last executing test programs:

7m59.959116645s ago: executing program 4 (id=217):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087160000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

7m59.797736716s ago: executing program 4 (id=218):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="bfeb0100180000"], 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a000000000000000100"}, 0xd8)
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$admmidi(&(0x7f0000002480), 0x20, 0x101200)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r3, 0x0, 0x14)
ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000100)={'veth0_to_bond\x00'})
ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111)

7m58.917536874s ago: executing program 4 (id=221):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = syz_open_dev$vbi(0x0, 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}})
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x309000, 0x0)
ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r5, 0x4014563c, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x0, 0xffffffff, 0xfffffff9}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r6, 0x8b2c, &(0x7f0000000040))

7m58.397862818s ago: executing program 4 (id=223):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000009c0), 0x2, 0x448, &(0x7f00000011c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x1000000)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xca, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)

7m56.92484527s ago: executing program 4 (id=227):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
socket(0x1d, 0x2, 0x6)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r3, &(0x7f0000000400)={0x1d, r5, 0x2}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0xfff1, 0x3}, {}, {0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4)

7m54.707259918s ago: executing program 4 (id=235):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)

7m54.47864325s ago: executing program 32 (id=235):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)

10.393372755s ago: executing program 1 (id=1392):
r0 = socket(0x2a, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='mm_page_free\x00', r1}, 0x10)
sendmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0)=[{0x1010, 0x110, 0x100, "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"}, {0xd8, 0x1, 0x9, "2cfebb83a591754a8478b65c56b185841ac6b79b42216822e449ddd7816eee9d61ddf568a6bc188e77ab887fca1c30ca2661e1c132697292daf4c003a48d698ba700a16f8ce2749a3cece219301bf7e597a3039bc3e9a5e246143aafd98137843626e60912c5554f566f3a7d866294ca9904384105629cd1c7acb7c0c635f6f6b8ea269a0c6491d4371c02a9aae8ea5aa5bc2380e9ed5da14cd5db7caaa5a28bded85e5e3fab1bd31713efdd36eda688401f95c56961abaff41a69c98c7c66f060"}, {0x38, 0x88, 0x10001, "0100a46128bc22337bab230c846a83cff496ef7d24516d1de90fa36932af55f7e4"}, {0x78, 0x112, 0x8, "f0881d3f87b01398af593009d75d4484ff8cda8d838f0a91ccccd708fdd39cb2f470f00d95bf51b45884dc865ab9ef8e8dd2328739b90125162e183915383cbbf08c1cf217e27927372f7e7c8957b7c54a62575a483d4baa855926a0a1c7326695"}, {0xb0, 0x1, 0x101, "a20bafc05b1a6c8bc952b4751451dd9cdd986278849edb999665b040a8e5bfcd2cd3a22afdd50cc186e0df6e11f9c8574c491813d80344f6f0fff0affa0d53d7138de89f20a2afa1d0b91addd3f0d9e870c5ddb76a2a97ea00ea68fd0897e7ca5735de0f0d8928f09181cf250850cffc8253e1ff21d772486e5169ca12008679e65c4102f488165e908eadd6ace878af6e294dd832dd6da9f0"}, {0x48, 0x111, 0x7, "9fd2b29a772c7282b1ee8ade3c1f1d09e0df9771d19fa1647ca100205da156631a1c3cf7f210e0dd3c54efb86273252972"}, {0xc8, 0x7db0271f6efa5662, 0x6, "c4ad81fdbe5c8fef632e3aff2ee92c0fceda0eb69fefd02fa01fdd3be3e89b887a7db74a63f7e1cee59e5a81428eb431835a48dae589bb94791656d583460e6f73573988426802210db1e11771a141c6108f0d160527b96c778372acbdb1fc2f902d4e88dcc52e743516960320192c63e458da9e2911369a531e1615f63b85428d8a6e2bf1cde1f6a25323a3a44b5c2c6cfa11b63411dbec278b498939bd59239fb6db9e8117ebfa2f412870403295b974"}, {0xcb0, 0x117, 0x5, "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"}], 0x2008}}], 0x1, 0x44861)

10.092770147s ago: executing program 1 (id=1394):
r0 = socket(0x2, 0x80805, 0x0)
listen(r0, 0x5)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="300000000000000084000000010000007969b8832c"], 0x30}], 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d)
unshare(0x24020400)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000003c40)=0x8, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x401c5820, &(0x7f0000000040)={'pim6reg1\x00', @link_local})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x8000}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, 0x0, &(0x7f0000000140))
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc080)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000e1401002cbd7000fbdbdf25080001000000000009003c0002000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008100)
ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0xa4}}, 0x0)

8.51974701s ago: executing program 2 (id=1398):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="310729bd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x80)

8.428752581s ago: executing program 2 (id=1400):
r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1, 0x5c, 0x2)

8.190943273s ago: executing program 5 (id=1402):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
flistxattr(r2, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000))
socket$xdp(0x2c, 0x3, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x8, 0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')

7.27956366s ago: executing program 2 (id=1403):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

6.438672387s ago: executing program 5 (id=1405):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x84, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}, {{0x2, 0x4e24, @private=0xa010100}}}, 0x108)

6.363874488s ago: executing program 1 (id=1406):
syz_io_uring_setup(0x110, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)

6.220708369s ago: executing program 5 (id=1407):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$packet(0x11, 0x2, 0x300)
syz_mount_image$fuse(0x0, 0x0, 0x4042, 0x0, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2, 0x25, 0x0, @val=@netfilter={0x0, 0x0, 0x7}}, 0x20)
syz_emit_ethernet(0x4e, &(0x7f0000000900)=ANY=[], 0x0)

6.04074999s ago: executing program 1 (id=1409):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES64, @ANYRESHEX], 0x29)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x2, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d", 0x2, 0x0, 0x0, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000000c0)=0x2, 0x4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000001001000001000000dc000000bd2d1c501f8eb6b3058deb852c24b39b7fe9e94750b6a82dc8068de71c104eb9c5450f05ef0b1d5214709c20ccf8521af6a5de8f876c0da4208257a23d56c7f83c3f318d47cb79c92163d76900f1e5277507265c735c1c71309e350e5b"], 0x10}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

5.928475601s ago: executing program 5 (id=1410):
alarm(0x9)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
alarm(0x0)

4.202967055s ago: executing program 1 (id=1412):
syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={[{@grpquota}, {@noquota}, {@logbufs={'logbufs', 0x3d, 0x3}}]}, 0x1, 0xb8e6, &(0x7f0000017140)="$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")
rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3.952894797s ago: executing program 2 (id=1413):
r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1, 0x5c, 0x2)

3.952478608s ago: executing program 3 (id=1414):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)

3.879208848s ago: executing program 0 (id=1415):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
flistxattr(r2, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000))
socket$xdp(0x2c, 0x3, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x8, 0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')

3.66123297s ago: executing program 3 (id=1416):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}})

2.679686438s ago: executing program 2 (id=1417):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0x6, 0x0, 0x0, 0x1, [@generic="976b"]}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0)

2.41299247s ago: executing program 2 (id=1418):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07a"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000180)=""/25)

2.328282411s ago: executing program 0 (id=1419):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket(0x18, 0x0, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0xd}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private1, 0x3}}, 0x24)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r5)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000140)={0x1, 0x101})
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}})

2.263885431s ago: executing program 3 (id=1420):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x890)

2.072780023s ago: executing program 5 (id=1421):
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'wlan0\x00', {0x2, 0x0, @dev}})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280), 0x4, 0x45b, &(0x7f00000010c0)="$eJzs281rHOUfAPDvTJL217dfYq0vfVGjVQy+JE1atQcvioIHBcFLPcYkLbXbRpoIthStIvUoBcGjeBT8CzzpRdST4FXvUijSi9XTyuzOdF+6u0nTTabNfj4w2eeZeWbn+c4zz+4z82QDGFjj2Z8kYmdE/B4Ro/Vsa4Hx+sv1axfm/rl2YS6JavWtv5Jaub+vXZgrihb77cgzE2lE+mkS+zscd+nc+VOzlcrC2Tw/tXz6vamlc+efPXl69sTCiYUzM0ePHjk8/cLzM8/1Jc57srru+3DxwN7X3r78xtyxy+/8/G1SxN8WR5+M99r4RLXa58OVa1dTOhlexQ5D61gZVi1rhqy5Rmr9fzSGotF4o/HqJ6VWDlhX1VyXzRerwCaWRNk1AMpRfNFn97/FsnGjj/Jdfal+A5TFfT1f6luGI83LjLTd3/bTeEQcu/jvV9kS6/McAgCgxffZ+OeZTuO/NO5vKvf/2FqbGxrL51J2R8S9EbEnIu6LqJV9ICIe7HSQHhMC7ZMkN49/0itrj25l2fjvxXxuq3X8V4z+Ymwoz+2qxT+SHD9ZWThUOycREzGyNctP9zjGD6/89nm3bc3jv2zJjl+MBfN6XBne2rrP/Ozy7O3E3OzqxxH7hjvFn9yYCUgiYm9E7FvjMU4+9c2BbttWjr+H1cwzraD6dcST9fa/GG3xF5Le85NT/4vKwqGp4qq42S+/Xnqz2/FvK/4+yNp/e8fr/0b8Y0nzfO3Srbx7vXdf+uOzrvc0k2u6/hsrtuSvH8wuL5+djtiSvF6vdPP6mca+Rb4on8U/cbBz/98djTOxPyKyi/ihiHg4Ih7Jo3s0Ih6LiIM9zsJPLz/+bq8zVHb7z7e1/1hrkbb2byS2RPuazomhUz9+1/qOjeTqPv+O1FIT+Zra59+XveNaTb1u9WoGAACAu1UaETsjSSdvpNN0crL+P/x7YntaWVxafvr44vtn5uu/ERiLkbR40jXa9Dx0Or+tL/IzbfnD+XPjL4a21fKTc4uV+bKDhwG3o0v/z/zpNxqw+fVhHg24S+n/MLj0fxhc+j8Mrg79f1sZ9QA2Xqfv/49KqAew8dr6v2k/GCDu/2Fw6f8wuJr7f1JiPYANtbQtVv6R/GZIVKvV6h1Qjc2TiPSOqEZ/Esk694KdZQd464myP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6478AAAD//+Jk61o=")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x8}, 0x18)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
io_setup(0x30, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_clone(0x800100, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)

2.049042883s ago: executing program 3 (id=1422):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES64, @ANYRESHEX], 0x29)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x2, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d", 0x2, 0x0, 0x0, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000000c0)=0x2, 0x4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000001001000001000000dc000000bd2d1c501f8eb6b3058deb852c24b39b7fe9e94750b6a82dc8068de71c104eb9c5450f05ef0b1d5214709c20ccf8521af6a5de8f876c0da4208257a23d56c7f83c3f318d47cb79c92163d76900f1e5277507265c735c1c71309e350e5b"], 0x10}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.862989174s ago: executing program 0 (id=1423):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, 0x0)
getdents64(r2, 0x0, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
read$FUSE(r3, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
ptrace$getregset(0x4204, r4, 0x200, 0x0)

952.657142ms ago: executing program 3 (id=1424):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

821.596133ms ago: executing program 5 (id=1425):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@nogrpid}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

820.958033ms ago: executing program 0 (id=1426):
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)

744.668844ms ago: executing program 3 (id=1427):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket(0x18, 0x0, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0xd}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private1, 0x3}}, 0x24)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff})
connect$unix(r4, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r5)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000140)={0x1, 0x101})
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}})

533.910865ms ago: executing program 0 (id=1428):
fallocate(0xffffffffffffffff, 0x4, 0xe1ad341, 0x9)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x1a79, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x881, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

479.276436ms ago: executing program 1 (id=1429):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)

