] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  570.807954][T13654] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  570.833032][T13654] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  570.863842][T13654] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  571.156833][T13908] loop3: detected capacity change from 0 to 8
[  571.940372][T13908] unable to read fragment index table
[  571.954979][T13906] loop1: detected capacity change from 0 to 4096
[  571.964818][T13906] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  572.013065][T13906] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  572.230917][T13654] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.251051][T13919] binder: 13918:13919 ioctl c018620c 20001180 returned -22
[  572.278012][T13654] 8021q: adding VLAN 0 to HW filter on device team0
[  572.288471][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  572.331002][ T1578] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.338204][ T1578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.377904][ T1578] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.385114][ T1578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.514571][T13926] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'.
[  572.652305][T13936] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  572.771718][T13936] bridge0: port 3(bond1) entered blocking state
[  572.786435][T13936] bridge0: port 3(bond1) entered disabled state
[  572.794118][T13936] bond1: entered allmulticast mode
[  572.804767][T13936] bond1: entered promiscuous mode
[  572.838806][ T1578] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  573.055943][ T1578] usb 4-1: config index 0 descriptor too short (expected 60964, got 36)
[  573.067586][T13954] loop2: detected capacity change from 0 to 8
[  573.082558][T13654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  573.100483][T13954] unable to read fragment index table
[  573.107139][ T1578] usb 4-1: config 0 has too many interfaces: 252, using maximum allowed: 32
[  573.192297][ T1578] usb 4-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config
[  573.214306][ T1578] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 252
[  573.224811][ T1578] usb 4-1: New USB device found, idVendor=056d, idProduct=c000, bcdDevice= 0.00
[  573.239871][ T1578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.262986][ T1578] usb 4-1: config 0 descriptor??
[  573.318753][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  573.404565][   T11] ntfs3: loop1: ino=5, ntfs3_write_inode failed, -22.
[  573.497387][ T1578] usb 4-1: string descriptor 0 read error: -71
[  573.532948][ T1578] usb 4-1: USB disconnect, device number 7
[  573.551588][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18
[  573.604302][    T9] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  573.666313][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.693728][    T9] usb 1-1: Product: syz
[  573.697949][    T9] usb 1-1: Manufacturer: syz
[  573.718677][    T9] usb 1-1: SerialNumber: syz
[  573.725670][    T9] usb 1-1: config 0 descriptor??
[  573.740126][T13953] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  573.826817][T13654] veth0_vlan: entered promiscuous mode
[  573.855958][T13654] veth1_vlan: entered promiscuous mode
[  573.898912][ T6023] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  573.942789][T13654] veth0_macvtap: entered promiscuous mode
[  573.961180][T13654] veth1_macvtap: entered promiscuous mode
[  574.005315][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  574.033210][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.058671][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  574.083342][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.106035][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  574.112717][    T9] usb 1-1: USB disconnect, device number 16
[  574.116801][ T6023] usb 2-1: Using ep0 maxpacket: 32
[  574.148437][ T6023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  574.163541][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.200747][ T6023] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  574.218696][ T6023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.218939][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  574.241987][ T6023] usb 2-1: Product: syz
[  574.246186][ T6023] usb 2-1: Manufacturer: syz
[  574.267001][ T6023] usb 2-1: SerialNumber: syz
[  574.268672][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.281732][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  574.299507][ T6023] usb 2-1: config 0 descriptor??