0s ago: executing program 0 (id=1430):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
flistxattr(r2, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000))
socket$xdp(0x2c, 0x3, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')

kernel console output (not intermixed with test programs):

ready
[   65.044414][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.058658][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.069581][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.080805][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.091324][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.101432][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.112283][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.122178][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.132798][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.143982][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.171067][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.181003][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.181598][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.198481][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.207960][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.218312][ T4215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.227195][ T4215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.276510][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.286940][ T4165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.298058][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.310665][ T4165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.329148][ T4165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.338855][ T4165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.350735][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.360508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.657806][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.669566][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.685743][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.856414][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.899577][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.388060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.434558][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.442536][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.462589][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.550928][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.565783][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.594584][ T4213] Bluetooth: hci0: command 0x0419 tx timeout
[   66.602334][ T4213] Bluetooth: hci1: command 0x0419 tx timeout
[   66.614771][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.653575][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.671710][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.682062][ T4210] Bluetooth: hci2: command 0x0419 tx timeout
[   66.690776][ T4210] Bluetooth: hci3: command 0x0419 tx timeout
[   66.700799][ T4254] loop0: detected capacity change from 0 to 2048
[   66.708825][ T4210] Bluetooth: hci4: command 0x0419 tx timeout
[   66.718383][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.931248][ T4259] loop2: detected capacity change from 0 to 4096
[   67.072530][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'.
[   67.812596][ T4267] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.921360][ T4276] loop4: detected capacity change from 0 to 512
[   69.440324][ T4271] sched: RT throttling activated
[   70.080066][ T4276] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   70.157625][ T4276] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noblock_validity,mblk_io_submit,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   70.175447][ T4276] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.231471][ T4274] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[   70.757798][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   71.425976][ T4287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.439460][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.465343][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.589771][ T4287] syz.2.10 (4287) used greatest stack depth: 18424 bytes left
[   71.600039][ T4300] autofs4:pid:4300:autofs_fill_super: called with bogus options
[   71.693523][ T4303] loop1: detected capacity change from 0 to 128
[   71.764648][ T4303] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   71.777843][ T4303] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   72.704253][ T4284] loop3: detected capacity change from 0 to 40427
[   72.727171][ T4317] loop4: detected capacity change from 0 to 512
[   72.779712][ T4317] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   72.806968][ T4317] EXT4-fs (loop4): invalid journal inode
[   72.806976][ T4284] F2FS-fs (loop3): Unrecognized mount option "barrier" or missing value
[   72.812749][ T4317] EXT4-fs (loop4): can't get journal size
[   72.913505][ T4317] EXT4-fs (loop4): 1 truncate cleaned up
[   72.922769][ T4317] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[   73.072425][ T4307] loop2: detected capacity change from 0 to 32768
[   73.114256][ T4307] =======================================================
[   73.114256][ T4307] WARNING: The mand mount option has been deprecated and
[   73.114256][ T4307]          and is ignored by this kernel. Remove the mand
[   73.114256][ T4307]          option from the mount to silence this warning.
[   73.114256][ T4307] =======================================================
[   73.163619][ T4300] loop0: detected capacity change from 0 to 32768
[   73.254915][ T4300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.15 (4300)
[   73.302767][ T4307] XFS (loop2): Mounting V5 Filesystem
[   73.444587][ T4300] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   73.491196][ T4300] BTRFS info (device loop0): using free space tree
[   73.534304][ T4300] BTRFS info (device loop0): has skinny extents
[   73.604375][ T4307] XFS (loop2): Ending clean mount
[   73.679314][ T4307] XFS (loop2): Quotacheck needed: Please wait.
[   73.781250][ T4307] XFS (loop2): Quotacheck: Done.
[   73.865698][ T4321] loop1: detected capacity change from 0 to 32768
[   73.904231][ T4300] BTRFS info (device loop0): enabling ssd optimizations
[   74.036365][ T4365] loop4: detected capacity change from 0 to 64
[   74.054877][ T4167] XFS (loop2): Unmounting Filesystem
[   74.069049][ T4365] hfs: unable to load codepage "iso8z/Ą#)r_umask=Óź`“^0000000000)0000000000`ļŹ«ĀÆJ]#‡Ü0ŗĆ$—sK$w64_F¹Ģ?p3śōéP9>/ķgQŒ}ekå»ų@‚÷Ļ@v?‚0ėh4£`ęśĻ8ØŁ’įGöÖ¶Tb”sbŌ[	PHŠjœ©ŗ{Öm–ŲÕXÜ÷wM®®§šĄC­FØS®c÷g‡ B˜™/B:SV>’f_qkŠŅh%²–Š^³Ž–TĪ"
[   74.078059][ T4321] XFS (loop1): Mounting V5 Filesystem
[   74.100205][ T4365] hfs: unable to parse mount options
[   74.410203][ T4321] XFS (loop1): Ending clean mount
[   74.447686][ T4321] XFS (loop1): Quotacheck needed: Please wait.
[   74.584497][ T4321] XFS (loop1): Quotacheck: Done.
[   74.671720][ T4168] XFS (loop1): Unmounting Filesystem
[   74.904028][ T4386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'.
[   75.461250][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   75.480461][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   75.489258][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.818625][ T4416] snd_dummy snd_dummy.0: control 0:65279:65279:syz0:0 is already present
[   81.031914][ T4421] loop4: detected capacity change from 0 to 256
[   81.104516][ T4421] exfat: Bad value for 'uid'
[   81.104854][ T4423] loop3: detected capacity change from 0 to 256
[   81.225338][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.234097][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.366695][ T4423] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[   81.388052][ T4427] device bridge_slave_1 left promiscuous mode
[   81.397384][ T4423] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   81.399774][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.465253][ T4436] process 'syz.4.42' launched './file1' with NULL argv: empty string added
[   81.527212][ T1108] cfg80211: failed to load regulatory.db
[   81.954519][ T4427] device bridge_slave_0 left promiscuous mode
[   82.053589][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.293411][ T4417] loop0: detected capacity change from 0 to 32768
[   83.232000][ T4417] XFS (loop0): Mounting V5 Filesystem
[   83.426908][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'.
[   83.436463][ T4417] XFS (loop0): Ending clean mount
[   85.729337][ T4417] XFS (loop0): Quotacheck needed: Please wait.
[   85.945569][ T4463] loop2: detected capacity change from 0 to 4096
[   86.081397][ T4463] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   86.092638][ T4417] XFS (loop0): Quotacheck: Done.
[   86.321534][ T4166] XFS (loop0): Unmounting Filesystem
[   87.045575][ T4463] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   87.094512][ T4463] ntfs3: loop2: Failed to load $Extend.
[   88.307464][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'.
[   89.853038][ T4503] loop2: detected capacity change from 0 to 256
[   89.975139][ T4503] exfat: Bad value for 'uid'
[   90.004359][ T4506] snd_dummy snd_dummy.0: control 0:65279:65279:syz0:0 is already present
[   90.240940][ T4509] ptrace attach of "./syz-executor exec"[4515] was attempted by "./syz-executor exec"[4509]
[   91.393758][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   91.402765][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   91.412154][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   91.421354][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   91.430568][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   91.439766][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   91.449100][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   91.458320][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   91.467641][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   91.476871][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   91.622095][ T4525] loop2: detected capacity change from 0 to 2048
[   91.793766][ T4531] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   92.433321][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'.
[   93.671569][ T4555] fuse: Unknown parameter 'fd0x0000000000000006'
[   96.760153][ T4578] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   98.141465][ T4590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'.
[   98.172709][ T4593] snd_dummy snd_dummy.0: control 0:65279:65279:syz0:0 is already present
[   98.480167][ T4599] xt_cgroup: xt_cgroup: no path or classid specified
[   99.573686][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   99.624209][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   99.907549][ T4616] loop2: detected capacity change from 0 to 4096
[   99.920853][ T4621] netlink: 104 bytes leftover after parsing attributes in process `syz.0.101'.
[  100.149949][ T4616] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  100.946028][ T4593] loop1: detected capacity change from 0 to 32768
[  101.087154][ T4634] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  101.186053][ T4641] loop3: detected capacity change from 0 to 128
[  101.201860][ T4642] xt_cgroup: xt_cgroup: no path or classid specified
[  101.409019][ T4645] mmap: syz.0.104 (4645) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  101.537227][ T4641] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  101.676454][ T4641] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  102.796278][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'.
[  104.442395][ T4676] xt_recent: hitcount (262144) is larger than allowed maximum (255)
[  105.571209][ T4683] xt_cgroup: xt_cgroup: no path or classid specified
[  105.686227][ T4689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.118'.
[  109.162669][ T4714] loop1: detected capacity change from 0 to 512
[  109.526101][ T4714] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  109.629768][ T4714] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  109.740724][ T4714] EXT4-fs (loop1): 1 truncate cleaned up
[  109.770152][ T4714] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nombcache,usrjquota=,lazytime,,errors=continue. Quota mode: none.
[  113.195411][ T4739] xt_cgroup: xt_cgroup: no path or classid specified
[  116.603661][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'.
[  118.638276][ T4794] xt_cgroup: xt_cgroup: no path or classid specified
[  119.106804][ T4797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'.
[  119.148583][ T4777] loop0: detected capacity change from 0 to 32768
[  123.807153][ T4832] xt_cgroup: xt_cgroup: no path or classid specified
[  124.358148][ T4819] loop1: detected capacity change from 0 to 32768
[  124.637446][ T4157] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4157)
[  126.024209][ T4850] netlink: 'syz.1.168': attribute type 1 has an invalid length.
[  130.995406][ T4883] loop0: detected capacity change from 0 to 16
[  131.436886][ T4889] netlink: 'syz.3.180': attribute type 1 has an invalid length.
[  132.107886][ T4883] loop0: detected capacity change from 0 to 256
[  132.252087][ T4883] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  132.292065][ T4883] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  132.399214][ T4876] loop1: detected capacity change from 0 to 32768
[  132.448723][ T4876] (syz.1.177,4876,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "int+§Šer_resv_level=00000000000000000000" or missing value
[  132.543924][ T4876] (syz.1.177,4876,1):ocfs2_fill_super:1177 ERROR: status = -22
[  132.688199][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.694589][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.926482][ T4902] syz.1.177 uses obsolete (PF_INET,SOCK_PACKET)
[  134.939658][ T4924] snd_dummy snd_dummy.0: control 0:65279:65279:syz0:0 is already present
[  135.001393][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'.
[  135.957698][ T4946] netlink: 'syz.4.193': attribute type 1 has an invalid length.
[  137.816088][ T4936] loop3: detected capacity change from 0 to 32768
[  137.845316][ T4930] loop0: detected capacity change from 0 to 32768
[  138.343246][ T4945] loop1: detected capacity change from 0 to 40427
[  138.522087][ T4945] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  138.553283][ T4945] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  138.611729][ T4957] netlink: 200 bytes leftover after parsing attributes in process `syz.0.197'.
[  138.647197][ T4957] netlink: 'syz.0.197': attribute type 8 has an invalid length.
[  138.669252][ T4945] F2FS-fs (loop1): Found nat_bits in checkpoint
[  138.863053][ T4945] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  138.874232][ T4945] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  139.012727][ T4952] loop4: detected capacity change from 0 to 32768
[  139.054905][ T4952] (syz.4.196,4952,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "int+§Šer_resv_level=00000000000000000000" or missing value
[  139.099142][ T4952] (syz.4.196,4952,1):ocfs2_fill_super:1177 ERROR: status = -22
[  142.256466][ T4999] loop1: detected capacity change from 0 to 256
[  142.752731][ T5006] snd_dummy snd_dummy.0: control 0:65279:65279:syz0:0 is already present
[  142.862694][ T4999] exfat: Bad value for 'uid'
[  145.531882][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'.
[  145.839110][ T5012] loop3: detected capacity change from 0 to 40427
[  145.938470][ T5012] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  145.963860][ T5012] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  146.059555][ T5012] F2FS-fs (loop3): invalid crc value
[  146.155400][ T5012] F2FS-fs (loop3): Found nat_bits in checkpoint
[  147.351070][ T5057] loop4: detected capacity change from 0 to 512
[  147.410300][ T5033] loop0: detected capacity change from 0 to 32768
[  147.484788][ T5033] (syz.0.216,5033,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "int+§Šer_resv_level=00000000000000000000" or missing value
[  147.579945][ T5033] (syz.0.216,5033,0):ocfs2_fill_super:1177 ERROR: status = -22
[  147.662687][ T5057] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  147.702435][ T5057] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.223: invalid indirect mapped block 1 (level 1)
[  148.533431][ T5057] EXT4-fs (loop4): 1 truncate cleaned up
[  148.564067][ T5057] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  148.747938][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  148.831842][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  148.840619][ T5075] snd_dummy snd_dummy.0: control 0:65279:65279:syz0:0 is already present
[  148.884751][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  148.941270][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  148.970431][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  148.992611][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  149.049765][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  149.074752][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  149.101496][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  149.132665][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  150.385529][ T5087] loop1: detected capacity change from 0 to 256
[  150.516914][ T5077] loop3: detected capacity change from 0 to 32768
[  150.577867][ T5077] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.228 (5077)
[  150.719605][ T4250] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.838576][ T5075] loop2: detected capacity change from 0 to 32768
[  150.953885][ T5077] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  150.962686][ T5077] BTRFS info (device loop3): enabling auto defrag
[  150.992424][ T5077] BTRFS info (device loop3): doing ref verification
[  151.014515][ T5077] BTRFS info (device loop3): max_inline at 0
[  151.020552][ T5077] BTRFS info (device loop3): force clearing of disk cache
[  151.044197][ T5077] BTRFS info (device loop3): disabling free space tree
[  151.064974][ T4250] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.083791][ T5077] BTRFS info (device loop3): has skinny extents
[  151.250346][ T4250] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.270976][ T5075] XFS (loop2): Mounting V5 Filesystem
[  151.342151][ T4250] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.424892][ T5075] XFS (loop2): Ending clean mount
[  151.440404][ T5077] BTRFS info (device loop3): enabling ssd optimizations
[  151.441820][ T5075] XFS (loop2): Quotacheck needed: Please wait.
[  151.461983][ T5077] BTRFS info (device loop3): clearing free space tree
[  151.491199][ T5077] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  151.545753][ T5077] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  151.566973][ T5075] XFS (loop2): Quotacheck: Done.
[  151.842344][ T4167] XFS (loop2): Unmounting Filesystem
[  152.369803][ T5125] chnl_net:caif_netlink_parms(): no params data found
[  152.851370][ T5154] loop0: detected capacity change from 0 to 512
[  152.980502][ T5158] loop2: detected capacity change from 0 to 256
[  153.006098][    T7] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  153.024800][    T7] Bluetooth: hci2: Injecting HCI hardware error event
[  153.034790][ T5158] exfat: Bad value for 'uid'
[  153.079618][ T4180] Bluetooth: hci2: hardware error 0x00
[  153.114260][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.136053][ T5154] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.240: casefold flag without casefold feature
[  153.153861][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.185422][ T5125] device bridge_slave_0 entered promiscuous mode
[  153.256985][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.295136][ T5154] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.240: couldn't read orphan inode 15 (err -117)
[  153.313745][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.350292][ T5125] device bridge_slave_1 entered promiscuous mode
[  153.432356][ T5154] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  153.563968][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[  153.640322][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.681314][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.962356][ T5125] team0: Port device team_slave_0 added
[  154.096015][ T5125] team0: Port device team_slave_1 added
[  154.328036][ T5165] loop3: detected capacity change from 0 to 32768
[  154.423645][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.475108][ T5165] (syz.3.239,5165,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "int+§Šer_resv_level=00000000000000000000" or missing value
[  154.503803][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.573059][ T5165] (syz.3.239,5165,1):ocfs2_fill_super:1177 ERROR: status = -22
[  155.167972][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.280003][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.287064][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.315694][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.533287][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'.
[  155.633870][   T13] Bluetooth: hci4: command 0x041b tx timeout
[  155.978537][ T4250] device hsr_slave_0 left promiscuous mode
[  155.986686][ T4250] device hsr_slave_1 left promiscuous mode
[  156.011101][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.533966][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.555521][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.563109][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.591901][ T4250] device bridge_slave_1 left promiscuous mode
[  156.609441][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.637323][ T4250] device bridge_slave_0 left promiscuous mode
[  156.644225][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.664671][ T4250] device veth1_macvtap left promiscuous mode
[  156.671475][ T4250] device veth0_macvtap left promiscuous mode
[  156.679441][ T4250] device veth1_vlan left promiscuous mode
[  156.686060][ T4250] device veth0_vlan left promiscuous mode
[  157.714090][    T7] Bluetooth: hci4: command 0x040f tx timeout
[  157.735352][ T5221] loop0: detected capacity change from 0 to 512
[  157.794063][ T5221] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  157.823845][ T5221] EXT4-fs (loop0): Unrecognized mount option "grpid2" or missing value
[  158.106799][ T5226] loop0: detected capacity change from 0 to 128
[  158.260285][ T4250] team0 (unregistering): Port device team_slave_1 removed
[  158.299157][ T4250] team0 (unregistering): Port device team_slave_0 removed
[  158.315962][ T5226] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  158.328456][ T5226] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  158.332464][ T4250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.398321][ T4250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.502753][ T4250] bond0 (unregistering): Released all slaves
[  158.637260][ T5125] device hsr_slave_0 entered promiscuous mode
[  158.662927][ T5125] device hsr_slave_1 entered promiscuous mode
[  158.681580][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.694960][ T5125] Cannot create hsr debugfs directory
[  159.160968][ T5236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'.
[  159.467126][ T5234] netlink: 'syz.0.252': attribute type 1 has an invalid length.
[  160.029280][ T4242] Bluetooth: hci4: command 0x0419 tx timeout
[  160.430604][ T5251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'.
[  161.716684][ T5125] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  161.729068][ T5125] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  161.740161][ T5125] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  161.759637][ T5125] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  161.967688][ T5242] loop2: detected capacity change from 0 to 32768
[  162.015430][ T5242] (syz.2.255,5242,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "int+§Šer_resv_level=00000000000000000000" or missing value
[  162.052163][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.092679][ T5242] (syz.2.255,5242,0):ocfs2_fill_super:1177 ERROR: status = -22
[  162.157111][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  162.199438][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  162.250210][ T5125] 8021q: adding VLAN 0 to HW filter on device team0
[  162.385202][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  162.404952][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.454374][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.461532][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.540047][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  162.574638][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  162.629560][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.849680][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.857078][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.873147][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  163.675883][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  163.758959][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  163.791777][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  163.883573][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  164.383341][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  164.478223][ T5317] netlink: 'syz.1.266': attribute type 1 has an invalid length.
[  164.797018][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  165.147048][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  165.163370][ T5314] loop3: detected capacity change from 0 to 2048
[  165.223434][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  165.298745][ T5125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.340348][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  165.431550][ T5314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.474961][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  165.506014][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.754314][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  167.782131][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  167.816435][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.022098][ T5353] loop1: detected capacity change from 0 to 1024
[  169.241379][ T5353] EXT4-fs (loop1): Test dummy encryption mode enabled
[  169.446923][ T5353] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,noblock_validity,noinit_itable,barrier=0x0000000000000005,init_itable,data_err=abort,,errors=continue. Quota mode: writeback.
[  170.977247][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  171.025034][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  171.166799][ T5125] device veth0_vlan entered promiscuous mode
[  171.312645][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  171.324590][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  171.381315][ T5125] device veth1_vlan entered promiscuous mode
[  171.390652][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  171.536637][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  171.557703][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  171.886290][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  173.114998][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  173.128147][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  173.156532][ T5125] device veth0_macvtap entered promiscuous mode
[  173.223880][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  173.296338][ T5125] device veth1_macvtap entered promiscuous mode
[  173.405476][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.625936][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.752380][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.042831][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.505473][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.803820][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.940944][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.952427][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.997165][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.065974][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.099759][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.193730][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.240785][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.269622][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.284924][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.295630][ T5459] snd_dummy snd_dummy.0: control 0:65279:65279:syz0:0 is already present
[  175.299555][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.314699][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.325936][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.351464][ T5125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.360339][ T5125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.391241][ T5125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.422491][ T5125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.474927][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  175.611860][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  175.624563][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  175.640505][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  176.465141][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.485925][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.583470][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.595131][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.702040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  176.780692][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  176.973937][ T5459] loop3: detected capacity change from 0 to 32768
[  177.261345][ T5459] XFS (loop3): Mounting V5 Filesystem
[  178.073288][ T5490] overlayfs: failed to resolve './file0': -2
[  178.145505][ T5459] XFS (loop3): Ending clean mount
[  178.165641][ T5459] XFS (loop3): Quotacheck needed: Please wait.
[  178.236055][ T5507] loop2: detected capacity change from 0 to 256
[  178.264384][ T5507] exfat: Bad value for 'uid'
[  178.470035][ T5459] XFS (loop3): Quotacheck: Done.
[  178.997507][ T4165] XFS (loop3): Unmounting Filesystem
[  179.511797][ T5533] loop1: detected capacity change from 0 to 512
[  179.576693][ T5533] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  180.196843][ T5533] EXT4-fs (loop1): 1 truncate cleaned up
[  180.238388][ T5533] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[  180.978389][    T7] Bluetooth: hci1: command 0x0406 tx timeout
[  181.205775][    T7] Bluetooth: hci3: command 0x0406 tx timeout
[  182.254173][ T5570] loop5: detected capacity change from 0 to 256
[  182.524905][ T5570] exfat: Bad value for 'uid'
[  185.050920][ T5613] loop2: detected capacity change from 0 to 32768
[  185.153219][ T5613] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.332 (5613)
[  185.246298][ T5613] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  185.255095][ T5613] BTRFS info (device loop2): enabling auto defrag
[  185.261610][ T5613] BTRFS info (device loop2): use zlib compression, level 3
[  185.268977][ T5613] BTRFS info (device loop2): max_inline at 0
[  185.275144][ T5613] BTRFS info (device loop2): force clearing of disk cache
[  185.282961][ T5613] BTRFS info (device loop2): turning on sync discard
[  185.289742][ T5613] BTRFS info (device loop2): disabling free space tree
[  185.296671][ T5613] BTRFS info (device loop2): has skinny extents
[  185.555835][ T5613] BTRFS info (device loop2): enabling ssd optimizations
[  185.565624][ T5613] BTRFS info (device loop2): clearing free space tree
[  185.572470][ T5613] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  185.582222][ T5613] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  186.003626][ T5620] loop3: detected capacity change from 0 to 32768
[  186.144486][ T5620] XFS: noikeep mount option is deprecated.
[  186.383330][ T5620] XFS (loop3): Mounting V5 Filesystem
[  187.554136][ T5620] XFS (loop3): Ending clean mount
[  187.606164][ T5620] XFS (loop3): Quotacheck needed: Please wait.
[  187.804764][ T5620] XFS (loop3): Quotacheck: Done.
[  188.556390][ T4165] XFS (loop3): Unmounting Filesystem
[  189.437210][ T5703] loop3: detected capacity change from 0 to 256
[  189.484534][ T5703] exfat: Bad value for 'uid'
[  191.720905][ T5725] netlink: 'syz.3.351': attribute type 1 has an invalid length.