[  574.305599][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.324936][ T6023] hub 2-1:0.0: bad descriptor, ignoring hub
[  574.332285][ T6023] hub 2-1:0.0: probe with driver hub failed with error -5
[  574.343515][T13654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  574.358274][ T6023] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24
[  574.373323][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.394380][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.410231][ T6023] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  574.426401][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.437907][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.456139][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.466973][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.482578][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.511520][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.536244][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.553760][T13960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  574.575213][T13960] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  574.583095][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.608119][T13654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  574.620670][ T6023] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8
[  574.666062][T13654] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  574.684006][T13654] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  574.709673][ T6023] usb 2-1: USB disconnect, device number 10
[  574.728801][T13654] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  574.737639][T13654] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  574.839188][T13966] kvm: kvm [13965]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfe00000000
[  574.867852][T13966] kvm: kvm [13965]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1e700000800
[  574.986410][ T2818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  574.997516][ T2818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.046987][ T2878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.063123][ T2878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.347525][T13990] loop1: detected capacity change from 0 to 1024
[  575.386894][T13990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  575.396662][T13994] loop3: detected capacity change from 0 to 1024
[  575.478733][T13994] hfsplus: failed to load root directory
[  575.496426][   T29] kauditd_printk_skb: 41 callbacks suppressed
[  575.496447][   T29] audit: type=1800 audit(1719054276.870:1332): pid=13990 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0
[  575.538716][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  575.626001][T13990] Trying to write to read-only block-device loop1
[  575.722500][T14002] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[  575.739006][    T9] usb 1-1: Using ep0 maxpacket: 8
[  575.769411][T14004] loop3: detected capacity change from 0 to 128
[  575.772902][    T9] usb 1-1: config index 0 descriptor too short (expected 30482, got 18)
[  575.783176][T14004] hpfs: bad mount options.
[  575.808111][    T9] usb 1-1: config 0 has too many interfaces: 101, using maximum allowed: 32
[  575.819624][T11898] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.867783][    T9] usb 1-1: config 0 has an invalid interface number: 167 but max is 100
[  575.900951][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 101
[  575.935762][    T9] usb 1-1: config 0 has no interface number 0
[  575.959649][    T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[  575.975085][    T9] usb 1-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0
[  576.005215][    T9] usb 1-1: Product: syz
[  576.013035][    T9] usb 1-1: Manufacturer: syz
[  576.038080][    T9] usb 1-1: config 0 descriptor??
[  576.069670][    T9] ftdi_sio 1-1:0.167: FTDI USB Serial Device converter detected
[  576.099766][    T9] usb 1-1: Detected FT2232C/D
[  576.319340][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  576.341719][T14024] loop1: detected capacity change from 0 to 164
[  576.344715][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  576.359509][    T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  576.390246][    T9] usb 1-1: USB disconnect, device number 17
[  576.431060][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  576.441212][T14010] kvm: kvm [14009]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfe00000000
[  576.461660][    T9] ftdi_sio 1-1:0.167: device disconnected
[  576.477947][T14010] kvm: kvm [14009]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1e700000800
[  576.713460][T14036] loop3: detected capacity change from 0 to 1024
[  576.752458][T14036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  576.802865][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  576.834450][   T29] audit: type=1800 audit(1719054278.210:1333): pid=14036 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0
[  576.856020][T14036] Trying to write to read-only block-device loop3
[  577.003735][   T29] audit: type=1400 audit(1719054278.380:1334): lsm=SMACK fn=smack_inode_permission action=denied subject="W" object="_" requested=w pid=14054 comm="syz-executor.0" name="current" dev="proc" ino=54482
[  577.023220][    C1] vkms_vblank_simulate: vblank timer overrun
[  577.055845][T12505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.113046][T14058] loop1: detected capacity change from 0 to 4096
[  577.244619][T14065] loop3: detected capacity change from 0 to 256
[  577.255486][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  577.329489][   T29] audit: type=1326 audit(1719054278.710:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14064 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd87d0a9 code=0x7ffc0000
[  577.389784][T14070] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'.
[  577.422228][   T29] audit: type=1326 audit(1719054278.710:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14064 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38cd87d0a9 code=0x7ffc0000
[  577.506472][   T29] audit: type=1326 audit(1719054278.710:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14064 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd87d0a9 code=0x7ffc0000
[  577.555327][   T29] audit: type=1326 audit(1719054278.710:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14064 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38cd87d0a9 code=0x7ffc0000
[  577.614517][   T29] audit: type=1326 audit(1719054278.710:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14064 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd87d0a9 code=0x7ffc0000
[  577.656949][   T29] audit: type=1326 audit(1719054278.710:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14064 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38cd87ee27 code=0x7ffc0000
[  577.693800][   T29] audit: type=1326 audit(1719054278.710:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14064 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f38cd87ed9c code=0x7ffc0000
[  577.733587][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  577.751724][T14081] loop1: detected capacity change from 0 to 512
[  577.802217][T14076] loop0: detected capacity change from 0 to 512
[  577.831239][T14076] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  577.856360][T14081] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  577.937927][T14076] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 64: padding at end of block bitmap is not set
[  577.954364][T14076] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz-executor.0: Failed to acquire dquot type 0
[  577.967151][T14076] EXT4-fs (loop0): 1 truncate cleaned up
[  577.973816][T14076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  577.979358][T14081] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  578.010588][T14076] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz-executor.0: Failed to acquire dquot type 0
[  578.018528][T14089] loop4: detected capacity change from 0 to 1764
[  578.074834][T14089] iso9660: Corrupted directory entry in block 2 of inode 1920
[  578.102314][T13162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  578.189768][ T6023] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  579.144207][ T6023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  579.160337][ T6023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0
[  579.183479][ T6023] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  579.204602][ T6023] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  579.222498][ T6023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.241739][ T6023] usb 3-1: config 0 descriptor??