[  194.146013][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.162425][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  195.204708][ T5768] netlink: 'syz.5.363': attribute type 1 has an invalid length.
[  197.162117][ T5791] loop2: detected capacity change from 0 to 512
[  197.998724][ T5791] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  198.166746][ T5791] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noblock_validity,mblk_io_submit,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  198.185622][ T5791] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.213851][ T5790] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback.
[  198.853388][    T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  199.739950][    T7] usb 4-1: too many configurations: 55, using maximum allowed: 8
[  200.883882][    T7] usb 4-1: unable to read config index 0 descriptor/start: -61
[  200.891535][    T7] usb 4-1: can't read configurations, error -61
[  201.093882][    T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  201.558795][ T5839] netlink: 'syz.3.377': attribute type 1 has an invalid length.
[  203.598559][ T5862] loop5: detected capacity change from 0 to 128
[  204.286700][ T5862] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  204.472789][ T5862] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  208.269048][ T5912] netlink: 'syz.2.390': attribute type 1 has an invalid length.
[  209.501070][ T5926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'.
[  210.560550][ T5949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.401'.
[  210.587721][ T5949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.401'.
[  210.597992][ T5947] netlink: 60 bytes leftover after parsing attributes in process `syz.0.401'.
[  210.609109][ T5949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.401'.
[  210.794516][ T5956] snd_dummy snd_dummy.0: control 0:65279:65279:syz0:0 is already present
[  211.646844][ T5972] loop3: detected capacity change from 0 to 512
[  212.107828][ T5972] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  212.124031][ T5972] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.243831][   T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  214.584335][   T13] usb 3-1: device descriptor read/64, error -71
[  215.043858][   T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  215.393915][   T13] usb 3-1: device descriptor read/64, error -71
[  215.524064][   T13] usb usb3-port1: attempt power cycle
[  215.808874][ T6026] loop1: detected capacity change from 0 to 40427
[  215.858288][ T6026] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  215.866121][ T6026] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  215.892477][ T6026] F2FS-fs (loop1): invalid crc value
[  215.967892][ T6026] F2FS-fs (loop1): Found nat_bits in checkpoint
[  216.029711][ T6026] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  216.037086][ T6026] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  216.152483][ T6016] loop3: detected capacity change from 0 to 32768
[  216.495852][ T6050] netlink: 'syz.5.416': attribute type 1 has an invalid length.
[  216.638110][ T6049] attempt to access beyond end of device
[  216.638110][ T6049] loop1: rw=2049, want=78344, limit=40427
[  218.517620][ T6016] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  218.533896][ T6016] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  218.894470][ T6016] BTRFS info (device loop3): use zstd compression, level 3
[  218.974895][ T6016] BTRFS info (device loop3): using free space tree
[  219.040701][ T6016] BTRFS info (device loop3): has skinny extents
[  219.912231][ T4297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4297)
[  219.925299][ T6016] BTRFS error (device loop3): open_ctree failed
[  221.456407][ T6125] netlink: 'syz.5.430': attribute type 1 has an invalid length.
[  222.187695][ T6131] loop1: detected capacity change from 0 to 512
[  222.936163][ T6131] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  223.027584][ T6131] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.238143][ T6131] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback.
[  223.254741][ T6158] loop3: detected capacity change from 0 to 1024
[  223.284642][ T6158] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  223.399603][ T6158] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback.
[  225.489130][ T6184] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  226.326466][ T6187] loop5: detected capacity change from 0 to 256
[  226.811501][ T6190] netlink: 'syz.3.444': attribute type 1 has an invalid length.
[  228.727162][ T6207] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  229.391430][ T6215] netlink: 'syz.2.450': attribute type 1 has an invalid length.
[  229.441641][ T6215] netlink: 'syz.2.450': attribute type 2 has an invalid length.
[  229.534344][ T6215] netlink: 7 bytes leftover after parsing attributes in process `syz.2.450'.
[  230.879366][ T6238] netlink: 'syz.1.455': attribute type 1 has an invalid length.
[  232.512997][ T6255] loop1: detected capacity change from 0 to 4096
[  233.452991][ T6255] NILFS (loop1): invalid segment: Checksum error in segment payload
[  233.467519][ T6255] NILFS (loop1): trying rollback from an earlier position
[  233.500283][ T6255] NILFS (loop1): recovery complete
[  233.596107][ T6269] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  236.270105][ T6294] netlink: 'syz.2.469': attribute type 1 has an invalid length.
[  237.760991][ T6307] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  237.782241][ T6288] loop5: detected capacity change from 0 to 32768
[  237.887163][ T6288] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  237.913483][ T6288] BTRFS info (device loop5): metadata ratio 2
[  237.944920][ T6288] BTRFS info (device loop5): force zlib compression, level 3
[  237.985221][ T6288] BTRFS info (device loop5): use zlib compression, level 3
[  237.992649][ T6288] BTRFS info (device loop5): enabling auto defrag
[  238.033845][ T6288] BTRFS info (device loop5): max_inline at 0
[  238.039882][ T6288] BTRFS info (device loop5): using free space tree
[  238.074895][ T6288] BTRFS info (device loop5): has skinny extents
[  238.157393][ T6291] loop3: detected capacity change from 0 to 40427
[  238.238687][ T6291] F2FS-fs (loop3): invalid crc value
[  238.277445][ T6288] BTRFS info (device loop5): enabling ssd optimizations
[  238.309582][ T6291] F2FS-fs (loop3): Found nat_bits in checkpoint
[  238.461741][ T6291] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  238.664246][ T6302] loop2: detected capacity change from 0 to 40427
[  238.803261][ T6302] F2FS-fs (loop2): invalid crc value
[  238.855595][ T4165] attempt to access beyond end of device
[  238.855595][ T4165] loop3: rw=2049, want=45112, limit=40427
[  238.871485][ T6302] F2FS-fs (loop2): Found nat_bits in checkpoint
[  239.105397][ T6302] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  239.805820][ T4167] attempt to access beyond end of device
[  239.805820][ T4167] loop2: rw=2049, want=45104, limit=40427
[  240.311473][ T6353] netlink: 'syz.1.484': attribute type 1 has an invalid length.
[  241.301976][ T6349] loop5: detected capacity change from 0 to 32768
[  241.373572][ T6349] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.480 (6349)
[  241.450065][ T6349] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  241.484148][ T6349] BTRFS info (device loop5): use zlib compression, level 3
[  241.491489][ T6349] BTRFS info (device loop5): using free space tree
[  241.549428][ T6349] BTRFS info (device loop5): has skinny extents
[  244.089422][ T6385] loop2: detected capacity change from 0 to 1024
[  245.355673][ T6349] BTRFS error (device loop5): open_ctree failed
[  249.133903][ T6423] netlink: 'syz.2.496': attribute type 1 has an invalid length.
[  249.760723][ T6429] loop5: detected capacity change from 0 to 4096
[  250.063342][   T26] audit: type=1804 audit(1733956087.145:2): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.500" name=2F6E6577726F6F742F32382F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop5" ino=33 res=1 errno=0
[  250.069130][ T6429] Process accounting resumed
[  250.913918][   T26] audit: type=1804 audit(1733956087.375:3): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.500" name=2F6E6577726F6F742F32382F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop5" ino=33 res=1 errno=0
[  251.002566][ T6441] loop3: detected capacity change from 0 to 256
[  251.116041][ T6430] loop1: detected capacity change from 0 to 32768
[  251.222657][ T6430] JBD2: Ignoring recovery information on journal
[  251.415270][ T6441] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xc0f18ca5, utbl_chksum : 0xe619d30d)
[  251.481418][ T6430] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  251.602612][ T6455] loop2: detected capacity change from 0 to 512
[  251.818532][ T6455] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  251.865456][ T6455] EXT4-fs (loop2): invalid journal inode
[  251.895012][ T6455] EXT4-fs (loop2): can't get journal size
[  252.404977][ T6455] EXT4-fs (loop2): 1 truncate cleaned up
[  252.410864][ T6455] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  252.831822][ T6472] loop3: detected capacity change from 0 to 2048
[  253.248028][ T4168] ocfs2: Unmounting device (7,1) on (node local)
[  254.280829][ T6484] netlink: 'syz.1.510': attribute type 1 has an invalid length.
[  255.556742][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.563443][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  255.741284][ T6500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.520'.
[  255.811969][ T6480] loop2: detected capacity change from 0 to 32768
[  255.874522][ T6480] XFS: ikeep mount option is deprecated.
[  255.961225][ T6505] loop0: detected capacity change from 0 to 1024
[  256.001638][ T6480] XFS (loop2): Mounting V5 Filesystem
[  256.588565][ T6480] XFS (loop2): Ending clean mount
[  256.964802][ T4294] hfsplus: b-tree write err: -5, ino 4
[  257.103741][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'.
[  257.206835][    C1] vxcan0: j1939_xtp_rx_dpo: no connection found
[  257.213227][    C1] vxcan0: j1939_xtp_rx_dpo: no connection found
[  257.219875][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.226839][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.233553][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.240375][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.246994][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.253524][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.260150][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.266711][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.273418][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.279974][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.286602][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.293117][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.299724][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.306269][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.312958][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.319514][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.326653][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.333172][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.339782][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.346333][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.352931][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.359584][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.366199][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.372716][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.379341][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.385888][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.392465][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.399015][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.405628][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.412150][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.418863][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.425407][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.431981][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.438540][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.445145][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.451658][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.458275][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.464824][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.471406][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.478046][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.484651][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.491171][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.497807][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.504359][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.510937][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.517496][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.524205][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.530723][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.537358][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.543989][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.550571][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.557119][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.563856][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.570399][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.577044][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.583693][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.590322][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.596938][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.603526][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.610070][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.616726][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.623266][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.631910][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.638473][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.645096][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.651611][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.658216][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.664759][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.671344][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.677890][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.684502][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.691015][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.697634][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.704176][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.710773][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.717444][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.724063][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.730666][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.737362][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.744076][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.750658][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.757201][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.763838][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.770353][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.777002][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.783615][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.790252][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.797031][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.803712][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.810243][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.816882][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.823405][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.830072][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.836713][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.843301][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  257.849855][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  257.856476][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  257.864424][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  257.872546][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  257.880501][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  257.889189][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  257.897130][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  257.905129][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  257.913032][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  257.921138][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  257.929080][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  257.937088][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  257.945107][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  257.953091][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  257.961052][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  257.969092][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  257.977038][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  257.985057][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  257.992962][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  258.000975][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  258.008907][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  258.016942][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  258.024892][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  258.032907][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  258.040852][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  258.048854][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  258.056791][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  258.064809][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  258.072714][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  258.080748][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  258.088689][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  258.489541][ T4167] XFS (loop2): Unmounting Filesystem
[  258.828190][ T6531] netlink: 'syz.1.525': attribute type 1 has an invalid length.
[  259.690459][ T6540] loop1: detected capacity change from 0 to 128
[  259.890869][ T6540] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  259.912149][ T6540] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.921381][ T6562] device bridge0 entered promiscuous mode
[  262.730838][ T6552] device bridge0 left promiscuous mode
[  262.939562][ T6561] loop1: detected capacity change from 0 to 1024
[  263.138040][ T6561] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  263.571358][ T6551] loop0: detected capacity change from 0 to 32768
[  263.928998][ T6551] XFS (loop0): Mounting V5 Filesystem
[  264.311185][ T6592] netlink: 'syz.5.540': attribute type 1 has an invalid length.
[  264.989502][ T6551] XFS (loop0): Ending clean mount
[  264.997685][ T6551] XFS (loop0): Quotacheck needed: Please wait.
[  265.980301][ T6600] loop5: detected capacity change from 0 to 64
[  266.502457][ T6551] XFS (loop0): Quotacheck: Done.
[  266.595140][ T4166] XFS (loop0): Unmounting Filesystem
[  266.933955][ T6610] snd_dummy snd_dummy.0: control 0:65279:65279:syz0:0 is already present
[  267.785386][ T6620] loop0: detected capacity change from 0 to 4096
[  267.846477][ T6620] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  267.932919][ T6620] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  267.968879][ T6620] ntfs3: loop0: Failed to load $Extend.
[  268.001170][ T6610] loop5: detected capacity change from 0 to 32768
[  269.783896][ T6610] XFS (loop5): Mounting V5 Filesystem
[  269.884310][ T6643] netlink: 'syz.2.552': attribute type 1 has an invalid length.
[  270.193135][ T6610] XFS (loop5): Ending clean mount
[  270.253148][ T6610] XFS (loop5): Quotacheck needed: Please wait.
[  270.268535][ T6648] loop1: detected capacity change from 0 to 256
[  270.314640][ T6648] exfat: Bad value for 'uid'
[  271.266554][ T6610] XFS (loop5): Quotacheck: Done.
[  271.958317][ T5125] XFS (loop5): Unmounting Filesystem
[  272.010215][ T6662] loop2: detected capacity change from 0 to 512
[  272.067815][ T6662] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  272.504553][ T6667] loop2: detected capacity change from 0 to 1024
[  273.442135][ T6675] loop2: detected capacity change from 0 to 256
[  276.324902][ T4438] Bluetooth: hci5: Frame reassembly failed (-84)
[  276.391361][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.399000][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.461440][ T6696] netlink: 'syz.2.565': attribute type 1 has an invalid length.
[  276.997082][ T6698] loop3: detected capacity change from 0 to 4096
[  277.061080][ T6700] snd_dummy snd_dummy.0: control 0:65279:65279:syz0:0 is already present
[  277.180090][ T6698] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  277.291292][ T6698] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  277.364905][ T6698] overlayfs: failed to resolve './bus': -2
[  277.437070][ T4315] ntfs3: loop3: ino=1b, Internal error
[  277.453978][ T4315] ntfs3: loop3: ntfs3_write_inode r=1b failed, -22.
[  279.248866][ T4374] Bluetooth: hci4: command 0x0406 tx timeout
[  279.348685][ T4374] Bluetooth: hci5: command 0x1003 tx timeout
[  279.454134][ T4170] Bluetooth: hci5: sending frame failed (-49)
[  279.528306][ T6700] loop2: detected capacity change from 0 to 32768
[  279.746995][ T6700] XFS (loop2): Mounting V5 Filesystem
[  281.204482][ T6700] XFS (loop2): Ending clean mount
[  281.240389][ T6700] XFS (loop2): Quotacheck needed: Please wait.
[  281.410128][ T6700] XFS (loop2): Quotacheck: Done.
[  281.454072][ T4167] XFS (loop2): Unmounting Filesystem
[  281.568990][ T4242] Bluetooth: hci5: command 0x1001 tx timeout
[  281.575937][ T4170] Bluetooth: hci5: sending frame failed (-49)
[  283.643135][    T7] Bluetooth: hci5: command 0x1009 tx timeout
[  283.661745][ T6745] loop3: detected capacity change from 0 to 4096
[  283.734321][ T6745] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  283.811680][ T6745] ntfs3: loop3: Failed to load $Extend.
[  283.863863][ T4242] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  284.162260][ T6760] loop3: detected capacity change from 0 to 64
[  284.220234][ T6760] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop3
[  284.267173][ T4242] usb 2-1: Using ep0 maxpacket: 32
[  284.384878][ T4242] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping
[  285.241657][ T4242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  285.253546][ T4242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  285.420970][ T6768] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  285.574599][ T4242] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  285.664468][ T4242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.758040][ T4242] usb 2-1: Product: syz
[  285.849021][ T4242] usb 2-1: Manufacturer: syz
[  286.843001][ T6779] tipc: Started in network mode
[  286.853440][ T6780] snd_dummy snd_dummy.0: control 0:65279:65279:syz0:0 is already present
[  286.890761][ T6779] tipc: Node identity , cluster identity 4711
[  286.923160][ T6779] tipc: Failed to obtain node identity
[  286.949428][ T6779] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  287.048300][ T4242] usb 2-1: SerialNumber: syz
[  287.116960][ T4242] usb 2-1: config 0 descriptor??
[  287.219323][ T4242] usb 2-1: can't set config #0, error -71
[  287.359473][ T6785] loop1: detected capacity change from 0 to 16
[  287.509039][ T6785] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004)
[  288.029440][ T4242] usb 2-1: USB disconnect, device number 2
[  292.278526][ T6806] loop3: detected capacity change from 0 to 2048
[  292.420124][ T6813] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  293.404976][ T6806] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  293.495603][ T6806] Remounting filesystem read-only
[  293.501430][ T6806] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  293.534106][ T6806] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  293.555395][ T6806] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  293.634541][ T6806] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  293.689864][ T6806] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  293.702110][ T6825] loop1: detected capacity change from 0 to 512
[  293.710943][   T26] audit: type=1800 audit(1733956130.795:4): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.596" name="file2" dev="loop3" ino=16 res=0 errno=0
[  294.297094][ T6825] loop1: detected capacity change from 0 to 512
[  294.635448][ T6825] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  294.705660][ T6825] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.737706][ T6806] syz.3.596 (6806) used greatest stack depth: 17760 bytes left
[  295.633856][ T6841] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.601: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  297.338595][ T6860] snd_dummy snd_dummy.0: control 0:65279:65279:syz0:0 is already present
[  298.850383][ T6860] loop5: detected capacity change from 0 to 32768
[  299.080703][ T6860] XFS (loop5): Mounting V5 Filesystem
[  299.305017][ T6860] XFS (loop5): Ending clean mount
[  299.353259][ T6860] XFS (loop5): Quotacheck needed: Please wait.
[  299.518295][ T6860] XFS (loop5): Quotacheck: Done.
[  299.608336][ T5125] XFS (loop5): Unmounting Filesystem
[  300.902770][ T6885] capability: warning: `syz.0.614' uses 32-bit capabilities (legacy support in use)
[  306.565822][   T26] audit: type=1326 audit(1733956143.655:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.3.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d6848f19 code=0x7fc00000
[  306.765420][   T26] audit: type=1326 audit(1733956143.745:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.3.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f31d6848f19 code=0x7fc00000
[  312.408766][ T6960] loop5: detected capacity change from 0 to 512
[  312.514533][ T6960] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  312.521911][ T6960] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  312.570046][ T6960] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  312.621923][ T6960] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  312.733964][ T6960] EXT4-fs (loop5): 1 truncate cleaned up
[  312.753784][ T6960] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  313.471110][ T6972] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: writeback.
[  317.873894][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.880232][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  319.351497][ T7008] loop5: detected capacity change from 0 to 512
[  319.550179][ T7008] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  319.704886][ T7008] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.651953][   T26] audit: type=1326 audit(1733956161.735:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa125a12f19 code=0x7ffc0000
[  324.707109][   T26] audit: type=1326 audit(1733956161.735:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa125a12f19 code=0x7ffc0000
[  324.775990][   T26] audit: type=1326 audit(1733956161.765:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa125a12f19 code=0x7ffc0000
[  324.884909][   T26] audit: type=1326 audit(1733956161.765:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa125a12f19 code=0x7ffc0000
[  324.952733][   T26] audit: type=1326 audit(1733956161.765:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa125a12f19 code=0x7ffc0000
[  334.608578][ T7146] loop1: detected capacity change from 0 to 8192
[  335.644882][ T7158] loop3: detected capacity change from 0 to 2048
[  335.903783][ T7158] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  336.951639][ T7158] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none.
[  340.866185][ T7204] loop3: detected capacity change from 0 to 256
[  340.904716][ T7204] exfat: Bad value for 'uid'
[  341.863026][ T7213] loop5: detected capacity change from 0 to 512
[  342.014024][ T7213] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  342.021485][ T7213] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  342.107438][ T7213] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  342.128697][ T7213] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  342.262627][ T7213] EXT4-fs (loop5): 1 truncate cleaned up
[  342.469197][ T7213] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  343.380408][ T7226] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: writeback.
[  347.142818][ T7251] loop3: detected capacity change from 0 to 16
[  347.278747][ T7251] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004)
[  349.430769][ T7245] loop1: detected capacity change from 0 to 32768
[  352.235125][ T7297] device ip6gretap0 entered promiscuous mode
[  352.295382][ T7297] device batadv_slave_0 entered promiscuous mode
[  353.723366][ T7310] loop0: detected capacity change from 0 to 128
[  354.013095][ T7317] loop0: detected capacity change from 0 to 64
[  358.281255][ T7357] overlayfs: failed to resolve './bus': -2
[  358.637749][ T7366] loop5: detected capacity change from 0 to 16
[  359.067190][ T7366] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004)
[  361.769302][ T7391] loop2: detected capacity change from 0 to 512
[  362.628102][ T7391] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  362.648170][ T7391] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  363.742753][ T7391] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  363.767041][ T7391] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  363.780088][ T7391] EXT4-fs (loop2): 1 truncate cleaned up
[  363.789338][ T7391] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  364.931409][ T7414] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback.
[  369.848869][ T1111] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  369.857402][ T1111] Bluetooth: hci1: Injecting HCI hardware error event
[  370.231518][ T4180] Bluetooth: hci1: hardware error 0x00
[  372.580151][ T7472] Zero length message leads to an empty skb
[  375.602520][ T7497] loop5: detected capacity change from 0 to 512
[  376.164516][ T7497] EXT4-fs (loop5): Ignoring removed bh option
[  377.136079][ T7497] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  377.204338][ T7497] EXT4-fs (loop5): Unrecognized mount option "=" or missing value
[  377.763944][ T7511] loop0: detected capacity change from 0 to 65536
[  378.436304][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.450014][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  378.753044][ T7511] XFS (loop0): Mounting V5 Filesystem
[  378.886593][ T7511] XFS (loop0): Ending clean mount
[  378.897048][ T7511] XFS (loop0): Quotacheck needed: Please wait.
[  379.074352][ T7511] XFS (loop0): Quotacheck: Done.
[  379.218408][ T4166] XFS (loop0): Unmounting Filesystem
[  383.313681][ T7569] loop1: detected capacity change from 0 to 16
[  384.354528][ T7569] erofs: Unknown parameter '@'
[  384.433389][ T7575] loop2: detected capacity change from 0 to 512
[  384.489350][ T7575] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  384.592757][ T7575] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  384.679589][ T7575] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  384.723759][ T6096] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  384.723963][ T7575] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  384.834783][ T7575] EXT4-fs (loop2): 1 truncate cleaned up
[  384.868539][ T7575] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  387.241244][ T7591] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback.
[  387.263756][ T6096] usb 1-1: Using ep0 maxpacket: 8
[  387.383816][ T6096] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  387.423540][ T6096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.706591][ T6096] usb 1-1: config 0 descriptor??
[  388.813344][ T6096] usb 1-1: can't set config #0, error -71
[  388.822518][ T6096] usb 1-1: USB disconnect, device number 2
[  388.949432][ T7613] loop0: detected capacity change from 0 to 512
[  389.497399][ T7613] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  389.843849][ T7613] ext4 filesystem being mounted at /158/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  390.911842][ T7611] loop1: detected capacity change from 0 to 32768
[  391.094163][ T7611] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  391.628978][ T4168] ocfs2: Unmounting device (7,1) on (node local)