[  579.394445][T14109] syz-executor.1[14109] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  579.394597][T14109] syz-executor.1[14109] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  579.554080][T14113] loop3: detected capacity change from 0 to 2048
[  579.575251][T14113] EXT4-fs: Ignoring removed nomblk_io_submit option
[  579.583565][T14113] EXT4-fs: Ignoring removed orlov option
[  579.607254][ T2818] Bluetooth: (null): Invalid header checksum
[  579.633255][ T2818] Bluetooth: (null): Invalid header checksum
[  579.672443][ T6023] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  579.688147][T14113] Bluetooth: (null): Too short H5 packet
[  579.708964][ T6023] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  579.910165][ T5155] usb 3-1: USB disconnect, device number 12
[  579.949372][T14125] loop3: detected capacity change from 0 to 1764
[  579.965584][T14128] loop4: detected capacity change from 0 to 512
[  579.994400][T14125] iso9660: Corrupted directory entry in block 2 of inode 1920
[  580.004279][T14128] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  580.025637][T14104] loop0: detected capacity change from 0 to 40427
[  580.038989][T14104] F2FS-fs (loop0): invalid crc value
[  580.191103][T14104] F2FS-fs (loop0): Found nat_bits in checkpoint
[  580.219504][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  580.380466][T14140] loop1: detected capacity change from 0 to 2048
[  580.991145][T14128] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 64: padding at end of block bitmap is not set
[  581.007513][T14140]  loop1: p1 < > p4
[  581.018998][T14140] loop1: p4 size 8388608 extends beyond EOD, truncated
[  581.096117][T14128] __quota_error: 177 callbacks suppressed
[  581.096152][T14128] Quota error (device loop4): write_blk: dquota write failed
[  581.118723][T14128] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  581.156894][T14128] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 0
[  581.179857][T14128] EXT4-fs (loop4): 1 truncate cleaned up
[  581.193560][T14128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  581.226537][T14104] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  581.276648][T14145] loop3: detected capacity change from 0 to 8
[  581.344433][T13162] syz-executor.0: attempt to access beyond end of device
[  581.344433][T13162] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  581.353490][T14122] Quota error (device loop4): write_blk: dquota write failed
[  581.372839][T14122] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  581.381381][T13162] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  581.390328][T14122] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 0
[  581.462780][T14156] netlink: zone id is out of range
[  581.505185][T14156] netlink: zone id is out of range
[  581.529585][T14156] netlink: zone id is out of range
[  581.573769][T14156] netlink: set zone limit has 4 unknown bytes
[  581.609033][T14159] loop0: detected capacity change from 40427 to 0
[  581.782086][T13654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  581.835943][T14166] loop1: detected capacity change from 0 to 2048
[  582.450976][   T29] audit: type=1326 audit(1719054283.820:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  582.727899][   T29] audit: type=1326 audit(1719054283.860:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  582.750534][   T29] audit: type=1326 audit(1719054283.890:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  582.773066][   T29] audit: type=1326 audit(1719054283.920:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  582.795377][   T29] audit: type=1326 audit(1719054283.920:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  582.818563][   T29] audit: type=1326 audit(1719054284.080:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6050c7d0a9 code=0x7ffc0000
[  582.942710][T14181] loop4: detected capacity change from 0 to 128
[  583.347085][T14195] netlink: zone id is out of range
[  583.352659][T14195] netlink: zone id is out of range
[  583.379303][T14195] netlink: zone id is out of range
[  583.393482][T14195] netlink: set zone limit has 4 unknown bytes
[  583.425543][T14187] kvm: kvm [14186]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfe00000000
[  583.464655][T14187] kvm: kvm [14186]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1e700000800
[  583.491612][T14176] loop3: detected capacity change from 0 to 40427