[  392.370178][ T7651] loop1: detected capacity change from 0 to 512
[  392.596981][ T7651] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  392.663549][ T7651] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  392.719405][ T7651] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  392.759625][ T7651] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  392.809224][ T7651] EXT4-fs (loop1): 1 truncate cleaned up
[  392.828566][ T7651] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  393.356017][ T7657] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback.
[  393.881925][ T7658] tipc: Failed to remove unknown binding: 66,1,1/0:1047024487/1047024489
[  396.912057][ T7682] overlayfs: failed to resolve './file0': -2
[  400.432425][ T7724] loop1: detected capacity change from 0 to 164
[  401.269785][ T7724] attempt to access beyond end of device
[  401.269785][ T7724] loop1: rw=524288, want=263332, limit=164
[  401.336243][ T7724] attempt to access beyond end of device
[  401.336243][ T7724] loop1: rw=0, want=263332, limit=164
[  401.352399][   T26] audit: type=1800 audit(1733956238.435:12): pid=7724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.841" name="file0" dev="loop1" ino=1862 res=0 errno=0
[  403.981299][ T7749] loop5: detected capacity change from 0 to 16
[  405.414348][ T7749] erofs: Unknown parameter '@'
[  408.467552][ T7777] loop0: detected capacity change from 0 to 256
[  408.756859][ T7777] exfat: Bad value for 'uid'
[  411.542077][ T7803] loop1: detected capacity change from 0 to 16
[  412.864282][ T7803] erofs: Unknown parameter '@'
[  418.338639][ T7848] loop3: detected capacity change from 0 to 512
[  418.448287][ T7848] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  418.474422][ T7848] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  419.749742][ T7848] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  419.774646][ T7848] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  419.809029][ T7848] EXT4-fs (loop3): 1 truncate cleaned up
[  419.816633][ T7848] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  420.370359][ T7875] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback.
[  422.107475][ T7894] capability: warning: `syz.1.888' uses deprecated v2 capabilities in a way that may be insecure
[  422.263685][ T4251] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  422.583983][ T4251] usb 3-1: Using ep0 maxpacket: 32
[  423.217963][ T7903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'.
[  424.483653][ T7915] tmpfs: Unknown parameter 'usrquota'
[  424.574196][ T4251] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  425.410081][ T4251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.469032][ T4251] usb 3-1: config 0 descriptor??
[  425.529178][ T7923] device pim6reg1 entered promiscuous mode
[  426.330024][ T4251] usb 3-1: can't set config #0, error -71
[  426.433272][ T4251] usb 3-1: USB disconnect, device number 5
[  427.514400][ T7946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.901'.
[  428.086255][ T7954] loop0: detected capacity change from 0 to 128
[  428.700114][ T4213] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  429.326732][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.906'.
[  429.782553][ T7968] loop2: detected capacity change from 0 to 64
[  429.913728][   T26] audit: type=1800 audit(1733956266.995:13): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.907" name="bus" dev="loop2" ino=21 res=0 errno=0
[  430.067607][ T7970] input: syz1 as /devices/virtual/input/input5
[  430.132072][ T4213] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  430.162956][ T4213] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  430.219483][ T4213] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  430.270786][ T4213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.336807][ T7958] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  430.945430][ T7975] loop2: detected capacity change from 0 to 32768
[  431.050083][ T7975] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  431.306753][ T7989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.914'.
[  432.111175][ T7978] loop5: detected capacity change from 0 to 32768
[  432.352330][ T4213] usb 4-1: USB disconnect, device number 4
[  432.651348][ T7978] XFS (loop5): Mounting V5 Filesystem
[  432.689473][ T8002] loop1: detected capacity change from 0 to 4096
[  432.745825][ T4167] ocfs2: Unmounting device (7,2) on (node local)
[  432.907767][ T7978] XFS (loop5): Ending clean mount
[  433.283411][ T5125] XFS (loop5): Unmounting Filesystem
[  434.274676][   T26] audit: type=1326 audit(1733956271.355:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d6848f19 code=0x7ffc0000
[  434.402676][   T26] audit: type=1326 audit(1733956271.415:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f31d6848f19 code=0x7ffc0000
[  434.541738][   T26] audit: type=1326 audit(1733956271.415:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d6848f19 code=0x7ffc0000
[  434.626477][   T26] audit: type=1326 audit(1733956271.715:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d6848f19 code=0x7ffc0000
[  434.713382][   T26] audit: type=1326 audit(1733956271.715:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d6848f19 code=0x7ffc0000
[  434.776626][   T26] audit: type=1326 audit(1733956271.765:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f31d6848f19 code=0x7ffc0000
[  434.855833][   T26] audit: type=1326 audit(1733956271.765:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d6848f19 code=0x7ffc0000
[  434.889136][ T8033] netlink: 'syz.0.926': attribute type 1 has an invalid length.
[  434.896927][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'.
[  435.536517][   T26] audit: type=1326 audit(1733956271.765:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f31d6848f19 code=0x7ffc0000
[  435.616797][   T26] audit: type=1326 audit(1733956271.765:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d6848f19 code=0x7ffc0000
[  435.641545][   T26] audit: type=1326 audit(1733956271.795:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d6848f19 code=0x7ffc0000
[  435.753460][ T8040] loop0: detected capacity change from 0 to 2048
[  435.763284][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'.
[  435.838160][ T8040]  loop0: p4 < >
[  436.951482][ T4157] udevd[4157]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  437.809601][ T8062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.934'.
[  438.099765][ T8038] loop3: detected capacity change from 0 to 32768
[  438.538176][ T8038] (syz.3.928,8038,1):ocfs2_initialize_super:2310 ERROR: status = -12
[  438.628788][ T8038] (syz.3.928,8038,1):ocfs2_fill_super:1177 ERROR: status = -12
[  439.298145][ T8077] netlink: 'syz.0.939': attribute type 1 has an invalid length.
[  439.306150][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'.
[  439.882677][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  439.889113][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  440.349730][ T8073] loop5: detected capacity change from 0 to 32768
[  440.964660][ T8073] XFS (loop5): Mounting V5 Filesystem
[  441.339559][ T8073] XFS (loop5): Ending clean mount
[  441.378299][ T8073] XFS (loop5): Quotacheck needed: Please wait.
[  441.843264][ T8073] XFS (loop5): Quotacheck: Done.
[  441.897781][ T5125] XFS (loop5): Unmounting Filesystem
[  444.087087][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.5.948'.
[  445.013031][ T8131] loop5: detected capacity change from 0 to 16
[  446.383930][ T8138] loop2: detected capacity change from 0 to 2048
[  446.411056][ T8131] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004)
[  447.851941][ T8138] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  450.027565][ T8163] loop2: detected capacity change from 0 to 256
[  450.034801][ T8163] exfat: Bad value for 'uid'
[  450.270299][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  450.755509][ T8172] syz.3.965 sent an empty control message without MSG_MORE.
[  450.919591][ T8173] overlayfs: './file0' not a directory
[  453.071695][ T8181] loop3: detected capacity change from 0 to 512
[  453.234435][ T8181] EXT4-fs (loop3): Ignoring removed oldalloc option
[  453.293724][ T8181] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  453.371695][ T8181] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  454.836061][ T8181] EXT4-fs (loop3): 1 truncate cleaned up
[  454.844143][ T8181] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,usrjquota=,,errors=continue. Quota mode: writeback.
[  456.110494][ T8202] loop3: detected capacity change from 0 to 1024
[  456.918643][ T8202] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,noauto_da_alloc,debug_want_extra_isize=0x000000000000007c,nouid32,resgid=0x0000000000000000,grpquota,sysvgroups,,errors=continue. Quota mode: writeback.
[  457.937040][ T8217] loop5: detected capacity change from 0 to 512
[  458.421331][ T8217] loop5: detected capacity change from 0 to 512
[  458.541982][ T8217] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  458.554315][ T8217] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  459.773439][ T8239] overlayfs: './file0' not a directory
[  459.784246][ T8238] loop3: detected capacity change from 0 to 4096
[  459.935956][ T8246] netlink: 'syz.0.984': attribute type 5 has an invalid length.
[  465.831014][ T8270] loop5: detected capacity change from 0 to 512
[  467.493941][ T8295] loop3: detected capacity change from 0 to 256
[  467.524419][ T8295] exfat: Bad value for 'uid'
[  467.697674][ T8292] overlayfs: './file0' not a directory
[  467.958015][   T26] audit: type=1326 audit(1733956305.045:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe793c56f19 code=0x7ffc0000
[  467.980419][    C0] vkms_vblank_simulate: vblank timer overrun
[  468.049303][   T26] audit: type=1326 audit(1733956305.095:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe793c56f19 code=0x7ffc0000
[  468.149654][   T26] audit: type=1326 audit(1733956305.095:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe793c56f19 code=0x7ffc0000
[  468.212690][   T26] audit: type=1326 audit(1733956305.095:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe793c56f19 code=0x7ffc0000
[  468.335356][   T26] audit: type=1326 audit(1733956305.095:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe793c56f19 code=0x7ffc0000
[  470.059602][ T8325] loop2: detected capacity change from 0 to 512
[  470.282831][ T8303] loop5: detected capacity change from 0 to 32768
[  470.361300][ T8325] loop2: detected capacity change from 0 to 512
[  470.744952][ T8303] (syz.5.999,8303,1):ocfs2_initialize_super:2310 ERROR: status = -12
[  470.776583][ T8303] (syz.5.999,8303,1):ocfs2_fill_super:1177 ERROR: status = -12
[  471.313698][ T4242] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  471.355273][ T8325] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  471.371883][ T8325] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.444331][ T4242] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  472.488085][ T4242] usb 4-1: config 246 descriptor has 1 excess byte, ignoring
[  472.506149][ T4242] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42
[  472.512665][ T8348] loop2: detected capacity change from 0 to 256
[  472.522460][ T4242] usb 4-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping
[  472.533734][ T4242] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  472.555900][ T4242] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  472.600868][ T8348] exfat: Bad value for 'uid'
[  472.684045][ T4242] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  472.705971][ T4242] usb 4-1: config 246 descriptor has 1 excess byte, ignoring
[  472.730063][ T4242] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42
[  472.749920][ T4242] usb 4-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping
[  472.860609][ T4242] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  472.918532][ T4242] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  473.104098][ T4242] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  473.130958][ T4242] usb 4-1: config 246 descriptor has 1 excess byte, ignoring
[  473.258316][ T4242] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42
[  473.275024][ T4242] usb 4-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping
[  473.286167][ T4242] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  473.297777][ T4242] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  474.333742][ T4242] usb 4-1: string descriptor 0 read error: -71
[  474.340035][ T4242] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  475.765182][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.803951][ T4242] usb 4-1: can't set config #246, error -71
[  475.857127][ T4242] usb 4-1: USB disconnect, device number 5
[  476.515878][ T8385] device wireguard0 entered promiscuous mode
[  476.903316][ T8390] xt_time: invalid argument - start or stop time greater than 23:59:59
[  477.408017][ T8379] loop2: detected capacity change from 0 to 32768
[  477.466725][ T8379] (syz.2.1024,8379,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "int+§Šer_resv_level=00000000000000000000" or missing value
[  477.484784][ T8379] (syz.2.1024,8379,0):ocfs2_fill_super:1177 ERROR: status = -22
[  478.446372][ T8405] loop1: detected capacity change from 0 to 256
[  478.598289][ T8405] exfat: Bad value for 'uid'
[  481.043259][ T8430] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  481.050450][ T8430] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  481.152764][ T8437] bridge0: port 3(vlan2) entered blocking state
[  481.180300][ T8431] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6)
[  481.186863][ T8431] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  481.200934][ T8437] bridge0: port 3(vlan2) entered disabled state
[  481.252600][ T8430] vhci_hcd vhci_hcd.0: Device attached
[  481.291915][ T8431] vhci_hcd vhci_hcd.0: Device attached
[  481.310573][ T8433] vhci_hcd: connection closed
[  481.311383][ T8432] vhci_hcd: connection closed
[  481.328254][  T161] vhci_hcd: stop threads
[  481.345403][  T161] vhci_hcd: release socket
[  481.369832][  T161] vhci_hcd: disconnect device
[  481.381910][  T161] vhci_hcd: stop threads
[  481.391761][  T161] vhci_hcd: release socket
[  481.429943][  T161] vhci_hcd: disconnect device
[  481.453958][ T1108] vhci_hcd: vhci_device speed not set
[  486.590185][ T8487] loop5: detected capacity change from 0 to 4096
[  486.702220][ T8490] loop2: detected capacity change from 0 to 7
[  486.718650][ T4167] Dev loop2: unable to read RDB block 7
[  486.740579][ T4167]  loop2: AHDI p1 p2
[  486.745639][ T4167] loop2: partition table partially beyond EOD, truncated
[  486.771378][ T4167] loop2: p1 start 1852863860 is beyond EOD, truncated
[  486.806882][ T8490] Dev loop2: unable to read RDB block 7
[  486.812504][ T8490]  loop2: AHDI p1 p2
[  486.840750][ T8490] loop2: partition table partially beyond EOD, truncated
[  486.874636][ T8490] loop2: p1 start 1852863860 is beyond EOD, truncated
[  486.903191][ T5125] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  486.916472][ T5125] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  487.107172][ T8503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1059'.
[  487.139103][ T8503] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  487.147236][ T8503] IPv6: NLM_F_CREATE should be set when creating new route
[  487.154585][ T8503] IPv6: NLM_F_CREATE should be set when creating new route
[  487.334661][ T8503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1059'.
[  488.041072][ T8510] bridge0: port 3(syz_tun) entered blocking state
[  488.047619][ T8510] bridge0: port 3(syz_tun) entered disabled state
[  488.055777][ T8510] device syz_tun entered promiscuous mode
[  488.062996][ T8510] bridge0: port 3(syz_tun) entered blocking state
[  488.069542][ T8510] bridge0: port 3(syz_tun) entered forwarding state
[  490.888640][ T8532] loop3: detected capacity change from 0 to 2048
[  490.909862][   T26] audit: type=1107 audit(1733956327.995:29): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  490.959715][ T8532] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  491.021367][ T8438] udevd[8438]: incorrect nilfs2 checksum on /dev/loop3