[  583.668542][T14203] loop4: detected capacity change from 0 to 512
[  583.703441][T14203] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino
[  583.772666][T14203] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117)
[  583.801321][T14203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  584.219563][ T2818] wlan0: Trigger new scan to find an IBSS to join
[  585.710364][T13654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.792589][T14225] loop3: detected capacity change from 0 to 4096
[  586.003389][T14232] loop1: detected capacity change from 0 to 512
[  587.061142][T14237] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  587.646771][T14242] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups)
[  587.812686][T14245] loop2: detected capacity change from 0 to 512
[  587.885029][T14245] EXT4-fs (loop2): orphan cleanup on readonly fs
[  587.900565][T14245] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 248: padding at end of block bitmap is not set
[  587.925401][T14245] __quota_error: 33 callbacks suppressed
[  587.925424][T14245] Quota error (device loop2): write_blk: dquota write failed
[  587.947017][T14245] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  587.967734][T14253] loop0: detected capacity change from 0 to 256
[  587.969722][T14245] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz-executor.2: Failed to acquire dquot type 1
[  587.998331][T14245] EXT4-fs (loop2): 1 truncate cleaned up
[  588.015415][T14245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  588.086961][T14250] netlink: zone id is out of range
[  588.108818][T14250] netlink: zone id is out of range
[  588.125438][T14250] netlink: zone id is out of range
[  588.144369][T14250] netlink: set zone limit has 4 unknown bytes
[  588.148133][T14240] kvm_intel: kvm [14239]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0xef0000ffc9
[  588.304236][T14256] loop0: detected capacity change from 256 to 0
[  588.349630][T14253] syz-executor.0: attempt to access beyond end of device
[  588.349630][T14253] loop0: rw=0, sector=168, nr_sectors = 1 limit=0
[  588.452577][T13162] syz-executor.0: attempt to access beyond end of device
[  588.452577][T13162] loop0: rw=0, sector=128, nr_sectors = 1 limit=0
[  588.482804][T13162] exFAT-fs (loop0): error, failed to access to FAT (entry 0x00000005, err:-5)
[  588.491940][T13162] exFAT-fs (loop0): Filesystem has been set read-only
[  588.500044][T13162] syz-executor.0: attempt to access beyond end of device
[  588.500044][T13162] loop0: rw=524288, sector=168, nr_sectors = 1 limit=0
[  588.549004][T13162] syz-executor.0: attempt to access beyond end of device
[  588.549004][T13162] loop0: rw=524288, sector=169, nr_sectors = 1 limit=0
[  588.569128][T13162] syz-executor.0: attempt to access beyond end of device
[  588.569128][T13162] loop0: rw=524288, sector=170, nr_sectors = 1 limit=0
[  588.604627][T13162] syz-executor.0: attempt to access beyond end of device
[  588.604627][T13162] loop0: rw=524288, sector=171, nr_sectors = 1 limit=0
[  588.630257][T12494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.660154][T13162] syz-executor.0: attempt to access beyond end of device
[  588.660154][T13162] loop0: rw=524288, sector=172, nr_sectors = 1 limit=0
[  588.681272][T13162] syz-executor.0: attempt to access beyond end of device
[  588.681272][T13162] loop0: rw=524288, sector=173, nr_sectors = 1 limit=0
[  588.700601][T13162] syz-executor.0: attempt to access beyond end of device
[  588.700601][T13162] loop0: rw=524288, sector=174, nr_sectors = 1 limit=0
[  588.721385][T13162] syz-executor.0: attempt to access beyond end of device
[  588.721385][T13162] loop0: rw=524288, sector=175, nr_sectors = 1 limit=0
[  588.759458][T13162] exFAT-fs (loop0): error, failed to access to FAT (entry 0x00000005, err:-5)
[  588.998966][ T5151] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  589.840975][ T5151] usb 2-1: config index 0 descriptor too short (expected 60964, got 36)
[  589.862066][ T5151] usb 2-1: config 0 has too many interfaces: 252, using maximum allowed: 32
[  589.886437][ T5151] usb 2-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config
[  589.899494][ T5151] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 252
[  589.910206][ T5151] usb 2-1: New USB device found, idVendor=056d, idProduct=c000, bcdDevice= 0.00
[  589.919819][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.932600][ T5151] usb 2-1: config 0 descriptor??