[  491.049697][ T8544] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  492.288297][ T8531] loop1: detected capacity change from 0 to 32768
[  492.829741][ T8531] (syz.1.1065,8531,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "int+§Šer_resv_level=00000000000000000000" or missing value
[  492.994789][ T8531] (syz.1.1065,8531,0):ocfs2_fill_super:1177 ERROR: status = -22
[  495.659949][ T8582] usb usb4: usbfs: process 8582 (syz.5.1081) did not claim interface 0 before use
[  496.348797][ T8590] loop5: detected capacity change from 0 to 512
[  499.694889][ T8590] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  499.752396][ T8590] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  499.931404][ T8590] EXT4-fs: failed to create workqueue
[  499.937110][ T8590] EXT4-fs (loop5): mount failed
[  501.334411][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.340837][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  501.836336][ T8631] loop1: detected capacity change from 0 to 256
[  501.937150][ T8631] exfat: Bad value for 'uid'
[  504.554606][ T8628] loop2: detected capacity change from 0 to 32768
[  512.944005][ T8717] loop5: detected capacity change from 0 to 16
[  513.887936][ T8717] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004)
[  517.634318][ T4242] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  518.003672][ T4242] usb 3-1: Using ep0 maxpacket: 32
[  518.123991][ T4242] usb 3-1: config 0 has no interfaces?
[  518.163439][ T4242] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  518.202817][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.057596][ T4242] usb 3-1: config 0 descriptor??
[  520.314445][ T8759] loop5: detected capacity change from 0 to 32768
[  520.345724][ T4213] usb 3-1: USB disconnect, device number 6
[  520.417398][ T8759] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1133 (8759)
[  520.622736][ T8759] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  520.817078][ T8776] loop2: detected capacity change from 0 to 16
[  520.843267][ T8759] BTRFS info (device loop5): using free space tree
[  521.659551][ T8759] BTRFS info (device loop5): has skinny extents
[  521.789451][ T8776] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004)
[  522.740467][ T8767] loop1: detected capacity change from 0 to 32768
[  523.534355][ T8759] BTRFS error (device loop5): open_ctree failed
[  525.177173][ T8809] loop2: detected capacity change from 0 to 4096
[  525.208721][ T8823] loop1: detected capacity change from 0 to 512
[  525.286061][ T8827] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  525.363801][ T8809] NILFS error (device loop2): nilfs_readdir: zero-length directory entry
[  525.398768][ T8809] Remounting filesystem read-only
[  525.543487][ T8823] loop1: detected capacity change from 0 to 512
[  526.038951][ T8823] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  526.362500][ T8823] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  528.727229][ T8840] xt_TPROXY: Can be used only with -p tcp or -p udp
[  529.054598][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1156'.
[  531.037189][ T8884] program syz.0.1163 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  532.077662][ T8805] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  532.602166][ T8898] loop1: detected capacity change from 0 to 512
[  532.868985][ T8900] loop3: detected capacity change from 0 to 4096
[  532.883673][ T8805] usb 6-1: Using ep0 maxpacket: 32
[  533.011557][ T8805] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  534.616492][ T8805] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  535.294417][ T8900] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  535.550910][ T8805] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  535.597459][ T8805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.787551][ T8900] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  535.821148][ T8805] usb 6-1: can't set config #1, error -71
[  535.885305][ T8805] usb 6-1: USB disconnect, device number 2
[  535.940836][ T8919] loop5: detected capacity change from 0 to 512
[  538.238279][ T8923] loop2: detected capacity change from 0 to 32768
[  538.394933][ T4165] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  538.440249][ T8923] read_mapping_page failed!
[  539.266648][ T8923] jfs_mount: diMount(ipaimap) failed w/rc = -5
[  539.273089][ T8923] Mount JFS Failure: -5
[  539.277288][ T8923] jfs_mount failed w/return code = -5
[  541.654828][ T8949] loop1: detected capacity change from 0 to 16
[  541.728259][ T8949] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004)
[  542.709289][ T8955] delete_channel: no stack
[  546.286326][ T8990] loop2: detected capacity change from 0 to 32768
[  546.733570][ T8990] XFS (loop2): Mounting V5 Filesystem
[  546.827325][ T8801] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  547.171480][ T8990] XFS (loop2): Ending clean mount
[  547.293641][ T8801] usb 6-1: Using ep0 maxpacket: 8
[  547.449998][ T8801] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  547.458488][ T4167] XFS (loop2): Unmounting Filesystem
[  547.464045][ T8801] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  547.464124][ T8801] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  547.464153][ T8801] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  547.464180][ T8801] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  547.464222][ T8801] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  547.615337][ T8801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.672539][ T8801] usb 6-1: can't set config #16, error -71
[  547.690642][ T8801] usb 6-1: USB disconnect, device number 3
[  548.210825][ T9006] loop3: detected capacity change from 0 to 32768
[  548.324233][ T9006] (syz.3.1198,9006,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "int+§Šer_resv_level=00000000000000000000" or missing value
[  548.391344][ T9012] loop5: detected capacity change from 0 to 32768
[  548.402362][ T9006] (syz.3.1198,9006,1):ocfs2_fill_super:1177 ERROR: status = -22
[  548.527462][ T9012] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1203 (9012)
[  548.757987][ T9012] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  548.773976][ T9012] BTRFS info (device loop5): setting nodatacow, compression disabled
[  548.807168][ T9012] BTRFS info (device loop5): setting datacow
[  548.813325][ T9012] BTRFS info (device loop5): doing ref verification
[  549.256312][ T9012] BTRFS info (device loop5): force clearing of disk cache
[  549.333757][ T9012] BTRFS info (device loop5): turning off barriers
[  549.531469][ T9012] BTRFS info (device loop5): enabling ssd optimizations
[  549.553687][ T9012] BTRFS info (device loop5): using spread ssd allocation scheme
[  549.561396][ T9012] BTRFS info (device loop5): using free space tree
[  549.654747][ T9012] BTRFS info (device loop5): has skinny extents
[  552.984833][ T9012] BTRFS error (device loop5): open_ctree failed
[  555.419324][ T9087] loop2: detected capacity change from 0 to 32768
[  555.602974][ T9087] (syz.2.1217,9087,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "int+§Šer_resv_level=00000000000000000000" or missing value
[  556.583856][ T9087] (syz.2.1217,9087,1):ocfs2_fill_super:1177 ERROR: status = -22
[  557.842674][ T9114] loop1: detected capacity change from 0 to 512
[  558.493428][ T9114] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  558.786533][ T9114] EXT4-fs (loop1): invalid journal inode
[  558.792494][ T9114] EXT4-fs (loop1): can't get journal size
[  559.524729][ T9114] EXT4-fs (loop1): 1 truncate cleaned up
[  559.533724][ T9114] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  562.789982][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  562.797355][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  563.306978][ T9167] loop2: detected capacity change from 0 to 16
[  563.421264][ T8805] Bluetooth: hci5: command 0x1003 tx timeout
[  563.528933][ T4170] Bluetooth: hci5: sending frame failed (-49)
[  563.558792][ T9167] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004)
[  565.142986][ T9166] loop1: detected capacity change from 0 to 32768
[  565.153649][ T8801] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  565.214873][ T9166] (syz.1.1240,9166,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "int+§Šer_resv_level=00000000000000000000" or missing value
[  565.259690][ T9166] (syz.1.1240,9166,1):ocfs2_fill_super:1177 ERROR: status = -22
[  565.494034][ T4375] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  565.514903][ T8801] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  565.526468][ T8801] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  565.546902][ T8801] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  565.570815][ T8801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.608969][ T8805] Bluetooth: hci5: command 0x1001 tx timeout
[  565.619342][ T4170] Bluetooth: hci5: sending frame failed (-49)
[  565.626094][ T9173] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  565.874043][ T4375] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  566.028532][   T26] audit: type=1326 audit(1733956659.112:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.2.1242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ab4b8cf19 code=0x0
[  566.085139][ T4375] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  566.102603][ T4375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.137500][ T4375] usb 1-1: Product: syz
[  566.151778][ T4375] usb 1-1: Manufacturer: syz
[  566.169232][ T4375] usb 1-1: SerialNumber: syz
[  566.298502][    T7] usb 3-1: USB disconnect, device number 7
[  566.595568][ T9187] crypto_alloc_aead failed rc=-2
[  567.011060][ T9200] loop1: detected capacity change from 0 to 512
[  567.099572][ T9200] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  567.172639][ T9200] EXT4-fs (loop1): 1 truncate cleaned up
[  567.184107][ T9200] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,grpjquota=,usrjquota=,noblock_validity,lazytime,quota,noauto_da_alloc,i_version,,errors=continue. Quota mode: writeback.
[  567.473626][ T9076] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  568.310929][ T4375] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  568.323823][ T4375] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  568.331247][ T4375] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  568.343723][ T9076] usb 6-1: Using ep0 maxpacket: 8
[  568.345086][ T8805] Bluetooth: hci5: command 0x1009 tx timeout
[  568.583973][ T4375] cdc_ncm 1-1:1.0: setting tx_max = 16384
[  568.613832][ T9076] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  568.614105][ T4375] cdc_ncm 1-1:1.0 eth5: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42
[  568.622129][ T9076] usb 6-1: config 179 has no interface number 0
[  568.976699][ T9076] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  569.146753][ T9076] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  569.340954][ T9214] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  569.361760][ T9076] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  569.419688][ T9076] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  569.484015][ T4375] usb 1-1: USB disconnect, device number 3
[  569.490638][ T4375] cdc_ncm 1-1:1.0 eth5: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM
[  569.643949][ T9076] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  569.657921][ T9076] usb 6-1: config 179 interface 65 has no altsetting 0
[  569.680323][ T9076] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  569.696626][ T9076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.605147][ T9076] usb 6-1: can't set config #179, error -71
[  570.625716][ T9076] usb 6-1: USB disconnect, device number 4
[  570.745349][ T9229] loop5: detected capacity change from 0 to 4096
[  570.956141][ T9229] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  571.333729][ T8804] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  572.308083][ T9241] loop3: detected capacity change from 0 to 512
[  572.323772][ T8804] usb 3-1: Using ep0 maxpacket: 16
[  572.413492][ T9241] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  572.421220][ T9241] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  572.493079][ T9241] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  572.511567][ T9241] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  572.514513][ T9231] loop1: detected capacity change from 0 to 32768
[  572.523785][ T9241] EXT4-fs (loop3): 1 truncate cleaned up
[  572.532925][ T9241] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  572.567787][ T9241] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback.
[  572.587033][ T9231] (syz.1.1256,9231,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "int+§Šer_resv_level=00000000000000000000" or missing value
[  572.613849][ T8804] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  572.638885][ T8804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.641460][ T9231] (syz.1.1256,9231,1):ocfs2_fill_super:1177 ERROR: status = -22
[  572.661611][ T8804] usb 3-1: Product: syz
[  572.666096][ T8804] usb 3-1: Manufacturer: syz
[  572.670955][ T8804] usb 3-1: SerialNumber: syz
[  572.689075][ T8804] r8152-cfgselector 3-1: config 0 descriptor??
[  572.739792][ T9252] loop3: detected capacity change from 0 to 128
[  572.756534][    T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  573.712148][ T9259] mkiss: ax0: crc mode is auto.
[  574.613747][ T8804] r8152-cfgselector 3-1: Unknown version 0x0000
[  574.746645][ T8804] r8152-cfgselector 3-1: bad CDC descriptors
[  574.808724][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  574.823802][ T8804] r8152-cfgselector 3-1: Unknown version 0x0000
[  574.830358][    T7] usb 1-1: config 0 interface 0 has no altsetting 0
[  574.857282][    T7] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  574.882191][ T8804] r8152-cfgselector 3-1: USB disconnect, device number 8
[  574.983010][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.143277][    T7] usb 1-1: config 0 descriptor??
[  576.183911][    T7] usb 1-1: can't set config #0, error -71
[  576.231655][    T7] usb 1-1: USB disconnect, device number 4
[  578.414039][ T9291] loop3: detected capacity change from 0 to 512
[  579.457560][ T9291] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  579.488286][ T9291] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  579.543637][ T4375] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  579.977762][ T9311] loop1: detected capacity change from 0 to 16
[  580.003958][ T4375] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  580.028891][ T9311] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004)
[  580.052364][ T4375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.290923][ T4375] usb 6-1: config 0 descriptor??
[  580.421190][ T4375] cp210x 6-1:0.0: cp210x converter detected
[  580.983696][ T4375] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  581.195354][ T4375] usb 6-1: cp210x converter now attached to ttyUSB0
[  581.332732][ T8801] usb 6-1: USB disconnect, device number 5
[  581.426378][ T8801] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  581.523346][ T8801] cp210x 6-1:0.0: device disconnected
[  582.796927][ T9337] loop5: detected capacity change from 0 to 16
[  583.998630][ T9346] loop3: detected capacity change from 0 to 512
[  584.133642][ T9337] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004)
[  584.146446][ T9346] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  584.247112][ T9346] EXT4-fs (loop3): 1 truncate cleaned up
[  584.247144][ T9346] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,grpjquota=,usrjquota=,noblock_validity,lazytime,quota,noauto_da_alloc,i_version,,errors=continue. Quota mode: writeback.
[  586.118574][ T9367] delete_channel: no stack
[  587.092930][ T9353] loop2: detected capacity change from 0 to 32768
[  587.328652][ T9353] (syz.2.1290,9353,1):ocfs2_initialize_super:2310 ERROR: status = -12
[  587.433580][ T9353] (syz.2.1290,9353,1):ocfs2_fill_super:1177 ERROR: status = -12
[  587.723438][ T9391] loop1: detected capacity change from 0 to 16
[  587.879173][ T9391] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004)
[  589.872791][ T9403] loop3: detected capacity change from 0 to 4096