[  589.958859][ T2818] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.003898][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  590.165127][ T5151] usb 2-1: string descriptor 0 read error: -71
[  590.193227][ T5151] usb 2-1: USB disconnect, device number 11
[  590.209598][   T11] wlan0: Trigger new scan to find an IBSS to join
[  590.622904][T13658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  590.635023][T13658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  590.644242][T13658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  590.654743][T13658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  590.675921][T13658] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  590.685922][T13658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  590.853191][T14290] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups)
[  590.883264][ T2818] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.987126][T14298] loop2: detected capacity change from 0 to 512
[  591.069901][T14298] EXT4-fs (loop2): orphan cleanup on readonly fs
[  591.082565][T14298] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 248: padding at end of block bitmap is not set
[  591.110427][T14298] Quota error (device loop2): write_blk: dquota write failed
[  591.117951][T14298] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  591.155204][T14298] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz-executor.2: Failed to acquire dquot type 1
[  591.171363][ T2818] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.207532][T14298] EXT4-fs (loop2): 1 truncate cleaned up
[  591.214019][ T2878] wlan0: Creating new IBSS network, BSSID d6:2f:9a:53:7c:55
[  591.230785][T14298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  591.296355][    C0] ------------[ cut here ]------------
[  591.301910][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20
[  591.312805][    C0] WARNING: CPU: 0 PID: 14288 at net/mac80211/rate.c:385 __rate_control_send_low+0x659/0x890
[  591.322957][    C0] Modules linked in:
[  591.326880][    C0] CPU: 0 PID: 14288 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0
[  591.337437][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  591.347529][    C0] RIP: 0010:__rate_control_send_low+0x659/0x890
[  591.353835][    C0] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 a0 c3 e0 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 58 96 69 f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db
[  591.373575][    C0] RSP: 0000:ffffc9000ef7f6a0 EFLAGS: 00010246
[  591.379662][    C0] RAX: 40ca05b62386ac00 RBX: 000000000000000c RCX: ffff888020273c00
[  591.387629][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  591.395682][    C0] RBP: ffff88807e4a6de8 R08: ffffffff81585742 R09: fffffbfff1c39994
[  591.403727][    C0] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000800
[  591.411746][    C0] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000
[  591.419776][    C0] FS:  00005555794ff480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  591.428764][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  591.435369][    C0] CR2: 0000001b3053c000 CR3: 0000000053878000 CR4: 00000000003526f0
[  591.438141][T14305] kvm: kvm [14301]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfe00000000
[  591.443386][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  591.443431][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  591.443446][    C0] Call Trace:
[  591.443456][    C0]  <TASK>
[  591.443467][    C0]  ? __warn+0x163/0x4e0
[  591.443497][    C0]  ? __rate_control_send_low+0x659/0x890
[  591.443525][    C0]  ? report_bug+0x2b3/0x500
[  591.443557][    C0]  ? __rate_control_send_low+0x659/0x890
[  591.443588][    C0]  ? handle_bug+0x3e/0x70
[  591.443609][    C0]  ? exc_invalid_op+0x1a/0x50
[  591.443630][    C0]  ? asm_exc_invalid_op+0x1a/0x20
[  591.443664][    C0]  ? __warn_printk+0x292/0x360
[  591.458478][T14305] kvm: kvm [14301]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1e700000800
[  591.460871][    C0]  ? __rate_control_send_low+0x659/0x890
[  591.528789][    C0]  rate_control_send_low+0x1a8/0x770
[  591.534112][    C0]  rate_control_get_rate+0x20e/0x5e0
[  591.539426][    C0]  ieee80211_beacon_get_finish+0x49e/0x870
[  591.545232][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  591.551576][    C0]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  591.557115][    C0]  ? __ieee80211_beacon_get+0xa71/0x15c0
[  591.562783][    C0]  __ieee80211_beacon_get+0xf7e/0x15c0
[  591.568240][    C0]  ? __ieee80211_beacon_get+0x36/0x15c0
[  591.573804][    C0]  ieee80211_beacon_get_tim+0xb4/0x320
[  591.579279][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  591.585343][    C0]  mac80211_hwsim_beacon_tx+0x39d/0x850
[  591.590908][    C0]  __iterate_interfaces+0x223/0x4c0
[  591.596098][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  591.602174][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  591.608232][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170
[  591.615445][    C0]  ieee80211_iterate_active_interfaces_atomic+0xd8/0x170
[  591.622489][    C0]  mac80211_hwsim_beacon+0xd4/0x1f0
[  591.627690][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  591.633529][    C0]  __hrtimer_run_queues+0x59b/0xd50
[  591.638751][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[  591.644750][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  591.650537][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[  591.656642][    C0]  hrtimer_run_softirq+0x19a/0x2c0
[  591.661780][    C0]  handle_softirqs+0x2c4/0x970
[  591.666550][    C0]  ? __irq_exit_rcu+0xf4/0x1c0
[  591.671371][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  591.676676][    C0]  ? irqtime_account_irq+0xd4/0x1e0
[  591.681895][    C0]  __irq_exit_rcu+0xf4/0x1c0
[  591.686474][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  591.691689][    C0]  irq_exit_rcu+0x9/0x30
[  591.695921][    C0]  sysvec_apic_timer_interrupt+0x57/0xc0
[  591.701567][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  591.707545][    C0] RIP: 0033:0x7f8baf638af0
[  591.711974][    C0] Code: 72 48 39 f0 0f 82 b9 00 00 00 48 39 f2 72 6e 41 0f 11 0c 24 48 8b 77 f8 48 89 f8 48 89 eb eb 12 66 2e 0f 1f 84 00 00 00 00 00 <48> 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17
[  591.731600][    C0] RSP: 002b:00007ffd39d75d80 EFLAGS: 00000297
[  591.737664][    C0] RAX: 00007f8baeb0cd18 RBX: 00007f8baeb0c980 RCX: ffffffff81800ee2
[  591.745660][    C0] RDX: ffffffff81801446 RSI: ffffffff81800ee2 RDI: 00007f8baeb0d2e0
[  591.753652][    C0] RBP: 00007f8baeb0c2c8 R08: 00007f8baeb0cad0 R09: 0000000000001319
[  591.761642][    C0] R10: 00000000814240cc R11: 00000000814240d0 R12: 00007f8baeb0c2c0
[  591.769649][    C0] R13: 0000000000000015 R14: 00000000001ffff8 R15: 00007f8baf7b40e8
[  591.777651][    C0]  ? __module_address+0x32/0x500
[  591.782607][    C0]  ? is_module_text_address+0x16/0x190
[  591.788065][    C0]  ? __module_address+0x32/0x500
[  591.793040][    C0]  </TASK>
[  591.796058][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  591.803324][    C0] CPU: 0 PID: 14288 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0
[  591.813806][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  591.823850][    C0] Call Trace:
[  591.827123][    C0]  <TASK>
[  591.830054][    C0]  dump_stack_lvl+0x241/0x360
[  591.834837][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  591.840050][    C0]  ? __pfx__printk+0x10/0x10
[  591.844638][    C0]  ? vscnprintf+0x5d/0x90
[  591.848967][    C0]  panic+0x349/0x860
[  591.852875][    C0]  ? __warn+0x172/0x4e0
[  591.857020][    C0]  ? __pfx_panic+0x10/0x10
[  591.861473][    C0]  __warn+0x346/0x4e0
[  591.865442][    C0]  ? __rate_control_send_low+0x659/0x890
[  591.871074][    C0]  report_bug+0x2b3/0x500
[  591.875412][    C0]  ? __rate_control_send_low+0x659/0x890
[  591.881035][    C0]  handle_bug+0x3e/0x70