[  589.969119][ T9403] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  591.204269][ T9412] delete_channel: no stack
[  592.734562][ T9437] device bond0 entered promiscuous mode
[  592.751404][ T9437] device bond_slave_0 entered promiscuous mode
[  592.804274][ T9437] device bond_slave_1 entered promiscuous mode
[  592.821990][ T9460] loop2: detected capacity change from 0 to 16
[  592.961920][ T9460] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004)
[  593.634247][ T9494] loop5: detected capacity change from 0 to 32768
[  593.778297][ T9494] (syz.5.1319,9494,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  593.815377][ T9494] (syz.5.1319,9494,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  594.684980][ T9494] JBD2: Ignoring recovery information on journal
[  594.977019][ T9494] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  596.135479][ T5125] ocfs2: Unmounting device (7,5) on (node local)
[  596.379334][ T9523] tmpfs: Unknown parameter 'grpquota_inode_hardlimit'
[  598.783155][ T9516] loop1: detected capacity change from 0 to 65536
[  598.972314][ T9539] loop5: detected capacity change from 0 to 40427
[  599.101670][ T9539] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  599.108281][ T9539] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  599.314569][ T9539] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  600.143875][ T1111] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  600.224516][ T9563] loop3: detected capacity change from 0 to 256
[  600.395009][ T9563] exfat: Bad value for 'uid'
[  603.490279][ T4180] Bluetooth: hci4: unexpected event for opcode 0x040d
[  603.657810][ T9597] loop2: detected capacity change from 0 to 512
[  603.845560][ T1111] usb 3-1: device not accepting address 9, error -71
[  603.852621][ T9597] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,barrier,,errors=continue. Quota mode: writeback.
[  603.873800][ T9597] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  603.914989][ T9597] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.1349: corrupted inode contents
[  603.931794][ T9597] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #2: comm syz.2.1349: mark_inode_dirty error
[  604.052357][ T9597] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.1349: corrupted inode contents
[  604.275812][ T9597] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.1349: mark_inode_dirty error
[  605.007955][ T9619] loop3: detected capacity change from 0 to 40427
[  605.098538][ T9619] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  605.105037][ T9619] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  605.131978][ T9627] netlink: 'syz.1.1359': attribute type 10 has an invalid length.
[  605.168343][ T9627] device syz_tun entered promiscuous mode
[  605.824128][ T9619] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  605.929631][ T9633] loop2: detected capacity change from 0 to 512
[  605.985162][ T9627] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  606.025245][ T9633] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1357: inode #1: comm syz.2.1357: iget: illegal inode #
[  606.142819][ T9633] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1357: error while reading EA inode 1 err=-117
[  606.201803][ T9633] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1357: inode #1: comm syz.2.1357: iget: illegal inode #
[  606.233917][ T9633] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1357: error while reading EA inode 1 err=-117
[  606.253465][ T9633] EXT4-fs (loop2): 1 orphan inode deleted
[  606.260165][ T9633] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback.
[  606.363709][    T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  607.431843][    T7] usb 6-1: Using ep0 maxpacket: 32
[  607.556217][    T7] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  607.590286][    T7] usb 6-1: config 0 has no interface number 0
[  607.764008][    T7] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  607.783832][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.791874][    T7] usb 6-1: Product: syz
[  607.824506][    T7] usb 6-1: Manufacturer: syz
[  607.834053][    T7] usb 6-1: SerialNumber: syz
[  607.861026][    T7] usb 6-1: config 0 descriptor??
[  607.927320][    T7] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  608.869572][    T7] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  608.887616][    T7] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  609.087718][ T1111] usb 6-1: USB disconnect, device number 6
[  609.103577][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  609.129817][ T1111] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  609.294919][ T1111] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  609.355114][ T1111] quatech2 6-1:0.51: device disconnected
[  610.168297][ T9658] loop2: detected capacity change from 0 to 40427
[  610.427855][ T9658] F2FS-fs (loop2): invalid crc value
[  610.437166][ T9658] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12)
[  613.570498][ T9722] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  617.216815][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1394'.
[  619.491461][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  623.636142][ T9831] loop5: detected capacity change from 0 to 512
[  623.870705][ T9076] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  623.892118][ T9831] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  624.065062][ T9831] EXT4-fs (loop5): 1 orphan inode deleted
[  624.091498][ T9831] EXT4-fs (loop5): 1 truncate cleaned up
[  624.118192][ T9831] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  624.145140][ T9076] usb 3-1: Using ep0 maxpacket: 16
[  624.214628][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  624.221402][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  624.295084][ T9076] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  624.409899][ T9076] usb 3-1: config 0 has no interface number 0
[  624.637436][ T9076] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  624.721516][ T9843] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  624.753602][ T9076] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[  624.796400][ T9845] 9pnet: Insufficient options for proto=fd
[  624.953357][ T9851] loop5: detected capacity change from 0 to 512
[  624.963976][ T9076] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  624.982198][ T9076] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  625.138208][ T9851] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  625.152471][ T9851] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  625.164895][ T9851] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1425: Corrupt directory, running e2fsck is recommended
[  625.201771][ T9076] usb 3-1: Product: syz
[  625.236471][ T9076] usb 3-1: SerialNumber: syz
[  625.250511][ T9851] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  625.404360][ T9851] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.1425: corrupted in-inode xattr
[  625.431970][ T9851] EXT4-fs (loop5): Remounting filesystem read-only
[  625.595918][ T9076] usb 3-1: config 0 descriptor??
[  625.674517][ T9851] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1425: couldn't read orphan inode 15 (err -117)
[  625.797544][ T9076] cm109 3-1:0.8: invalid payload size 1024, expected 4
[  625.956182][ T9851] EXT4-fs (loop5): Remounting filesystem read-only
[  626.106754][ T9856] page:ffffea0001569080 refcount:4 mapcount:1 mapping:ffff888076b87340 index:0x0 pfn:0x55a42
[  626.118335][ T9856] memcg:ffff888079ca4000
[  626.122620][ T9856] aops:shmem_aops ino:1a8
[  626.126971][ T9856] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[  626.136818][ T9856] raw: 00fff00000080015 ffffea0001737d48 ffffea00015690c8 ffff888076b87340
[  626.145527][ T9856] raw: 0000000000000000 0000000000000000 0000000400000000 ffff888079ca4000
[  626.154120][ T9856] page dumped because: VM_BUG_ON_PAGE(page_mapped(page))
[  626.161172][ T9856] page_owner tracks the page as allocated
[  626.166909][ T9856] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 9861, ts 625545597376, free_ts 625543303833
[  626.181705][ T9856]  get_page_from_freelist+0x3b78/0x3d40
[  626.187287][ T9856]  __alloc_pages+0x272/0x700
[  626.191908][ T9856]  alloc_pages_vma+0x39a/0x800
[  626.196699][ T9856]  shmem_alloc_and_acct_page+0x4d1/0xd10
[  626.202367][ T9856]  shmem_getpage_gfp+0x17b1/0x3190
[  626.205008][ T9851] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,nogrpid,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback.
[  626.207496][ T9856]  shmem_read_mapping_page_gfp+0xfd/0x180
[  626.233333][ T9856]  udmabuf_create+0xa62/0x15e0
[  626.238124][ T9856]  udmabuf_ioctl+0x300/0x4e0
[  626.242738][ T9856]  __se_sys_ioctl+0xf1/0x160
[  626.247357][ T9856]  do_syscall_64+0x3b/0xb0
[  626.251799][ T9856]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  626.257726][ T9856] page last free stack trace:
[  626.262416][ T9856]  free_unref_page_prepare+0xc34/0xcf0
[  626.267932][ T9856]  free_unref_page_list+0x1f7/0x8e0
[  626.273157][ T9856]  release_pages+0x1bb9/0x1f40
[  626.277966][ T9856]  __pagevec_release+0x80/0xf0
[  626.282931][ T9856]  shmem_undo_range+0x67a/0x1b50
[  626.287903][ T9856]  shmem_evict_inode+0x21b/0xa00
[  626.292870][ T9856]  evict+0x529/0x930
[  626.296817][ T9856]  __dentry_kill+0x436/0x650
[  626.301450][ T9856]  dentry_kill+0xbb/0x290
[  626.305813][ T9856]  dput+0xd8/0x1a0
[  626.309573][ T9856]  __fput+0x636/0x8e0
[  626.313617][ T9856]  task_work_run+0x129/0x1a0
[  626.318229][ T9856]  do_exit+0x6a3/0x2480
[  626.322405][ T9856]  do_group_exit+0x144/0x310
[  626.327011][ T9856]  get_signal+0xc66/0x14e0
[  626.331441][ T9856]  arch_do_signal_or_restart+0xc3/0x1890
[  626.337219][ T9856] ------------[ cut here ]------------
[  626.342688][ T9856] kernel BUG at mm/filemap.c:166!
[  626.347748][ T9856] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  626.353831][ T9856] CPU: 1 PID: 9856 Comm: syz.1.1429 Not tainted 5.15.173-syzkaller #0
[  626.361990][ T9856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  626.372053][ T9856] RIP: 0010:unaccount_page_cache_page+0x79d/0x8b0
[  626.378494][ T9856] Code: e8 b8 77 d8 ff 4c 89 f7 48 c7 c6 c0 14 b3 8a e8 c9 c9 0e 00 0f 0b e8 a2 77 d8 ff 4c 89 f7 48 c7 c6 00 15 b3 8a e8 b3 c9 0e 00 <0f> 0b 48 85 ed 75 62 e8 87 77 d8 ff 4c 89 eb eb 60 e8 7d 77 d8 ff
[  626.398129][ T9856] RSP: 0018:ffffc900032af610 EFLAGS: 00010046
[  626.404220][ T9856] RAX: e360b0d391094200 RBX: 0000000000000000 RCX: ffff8880185ebb80
[  626.412303][ T9856] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff
[  626.420418][ T9856] RBP: 0000000000000000 R08: ffffffff81d10e84 R09: fffff52000655d7d
[  626.428504][ T9856] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffd40002ad211
[  626.436492][ T9856] R13: ffffea0001569088 R14: ffffea0001569080 R15: dffffc0000000000
[  626.444484][ T9856] FS:  0000555579fb7500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  626.453475][ T9856] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  626.460186][ T9856] CR2: 000000110c427fdd CR3: 0000000055264000 CR4: 00000000003506e0
[  626.468180][ T9856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  626.476268][ T9856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  626.484258][ T9856] Call Trace:
[  626.487552][ T9856]  <TASK>
[  626.490509][ T9856]  ? __die_body+0x5e/0xa0
[  626.494861][ T9856]  ? die+0x83/0xb0
[  626.498608][ T9856]  ? do_trap+0x11e/0x350
[  626.502877][ T9856]  ? unaccount_page_cache_page+0x79d/0x8b0
[  626.510100][ T9856]  ? unaccount_page_cache_page+0x79d/0x8b0
[  626.515933][ T9856]  ? do_error_trap+0x13d/0x1e0
[  626.520724][ T9856]  ? unaccount_page_cache_page+0x79d/0x8b0
[  626.526557][ T9856]  ? do_int3+0x30/0x30
[  626.530654][ T9856]  ? unaccount_page_cache_page+0x79d/0x8b0
[  626.536484][ T9856]  ? handle_invalid_op+0x2c/0x40
[  626.541449][ T9856]  ? unaccount_page_cache_page+0x79d/0x8b0
[  626.547269][ T9856]  ? exc_invalid_op+0x2f/0x40
[  626.551951][ T9856]  ? asm_exc_invalid_op+0x16/0x20
[  626.557092][ T9856]  ? __dump_page_owner+0x414/0x620
[  626.562214][ T9856]  ? unaccount_page_cache_page+0x79d/0x8b0
[  626.568040][ T9856]  ? rcu_is_watching+0x11/0xa0
[  626.572813][ T9856]  __delete_from_page_cache+0xd1/0x860
[  626.578375][ T9856]  ? __rwlock_init+0x140/0x140
[  626.583159][ T9856]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[  626.590297][ T9856]  ? _raw_spin_lock_irq+0xdb/0x110
[  626.595424][ T9856]  ? _raw_spin_lock_irqsave+0x120/0x120
[  626.601077][ T9856]  ? page_mapping+0x312/0x440
[  626.605861][ T9856]  delete_from_page_cache+0x126/0x190
[  626.611271][ T9856]  truncate_inode_page+0x8d/0xb0
[  626.616239][ T9856]  shmem_undo_range+0x535/0x1b50
[  626.621313][ T9856]  ? shmem_truncate_range+0xa0/0xa0
[  626.626543][ T9856]  ? __lock_acquire+0x1ff0/0x1ff0
[  626.631785][ T9856]  ? do_raw_spin_lock+0x14a/0x370
[  626.636848][ T9856]  shmem_evict_inode+0x21b/0xa00
[  626.641815][ T9856]  ? _raw_spin_unlock+0x24/0x40
[  626.646679][ T9856]  ? inode_wait_for_writeback+0x21f/0x280
[  626.652414][ T9856]  ? shmem_free_in_core_inode+0xb0/0xb0
[  626.657968][ T9856]  ? bit_waitqueue+0x30/0x30
[  626.662657][ T9856]  ? do_raw_spin_unlock+0x137/0x8b0
[  626.667864][ T9856]  ? shmem_free_in_core_inode+0xb0/0xb0
[  626.673419][ T9856]  evict+0x529/0x930
[  626.677326][ T9856]  ? mode_strip_sgid+0x210/0x210
[  626.682278][ T9856]  ? _raw_spin_unlock+0x24/0x40
[  626.687139][ T9856]  ? iput+0x6f5/0x8b0
[  626.691174][ T9856]  __dentry_kill+0x436/0x650
[  626.695891][ T9856]  dentry_kill+0xbb/0x290
[  626.700328][ T9856]  dput+0xd8/0x1a0
[  626.704066][ T9856]  __fput+0x636/0x8e0
[  626.708159][ T9856]  task_work_run+0x129/0x1a0
[  626.712769][ T9856]  exit_to_user_mode_loop+0x106/0x130
[  626.718167][ T9856]  exit_to_user_mode_prepare+0xb1/0x140
[  626.723732][ T9856]  syscall_exit_to_user_mode+0x5d/0x240
[  626.729313][ T9856]  do_syscall_64+0x47/0xb0
[  626.733754][ T9856]  ? clear_bhb_loop+0x15/0x70
[  626.738464][ T9856]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  626.744397][ T9856] RIP: 0033:0x7fe793c56f19
[  626.748829][ T9856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  626.768673][ T9856] RSP: 002b:00007ffe5b4f4b08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  626.777112][ T9856] RAX: 0000000000000000 RBX: 00007fe793e1eba0 RCX: 00007fe793c56f19
[  626.785103][ T9856] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  626.793097][ T9856] RBP: 00007fe793e1eba0 R08: 0000000000000114 R09: 00007ffe5b4f4def
[  626.801091][ T9856] R10: 00007fe793e1eac0 R11: 0000000000000246 R12: 0000000000098d4f
[  626.809084][ T9856] R13: 00007fe793e1d160 R14: 0000000000000032 R15: ffffffffffffffff
[  626.817083][ T9856]  </TASK>
[  626.820129][ T9856] Modules linked in:
[  626.824060][ T9856] ---[ end trace 5d9af23e600fc4da ]---
[  626.829531][ T9856] RIP: 0010:unaccount_page_cache_page+0x79d/0x8b0
[  626.835977][ T9856] Code: e8 b8 77 d8 ff 4c 89 f7 48 c7 c6 c0 14 b3 8a e8 c9 c9 0e 00 0f 0b e8 a2 77 d8 ff 4c 89 f7 48 c7 c6 00 15 b3 8a e8 b3 c9 0e 00 <0f> 0b 48 85 ed 75 62 e8 87 77 d8 ff 4c 89 eb eb 60 e8 7d 77 d8 ff
[  626.855690][ T9856] RSP: 0018:ffffc900032af610 EFLAGS: 00010046
[  626.861880][ T9856] RAX: e360b0d391094200 RBX: 0000000000000000 RCX: ffff8880185ebb80
[  626.869876][ T9856] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff
[  626.877877][ T9856] RBP: 0000000000000000 R08: ffffffff81d10e84 R09: fffff52000655d7d
[  626.885897][ T9856] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffd40002ad211
[  626.893898][ T9856] R13: ffffea0001569088 R14: ffffea0001569080 R15: dffffc0000000000
[  626.901892][ T9856] FS:  0000555579fb7500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  626.910866][ T9856] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  626.917467][ T9856] CR2: 000000110c427fdd CR3: 0000000055264000 CR4: 00000000003506e0
[  626.925463][ T9856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  626.934025][ T9856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  626.942359][ T9856] Kernel panic - not syncing: Fatal exception
[  626.949008][ T9856] Kernel Offset: disabled
[  626.953382][ T9856] Rebooting in 86400 seconds..