[  591.885179][    C0]  exc_invalid_op+0x1a/0x50
[  591.889686][    C0]  asm_exc_invalid_op+0x1a/0x20
[  591.894556][    C0] RIP: 0010:__rate_control_send_low+0x659/0x890
[  591.900785][    C0] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 a0 c3 e0 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 58 96 69 f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db
[  591.920382][    C0] RSP: 0000:ffffc9000ef7f6a0 EFLAGS: 00010246
[  591.926476][    C0] RAX: 40ca05b62386ac00 RBX: 000000000000000c RCX: ffff888020273c00
[  591.934450][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  591.942414][    C0] RBP: ffff88807e4a6de8 R08: ffffffff81585742 R09: fffffbfff1c39994
[  591.950392][    C0] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000800
[  591.958559][    C0] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000
[  591.966574][    C0]  ? __warn_printk+0x292/0x360
[  591.971357][    C0]  rate_control_send_low+0x1a8/0x770
[  591.976663][    C0]  rate_control_get_rate+0x20e/0x5e0
[  591.981946][    C0]  ieee80211_beacon_get_finish+0x49e/0x870
[  591.987751][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  591.994077][    C0]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  591.999635][    C0]  ? __ieee80211_beacon_get+0xa71/0x15c0
[  592.005288][    C0]  __ieee80211_beacon_get+0xf7e/0x15c0
[  592.010750][    C0]  ? __ieee80211_beacon_get+0x36/0x15c0
[  592.016302][    C0]  ieee80211_beacon_get_tim+0xb4/0x320
[  592.021762][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  592.027828][    C0]  mac80211_hwsim_beacon_tx+0x39d/0x850
[  592.033374][    C0]  __iterate_interfaces+0x223/0x4c0
[  592.038563][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  592.044638][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  592.050709][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170
[  592.057922][    C0]  ieee80211_iterate_active_interfaces_atomic+0xd8/0x170
[  592.064937][    C0]  mac80211_hwsim_beacon+0xd4/0x1f0
[  592.070142][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  592.075965][    C0]  __hrtimer_run_queues+0x59b/0xd50
[  592.081154][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[  592.087129][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  592.092862][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[  592.098923][    C0]  hrtimer_run_softirq+0x19a/0x2c0
[  592.104050][    C0]  handle_softirqs+0x2c4/0x970
[  592.108815][    C0]  ? __irq_exit_rcu+0xf4/0x1c0
[  592.113584][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  592.118876][    C0]  ? irqtime_account_irq+0xd4/0x1e0
[  592.124097][    C0]  __irq_exit_rcu+0xf4/0x1c0
[  592.128682][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  592.133890][    C0]  irq_exit_rcu+0x9/0x30
[  592.138117][    C0]  sysvec_apic_timer_interrupt+0x57/0xc0
[  592.143739][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  592.149718][    C0] RIP: 0033:0x7f8baf638af0
[  592.154139][    C0] Code: 72 48 39 f0 0f 82 b9 00 00 00 48 39 f2 72 6e 41 0f 11 0c 24 48 8b 77 f8 48 89 f8 48 89 eb eb 12 66 2e 0f 1f 84 00 00 00 00 00 <48> 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17
[  592.173736][    C0] RSP: 002b:00007ffd39d75d80 EFLAGS: 00000297
[  592.179793][    C0] RAX: 00007f8baeb0cd18 RBX: 00007f8baeb0c980 RCX: ffffffff81800ee2
[  592.187751][    C0] RDX: ffffffff81801446 RSI: ffffffff81800ee2 RDI: 00007f8baeb0d2e0
[  592.195740][    C0] RBP: 00007f8baeb0c2c8 R08: 00007f8baeb0cad0 R09: 0000000000001319
[  592.203701][    C0] R10: 00000000814240cc R11: 00000000814240d0 R12: 00007f8baeb0c2c0
[  592.211660][    C0] R13: 0000000000000015 R14: 00000000001ffff8 R15: 00007f8baf7b40e8
[  592.219644][    C0]  ? __module_address+0x32/0x500
[  592.224602][    C0]  ? is_module_text_address+0x16/0x190
[  592.230057][    C0]  ? __module_address+0x32/0x500
[  592.235006][    C0]  </TASK>
[  592.238155][    C0] Kernel Offset: disabled
[  592.242468][    C0] Rebooting in 86400 seconds..